99exch Forgot Password: How to Reset, Change and Protect Your Login

Home › Forgot Password

By Raja Venu · Reviewed by the 99exch.in desk team · Published 17 October 2026 · Editorial policy · 18+

The short answer: who can reset a 99exch password

Only the desk that created your ID can reset its password. On agent-based exchange panels such as 99exch, the account sits inside the agent's section of the panel, and the agent's support team holds the tools to unlock it, issue a fresh password and confirm changes. A different agent, a stranger on Telegram or a website that merely looks like the panel cannot do this for you, however confidently they claim otherwise.

In practice, a reset at this desk takes a few minutes. You message us from the chat where your ID was delivered, we confirm that you are the person the ID belongs to, and we send a new temporary password. You sign in with it and immediately set a password of your own. Nothing else is required: no fee, no OTP, no screenshot of your banking app, and certainly not your old password.

This page explains why the process works that way, walks through each step, covers the second password many panels use for transactions, and sets out what to do if you suspect someone else has been inside your account. It finishes with a troubleshooting table that matches common symptoms to their likely causes.

Why there is usually no "forgot password" email on agent panels

Most apps you use daily recover a lost password by sending a link to your email or a code to your phone. Agent-run betting panels generally do not work like that, and the reason is structural rather than careless design.

When a desk opens an ID, it typically records only what it needs to run the account: a username, a name for the holder and the payout details the holder registers later. The panel itself often stores no verified email address or mobile number for the player. Without a verified contact point, an automated reset link has nowhere safe to go. Building one anyway would invite abuse, because anyone who learned a username could try to redirect the reset.

So recovery runs through people. That has a cost, because you depend on a desk being reachable, and a benefit, because a human who knows the account's history can notice when a request looks wrong. Some panels display a "Forgot password?" link on the sign-in screen; on many of them it simply tells you to contact your agent. If yours leads to a form asking for card details or a payment, close it, because no genuine reset requires either.

There is a further reason agents avoid self-service resets. Many players change phone numbers frequently, use shared family email accounts, or never set up email on their phone at all. A reset system tied to those channels would fail for a large share of genuine users, and a desk would end up handling the same requests by hand anyway, only with less information. A conversation with someone who can see the account's history turns out to be both quicker and safer for most people.

The trade-off is availability. Because resets need a person, it matters that your desk answers at the times you play. This desk runs around the clock, but busy match evenings can add a few minutes to replies. If you play mainly during big fixtures, it is sensible to check your password works well before the first ball rather than discovering a problem mid-match.

How a password reset works at this desk, step by step

The process below is the one we follow for every reset. If your ID came from another agent, their steps may differ, but the principles that protect you should be the same.

1. Message from the right place. Use the chat buttons on this website, which always open the support number configured for this domain. If possible, write from the same WhatsApp conversation in which you received your ID, because that thread is part of how we recognise you.
2. Say what happened. "I forgot my password", "my account is locked" and "I think someone changed my password" are handled differently, so tell us which one applies.
3. Confirm ownership. We ask a few questions about the account that only the holder should be able to answer. We never ask for secrets. The details are kept deliberately general here so that impostors cannot rehearse them, but they relate to the account itself rather than to your passwords or banking credentials.
4. Receive a temporary password. Once ownership is clear, we reset the login and send a temporary password in the chat. It is meant to be used once.
5. Sign in and replace it. Open the panel through the link you saved when your ID was issued, sign in with the temporary password and set your own straight away. Most panels force this change automatically.
6. Delete the temporary password from view. Once you have changed it, the temporary password is useless, but it is still good practice to clear it from any notes or screenshots.

If the ownership questions cannot be answered, we do not reset the account on request alone. That can be frustrating for a genuine holder who has lost track of details, but it is precisely what stops a stranger from taking over your balance by claiming to be you. In those cases we look for other evidence that ties you to the ID, and the reset follows once we are satisfied.

It is also worth understanding what a reset does and does not change. Resetting the login password leaves your balance, bet history, open bets and registered payout details exactly as they were. It does not cancel bets, release exposure or alter any limit you have set. If you have a deposit cap or a time-out in place, a reset does not lift it; those are changed only by a separate request, and time-outs run their full length. Your username also stays the same, so any bookmarks and notes that refer to it remain valid.

Finally, each reset is noted on our side with the time it was carried out. If you ever receive a temporary password you did not ask for, tell us immediately, because it may mean someone has tried to request a reset in your name.

Login password and transaction password: two different locks

Many exchange panels use two passwords, and confusing them causes a surprising share of "my password does not work" messages.

The login password

This is the one you type on the sign-in screen with your username. It opens the panel, shows your balance and lets you place bets. If you have forgotten it, you cannot get past the first screen.

The transaction password

Some panels ask for a second password before sensitive actions, such as changing account settings or confirming a withdrawal-related step. It is sometimes called a transaction code or security password. If you can sign in but a particular action keeps rejecting your password, the panel is probably asking for this second one rather than your login password.

Resetting each

Both are reset through the desk, using the same ownership check. Tell us which one you need. Where a panel allows it, you can change your own transaction password from the account settings once you are signed in, which is quicker than asking us.

Treat the transaction password the way you would treat a UPI PIN. It should never be the same as your login password, never be typed into a chat, and never be shared with anyone who claims to be helping you, including people who say they work for us.

The first sign-in and the forced password change

When an ID is created or reset, the password you receive is temporary by design. On the first sign-in, most panels display a "change password" screen before anything else. You enter the temporary password once, then your new password twice.

A few points make this step go smoothly:

• Copy carefully. Temporary passwords often mix upper and lower case letters and digits that look alike, such as a capital O and a zero. If copying from the chat, check that no space has been picked up at either end.
• Do it promptly. On some panels, a temporary password that is not used within a set period stops working. If your first attempt fails a day or two after the ID was issued, that is the likely reason, and a fresh reset solves it.
• Do not skip the change. If your panel lets you dismiss the screen, do not. A password that has travelled through a chat should be replaced.
• Confirm the address. The change screen appears only on the panel itself. A page that asks you to "verify" your temporary password before reaching the panel is not part of the process.

Once the change is done, sign out and back in with the new password to make sure it was saved correctly. That small test prevents a lockout the next time you try to log in during a match.

Choosing a password that is strong and still usable on a phone

Most people sign in to the panel on a phone, often in a hurry before a match starts. That pushes many towards short, easy passwords, which are exactly what an attacker tries first. A strong password does not have to be painful to type.

Length beats complexity

A long passphrase made of several unrelated words is far harder to guess than a short string of symbols, and far easier to remember. Four or five ordinary words with a number between them gives you good length without forcing awkward keyboard switches. Avoid well-known phrases, song lines and anything connected to you.

What to avoid

• Your name, your username, your phone number or your date of birth.
• Team names, player names and cricket terms, which are among the first guesses for an account on a cricket panel.
• Simple patterns such as 123456, qwerty or the same character repeated.
• Any password you use for email, banking, UPI or social media. If one of those services is breached, attackers try the same password everywhere else.

Password managers

A password manager stores long, random passwords for you and fills them in when needed. Android and iOS both include one, and several independent apps exist. If you use one, save the panel password under the exact panel address from your ID chat, which has a useful side effect: if you ever land on a lookalike site, the manager will not offer to fill the password, because the address does not match.

A simple test before you commit

Before settling on a new password, ask two questions. Could someone who knows you, or who has scrolled through your social media, guess it? And have you used anything similar anywhere else? If the answer to either is yes, choose again. A password that passes both tests, is long enough to resist guessing, and is stored in a manager or another private place will protect your ID far better than any set of complicated character rules.

Where not to keep it

A screenshot in your gallery, a note titled "99exch password" or a message to yourself on WhatsApp are all easy for anyone who picks up your unlocked phone to find. If you must write it down, keep it somewhere private and away from your username.

Changing your 99exch password yourself, without a reset

If you still know your current password and simply want a new one, you do not need the desk at all. Most panels include a "change password" option in the account menu, usually reached by tapping your username or a user icon at the top of the screen.

The change screen normally asks for three entries: the current password, the new password and the new password again. Some panels add the transaction password as a further check. Once you confirm, the new password takes effect immediately, and some panels sign you out so that you can test it straight away.

Good moments to change your password on your own include:

• After signing in on a phone or computer that is not yours, even once.
• After sharing your screen or handing your phone to someone while the panel was open.
• When you learn that another service where you used a similar password has been breached.
• When you replace or repair your phone, particularly if it was handed to a shop unlocked.
• If you ever typed your details into a page and later felt unsure whether it was genuine.

If the change screen rejects your new password, the panel may have minimum length or character rules. Try a longer passphrase. If it rejects your current password while you are already signed in, you may be entering the login password where the panel expects the transaction password, or the reverse. When in doubt, ask the desk rather than guessing repeatedly, since repeated failures can trigger a lock.

After any change, update the entry in your password manager, if you use one, so that it does not keep filling in the old password and locking you out.

Locked out after too many attempts

Panels lock an ID after a number of wrong password attempts. This protects you: it stops someone running through guesses until one works. The exact number of attempts and the length of the lock are set by the panel and are not something the desk controls.

If you see a message that your account is locked, blocked or suspended after several tries, stop trying. Further attempts may extend the lock or simply fail. Message the desk instead, explain what happened and we will confirm ownership and unlock the ID, usually with a reset at the same time so that you are not locked out again by the same forgotten password.

It is also worth asking yourself whether the failed attempts were all yours. If you were locked out without having tried to sign in, someone else may have been guessing at your account. Tell us; we will check the ID and change the password as a precaution.

If someone else changed your password

Sometimes the problem is not that you forgot the password but that it no longer works because someone else has changed it. That is a security incident, and speed matters. Here is what to do, in order.

1. Contact the desk immediately. Say clearly that you believe the account has been taken over. We treat these messages as urgent and can block activity on the ID while we investigate.
2. Do not negotiate with anyone else. People who contact you claiming they can "recover" the account for a fee are frequently the same people who took it, or opportunists who follow them.
3. Let us check the payout details. The usual aim of an account takeover is to change where withdrawals go. We verify the registered payout account and reverse any change you did not make.
4. Review the statement together. Once you are back in, look through the bet history and statement for bets, withdrawal requests or setting changes you do not recognise, and report them in the same chat.
5. Secure the device. Think about how the password escaped. A shared phone, a password reused elsewhere, a lookalike login page or an installed app from an unknown source are the usual routes. Our pages on APK risks and cloned sites explain how these attacks work.
6. Change related passwords. If the same password was used anywhere else, change it there too, starting with your email.

If money has left your bank account as part of the incident, as opposed to points moving inside the panel, you can also report it to the national cyber crime helpline on 1930 or through cybercrime.gov.in. Reports made quickly give banks the best chance of holding funds. Our real or fake guide describes this process in more detail.

Password myths that put accounts at risk

"There is a default password for every 99exch ID"

Videos and posts sometimes claim that all IDs share a default password, or that a standard code unlocks any account. That is not how the panel works. Each ID's password is set individually, and the temporary one you receive is replaced at first sign-in. Pages promoting "default passwords" usually exist to lure people into typing their real details somewhere they should not.

"Support needs my password to check my account"

It does not. A desk can see what it needs from its own side of the panel. Anyone asking for your password, even politely, is either untrained or not genuine.

"An OTP proves the person is from support"

It proves the opposite. A caller who asks you to read out a code just sent to your phone is usually trying to use it to authorise something on your behalf.

"Changing the password often is enough"

Frequent changes help less than a single strong, unique password stored safely. A new weak password is still weak.

"A login link in a group is as good as my own"

Links shared in groups may point to lookalike pages. The only link you should use is the one your desk gave you; see why panel addresses change and the .com address question.

Troubleshooting table: symptom, likely cause, fix

Match what you see to the closest row before contacting the desk. It will often save you a message, and when it does not, telling us which row applies speeds up the help you receive.

The general 99exch login guide covers sign-in from a fresh device, and the app page explains how home-screen shortcuts behave when the panel address changes.

Shared phones, family devices and signing out

Many password problems begin with a phone that more than one person uses. Browsers on shared devices remember usernames, suggest saved passwords and keep sessions open, so the next person to open the browser may land straight inside your account.

• Do not save the panel password in the browser on a phone or computer that others use. Decline the "save password?" prompt.
• Sign out when you finish, rather than just closing the tab. Closing a tab often leaves the session active.
• Use a screen lock on your own phone, and keep it on. A phone without a lock gives anyone who picks it up access to your chats, which contain your ID details.
• One person, one ID. If a family member wants to use the panel, they need their own ID from their own conversation with a desk. Sharing one ID makes it impossible to prove who placed which bet and complicates every withdrawal.

Public computers deserve particular caution. Cybercafe machines and shared office computers can carry keyloggers or simply retain browsing data long after you leave. If you have no alternative, use a private browsing window, sign out deliberately when you finish, and change your password from your own phone as soon as you can afterwards.

If you have already shared your password with someone, change it now, even if you trust them. Trust is not the issue; the risk is that their phone, chats or habits are less secure than yours.

A note on the law, limits and stepping away

Password help is a practical matter, but it would be incomplete not to mention two wider points. First, the legal position in India changed in 2026. The Promotion and Regulation of Online Gaming Act, 2025 and its Rules came into force on 1 May 2026 and prohibit online money games, including online betting. We are not lawyers and this is not legal advice; please read the legal section on our homepage and take independent advice if Indian law applies to you.

Second, a forgotten password can be a natural pause. If you have been playing more than you intended, you do not have to reset at all. The desk can apply a time-out from 24 hours up to six weeks, set a deposit cap, or close the ID on request. Free and confidential support is available from Tele-MANAS on 14416, and our responsible gaming page lists more options. The panel is for adults aged 18 and over only.

When to contact the desk, and what to send

For any password problem the table above does not solve, message us from the chat buttons on this site. To get the quickest help, include:

• Your username, typed exactly.
• Which password is failing: login or transaction.
• What you see on screen, ideally as a screenshot of the error message, but never of a page showing a password.
• Whether you suspect someone else has accessed the account.

Do not send your current password, any OTP or your banking PIN. We will never ask for them. The contact page lists the only channels this site uses, and the WhatsApp number guide explains why numbers posted elsewhere should not be trusted. For a broader view of how we work, see the about page.

Frequently asked questions

How do I reset my 99exch password if I forgot it?

Message the desk that issued your ID, ideally from the same chat where you received it. After the desk confirms you own the ID, it issues a new temporary password, which you replace with your own at your next sign-in.

Why is there no forgot password email for 99exch?

Agent-run panels usually do not store a verified email or phone number for each player, so an automatic reset link would have nowhere safe to go. Resets are handled by the issuing desk, which can check the account's history before acting.

Will 99exch support ask for my old password or an OTP?

No. A genuine desk never needs your current password, an OTP, your UPI PIN or a reset fee. Anyone who asks for these is not a real support team, and you should stop the conversation immediately.

What is the 99exch transaction password?

Some panels use a second password for sensitive actions such as changing settings or confirming certain account steps. It is separate from your login password, should never be the same, and is reset through the desk with the same ownership check.

How do I change my 99exch password myself?

If you know your current password, sign in and open the account menu, usually by tapping your username. Choose change password, enter the current password and the new one twice, then sign in again to confirm it works.

My 99exch account is locked after wrong attempts. What now?

Stop trying, because further attempts can extend the lock. Contact your desk, confirm you are the owner and ask for an unlock. A reset is usually done at the same time so the same problem does not recur.

What should I do if someone changed my 99exch password?

Treat it as urgent. Contact your desk at once so it can block activity, check that your payout details have not been changed, and review the statement with you. If money left your bank account, report it on 1930 or cybercrime.gov.in.

Is there a default password for 99exch IDs?

No. Every ID has its own password, and temporary passwords are replaced at first sign-in. Pages claiming a default or master password usually aim to collect real login details and should be avoided.

Does resetting my password affect my balance or bets?

No. A reset changes only the password. Your balance, open bets, exposure, history, payout details and any limits or time-outs you have set remain exactly as they were.

Related 99exch guides

• 99exch login guide
• what a 99exch ID contains
• is 99exch real or fake?
• the WhatsApp number question
• 99exch red and changing addresses
• contact the desk