ba999c Privacy Policy

1 Introduction

ba999c is Bangladesh's premier online casino and sports betting platform, providing gaming services to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. The protection of your personal data is a matter we take with the utmost seriousness. This Policy applies to all personal data collected through your use of ba999c, regardless of the device or method of access.

This Policy should be read alongside ba999c's Terms & Conditions, which together form the complete agreement governing your use of the platform. Where this Policy refers to data processing activities, those activities are carried out by ba999c or by carefully selected third-party service providers acting under ba999c's instruction.

ba999c is committed to processing personal data lawfully, fairly, and transparently. We collect only what we need, use it only for the purposes stated in this Policy, and retain it only for as long as is genuinely necessary.

2 Personal Data We Collect

ba999c collects personal data in the following categories, depending on how you interact with the platform:

ba999c does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where expressly required for legally mandated identity verification processes.

3 How We Use Your Personal Data

ba999c uses collected personal data for the following specific purposes:

• Account Management: To create, operate, and maintain your ba999c player account, including identity verification, password management, and account security.
• Service Delivery: To provide access to ba999c's gaming products, process your bets and wagers, and deliver game outcomes in real time.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gambling behaviour for signs of problem gambling and to administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion requests.
• Legal Compliance: To fulfil ba999c's obligations under applicable anti-money-laundering (AML), know-your-customer (KYC), and financial crime prevention regulations.
• Customer Support: To respond to your enquiries, resolve disputes, and manage support ticket correspondence.
• Platform Improvement: To analyse aggregated behavioural data for the purpose of improving platform functionality, game selection, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.
• Promotional Communications: Where you have given explicit consent, to send you information about ba999c promotions, bonuses, and offers that may be relevant to you. You may withdraw this consent at any time via your account settings or by contacting support.

4 Legal Basis for Processing

ba999c processes your personal data on the basis of one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you — that is, to operate your ba999c account and deliver the gaming services you have signed up for.
• Legal Obligation: Processing is necessary for ba999c to comply with applicable legal obligations, including AML regulations, KYC requirements, and financial record-keeping duties.
• Legitimate Interests: Processing is necessary for ba999c's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your data protection rights.
• Consent: For optional data processing activities — in particular, the sending of promotional communications — ba999c relies on your freely given, informed, and specific consent, which you may withdraw at any time without penalty.

5 Sharing Your Personal Data

ba999c does not sell, rent, or trade your personal data. We share personal data only in the following defined circumstances:

• Payment Service Providers: We share the minimum necessary financial and identity data with bKash, Nagad, Rocket, and Upay to process deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data practices once data is transferred to them.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver game content. No personally identifiable information beyond session identifiers is shared for this purpose.
• Identity Verification Services: Third-party KYC and identity verification providers may process your identity documents and personal data as part of ba999c's regulatory compliance obligations. These providers are contractually required to process data only for the purpose of KYC verification.
• Legal and Regulatory Authorities: ba999c may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where required by law, or where ba999c has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or serious harm.
• Business Transfers: In the event that ba999c undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

6 Cookies & Tracking Technologies

ba999c uses cookies and similar tracking technologies to operate the platform, maintain session state, detect fraud, and analyse user behaviour for service improvement purposes. The following categories of cookies are used on ba999c:

• Strictly Necessary Cookies: These cookies are essential for the ba999c platform to function. They include session authentication cookies and security tokens. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display, and notification settings — to provide a more personalised experience.
• Analytics Cookies: These cookies collect anonymised or aggregated data about how users navigate the ba999c platform. This information is used to identify usability issues and improve the platform's design and content. No personally identifiable information is associated with analytics cookies.
• Security and Fraud Prevention Cookies: These cookies assist ba999c's fraud detection systems in identifying unusual or suspicious account activity. They are an integral part of our commitment to platform security.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ba999c platform. ba999c does not use third-party advertising cookies or behavioural targeting cookies.

7 Data Security

ba999c implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ba999c's servers.
• End-to-end encryption for financial transaction data processed via bKash, Nagad, Rocket, and Upay integrations.
• Secure, salted one-way hashing for all stored passwords. ba999c staff cannot retrieve your password in plaintext form.
• Role-based access controls that limit staff access to personal data on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Regular third-party security audits and penetration testing of ba999c's infrastructure and application layers.
• Automated monitoring systems that detect and alert on unusual access patterns, potential intrusion attempts, and data exfiltration indicators.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, ba999c will notify affected users and relevant authorities in accordance with applicable legal requirements. You are responsible for maintaining the security of your own account credentials and should never share your password with any third party.

8 Data Retention

ba999c retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active ba999c account is retained for the lifetime of the account and for a minimum of five (5) years following permanent account closure, in compliance with financial record-keeping requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of seven (7) years following the date of the transaction, in accordance with standard financial compliance obligations.
• KYC and Verification Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the verification process, whichever is later.
• Support Communications: Customer support correspondence is retained for three (3) years from the date of the last interaction.
• Analytical Data: Anonymised or aggregated analytical data, from which individual users cannot be identified, may be retained indefinitely for platform improvement purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. ba999c does not retain personal data for longer than is necessary.

9 Your Data Rights

As a ba999c user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ba999c's support team in writing at [email protected]. We will acknowledge your request within two (2) business days and aim to respond in full within five (5) business days.

• Right of Access: You have the right to request a copy of the personal data that ba999c holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that ba999c holds about you.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to ba999c's legal obligations to retain certain data for regulatory compliance purposes.
• Right to Restriction: You have the right to request that ba999c restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ba999c's legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where ba999c processes your data on the basis of your consent (such as for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

10 Children's Privacy

ba999c is an adults-only platform. We do not knowingly collect personal data from persons under the age of 18. Registration on ba999c requires users to confirm they are aged 18 or above, and ba999c employs age verification procedures to enforce this requirement.

If ba999c becomes aware that personal data has been collected from a person under the age of 18, we will immediately close the associated account, delete the data, and forfeit any associated account balance in accordance with our Terms & Conditions and responsible gaming obligations. If you are a parent or guardian and believe your child has registered on ba999c, please contact us immediately at [email protected].

11 International Data Transfers

Some of ba999c's third-party service providers — including game software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate from jurisdictions outside Bangladesh. When your data is transferred to a third party located outside Bangladesh, ba999c takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

These safeguards may include contractual data transfer clauses, data processing agreements with appropriate security requirements, or reliance on recognised frameworks for cross-border data transfer. By using ba999c, you acknowledge and consent to the transfer of your personal data to third parties in other jurisdictions where necessary for the delivery of our services, subject to the protections described in this section.

12 Changes to This Privacy Policy

ba999c reserves the right to update or revise this Privacy Policy at any time. Changes will be published on this page with a revised effective date. Where changes are material — meaning they significantly affect your rights or how your data is used — ba999c will make reasonable efforts to notify registered users by email prior to the changes taking effect.

We encourage you to review this Policy periodically to stay informed of how ba999c handles your personal data. Continued use of the platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ba999c handles your personal data, please contact our data support team in writing. All data-related correspondence should be submitted via email to ensure a traceable record.

Data support email: [email protected]

ba999c's support team is available 24 hours a day, seven days a week, including public holidays recognised in Bangladesh (including Eid, Victory Day, and Independence Day). We are committed to responding to all privacy-related enquiries within one (1) business day of receipt.

For matters relating to your data rights under Section 9 of this Policy, please clearly state the nature of your request (e.g., "Data Access Request", "Data Deletion Request") in the subject line of your email so that your request is routed to the appropriate team member without delay.