bd99 Privacy Policy

1 Introduction

bd99 ("bd99", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform at https://bd99.io ("the Platform"). This Privacy Policy ("Policy") describes in clear and transparent terms how we collect, use, store, share, and protect your personal information when you visit our website, register an account, make deposits or withdrawals, place bets, or interact with our customer support team.

This Policy applies to all users of the bd99 platform, including registered players, prospective players who browse our website without registering, and any other individuals whose personal data we may hold in connection with the operation of our services. It covers data collected through the bd99 website, any mobile-optimised version of the platform, and any communications between you and the bd99 team.

By creating a bd99 account, making a deposit, placing a bet, or otherwise using the platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the bd99 platform.

2 Data We Collect

bd99 collects personal data in the following categories. The specific data points collected from any individual player will depend on the extent to which they use the platform and the services they access.

3 How We Collect Your Data

3.1 Data You Provide Directly

The majority of the personal data bd99 holds about you is information that you have provided directly. This includes data entered during the account registration process, information submitted as part of KYC verification, payment details entered in the cashier, communications sent to our support team, and responses to any surveys, promotions, or competitions you choose to participate in.

3.2 Data Collected Automatically

When you visit the bd99 website or use the platform, we automatically collect certain technical data about your device and browsing behaviour. This is collected through server logs, cookies, and similar tracking technologies. Automatically collected data includes your IP address, the pages you visit on our site, the time and duration of your visits, referring URLs, and device and browser information.

3.3 Data Received from Third Parties

bd99 may receive personal data about you from third parties in the following circumstances:

• Payment providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, and City Bank may share transaction confirmation data and account holder verification information with bd99 when you initiate a deposit or withdrawal.
• Identity verification services: We may use third-party KYC and document verification providers who process and validate identity documents on our behalf and return a verification result to bd99.
• Game providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other game studios may share session and game outcome data with bd99 as part of normal platform operations.
• Fraud prevention agencies: Where we have reasonable grounds to suspect fraudulent activity, we may cross-reference information with industry fraud databases.

4 How We Use Your Personal Data

bd99 uses the personal data we collect for the following specific purposes:

• Account management: To create and maintain your bd99 account, verify your identity, process your registration, and enable you to log in and access platform features.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment. Your financial data is shared with payment processors solely for this purpose.
• KYC and AML compliance: To verify your identity and age (21+ requirement), comply with anti-money-laundering obligations, and detect and prevent financial crime. This is a legal obligation that bd99 cannot waive.
• Responsible gaming: To monitor your betting and gaming activity for signs of problem gambling, apply deposit limits and session timers you have set, and fulfil our duty of care obligations.
• Customer support: To respond to your queries, complaints, and support requests in a timely and effective manner. Support interactions are logged for quality assurance and training purposes.
• Platform improvement: To analyse usage patterns, identify technical issues, optimise page performance, and improve the overall user experience on the bd99 platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account compromise, multi-accounting, bonus abuse, and other prohibited conduct.
• Marketing communications: Where you have given your consent, to send you promotional emails, SMS messages, and push notifications about new games, seasonal offers (such as BPL promotions, Eid bonuses, or Pohela Boishakh specials), and platform updates. You may opt out at any time.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

5 Legal Basis for Processing

bd99 processes your personal data on the following legal grounds, depending on the specific purpose of the processing:

• Performance of a contract: Processing necessary to provide the services you have requested — including account creation, payment processing, and game delivery — is carried out on the legal basis that it is required to perform the contract between you and bd99.
• Legal obligation: Processing carried out to comply with KYC, AML, and age verification requirements is performed on the legal basis that it is required to fulfil a legal obligation applicable to bd99.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and customer support quality assurance is carried out on the basis of bd99's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications is carried out only on the basis of your explicit consent. You may withdraw your consent at any time by updating your account marketing preferences or by contacting our support team.

6 Data Sharing & Disclosure

6.1 Our Commitment

bd99 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Personal data is shared only in the limited circumstances described in this section, and only to the extent necessary for the specific purpose.

6.2 Service Providers and Partners

bd99 works with a carefully selected group of third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, and City Bank — to process financial transactions.
• Identity verification providers: Specialist KYC and document verification services used to confirm your identity and age.
• Game providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other studios — to deliver casino and slot games and record game outcomes.
• Technology and hosting providers: Cloud infrastructure and server hosting partners who store platform data in secure, encrypted environments.
• Customer support platforms: Live chat and ticketing software providers who facilitate support communications.
• Analytics providers: Web analytics tools used to understand platform performance and user behaviour in aggregated, anonymised form.

6.3 Legal and Regulatory Disclosure

bd99 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by law, or where we have a good-faith belief that such disclosure is reasonably necessary to comply with a legal process, protect the rights and safety of bd99 or others, investigate fraud, or enforce our Terms & Conditions.

7 International Data Transfers

bd99 operates in the Bangladesh market and processes the majority of player data within secure infrastructure. However, some of our third-party service providers — particularly game studios such as Evolution Gaming (headquartered in Latvia) and Pragmatic Play (headquartered in Malta) — may process personal data outside of Bangladesh.

Where personal data is transferred internationally, bd99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to what you would expect within a jurisdiction that upholds strong data protection principles. These safeguards include contractual data protection clauses with all international data processors.

By using the bd99 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh in the limited circumstances described above.

8 Data Retention

bd99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account with bd99, plus a minimum of five years following account closure to comply with AML and financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in accordance with anti-money-laundering obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for two years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for as long as you hold an active bd99 account, plus three years from the date of account closure or withdrawal of consent, whichever is earlier.
• Technical and log data: Typically retained for 12 months, unless a security investigation requires longer retention.

When personal data is no longer required for its retention purpose, bd99 will securely delete or anonymise it. Where full deletion is not technically immediately possible (for example, because data exists in backup archives), the data will be isolated and protected from further active use until deletion is complete.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites function correctly, work more efficiently, and to provide analytical information to site operators. bd99 uses cookies and similar tracking technologies (including web beacons and local storage objects) on the bd99 platform.

9.2 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the bd99 platform to function. They enable core features such as secure login sessions, cashier access, and security checks. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the bd99 platform — which pages are visited most, where errors occur, and how long sessions last. This helps us improve the platform experience.
• Functionality cookies: These cookies remember your preferences, such as your preferred language, display settings, and game lobby filters, so you do not need to re-enter them on each visit.
• Targeting and preference cookies: Where you have consented, these cookies help us deliver promotional content that is relevant to your interests — for example, BPL cricket betting offers if you frequently visit the cricket section.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the bd99 platform — for example, session cookies are required to remain logged in. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge, Opera).

10 Your Privacy Rights

As a bd99 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or at [email protected].

• Right of access: You have the right to request a copy of the personal data that bd99 holds about you. We will respond to access requests within 30 days of receiving a verifiable request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many of your personal details directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that bd99 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to legal retention obligations; we may be required to retain certain data even after an erasure request.
• Right to restrict processing: You may request that bd99 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to bd99 in a structured, commonly used, and machine-readable format, and to have that data transferred to another organisation where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on bd99's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where bd99 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

11 Children's Privacy

The bd99 platform is strictly intended for adults aged 21 years and above. bd99 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not create an account, make a deposit, or use any bd99 service.

If bd99 discovers or is notified that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete the personal data, and — where applicable — return any funds deposited to the payment method from which they originated, subject to our standard verification procedures.

12 Security Measures

bd99 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

12.1 Technical Safeguards

• 256-bit SSL/TLS encryption: All data transmitted between your device and bd99 servers is encrypted using industry-standard TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when using bd99.
• Encrypted data storage: Sensitive personal data — including identity documents and payment details — is stored in encrypted form within our secure database infrastructure.
• Access controls: Internal access to personal data is restricted to authorised bd99 personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication: bd99 supports two-factor authentication (2FA) on player accounts. We strongly encourage all players to enable 2FA to protect their account from unauthorised access.
• Intrusion detection: bd99 operates real-time network monitoring and intrusion detection systems to identify and respond to potential security threats.

12.2 Organisational Safeguards

bd99 staff who handle personal data are required to complete data protection training and are bound by confidentiality obligations. We conduct periodic security assessments and penetration testing to identify and address vulnerabilities in our systems. In the event of a data security breach that is likely to result in a risk to your rights and freedoms, bd99 will notify affected individuals without undue delay.

13 Third-Party Links

The bd99 platform may contain references to or information about third-party services such as game providers (Evolution Gaming, Pragmatic Play, Ezugi, etc.) and payment networks (bKash, Nagad, Visa, Mastercard). This Privacy Policy does not apply to any third-party websites, applications, or services. bd99 has no control over the privacy practices of third-party operators and accepts no responsibility or liability for their privacy policies or data handling practices.

We encourage you to review the privacy policies of any third-party services you interact with independently of the bd99 platform. The inclusion of any third-party name or service within the bd99 platform does not constitute an endorsement of that party's privacy practices.

14 Policy Updates

bd99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When we make material changes to this Policy, we will notify registered players by email or by displaying a prominent notice on the bd99 platform prior to the change taking effect.

The "Effective" date displayed at the top of this Policy reflects when the current version came into force. We encourage you to review this Policy periodically to stay informed about how bd99 is protecting your personal data. Continued use of the bd99 platform following notification of any changes constitutes your acceptance of the updated Policy.

Archived versions of previous Privacy Policies are available upon request by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd99 handles your personal data, please do not hesitate to get in touch with our dedicated privacy team. We are committed to resolving all privacy-related enquiries promptly and transparently.

Email: [email protected]
Response time: Within 2 business days (Bangladesh Standard Time, UTC+6)
Operating hours: Monday to Sunday, 09:00 – 22:00 BST

For formal privacy rights requests (access, erasure, portability, etc.), please include your registered bd99 username and the specific right you wish to exercise in your message. We may need to verify your identity before processing the request to ensure your data is protected.