99bd Privacy Policy — How We Protect Your Personal Data

1. Who We Are

1.1 99bd ("we", "us", "our") is an online sports betting and casino gaming platform operating at https://99bd.io. We are the data controller responsible for the personal information you provide when registering and using the platform.

1.2 99bd is designed specifically for the Bangladesh market, supporting local payment methods including bKash, Nagad, Rocket, and Upay, and providing sports and gaming services to adult players aged 21 and above. Our platform operates under an international gaming licence, and our data practices are designed to align with internationally recognised privacy standards.

1.3 All questions, requests, or concerns regarding this Privacy Policy should be directed to our Data Protection contact at [email protected]. We will acknowledge receipt within 3 business days and aim to resolve all data-related queries within 30 calendar days.

2. Data We Collect

2.1 We collect the following categories of personal data from our users. Collection of each category is tied to a specific operational or legal purpose as described in Section 4 of this policy.

2.2 We do not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information, except where a health-related disclosure is made voluntarily in the context of a responsible gaming support interaction. Such disclosures are handled with the utmost discretion and are not used for any profiling or marketing purpose.

3. How We Collect Your Data

3.1 Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or update your account profile.

3.2 Automatically — when you visit and navigate the 99bd website, our servers automatically log technical data including your IP address, browser type, the pages you visit, the duration of each session, and referring URLs. This data is collected via server logs and, where applicable, cookies as described in Section 9.

3.3 From third-party service providers — our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) may share transaction confirmation data with us to reconcile your account balance. Our KYC verification partner may share the outcome of identity and document checks. Our fraud-detection provider may share risk signals derived from your device fingerprint and transaction patterns.

3.4 From game studios — certified software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level game data (round IDs, RNG seeds, outcomes) with us for dispute resolution and audit trail purposes.

4. How We Use Your Data

4.1 Account Management: We use your identity and contact data to create and maintain your 99bd account, authenticate your identity on login, and communicate account-related notifications to you.

4.2 Payment Processing: We use your financial data to process deposits from and withdrawals to your nominated payment method. Transaction records are retained for audit and anti-money-laundering compliance purposes.

4.3 KYC & Fraud Prevention: We use identity and financial data to verify your age (you must be 21 or older), confirm your identity, and detect and prevent fraudulent activity, bonus abuse, and money laundering. This is a legal obligation and cannot be opted out of.

4.4 Responsible Gaming Monitoring: We use your gaming activity data to monitor for patterns associated with problem gambling, to enforce deposit limits and self-exclusion periods you have set, and to proactively reach out if our systems detect behaviour that may indicate gambling-related harm.

4.5 Platform Improvement: We use aggregated, anonymised technical and gaming activity data to improve platform performance, fix bugs, optimise game loading times, and develop new features. Anonymised data cannot be used to identify any individual.

4.6 Customer Support: We use communications data and account history to resolve your support queries, investigate disputes, and maintain a record of resolutions for quality assurance purposes.

4.7 Marketing & Promotions: Where you have given explicit consent (or where we have a legitimate interest as described in Section 5), we may use your contact data to send you information about promotions, bonuses, and relevant gaming offers. You may opt out at any time as described in Section 14.

5. Legal Basis for Processing

5.1 Every processing activity carried out by 99bd is grounded in one or more of the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws — including anti-money-laundering obligations, age verification, and licensing requirements under our international gaming licence.
• Legitimate Interest: Processing that serves a genuine operational need of 99bd — including fraud prevention, platform security, responsible gaming monitoring, and product analytics — where such interest does not override your rights and freedoms.
• Consent: Processing for which we have obtained your specific, informed, and freely given consent — primarily marketing communications and certain optional cookies. You may withdraw this consent at any time without affecting the lawfulness of processing based on other grounds.

6. Data Sharing & Disclosure

6.1 99bd does not sell, lease, or trade your personal data to any third party for their own commercial purposes. Data sharing is limited to the following categories of recipients, each bound by contractual data-protection obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. They do not receive your full gaming activity history.
• KYC & Identity Verification Partners: Our verification partner receives the identity documents you upload and returns a pass/fail determination. They are contractually prohibited from using your documents for any other purpose.
• Game Content Providers: Certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) receive a pseudonymous player session ID to deliver game content. They do not receive your real name, mobile number, or financial details.
• Fraud Detection & Security Services: Our fraud-prevention partner receives technical data (IP address, device fingerprint, transaction velocity signals) to generate risk scores. This data is processed under a strict data-processing agreement.
• Legal & Regulatory Authorities: We are required by law to disclose personal data to regulatory bodies, law enforcement agencies, or courts when presented with a valid legal request. We will notify you of such a disclosure where legally permitted to do so.

6.2 In the event that 99bd undergoes a corporate restructuring, merger, or acquisition, your personal data may be transferred to the successor entity. You will be notified of any such transfer in advance, and the receiving entity will be bound by privacy obligations no less protective than those in this policy.

7. International Data Transfers

7.1 As an internationally operated platform, some of the third-party service providers described in Section 6 may process your data in jurisdictions outside Bangladesh. Where such transfers occur, 99bd takes reasonable steps to ensure that appropriate safeguards are in place — including standard contractual clauses, data-processing agreements, and transfers only to providers operating in jurisdictions with recognised data protection frameworks.

7.2 Your data is never transferred internationally for purposes other than those described in this Privacy Policy. Any international transfer is directly tied to delivering the services you have requested — for example, processing a Visa card deposit through an international payment gateway, or delivering a live casino game hosted by a studio based outside Bangladesh.

8. Data Retention

8.1 We retain your personal data for as long as your 99bd account remains active and for a period of five (5) years after account closure, in order to comply with our legal obligations under anti-money-laundering regulations, to resolve any outstanding disputes, and to respond to any claims that may arise.

8.2 Gaming activity logs (individual bet records, casino hand histories, crash game sessions) are retained for a minimum of three (3) years from the date of the activity. This retention period is required for dispute resolution and auditing under our gaming licence.

8.3 Customer support communications (live chat transcripts, emails) are retained for two (2) years from the date of the conversation unless they form part of an ongoing dispute, in which case they are retained for the duration of the dispute plus one additional year.

8.4 Marketing consent records are retained for the duration of your active consent plus three (3) years, to enable us to demonstrate that consent was properly obtained if required.

8.5 When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

9. Cookies & Tracking Technologies

9.1 99bd uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your browser or device that help us deliver a functional, personalised, and secure experience.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymised.
• Functional Cookies: Store your preferences such as language settings, remembered device status, and responsible gaming settings, so they persist between sessions.
• Marketing Cookies: Used — with your consent — to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. You may withdraw consent at any time by adjusting your browser settings or contacting our support team.

9.2 You can control non-essential cookies through your browser's cookie settings. Blocking all cookies may impair some platform features. For detailed guidance, refer to your browser's help documentation.

10. Children & Minors

10.1 The 99bd platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If we become aware that a user under 21 has registered an account or provided personal data, we will immediately suspend the account, delete the associated data, and return any deposited funds to the payment source.

10.2 If you believe that a minor may have accessed or registered on the 99bd platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

10.3 99bd conducts age verification checks on all accounts as part of the KYC process. These checks may include requesting a government-issued identity document confirming date of birth. Access to the full range of platform features — including depositing funds — requires successful completion of age verification.

11. Your Privacy Rights

11.1 As a user of the 99bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 calendar days:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you have withdrawn consent. Note that this right may be limited where retention is required by law (e.g., anti-money-laundering obligations).
• Right to Restrict Processing: You may request that we temporarily suspend processing of your data — for example, while a dispute is being resolved — without requesting full deletion.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format so that it can be transferred to another service provider, where technically feasible.
• Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes. Objection to marketing will be honoured immediately and unconditionally.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

12. Security Measures

12.1 99bd implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, theft, or misuse. Our key technical and organisational measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data fields stored in our databases, including identity documents and financial data.
• Role-based access controls ensuring that only authorised staff members can access personal data, and only to the extent required by their specific job function.
• Two-factor authentication (2FA) enforced for all internal staff accounts with access to production systems.
• Regular independent security audits and penetration testing of the platform's infrastructure.
• Segregated player fund accounts, ensuring that your deposited balance is held separately from 99bd's operational funds.
• Real-time fraud detection and anomaly monitoring to identify and respond to suspicious access patterns within minutes.

12.2 In the event of a data security incident that may affect your personal data, 99bd will notify you without undue delay once the nature and scope of the incident has been assessed. Notification will be provided via the email address or mobile number registered to your account.

13. Third-Party Services & External Links

13.1 The 99bd platform integrates services from third-party providers including payment gateways, game studios, and analytics tools as described in this policy. Each of these providers operates under its own privacy policy, and 99bd is not responsible for the privacy practices of third parties beyond the contractual data-processing obligations described in Section 6.

13.2 The 99bd website does not contain links to external third-party websites. All navigation within the platform keeps users within the 99bd domain. If you independently access a third-party website (for example, by typing a URL directly), any data collection on that external site is governed by that site's own privacy policy and is entirely outside 99bd's control.

14. Marketing Communications

14.1 With your consent, 99bd may send you promotional communications about bonuses, special offers, seasonal promotions (for example, during Eid, Pohela Boishakh, or BPL season), and new games or features. These communications may be delivered via SMS, WhatsApp, or email to the contact details registered on your account.

14.2 You may opt out of marketing communications at any time by:

• Replying "STOP" to any SMS or WhatsApp message you receive from 99bd.
• Contacting our support team via live chat and requesting removal from our marketing list.
• Sending an email to [email protected] with the subject line "Unsubscribe from Marketing".

14.3 Opting out of marketing communications does not affect transactional communications — you will continue to receive account notifications, payment confirmations, KYC status updates, and security alerts as these are necessary for the operation of your account.

14.4 99bd does not engage in unsolicited cold marketing. We will only contact you via channels that you have used to interact with us (the mobile number or email address on your account) and will never sell your contact details to third-party marketers.

15. Changes to This Privacy Policy

15.1 99bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or platform features. When material changes are made, we will notify registered users via the mobile number or email address on their account, and display a prominent notice on the platform for at least 30 days following the update.

15.2 The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the 99bd platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised policy, you should cease using the platform and contact support to arrange account closure.

15.3 Previous versions of this Privacy Policy may be requested by contacting our support team and will be provided for reference purposes upon request.

16. Contact & Complaints

16.1 If you have any questions about this Privacy Policy or about how 99bd handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] — Subject line: "Privacy Enquiry"
• Live Chat: Available 24/7 directly on the 99bd platform. Average response time: 2–5 minutes.
• WhatsApp: +880 1700 000000 — plain text only, not a clickable link.

16.2 If you are not satisfied with our response to a privacy concern or data rights request, you have the right to escalate the matter to an appropriate data protection authority or to seek redress through the dispute resolution process described in our Terms & Conditions.

16.3 99bd takes all privacy complaints seriously and commits to responding to all formal privacy concerns within 30 calendar days. Complex cases involving data erasure, portability requests, or disputed processing will be acknowledged within 5 business days, with a full response to follow as soon as practicable.