Your Privacy Matters at b99

1. Introduction

b99 is Bangladesh's premier online gaming destination, offering cricket betting, live casino, slots, and a wide range of digital entertainment products. We recognise that your personal data is valuable and that you trust us with it when you create an account and play on our platform. This Policy sets out in plain, formal language exactly what information we collect, the purposes for which we process it, with whom we share it, and how long we keep it.

This Policy applies to all personal data collected through the b99 website at b99.cam, our mobile-optimised interface, customer support communications, and any other touchpoint through which you interact with b99. It should be read together with our Terms & Conditions and our Responsible Gaming policy.

If you have any questions about this Policy or about how b99 handles your data, you may contact our support team at any time. Contact details are provided in Section 13.

2. Data We Collect

2.1 Information You Provide Directly

When you register for a b99 account or interact with our Services, you may provide the following categories of personal data:

• Identity data: full legal name, date of birth, gender, and copies of identification documents (National Identity Card, passport, or driver's licence) submitted during KYC verification.
• Contact data: email address, mobile phone number, and residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi).
• Account credentials: username and encrypted password.
• Financial data: payment method details including bKash account numbers, Nagad wallet references, Rocket mobile banking identifiers, Upay account references, and bank account details where applicable. b99 does not store full card numbers; payment tokenisation is handled by our payment service providers.
• Communications data: the content of messages you send to b99 customer support, including live chat transcripts, email correspondence, and any complaints or feedback submitted through the platform.

2.2 Data Collected Automatically

When you access the b99 platform, certain technical data is collected automatically by our systems and third-party analytics tools:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage data: pages visited, games launched, session duration, bet history, deposit and withdrawal activity, and feature interactions.
• Location data: approximate geographic location derived from your IP address. b99 does not collect precise GPS location data.
• Cookie data: information gathered via cookies and similar tracking technologies as described in Section 6.

2.3 Data from Third Parties

b99 may receive personal data about you from third-party sources in the following circumstances:

• Identity verification and fraud-prevention partners who assist in confirming the accuracy of KYC documents.
• Payment service providers (including bKash, Nagad, Rocket, and Upay) who confirm transaction status and account holder details.
• Analytics and marketing technology partners who provide aggregated or pseudonymised audience data to help us improve platform performance.

3. How We Use Your Data

b99 processes your personal data for the following specific purposes:

Purpose	Data Categories Used
Creating and managing your b99 account	Identity data, contact data, account credentials
Processing deposits and withdrawals	Financial data, identity data
Verifying your identity (KYC)	Identity data, contact data, financial data
Providing customer support	Identity data, communications data, usage data
Fraud detection and prevention	All categories, device data, usage data
Responsible gaming monitoring	Usage data, financial data, communications data
Platform improvement and analytics	Usage data, device data, cookie data
Sending service notifications and updates	Contact data, account credentials
Sending promotional communications (with consent)	Contact data, usage data
Complying with legal and regulatory obligations	Identity data, financial data, communications data

4. Legal Basis for Processing

b99 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing is necessary to enter into and perform the contract between you and b99 — for example, creating your account, processing transactions, and settling bets.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and tax reporting duties.
• Legitimate interests: Processing is necessary for b99's legitimate business interests, including fraud detection, platform security, responsible gaming enforcement, and improving our Services — provided those interests are not overridden by your privacy rights.
• Consent: Where b99 relies on your consent to process data (for example, sending direct marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Data

5.1 Service Providers and Partners

b99 shares personal data with carefully selected third-party service providers who assist in delivering the Services. These include payment processors (bKash, Nagad, Rocket, Upay, and partner banks including Dutch-Bangla Bank, City Bank, and BRAC Bank), identity verification providers, game technology suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), IT infrastructure and hosting providers, and customer support tooling vendors. All such providers are contractually obligated to process data solely on b99's instructions and to maintain appropriate security standards.

5.2 Legal and Regulatory Disclosure

b99 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or where b99 believes in good faith that such disclosure is necessary to prevent criminal activity, protect the rights or safety of b99 or third parties, or fulfil a legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of b99's business assets, personal data held by b99 may be transferred to the relevant successor entity. In such circumstances, b99 will take reasonable steps to ensure that your privacy rights continue to be respected and will notify you of any material change to the data controller.

5.4 No Sale of Personal Data

b99 does not sell, rent, or lease personal data to third parties for their own independent marketing or commercial purposes under any circumstances.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. b99 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate the platform, remember your preferences, analyse usage patterns, and, where you have consented, to support personalised promotional communications.

6.2 Types of Cookies Used

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how players navigate the platform, which games are most popular, and where technical errors occur. The data collected is aggregated and pseudonymised.
• Preference cookies: Store your language, display, and notification settings so you do not need to re-enter them on each visit.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time via your browser settings.

6.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling essential cookies may prevent certain features of the b99 platform from functioning correctly. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Retention

b99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods applied by b99 are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five years following account closure, in order to satisfy anti-money laundering and regulatory record-keeping obligations.
• Transaction data: Retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for three years from the date of the last communication, or longer where the communication relates to an unresolved dispute or legal matter.
• Analytics and usage data: Retained in aggregated, non-identifiable form for up to two years for platform improvement purposes.
• Marketing consent records: Retained for as long as consent remains active and for one year following withdrawal, as evidence of the consent decision.

When personal data is no longer required, b99 will securely delete or anonymise it so that it can no longer be associated with any individual.

8. Security Measures

b99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and b99 servers
• Encryption of sensitive personal and financial data stored in our databases
• Role-based access controls limiting data access to authorised personnel with a documented need
• Regular security audits and penetration testing of platform infrastructure
• Multi-factor authentication for administrative access to systems that hold personal data
• Documented incident response procedures for identifying, containing, and reporting data security events

9. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data b99 holds about you:

• Right of access: You may request a copy of the personal data b99 holds about you, together with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or completed without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to b99's legal obligations to retain certain data.
• Right to restriction: You may request that b99 restrict processing of your personal data in certain circumstances, for example while a correction request is being resolved.
• Right to data portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data where b99 relies on legitimate interests as the legal basis, including for direct marketing purposes. b99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact b99 support at [email protected]. b99 will respond to all valid requests within 30 calendar days. In some cases, b99 may need to verify your identity before processing your request.

10. Children's Privacy

The b99 platform is strictly intended for individuals who are 18 years of age or older. b99 does not knowingly collect personal data from anyone under the age of 18. If b99 becomes aware that personal data has been collected from a minor, the associated account will be immediately closed, all data will be deleted, and any deposited funds will be returned to the payment method used, in accordance with our Terms & Conditions.

If you believe that a minor has registered an account on b99, please contact us immediately at [email protected] so that we can take appropriate action without delay.

11. Third-Party Links

The b99 platform may, from time to time, contain references to game providers and technology partners. b99 is not responsible for the privacy practices of any third-party services. This Privacy Policy applies exclusively to data processed by b99. We encourage you to review the privacy policies of any third-party services you interact with independently of the b99 platform.

12. Changes to This Privacy Policy

b99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, b99 will notify registered users via the platform or by email to the address associated with your account. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the b99 platform following notification of any changes constitutes your acknowledgment of the revised Policy. If you do not agree with the updated Policy, you should stop using the Services and may request account closure in accordance with our Terms & Conditions.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data b99 holds about you, please contact our data support team. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 calendar days.

Data Support Contact: [email protected]

Please include your registered username, the nature of your enquiry, and any relevant reference numbers when contacting us. All privacy requests are handled confidentially by our dedicated support team.