Privacy Policy — b99a

Our Data Protection Commitments

b99a is committed to handling your personal data responsibly, transparently, and securely. The six principles below summarise how we approach data protection across every part of the Platform.

1Introduction and Scope

This Privacy Policy ("Policy") describes how b99a ("we", "us", "our", "the Company") collects, uses, stores, and protects the personal data of users ("you", "your", "Player") who access or use the b99a online gaming platform at b99a.app (the "Platform"). This Policy forms an integral part of our Terms and Conditions and applies to all persons who register an account, browse the Platform, or otherwise interact with our services.

By registering an account on b99a or by continuing to use the Platform after this Policy has been published or updated, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must stop using the Platform and may request account closure by contacting [email protected].

2Information We Collect

b99a collects personal data in three main ways: information you provide directly when using the Platform, information generated automatically by your interaction with the Platform, and information received from third-party service providers in the course of delivering the service. The categories of data we collect are detailed below.

Information You Provide to Us

• Registration data: your mobile phone number (used as your account identifier), date of birth, and the password you create. We do not store your password in plain text — it is encrypted using industry-standard hashing before storage.
• Identity verification (KYC) documents: a copy of your national ID card (NID), passport, or other government-issued photo identification, submitted when you complete identity verification.
• Financial information: your registered bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account details, used to process deposits and withdrawals. Full payment credentials are never stored on our servers — transactions are handled directly by the respective payment processors.
• Communications data: messages, emails, or chat transcripts exchanged between you and our customer support team.
• Account preferences: any responsible gaming limits, self-exclusion elections, notification preferences, or other account settings you configure through the Platform.

Information Collected Automatically

• Device and technical data: your IP address, device type, operating system version, browser type and version, screen resolution, and mobile network operator. This data is used to detect fraud, enforce geographic restrictions, and optimise the Platform for your device.
• Usage and session data: pages visited, games played, bet amounts, session start and end times, navigation paths, and feature interactions. This data helps us improve the Platform's design and detect unusual account activity.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 6 of this Policy.
• Transaction logs: a complete record of all deposits, withdrawals, bets, wins, losses, and bonus transactions on your account, retained for financial integrity and regulatory compliance purposes.

Information from Third Parties

• Payment verification data from bKash, Nagad, Rocket, Upay, or bank partners, used to confirm the successful completion of a deposit or withdrawal and to match the payment to your account.
• Identity verification results from any third-party KYC service providers we engage to assist with document checking and age verification.
• Fraud and risk signals from industry fraud-prevention networks, used to protect the Platform and its players from fraudulent activity.

3How We Use Your Information

b99a uses the personal data we collect for the following purposes. In each case we use only the minimum data necessary for the stated purpose, consistent with the principle of data minimisation.

• Account creation and management: to register your player account, verify your identity and age, authenticate your login sessions, and process account-level requests such as password resets or contact detail updates.
• Service delivery: to provide the gaming, betting, and entertainment services available on the Platform, including processing bets, settling winnings, crediting bonuses, and applying responsible gaming tools.
• Payment processing: to facilitate deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), verify that the payment method belongs to you, and maintain an accurate financial record.
• Fraud prevention and security: to detect and investigate suspicious activity, prevent unauthorised access to accounts, identify and block fraudulent transactions, and protect both the Platform and its player community from abuse.
• Responsible gaming: to monitor account activity for signs of problem gambling, apply deposit limits or self-exclusion restrictions that you have set, and fulfil our responsible gaming obligations.
• Customer support: to respond to your queries, complaints, or feedback; to investigate and resolve disputes; and to maintain records of support interactions as required by our internal quality and compliance standards.
• Platform improvement: to analyse aggregated, anonymised usage data to understand how players interact with the Platform, identify features that need improvement, and develop new services that better serve our Bangladeshi player community.

4Legal Basis for Processing Your Data

b99a processes your personal data only where a valid legal basis exists. The four legal bases we rely on are described below, along with examples of the processing activities covered by each.

5Sharing and Disclosure of Your Information

b99a does not sell your personal data. We share your personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other banking partners): we share the minimum account and transaction data required to process your deposit or withdrawal. These processors operate under their own privacy policies and financial regulations.
• Game providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and others): we share a session token and anonymised player identifier with game providers to enable the game software to function. Game providers do not receive your full name, phone number, or payment details.
• Identity verification (KYC) providers: where we engage a third-party specialist to assist with document authentication and age verification, we share only the documents or data points required for that verification. KYC providers are contractually bound to use your data solely for verification purposes.

Legal and Regulatory Disclosures

b99a may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of b99a, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of b99a's business assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify affected users in advance where reasonably practicable and ensure that any successor entity is bound by privacy obligations no less protective than those in this Policy.

6Cookies and Tracking Technologies

b99a uses cookies and similar tracking technologies to operate the Platform effectively, remember your session state, and understand how players use the site. The following types of cookies are used on b99a:

Cookie Types We Use

• Strictly necessary cookies: essential for the Platform to function. These include session authentication tokens that keep you logged in during your visit. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: remember your Platform preferences such as language settings, responsible gaming limit values, and notification preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: collect anonymised data about how visitors use the Platform — pages viewed, time on page, navigation paths — to help us improve the user experience. The data collected by analytics cookies cannot be used to identify you personally.
• Security cookies: used to detect and prevent fraudulent activity, including identifying suspicious login patterns or unusual session behaviour that may indicate an attempted account compromise.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may impair your ability to use certain features of the Platform, including staying logged in during a gaming session.

7Data Retention

b99a retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by legal, regulatory, or financial compliance obligations. Our standard retention periods are as follows:

• Active account data: retained for the full duration of your account being open and active on the Platform, plus a minimum of 5 years after permanent account closure to satisfy financial record-keeping obligations.
• KYC and identity documents: retained for a minimum of 5 years from the date of submission, or longer if required by applicable anti-money-laundering regulations.
• Customer support communications: retained for 2 years from the date of the most recent interaction, to allow resolution of any delayed complaints or disputes.

When the applicable retention period expires and there is no overriding legal reason to continue holding your data, b99a will securely delete or anonymise it. You may request early deletion of certain categories of data by contacting [email protected], subject to our legal retention obligations.

8Data Security Measures

b99a implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data against unauthorised access, loss, destruction, or alteration. Our key security measures include:

• TLS/SSL encryption on all data in transit between your device and our servers, preventing interception of your account credentials, session tokens, and financial data.
• Encrypted storage of sensitive data fields at rest, including hashed passwords and masked payment identifiers, so that even an internal data breach cannot expose your credentials in usable form.
• Access controls limiting internal access to personal data on a strict need-to-know basis — only staff whose role requires access to specific data categories are granted that access, and all access is logged.
• Regular security assessments and vulnerability testing of the Platform's infrastructure, with prompt remediation of any identified weaknesses.

While b99a takes all reasonable steps to protect your personal data, no method of data transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights or freedoms, b99a will notify affected players promptly and take all necessary steps to contain the breach and mitigate its impact.

9Your Privacy Rights

As a user of the b99a Platform, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Request". We will respond within 30 calendar days.

10Payment Data and Financial Information

b99a treats financial and payment data with the highest level of care. When you make a deposit or request a withdrawal, the transaction is processed directly by the relevant payment provider (bKash, Nagad, Rocket, Upay, or your bank). b99a receives only a transaction confirmation reference and the amount — your full mobile wallet PIN, bank card number, or internet banking credentials are never transmitted to or stored by b99a at any point.

We retain a record of each transaction (amount, timestamp, payment method type, and outcome) in your account transaction history. This record is used for account statement purposes, dispute resolution, and financial compliance. Transaction records are retained for a minimum of 5 years in accordance with our data retention policy.

11Children's Privacy — 21+ Policy

b99a's gaming services are strictly restricted to adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires confirmation of age, and we may request documentary proof of age (such as a national ID card or passport) as part of our KYC verification process.

12Third-Party Links and Integrations

The b99a Platform integrates with third-party game providers and payment processors as described in this Policy. These third parties operate their own services under their own privacy policies, which are independent of b99a. b99a is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with through the Platform, including bKash, Nagad, and your bank's internet banking service.

13Changes to This Privacy Policy

b99a reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our services. The effective date of the current version is displayed at the top of this page. Where changes are material — for example, where we intend to use your data for a new purpose or share it with a new category of third party — we will endeavour to notify you in advance via your registered contact details or through a prominent notice on the Platform.

Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated Policy. If you do not agree with any material change to this Policy, you have the right to close your account by contacting [email protected].

14Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by b99a, please reach out to our dedicated support team. We are available around the clock to assist players across Bangladesh.