bba999 Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data bba999 collects from Bangladeshi players, how we use it, who we share it with, and what rights you hold over your information.
1. Introduction
bba999 ("bba999", "we", "us", "our") operates the online casino and sports betting platform accessible at https://bba999.bet and all associated mobile interfaces (collectively, "the Platform"). This Privacy Policy ("Policy") describes how bba999 collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register an account, access the Platform, or otherwise interact with bba999's services.
By registering an account on bba999 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and consent to the data practices described herein. If you do not agree with any part of this Policy, you should cease using the Platform and contact our support team at [email protected] to request Account closure.
This Policy is drafted in accordance with applicable data protection principles and is intended to meet internationally recognised standards of privacy transparency. bba999 reserves the right to update this Policy at any time. Material changes will be communicated to registered Players by a platform notice or by email to the address on file. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.
This Policy should be read in conjunction with the bba999 Terms & Conditions. Capitalised terms used but not defined in this Policy have the meanings given to them in the Terms & Conditions.
Plain-English summary: We collect only the data we genuinely need to run a safe, legal, and fair betting platform. We do not sell your personal data to third parties for marketing. We protect your data with 256-bit SSL encryption and strict access controls. You have rights over your data and can contact us at any time.
2. Data We Collect
bba999 collects personal data through a number of mechanisms when you interact with the Platform. The categories of personal data we may collect include the following:
Registration and Account Data: When you create a bba999 account, we collect the information you provide directly, including your full name, date of birth, mobile number, email address, and chosen username. This data is required to establish and maintain your account.
Identity and KYC Verification Data: To comply with our age verification and anti-money-laundering obligations, we may request documentary evidence of your identity and address. This can include copies of your National ID card, passport, driving licence, or utility bills. This data is processed exclusively for verification purposes.
Financial and Transaction Data: We record all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method details (such as your registered bKash or Nagad mobile number), and transaction timestamps. We do not store full credit or debit card numbers on our servers; card payment processing is handled by our certified payment processors.
Technical and Device Data: When you access the Platform, our servers automatically log certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data helps us maintain platform security and optimise performance for Bangladeshi mobile networks.
Behavioural and Usage Data: We collect data about how you use the Platform â which games you play, the size and frequency of your bets, your session times, and which features you interact with. This data is used for responsible gaming monitoring, fraud detection, platform improvement, and (where consented) personalised promotions.
Communications Data: If you contact bba999 support, the content of your messages, emails, and any supporting documents you share are retained to resolve your query and to maintain a record of our communications with you.
Cookies and Tracking Data: bba999 uses cookies and similar tracking technologies on the Platform. Please refer to Section 10 of this Policy for full details of our cookie practices.
Data minimisation: bba999 applies a data minimisation principle â we collect only the personal data that is strictly necessary for the specific purpose for which it is being processed. We do not collect sensitive categories of data (such as health, religion, or political opinions) unless you voluntarily provide such information in a support communication.
3. How We Use Your Data
bba999 processes your personal data only where a valid legal basis exists. The primary purposes for which we use your data, and the legal basis for each, are set out below:
bba999 will not use your personal data for purposes that are incompatible with those listed above without first informing you and, where required, obtaining your consent.
4. Data Sharing
bba999 does not sell your personal data to any third party for commercial marketing purposes. We may, however, share your personal data with the following categories of recipients where necessary and proportionate:
- KYC and Age Verification Providers: Third-party identity verification services that process your ID documents to confirm eligibility. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
- Payment Processors: Certified payment partners (including mobile wallet operators such as bKash and Nagad, and international card networks such as Visa and Mastercard) that facilitate your deposit and withdrawal transactions. Payment data shared with these partners is governed by their own privacy policies.
- Game Providers: Software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose games are hosted on or integrated into the Platform. These providers may receive technical session data (such as your Player ID and bet amounts) to facilitate game functionality and settle results. They do not receive your full identity data unless required for independent dispute resolution.
- Fraud Detection and Security Services: Third-party tools that assist bba999 in identifying suspicious activity, detecting bot use, and preventing money laundering. These services process IP address, device fingerprint, and behavioural data.
- Law Enforcement and Regulatory Authorities: Where we are legally required to do so â for example, in response to a court order, a formal request from a law enforcement authority, or a regulatory investigation â we will disclose the relevant personal data. We will always seek to limit such disclosure to the minimum necessary.
- Business Successors: In the event of a merger, acquisition, or transfer of all or a substantial part of bba999's business, Player data may be transferred to the successor entity, subject to equivalent privacy protections.
All third-party data processors engaged by bba999 are subject to binding data processing agreements that require them to maintain confidentiality, implement appropriate technical security measures, and process personal data only on bba999's documented instructions.
5. Data Security
bba999 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our core security measures include:
256-Bit SSL Encryption
All data transmitted between your device and the bba999 Platform is protected by industry-standard 256-bit SSL/TLS encryption.
Secure Data Storage
Personal data is stored on access-controlled servers. Sensitive data fields are encrypted at rest. Database access is restricted to authorised personnel only.
Access Controls
bba999 operates a strict role-based access control policy. Only staff with a legitimate need can access Player personal data, and all access is logged and audited.
Incident Response
bba999 maintains a data breach response procedure. In the event of a breach affecting your data, we will notify you promptly and take immediate steps to contain the incident.
Regular Security Reviews
Our security posture is reviewed regularly, including vulnerability assessments and penetration testing of key Platform components.
Two-Factor Authentication
Players are encouraged to enable OTP-based two-factor authentication on their accounts for an additional layer of access security.
While bba999 takes all reasonable steps to protect your personal data, no internet-based transmission or storage system is guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials. If you suspect that your account has been compromised, contact us immediately at [email protected].
6. Data Retention
bba999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:
- Active Account Data: Retained for the duration of your Account's active status and for a minimum of five years following Account closure, in accordance with anti-money-laundering record-keeping requirements.
- KYC Documents: Identity and address verification documents are retained for a minimum of five years from the date of verification, or five years from Account closure, whichever is later.
- Transaction Records: Financial transaction records are retained for a minimum of five years from the date of each transaction.
- Support and Communications Data: Records of customer support interactions are retained for a minimum of two years from the date of the last interaction.
- Technical and Log Data: Server logs, IP address records, and device data are retained for a maximum of 12 months, after which they are anonymised or deleted.
- Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your Account and for two years following Account closure.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.
7. Your Rights
As a Player whose personal data is processed by bba999, you hold the following rights in relation to your data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.
Right of Access
You have the right to request a copy of the personal data bba999 holds about you. We will provide this within 30 days of receiving a valid request, free of charge for the first request in any 12-month period.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many account details directly in your account settings; for KYC-verified data, contact support.
Right to Erasure
You may request that bba999 delete your personal data. Note that this right is subject to certain limitations â we are required to retain transaction records and KYC documents for regulatory purposes even after Account closure. We will explain any limitations when processing your request.
Right to Restrict Processing
You may request that bba999 restricts the processing of your personal data in certain circumstances â for example, while the accuracy of your data is being contested, or where you have objected to processing based on legitimate interests.
Right to Withdraw Consent
Where processing is based on your consent (for example, receiving promotional emails), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing communication. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Object
You may object to bba999 processing your personal data on the basis of our legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Response time: bba999 aims to respond to all data rights requests within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case we will notify you of the extension and the reason for it. All requests must be submitted in English and include sufficient information to verify your identity.
8. International Transfers
bba999 operates internationally and may transfer your personal data to countries outside Bangladesh for processing by our service providers â for example, to cloud infrastructure providers whose servers are located in other jurisdictions, or to Game Providers whose technical infrastructure is based in Europe or Asia.
Where personal data is transferred internationally, bba999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include:
- Contractual data protection clauses binding the recipient to equivalent protection standards.
- Transfers only to jurisdictions recognised as providing adequate levels of data protection.
- Specific technical and organisational measures agreed with the recipient prior to transfer.
If you would like further information about the safeguards bba999 applies to international data transfers, please contact us at [email protected].
9. Children and Minors
The bba999 Platform is strictly intended for adults aged 21 years and above. bba999 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform.
If bba999 becomes aware that personal data belonging to a person under 21 has been collected â for example, because a date of birth provided during registration is found to be false â the relevant Account will be immediately closed, all pending transactions will be voided, and the data will be deleted in accordance with our retention obligations.
If you are a parent or guardian and believe that your child may have registered an account on bba999, please contact us immediately at [email protected] so that we can investigate and take the necessary action.
10. Cookies and Tracking Technologies
bba999 uses cookies and similar technologies (including local storage and session tokens) on the Platform to enable core functionality and to improve your experience. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: These cookies are required for the Platform to function. They include session authentication tokens that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking the Platform.
- Functional Cookies: These cookies remember your preferences (such as your preferred language setting and display options) so you do not have to reconfigure them on each visit.
- Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how Players use the Platform â such as which pages are most visited and where errors occur â so that we can improve performance and stability.
- Marketing and Personalisation Cookies: Where you have given consent, these cookies allow bba999 to present you with personalised bonus offers and game recommendations based on your play history and preferences. You may withdraw this consent at any time by contacting support.
Most web browsers allow you to control cookies through their settings. Please note that disabling certain categories of cookies may impair some Platform functionality. bba999 does not use third-party advertising network cookies to serve ads on external websites.
11. Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about the way bba999 handles your personal data, please contact our support team. All privacy-related enquiries should be submitted in English.
Contact: [email protected] â Please use the subject line "Privacy Enquiry" and include your registered username and a clear description of your question or concern. bba999 aims to acknowledge all privacy enquiries within 2 business days and to resolve them within 30 calendar days.
If you are not satisfied with bba999's response to your privacy concern, you may escalate your complaint in writing to bba999's senior management team by stating "Escalation â Privacy Complaint" in your message subject. We take all privacy complaints seriously and are committed to resolving them fairly.
Contact for privacy matters: [email protected] â All communications must be in English. Include your username, the nature of your request, and any relevant account reference numbers.
Your Data Is Safe With bba999
We protect your privacy so you can focus on what matters â enjoying cricket betting, casino games, and slots. Log in to your account, explore the full game library, or check our FAQ for any remaining questions.
Login to bba999 Explore bba999 Casino Read the FAQâ ī¸ 21+ only. Gambling involves financial risk. Play responsibly. Visit Responsible Gaming for self-exclusion and support tools.