Privacy Policy

At 99Exch, your trust matters as much as your gameplay. Whether you are placing a bet on an IPL fixture, topping up your wallet, or simply browsing the markets, you are sharing information with us — and we take the responsibility of protecting that information seriously. This Privacy Policy is written to be read by real people, not just lawyers, so we have kept the language clear and direct.

Throughout this document, the terms "99Exch", "we", "us" and "our" refer to the operator of this betting-exchange platform. The terms "you", "your" and "user" refer to any adult who registers for an ID, visits our site, or otherwise interacts with our services. By using 99Exch, you confirm that you are at least 18 years old and that you agree to the practices described below.

Please read this policy carefully. If anything here is unclear, our support team is available around the clock through live chat and is happy to walk you through any section. 🔒

1. Introduction & Scope

This Privacy Policy applies to all personal information we collect about you through the 99Exch website, mobile-optimised pages, customer-support channels, and any related services we provide (together, the "Platform"). It covers what we collect, why we collect it, how long we keep it, who we share it with, and the rights you have over your own data.

It does not apply to third-party websites, payment gateways, or social platforms that we may link to. Those services run under their own privacy policies, and we encourage you to read them before sharing any information there. We have no control over how independent companies handle your data once you leave our Platform.

This policy should be read together with our Terms and Conditions and our Responsible Gaming guidance. Together, these documents form the agreement between you and 99Exch. If there is ever a conflict between this Privacy Policy and a specific consent you give us later, the more recent and specific consent will usually take priority for that particular activity.

We may operate in multiple jurisdictions, and the way we apply this policy is designed to respect the data-protection expectations of users across India and beyond. Regardless of where you access the Platform from, we aim to treat your personal information with the same high standard of care.

2. Information We Collect

To run a secure betting exchange and to comply with our legal obligations, we collect several categories of information. We have grouped them below so you can see exactly what each category includes. We only collect what we genuinely need to provide the service, keep accounts safe, and meet regulatory requirements.

Account Information

When you register for a 99Exch ID, we collect details such as your name, date of birth (to confirm you are 18 or older), username, password, contact phone number, email address where provided, and your preferred communication channel. We may also store security questions, account preferences, and any nickname or display name you choose.

Payment & Transaction Information

To process deposits and withdrawals, we collect payment-related details such as the method you use (for example UPI, bank transfer, or a supported wallet), transaction reference numbers, amounts, timestamps, and the bank or wallet identifiers needed to settle a payout to you. We retain a record of your wallet balance, betting history, and settlement history so that we can resolve disputes and meet anti-fraud and accounting requirements.

Device & Technical Information

Each time you visit, we automatically receive technical data from your device. This can include your IP address, device type, operating system, browser type and version, screen resolution, language settings, mobile network information, and unique device or session identifiers. This data helps us keep your account secure, detect suspicious logins, and make the Platform display correctly on your screen.

Usage & Activity Information

We record how you interact with the Platform: the pages and markets you view, the bets you place, the features you use, the time and duration of your sessions, referral sources, and the actions you take during support conversations. This usage information allows us to improve the experience, identify and fix problems, and spot patterns that may indicate fraud or problem-gambling behaviour.

3. How We Collect It

We gather your information through a few clear routes. The most direct is information you give us yourself: when you fill in the registration form, update your profile, request a withdrawal, contact support, or respond to a survey. This is the data you actively and knowingly share, and you control most of it through your account settings.

Some information is collected automatically as you use the Platform. Cookies, server logs, and similar technologies record technical and usage details in the background. This automated collection is standard for any modern website and is necessary for security, performance, and basic functionality. You can control parts of it through your browser and cookie settings, as explained later in this policy.

Finally, we may receive information from third parties. Payment providers confirm whether a transaction succeeded; fraud-prevention and identity-verification partners may share signals that help us confirm you are who you say you are; and analytics tools provide aggregated insight into how the Platform performs. We only work with partners who are contractually required to protect your data.

4. How We Use Your Information

We use the information we collect for a defined set of purposes, and we do not use it in ways that would surprise you. The core purpose is to deliver the service you signed up for: creating and maintaining your ID, processing your deposits and withdrawals, settling your bets, and keeping a complete and accurate record of your activity on the exchange.

We also use your data to keep the Platform safe. This includes verifying your age and identity, detecting and preventing fraud, money laundering, bonus abuse and account takeover, and investigating any activity that breaches our Terms. Security-related processing protects not just us but every honest user on the Platform.

Beyond operations and security, we use information to improve and personalise your experience — for example, remembering your preferences, recommending relevant markets, and fixing bugs. Where you have agreed, we use contact details to send you service messages, promotional offers, and updates. We also use data to meet legal, tax, accounting, and regulatory obligations, and to enforce our Terms.

Importantly, we use behavioural signals to support responsible gaming. If patterns suggest that a user may be at risk, we may reach out with information about deposit limits, self-exclusion tools, and support resources. We believe protecting players is a core part of running an exchange the right way. 🛟

5. Legal Basis for Processing

We only process your personal information when we have a valid legal reason to do so. The first basis is the performance of a contract: when you open an ID, you enter into an agreement with us, and we need your data to deliver the service, process payments, and settle bets. Without this information, we simply could not provide the Platform.

The second basis is your consent. For activities such as marketing communications and certain non-essential cookies, we rely on the permission you give us. Consent is always optional, and you can withdraw it at any time without affecting the lawfulness of processing that took place before you withdrew it.

The third basis is our legitimate interests — for example, keeping the Platform secure, preventing fraud, improving our services, and managing our business — provided those interests are not overridden by your rights and freedoms. The fourth basis is legal obligation: certain processing, such as record-keeping for tax, anti-money-laundering and regulatory purposes, is required by law and we have no choice but to comply.

6. Cookies & Tracking Technologies

Like almost every website, 99Exch uses cookies and similar technologies (such as local storage, pixels, and session tokens) to make the Platform work and to understand how it is used. A cookie is a small text file stored on your device that lets us recognise your browser between pages and visits.

We group cookies into three broad types. Strictly necessary cookies keep you logged in, protect your session, and enable core features like placing a bet — these cannot be switched off without breaking the site. Performance and analytics cookies help us see which pages are popular and where users run into trouble, so we can improve. Functional and preference cookies remember choices such as your language or display settings.

You can manage cookies through your browser settings, where you can block or delete them at any time. Please note that disabling strictly necessary cookies will prevent parts of the Platform from working, including login and bet placement. Where the law requires it, we will ask for your consent before setting non-essential cookies, and you can change your mind whenever you like.

7. How We Share Information (and With Whom)

We do not sell your personal information. We never trade your data to advertisers or unknown third parties for profit. We only share information when it is necessary to run the service, comply with the law, or protect our users — and only with parties who are bound to keep it confidential.

We may share data with payment processors and banks to complete your deposits and withdrawals; with identity-verification and fraud-prevention partners to confirm your age and protect your account; with technology and hosting providers who operate the infrastructure behind the Platform; and with analytics providers who help us understand usage. Each of these partners receives only the minimum data they need to perform their function.

We may also disclose information where the law requires it — for instance, in response to a valid court order, regulatory request, or law-enforcement demand — and where disclosure is needed to investigate fraud, enforce our Terms, or protect the rights, property or safety of 99Exch, our users, or the public. In the event of a business restructuring, merger, or transfer, user data may be passed to the successor entity under the same protections set out here.

8. Third-Party Service Providers

Running a reliable betting exchange takes a network of specialist partners. We use third-party service providers for payment processing, cloud hosting, content delivery, customer-support tooling, communications (such as messaging and email delivery), security monitoring, and analytics. These providers act as our processors, handling data on our instructions and only for the purposes we define.

Before we engage any provider, we assess their security and privacy practices, and we put written agreements in place that require them to protect your information, use it only for the agreed purpose, and delete or return it when our relationship ends. We hold these partners to the same standards we hold ourselves.

While we choose our partners carefully, please remember that any independent website or app you reach by leaving the Platform — including a payment provider's own portal — operates under its own privacy policy. We are responsible for how our processors handle data on our behalf, but not for the independent practices of separate companies you choose to interact with.

9. Data Retention

We keep your personal information only for as long as we genuinely need it. The right retention period depends on the type of data and the reason we hold it. As a general rule, we retain your account and transaction records for the lifetime of your account plus a further period required by financial, tax, and anti-money-laundering laws.

Transaction and settlement records are typically kept for several years after the relevant activity, because regulators and tax authorities require operators to be able to produce a complete financial history. Security logs and fraud-prevention records are kept for as long as needed to detect and investigate misuse. Marketing data is kept until you opt out or your account becomes inactive.

When information is no longer needed for any of these purposes, we either securely delete it or irreversibly anonymise it so that it can no longer be linked back to you. If you ask us to close your account, we will retain only the data we are legally required to keep and will remove the rest within a reasonable period.

10. Data Security Measures

Protecting your information is one of our highest priorities. We use a layered approach to security that combines technical, organisational, and procedural safeguards. Sensitive data is encrypted in transit using industry-standard protocols, and access to personal information is restricted to authorised staff who need it to do their jobs.

Our technical defences include firewalls, intrusion detection, regular security testing, hashed and salted passwords, and continuous monitoring for suspicious activity such as unusual login patterns or large unexpected withdrawals. We apply the principle of least privilege internally, meaning team members can only access the specific data their role requires.

No system on the internet can ever be guaranteed to be one hundred percent secure, and we will never pretend otherwise. However, we work hard to keep our defences current and to respond quickly to any incident. You also play a vital role: please choose a strong, unique password, never share your login details, and contact support immediately if you suspect any unauthorised access to your ID. 🔐

11. Your Privacy Rights

You have meaningful rights over the personal information we hold about you, and we are committed to honouring them. Depending on your location and applicable law, these rights may include the right to access the data we hold about you, the right to correct inaccurate or incomplete information, and the right to request deletion of data we are no longer required to keep.

You may also have the right to object to or restrict certain processing, the right to withdraw any consent you previously gave, and the right to data portability — that is, to receive a copy of certain information in a structured, commonly used format. Where automated decision-making affects you, you can ask for a human review.

To exercise any of these rights, simply contact our support team through live chat or the contact options at the end of this policy. We may need to verify your identity before acting on a request, both to protect your account and to make sure we are not disclosing your data to someone else. We aim to respond to all genuine requests within a reasonable timeframe and free of charge, except where the law allows a fee for excessive or repetitive requests.

12. Marketing Communications & Opt-Out

If you have agreed to receive them, we may send you marketing messages about promotions, new markets, bonuses, and updates that we think you will find useful. We try to keep these relevant and never want to flood your inbox or messaging app with content you do not want.

You are always in control. You can opt out of marketing at any time by using the unsubscribe link in an email, replying with a stop instruction to a message, adjusting your communication preferences in your account, or simply asking our support team to remove you from marketing lists. Once you opt out, we will stop sending promotional messages promptly.

Even if you opt out of marketing, we will still send you essential service communications — for example, confirmations of deposits and withdrawals, security alerts, important changes to our Terms, and responsible-gaming notices. These are not promotional; they are a necessary part of operating your account safely, so they cannot be switched off while your account is active.

13. Children's Privacy (18+ Only)

99Exch is a strictly adults-only platform. Our services are intended exclusively for individuals who are 18 years of age or older, and we do not knowingly collect personal information from anyone under 18. Gambling by minors is illegal, harmful, and entirely against everything our Platform stands for.

During registration we take steps to confirm that every user is an adult, and we may carry out additional age and identity checks at any time. If we discover that an account belongs to someone under 18, we will suspend it immediately, refuse any pending withdrawals to the extent permitted by law, and delete the associated personal information, except where we are legally required to retain certain records.

If you are a parent or guardian and you believe a minor has accessed our Platform or shared information with us, please contact our support team right away so that we can investigate and take action. We urge all adult users to keep their login details private and to make use of device-level parental controls where minors share access to the same device. 🔞

14. International Data Transfers

To operate the Platform efficiently, we and our service providers may store and process your information in data centres located in different countries. This means your personal information may be transferred to, and handled in, a country other than the one in which you live, where data-protection laws may differ from those in your home jurisdiction.

Whenever we transfer personal information across borders, we take steps to ensure it remains protected to a standard consistent with this policy. This may involve relying on recognised safeguards such as contractual data-protection clauses with the parties receiving the data, and choosing reputable providers with strong security credentials.

By using the Platform and providing your information, you understand that it may be processed outside your country of residence as described above. If you have questions about where your data is held or the safeguards we apply, our support team can provide more detail on request.

15. Links to Other Sites

Our Platform may contain links to external websites, payment portals, social-media pages, or promotional partners. These links are provided for your convenience, but they take you outside 99Exch and into services we do not control. We are not responsible for the content, security, or privacy practices of any third-party site.

When you click a link that leads away from our Platform, this Privacy Policy no longer applies. The destination site will have its own policy governing how it collects and uses your data. We strongly encourage you to read the privacy policy of any external site before you share personal or payment information there.

The presence of a link on our Platform does not imply that we endorse, monitor, or guarantee the linked site. If you come across a link that appears broken, suspicious, or misleading, please report it to our support team so we can review it and protect other users.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, our technology, the law, or regulatory guidance. When we make changes, we will revise the "Last updated" date at the top of this page, and the updated version will take effect as soon as it is published on the Platform.

If we make a significant change that materially affects your rights or the way we use your data, we will take reasonable steps to bring it to your attention — for example, through a notice on the Platform or a direct message where appropriate. We encourage you to review this policy periodically so that you always know how your information is handled.

Your continued use of 99Exch after an updated policy takes effect means you accept the revised terms. If you do not agree with a change, you should stop using the Platform and may contact us to close your account and exercise your data rights.

17. How to Contact Us / Data Requests

We want privacy to feel approachable, not intimidating. If you have any question about this policy, want to exercise one of your privacy rights, or wish to make a data access, correction, or deletion request, the fastest way to reach us is through the live chat available on the Platform around the clock.

When you contact us about a data request, please tell us clearly what you would like us to do and include enough detail for us to locate your account. For your protection, we may ask you to verify your identity before we act, so that your personal information is never disclosed to anyone pretending to be you.

We treat every privacy enquiry seriously and aim to respond promptly and helpfully. If you are ever unhappy with how we have handled your information or your request, please let us know so we can put it right — and, where applicable, you also have the right to raise the matter with the relevant data-protection authority in your jurisdiction. ✅