ba999a Privacy Policy

1 Introduction

ba999a ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the ba999a platform, whether as registered players, prospective players browsing the website, or visitors accessing publicly available content. This Privacy Policy ("Policy") sets out in clear and transparent terms how ba999a collects, processes, stores, shares, and protects personal data in connection with the operation of its online casino and sports betting platform at ba999a.biz.

This Policy applies to all personal data collected through the ba999a website, mobile-optimised browser interface, customer support channels, and any other touchpoints through which you interact with ba999a. It should be read alongside our Terms & Conditions, which are available at ba999a.biz/terms-conditions.

We may update this Policy from time to time to reflect changes in our data practices or applicable legal requirements. The effective date at the top of this document indicates when the current version was last revised. We encourage you to review this Policy periodically.

2 Data Controller

For the purposes of this Policy, ba999a acts as the data controller in respect of all personal data collected from players and users of the platform. As data controller, ba999a determines the purposes for which and the means by which personal data is processed. All enquiries relating to data protection and privacy may be directed to our support team at [email protected].

3 Data We Collect

ba999a collects personal data that is necessary to provide and operate the platform safely and in compliance with applicable obligations. The categories of personal data we collect include:

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, gender	Account registration, age verification, KYC compliance
Contact Data	Email address, phone number, residential address	Account communication, support, withdrawal processing
Verification Data	National ID, passport, driving licence, utility bill	Identity verification, anti-fraud, AML compliance
Financial Data	Payment method details, transaction history, bKash/Nagad account references	Deposit and withdrawal processing, fraud prevention
Technical Data	IP address, browser type, device identifiers, operating system	Platform security, fraud detection, service improvement
Usage Data	Pages visited, games played, bet history, session duration, click patterns	Service personalisation, responsible gaming monitoring
Communications Data	Support chat logs, email correspondence, complaint records	Dispute resolution, service quality, legal compliance

ba999a does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data for identification purposes, except where expressly required to satisfy a legal or regulatory obligation.

4 How We Collect Data

ba999a collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically as you use the platform, including via cookies, web beacons, server logs, and similar tracking technologies. This includes technical and usage data as described in Section 3.
• Third-party sources: Data received from identity verification providers, payment processors (such as bKash, Nagad, Rocket, and Upay), fraud prevention services, and publicly available databases where we are permitted by law to supplement our records.
• Referral sources: If you access ba999a through a referral or affiliate link, we may receive limited data about the referral source to attribute your registration correctly. No sensitive personal data is shared with ba999a by referring parties.

5 Legal Basis for Processing

ba999a processes your personal data only where a valid legal basis exists to do so. The legal bases on which we rely are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification, and law enforcement requests.
• Legitimate interests: Processing necessary for the legitimate interests of ba999a, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — for example, to send marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

The personal data ba999a collects is used strictly for the following purposes:

• Creating, managing, and maintaining your player account on the ba999a platform.
• Verifying your identity and age (18+) in accordance with our responsible gaming obligations.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods in BDT (৳).
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities on the platform.
• Providing customer support and resolving disputes, complaints, or account queries.
• Monitoring player activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling, and applying self-exclusion or limit tools where applicable.
• Sending transactional communications such as account confirmations, deposit receipts, and withdrawal notifications.
• Sending promotional and marketing communications where you have given explicit consent to receive them.
• Improving the platform's performance, user experience, game offerings, and overall service quality through aggregated usage analysis.
• Complying with applicable legal, regulatory, and law enforcement obligations.

ba999a will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis for such use.

7 Cookies & Tracking Technologies

ba999a uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the ba999a website. They enable us to recognise your browser, remember your preferences, maintain your login session, and analyse how the platform is used.

The types of cookies used by ba999a include:

• Strictly necessary cookies: Essential for the platform to function. These enable core features such as account login, session management, and security protections. They cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Collect anonymised information about how visitors use the platform — including pages visited, session duration, and error rates — to help us improve the platform experience.
• Functionality cookies: Remember your preferences such as language settings, display options, and previously viewed game categories to personalise your experience.
• Targeting and advertising cookies: Used only where you have given consent. These may be used to deliver relevant promotional content and to measure the effectiveness of our marketing activity.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair platform functionality, including the ability to remain logged in across sessions.

8 Third-Party Sharing

ba999a does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: Personal and financial data necessary to process deposits and withdrawals is shared with our payment partners, including bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, Dutch-Bangla Bank, Visa, and Mastercard, solely for the purpose of completing your requested transaction.
• Identity verification providers: We may share identity documents and personal data with third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers for the purpose of verifying your identity and age.
• Game providers: Game studios and technology providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session and gameplay data necessary to deliver their game content through the ba999a platform.
• Law enforcement and regulators: ba999a will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by law, regulation, or valid legal process.
• Fraud prevention services: We may share data with specialist fraud prevention and security agencies where we have reasonable grounds to suspect fraudulent, criminal, or prohibited activity.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving ba999a, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom ba999a shares personal data are required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared.

9 International Transfers

In some cases, the personal data ba999a collects may be processed or stored on servers located outside Bangladesh. Where personal data is transferred internationally, ba999a takes reasonable steps to ensure that equivalent standards of data protection are applied in the destination jurisdiction, including through contractual data processing agreements with service providers.

By using the ba999a platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence. ba999a will always maintain responsibility for the protection of your data regardless of where it is processed.

10 Data Retention

ba999a retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your account relationship with ba999a, plus a minimum of five years following account closure, in accordance with AML and financial record-keeping requirements.
• Transaction records: Retained for a minimum of seven years following the date of the transaction to comply with financial compliance obligations.
• Identity verification documents: Retained for a minimum of five years following account closure or the completion of the relevant identity check, whichever is later.
• Support and communications records: Retained for three years following the resolution of the relevant support interaction or complaint.
• Marketing consent records: Retained for as long as consent is active and for three years following withdrawal of consent, as evidence of the consent decision.

When data is no longer required to be retained, ba999a will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data.

11 Data Security

ba999a implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ba999a platform.
• Encrypted storage of all passwords using industry-standard irreversible hashing algorithms — ba999a staff cannot view your plaintext password under any circumstances.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with access logs maintained and regularly audited.
• Regular vulnerability assessments and penetration testing conducted by independent security specialists.
• Secure data centres with physical and network security controls, redundancy, and disaster recovery provisions.
• Staff training on data protection obligations and information security best practices.

While ba999a takes all reasonable precautions to protect your data, no system is entirely immune to security risks. In the unlikely event of a data breach that affects your personal data, ba999a will notify affected individuals promptly and take all necessary remediation steps.

12 Your Rights

Subject to applicable law, you have the following rights in relation to the personal data ba999a holds about you:

• Right of access: You may request a copy of the personal data ba999a holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: You may request that ba999a restrict the processing of your personal data in certain circumstances, such as while a dispute over accuracy is being resolved.
• Right to data portability: You may request that ba999a provide your personal data in a structured, commonly used, machine-readable format so that it may be transferred to another service provider.
• Right to object: You may object to the processing of your personal data where ba999a relies on legitimate interests as the legal basis, or where data is used for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected]. ba999a may require you to verify your identity before processing a data rights request. We will respond within 30 days; in complex cases, we may extend this period by a further 30 days with prior notification.

13 Children's Privacy

The ba999a platform is strictly intended for adults aged 18 years and over. ba999a does not knowingly collect personal data from individuals under the age of 18. If we become aware that an account has been created by or on behalf of a minor, we will immediately suspend the account, delete all associated personal data to the extent legally permissible, and withhold any account balance pending investigation.

If you are a parent or guardian and believe that a minor under your care has created a ba999a account or submitted personal data to our platform, please contact us immediately at [email protected] so that we can take prompt action.

14 Marketing Communications

ba999a may, with your explicit consent, send you promotional communications relating to bonuses, new game releases, seasonal offers (including Eid, Pohela Boishakh, and Victory Day promotions), and other marketing content relevant to the ba999a platform. We will never send marketing communications without a valid consent record on file.

You may opt out of marketing communications at any time by:

• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".
• Clicking the unsubscribe link present in any marketing email sent by ba999a.
• Updating your communication preferences from within your account settings.

Opting out of marketing communications will not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

15 Policy Amendments

ba999a reserves the right to update or amend this Privacy Policy at any time to reflect changes in data practices, platform features, or applicable legal requirements. When material changes are made, ba999a will notify registered players by email or by posting a prominent notice on the platform prior to the changes taking effect. The updated Policy will carry a revised effective date at the top of the document.

Your continued use of the ba999a platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any amendment, you should discontinue your use of the platform and may contact us to request account closure.

16 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way ba999a handles your personal data, please contact our data protection team using the details below:

• Email: [email protected]
• Subject line for data enquiries: "Privacy Enquiry – [Your Account Username]"
• Response time: Within 24 hours; full substantive response within 30 days
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

ba999a takes all privacy complaints seriously and will investigate any concern raised in good faith. If you are not satisfied with ba999a's response to your complaint, you may seek independent legal advice or escalate your concern to an appropriate data protection authority.