ba99 Privacy Policy

1. Who We Are

This Privacy Policy applies to the ba99 platform, accessible at ba99.cam. ba99 is an online casino and sports betting platform operated for the benefit of players primarily based in Bangladesh. In this Privacy Policy, references to "ba99", "we", "us", or "our" mean the operator of the ba99 platform. References to "you" or "your" mean any person who visits, registers on, or uses the ba99 platform in any capacity.

ba99 is the data controller in respect of the personal data described in this Privacy Policy. This means ba99 determines the purposes for which your personal data is processed and the means by which that processing takes place.

If you have any questions or concerns about this Privacy Policy or about how ba99 handles your personal data, you may contact us at the email address provided in Section 15 of this document.

2. Data We Collect

ba99 collects the following categories of personal data from players and website visitors:

2.1 — Identity Data

Full legal name, date of birth, gender, nationality, and government-issued identification details (such as National ID card number or passport number) provided during account registration and KYC verification.

2.2 — Contact Data

Mobile phone number, email address, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal) and postal code.

2.3 — Financial Data

Mobile financial service account details (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals, transaction history, account balances, and payment verification records. ba99 does not store full payment credentials on its own servers; payment processing is handled by our authorised payment partners.

2.4 — Account & Activity Data

Your ba99 username, account registration date, login timestamps, session durations, games played, bets placed, wager amounts, bonus claims, withdrawal requests, and responsible gaming tool settings.

2.5 — Technical Data

IP address, browser type and version, operating system, device type and identifier, time zone, referring URL, pages visited on ba99, and clickstream data collected automatically when you use the platform.

2.6 — Communications Data

Records of your communications with ba99 customer support via live chat or email, including the content of messages and any attachments submitted.

2.7 — Marketing Preferences

Your stated preferences regarding receipt of promotional communications from ba99, and records of any consent given or withdrawn.

3. How We Collect Your Data

ba99 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies: Technical and activity data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the ba99 platform.
• Third-party sources: Identity verification and fraud prevention agencies, payment processing partners, and publicly available sources, used to verify information you have provided or to meet our legal obligations.
• Device permissions: Where you access ba99 through a mobile browser and grant relevant permissions, limited device data (such as device model and OS version) may be collected to optimise your experience.

4. How We Use Your Data

ba99 uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Creating and managing your ba99 account	Identity, Contact, Account & Activity
Processing deposits and withdrawals	Identity, Financial, Account & Activity
Verifying your identity (KYC/AML compliance)	Identity, Contact, Financial
Providing customer support	Identity, Contact, Communications
Personalising your platform experience	Account & Activity, Technical
Fraud prevention and security monitoring	Identity, Technical, Account & Activity, Financial
Sending promotional offers (where consented)	Contact, Marketing Preferences
Meeting legal and regulatory obligations	All categories as required
Improving platform performance and features	Technical, Account & Activity
Responsible gaming monitoring	Account & Activity, Communications

ba99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another valid legal basis for that processing.

5. Legal Basis for Processing

ba99 processes your personal data only where there is a valid legal basis to do so. The legal bases we rely on are:

• Performance of a contract: Processing necessary to create and manage your account, process transactions, and provide the services you have requested from ba99.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, know-your-customer (KYC) obligations, and other legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications, where you have given explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing that took place before withdrawal.

6. Data Sharing

ba99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other authorised payment partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers used to verify your identity and meet our legal obligations.
• Game content providers: Software providers whose games are hosted on ba99, to the extent required for game functionality, fairness certification, and regulatory compliance.
• IT and platform service providers: Cloud hosting, server infrastructure, customer support software, and analytics providers engaged to help operate the ba99 platform securely and efficiently.
• Law enforcement and regulatory authorities: Where required by applicable law, court order, or regulatory direction.
• Business successors: In the event of a merger, acquisition, or sale of all or part of ba99's business, your data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All third parties with whom ba99 shares personal data are required to handle that data in accordance with applicable privacy laws and are prohibited from using it for any purpose other than those for which it was shared.

7. International Data Transfers

ba99's servers and some of our third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, ba99 takes appropriate steps to ensure that your data receives a level of protection equivalent to that provided under applicable data protection standards, including the use of data processing agreements and standard contractual clauses where required.

By registering an account and using the ba99 platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Bangladesh in accordance with this Privacy Policy.

8. Data Retention

ba99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account being active on the ba99 platform.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for up to three (3) years following the resolution of the relevant support case.
• Marketing consent records: Retained for as long as necessary to demonstrate compliance with consent obligations, or until consent is withdrawn and all associated data is deleted.
• Technical and log data: Typically retained for up to twelve (12) months, unless a longer period is required for security investigations or legal proceedings.

Upon expiry of the applicable retention period, ba99 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9. Cookies & Tracking Technologies

ba99 uses cookies and similar technologies on its platform. A cookie is a small text file placed on your device when you visit a website. Cookies help ba99 deliver a functional, secure, and personalised experience.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. They enable core features such as maintaining your ba99 login session, remembering items in your cashier, and ensuring platform security. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the ba99 platform — such as which pages are visited most frequently — to help us improve performance and content.
• Marketing Cookies: Used to deliver promotional content relevant to your interests. These cookies track your activity across sessions and are only placed where you have given consent.

You may manage or withdraw your consent to non-essential cookies at any time by adjusting your browser settings. Note that disabling certain cookies may affect the functionality of the ba99 platform.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by ba99:

• Right of Access: You may request a copy of the personal data ba99 holds about you, along with information about how it is being used.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to ba99's legal obligations to retain certain records.
• Right to Restriction: You may request that ba99 restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is resolved.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on ba99's legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact ba99 support at the email address in Section 15. We will respond to all valid requests within 30 days. In some cases, we may need to verify your identity before fulfilling a request.

11. Children's Privacy

The ba99 platform is strictly for adults aged 18 and above. ba99 does not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been submitted by or on behalf of a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe a person under 18 has registered an account on ba99, please contact us immediately so we can investigate.

ba99 supports responsible gaming and encourages all adults in a household to ensure that minors do not have unsupervised access to gambling platforms. Please visit our Responsible Gaming page for further guidance.

12. Security Measures

ba99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ba99's servers.
• Cryptographic hashing of account passwords using industry-standard algorithms, ensuring passwords cannot be read in plain text.
• Role-based access controls ensuring that ba99 staff can only access personal data to the extent necessary for their specific job function.
• Regular internal and external security audits and penetration testing of ba99's platform infrastructure.
• Intrusion detection systems and real-time monitoring for suspicious activity on ba99's servers.
• Secure data centre facilities with physical access controls and environmental protections.

While ba99 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for keeping your ba99 login credentials confidential and for notifying us immediately if you suspect any unauthorised use of your account.

13. Third-Party Links

The ba99 platform may contain references to third-party content providers, game studios, or payment partners. ba99's Privacy Policy applies solely to data collected by ba99 and does not extend to any third-party websites, applications, or services that may be accessible in connection with the platform. ba99 has no control over the privacy practices of third parties and encourages you to review the privacy policies of any third-party service you use in connection with ba99.

14. Changes to This Privacy Policy

ba99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by posting a notice on the ba99 platform or by sending a notification to the email address registered on your account. The revised Privacy Policy will take effect on the date stated in the notice.

We encourage you to review this Privacy Policy periodically to stay informed about how ba99 is protecting your data. Your continued use of the ba99 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ba99's data handling practices, please contact our Data Protection team. We aim to respond to all privacy-related enquiries within 30 days of receipt.

Email contact (plain text — not a clickable link): [email protected]

Please include your full name, registered email address, and a clear description of your request or concern so that we can respond efficiently. For account-related requests, we may need to verify your identity before fulfilling the request.