bbk99 Privacy Policy

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by bbk99 ("we", "us", "our") in connection with the bbk99 platform accessible at bbk99.io. It applies to all users who browse, register on, deposit into, or otherwise interact with the platform from any device or location.

bbk99 is committed to handling personal data responsibly and transparently. We apply industry-standard security measures and follow recognised data protection principles to ensure that the information you entrust to us is handled with care. This Policy should be read alongside our Terms & Conditions, which govern your use of the platform as a whole.

By creating an account, making a deposit, or continuing to use the bbk99 platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

bbk99 collects the minimum data necessary to deliver a secure, compliant, and personalised betting and casino experience. The categories of personal data we collect include:

Registration & Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for mandatory 21+ age verification)
• Residential address (city, district, division within Bangladesh)
• Email address
• Bangladeshi mobile number
• Username and encrypted password

KYC Verification Documents

• National Identity Card (NID) number and scanned copy
• Passport details where NID is unavailable
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Mobile wallet account details (bKash, Nagad, Rocket, or Upay numbers registered in your name)

Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile wallet transaction IDs associated with bKash, Nagad, Rocket, and Upay payments
• Bank card partial numbers and issuing bank references where card payments are used
• Account balance history and bonus credit/debit records

Behavioural & Technical Data

• IP address at login and during active sessions
• Device type, operating system, browser type and version
• Pages visited, time spent on each section, and navigation sequences
• Betting history, game session durations, stake sizes, and wagering patterns
• Responsible gaming tool usage (deposit limits set, session time configurations, self-exclusion requests)

Communications Data

• Content and metadata of support enquiries submitted via live chat or email
• Records of promotional communications sent to you and your response preferences
• Feedback and survey responses voluntarily submitted through the platform

bbk99 collects personal data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, respond to surveys, or update your account profile.
• Automatically through technology: via cookies, session tokens, server logs, and analytics tools that record your interactions with the platform during each visit.
• From payment processors: transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card payment gateways is relayed to bbk99 to confirm successful fund transfers.
• From identity verification services: where bbk99 engages third-party KYC or fraud-screening providers, those providers may return verification outcomes, risk scores, or document authenticity assessments based on the documents you submitted.
• From game providers: studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level data (game ID, bet amount, result, session duration) with bbk99 for reconciliation, dispute resolution, and responsible gaming monitoring purposes.

bbk99 processes personal data for the following specific purposes:

bbk99 does not use personal data to make fully automated decisions that produce significant legal effects without human oversight. Where automated systems flag an account for review (for example, due to suspected fraud or a self-exclusion match), a trained compliance team member reviews the case before any consequential action is taken.

bbk99 processes your personal data on one or more of the following legal grounds depending on the purpose:

• Contractual necessity: Processing is required to deliver the services you have requested — including account management, deposit processing, bet settlement, and withdrawal execution — under the agreement formed by your acceptance of our Terms & Conditions.
• Legal obligation: bbk99 is required to collect and retain certain data to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping standards.
• Legitimate interests: bbk99 processes behavioural and technical data to protect the security of the platform, prevent fraud, improve service quality, and manage risk, where these interests do not override your fundamental rights.
• Consent: Where bbk99 sends optional marketing communications or uses non-essential cookies, this is done on the basis of your prior consent. You may withdraw consent at any time by contacting support or adjusting your account communication preferences.

bbk99 does not sell or rent your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

Service Providers & Technology Partners

bbk99 engages third-party service providers to support platform operations. These include KYC verification vendors, fraud screening services, payment processing gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard), cloud hosting providers, customer support platforms, and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). All such providers are contractually bound to process data solely for the purpose for which it was shared and to apply security standards at least equivalent to those maintained by bbk99.

Legal & Regulatory Disclosure

bbk99 may disclose personal data when required to do so by a valid legal process, court order, or regulatory instruction from a competent authority. In such circumstances, bbk99 will disclose only the minimum data required and, where legally permissible, will notify the affected account holder.

Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of bbk99's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

bbk99 uses cookies and similar tracking technologies to ensure the platform functions correctly, maintain your authenticated session, remember your preferences, and gather anonymised usage analytics. The categories of cookies deployed are as follows:

• Essential cookies: Required for the platform to operate. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your display preferences, language settings, and last-visited sections so that your experience is consistent across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the platform. This data helps bbk99 identify usability issues and prioritise improvements. No individually identifiable information is included in analytics reports.
• Fraud-prevention cookies: Used to fingerprint devices for the purpose of identifying suspicious login attempts, account takeover attempts, and multi-account activity.

Most modern browsers allow you to view, block, or delete cookies through your browser settings. Blocking essential cookies will prevent you from logging in or using core platform features. Blocking analytics or functional cookies will not affect your ability to bet or access games.

bbk99 retains personal data for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Self-exclusion records are retained indefinitely to ensure that excluded individuals cannot re-register under alternative identities.

bbk99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in transit: All data exchanged between your device and the bbk99 platform is encrypted using TLS 1.3. Plain HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive fields including passwords, NID numbers, and payment identifiers are encrypted at the database level using industry-standard algorithms. Passwords are hashed using bcrypt with a unique per-account salt.
• Two-factor authentication: OTP-based two-factor authentication is available to all accounts and is mandatory for withdrawals above defined thresholds.
• Access controls: Access to production data is restricted to a minimal set of authorised bbk99 personnel on a need-to-know basis. All internal access events are logged and subject to periodic audit.
• Intrusion detection: Real-time monitoring systems alert the bbk99 security team to anomalous access patterns, brute-force attempts, and unusual data export activity.
• Penetration testing: The platform is subject to scheduled independent penetration testing. Identified vulnerabilities are triaged and remediated according to their severity classification.

As a user of the bbk99 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered username and a description of your request. We will respond within a reasonable timeframe and in all cases within 30 days of receipt.

• Right of Access: You may request a copy of the personal data bbk99 holds about you, including the categories of data, the purposes for which it is processed, and any third parties to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity and KYC data, updated supporting documentation will be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bbk99's legal obligations to retain certain records (see Section 08).
• Right to Restrict Processing: You may request that bbk99 restrict processing of your data in certain circumstances — for example, while a rectification request is pending review.
• Right to Data Portability: You may request a copy of the personal data you provided to bbk99 in a commonly used, machine-readable format (such as CSV or JSON) for transfer to another provider.
• Right to Object: You may object to processing carried out on the basis of bbk99's legitimate interests, including profiling for marketing purposes. bbk99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The bbk99 platform is strictly intended for individuals aged 21 and above. bbk99 does not knowingly collect personal data from any person under the age of 21. Age verification is performed as part of the registration and KYC process, and accounts that fail age verification are closed immediately with all associated data securely deleted.

If you are a parent or guardian and believe that a minor under your care has created an account or submitted personal data to bbk99, please contact us immediately at [email protected]. We will investigate and take prompt action including account closure and deletion of all associated data.

The bbk99 platform may contain references to the names or services of third-party entities such as payment providers, game studios, and sporting organisations. Where such references include navigational elements, these are limited to paths within the bbk99 platform itself. bbk99 does not link to external third-party websites from within the platform.

In circumstances where you independently navigate to a third-party website in connection with your use of the platform (for example, accessing your bKash or Nagad mobile banking application to complete a deposit), the privacy practices of that third party are entirely outside bbk99's control. bbk99 accepts no responsibility for the data handling practices of any third-party service.

bbk99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The date of the most recent revision is shown at the top of this page. Where changes are material — meaning they significantly affect your rights or how your data is used — bbk99 will provide advance notice via email to your registered address or through a prominent notice on the platform.

Your continued use of the bbk99 platform after any published amendment constitutes your acknowledgement of and agreement to the revised Privacy Policy. If you do not accept the revised terms, you should discontinue use of the platform and may request voluntary account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bbk99 processes your personal data, please reach out to our dedicated support team. We treat all privacy-related enquiries with high priority and aim to provide a substantive response within 24 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

• Privacy Enquiries Email: [email protected]
• Live Chat: Available 24/7 directly from the bbk99 platform
• Subject Line Recommended: "Privacy Request — [Your Username]" for faster routing

When submitting a data rights request (access, erasure, rectification, portability), please include your registered username, the email address on your account, and a clear description of your request. Identity verification may be required before we action certain requests in order to protect your account from unauthorised third-party requests.