Privacy Policy – How bai999 Collects, Uses, and Protects Your Data

bai999 is the data controller responsible for your personal information collected through the Platform. As data controller, bai999 determines the purposes and means by which personal data is processed. All data protection enquiries should be directed to our support team at [email protected], clearly marked "Data Protection Enquiry" in the subject line.

bai999 is committed to processing personal data in a lawful, fair, and transparent manner, consistent with the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.

bai999 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to enter into or perform our contract with you — including operating your Account, processing deposits and withdrawals, and settling bets.
• Legal Obligation: Processing required to comply with anti-money laundering laws, age verification requirements, tax reporting obligations, and other applicable legal duties.
• Legitimate Interests: Processing carried out for bai999's legitimate business interests, including fraud prevention, platform security, network integrity monitoring, and improving our services, where those interests are not overridden by your rights.
• Consent: Where we send you optional marketing communications (promotional emails, bonus alerts, tournament notifications), we do so only with your explicit consent. You may withdraw consent at any time by updating your communication preferences in Account Settings or by emailing [email protected].

bai999 uses the personal data we collect for the following specific purposes:

• Creating, managing, and securing your bai999 Account, including identity verification and age confirmation (21+ requirement).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard.
• Detecting and preventing fraud, money laundering, underage gambling, and other prohibited activities on the Platform.
• Providing customer support, responding to enquiries, and resolving disputes.
• Personalising your gaming experience, including recommending games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi that match your preferences.
• Operating and improving our responsible gaming tools, including deposit limit monitoring and session-time tracking.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts. These communications are not optional as they form part of the service.
• Sending optional promotional communications (with your consent) including bonus offers, tournament announcements, and seasonal promotions.
• Analysing aggregate, anonymised platform usage data to improve the performance, usability, and game selection of the Platform.

bai999 does not sell, rent, or otherwise transfer your personal information to unrelated third parties. We share your data only in the following limited circumstances:

• Payment Processors: We share financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners solely to process your transactions. These providers operate under their own privacy policies and are bound by contractual data processing agreements with bai999.
• Game Providers: Your gameplay session data is shared with the relevant game studio (e.g., Pragmatic Play, Evolution Gaming) to facilitate game delivery and resolve technical disputes. No personally identifiable information beyond an anonymised session ID is shared with game providers.
• Identity Verification Services: KYC and age verification may be conducted in partnership with accredited identity verification providers who process your documents on bai999's behalf under strict confidentiality obligations.
• Fraud and Security Services: We may share technical data (IP addresses, device fingerprints, transaction patterns) with third-party fraud detection platforms to protect the integrity of the Platform and its players.
• Legal and Regulatory Authorities: bai999 will disclose personal data to competent legal or regulatory authorities where required to do so by law, court order, or regulatory directive. We will notify you of such disclosure where we are legally permitted to do so.

All third-party service providers engaged by bai999 are subject to contractual obligations that restrict their use of your data to the specific purpose for which it was shared and require them to maintain appropriate security standards.

bai999 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and collect analytical data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, preferred payment method, and game history settings. Disabling these may reduce Platform convenience but will not prevent access.
• Analytics Cookies: Collect anonymised data on how players navigate and use the Platform. This data is used to identify usability issues and prioritise feature improvements. We use privacy-respecting analytics tools that do not share individual-level data with advertising networks.
• Security Cookies: Help us detect suspicious login attempts, unusual account activity, and potential fraud indicators. These are strictly necessary for Platform security.

You can control non-essential cookies through your browser settings. Please note that disabling cookies may affect your experience on certain parts of the Platform. bai999 does not use third-party advertising cookies or behavioural targeting cookies that profile you across external websites.

bai999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmissions between your device and our servers.
• Tokenisation of payment method identifiers — bKash numbers, Nagad wallet IDs, and card details are never stored in raw form.
• Access controls ensuring that personal data is accessible only to bai999 staff who require it to perform their specific job functions.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Two-factor authentication available to all registered players via Account Settings.
• Automated alerts for unusual login activity, multiple failed login attempts, or rapid account changes that may indicate unauthorised access.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bai999 will notify affected players without undue delay and take immediate remedial action. You are strongly encouraged to use a unique, strong password for your bai999 Account and to enable two-factor authentication.

bai999 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your Account plus a minimum of five years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of five years from the date of the transaction.
• KYC Documents: Identity and address verification documents are retained for five years following the end of the business relationship.
• Support Communications: Customer support chat logs and email correspondence are retained for 24 months from the date of the interaction.
• Technical and Analytics Data: Anonymised, aggregated analytics data may be retained indefinitely. Individual-level technical logs (IP addresses, device IDs) are retained for 12 months and then purged or anonymised.
• Marketing Preferences: Records of your consent or objection to marketing communications are retained for the lifetime of your Account and for three years following closure.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

As a bai999 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data bai999 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as name and address, you may update these directly in your Account Settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. This right is subject to limitations where we are required by law to retain certain records (e.g., AML transaction logs). We will inform you of any such limitations when responding to your request.
• Right to Restrict Processing: You may request that we limit our processing of your data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to bai999 in a structured, commonly used, machine-readable format.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as the legal basis. You may also withdraw consent for marketing communications at any time without affecting the lawfulness of processing based on consent before withdrawal.

bai999 will respond to all data rights requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly. We do not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

bai999 is strictly an adults-only platform. Our services are not directed at, and must not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated Account, void any balance, and securely delete the data.

Parents and guardians who believe a minor has registered on bai999 are asked to contact us immediately at [email protected] so that we can take prompt action. We encourage the use of parental control software to restrict access to online gambling platforms on devices used by minors.

bai999's Platform infrastructure and certain third-party service providers may be located outside Bangladesh. Where your personal data is transferred to and processed in countries outside your home jurisdiction, bai999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards include contractual data processing agreements with all third-party recipients that incorporate binding data protection obligations.

Game provider integrations (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) involve server-side data processing in the respective provider's hosting jurisdiction. In all cases, only anonymised session identifiers are passed to game engines — no personally identifiable information is transmitted to game providers beyond what is strictly necessary to initialise and authenticate a gaming session.

bai999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will post a prominent notice on the Platform and, where we hold a verified email address for your Account, send a notification email prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the Platform after any posted update constitutes your acknowledgement of the revised Policy. If you do not agree to the changes, you should close your Account by contacting [email protected] before the revised Policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bai999 handles your personal data, please contact our support team:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Response Time: bai999 aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 14 business days.

For formal complaints regarding our data processing practices that have not been resolved to your satisfaction through our internal process, you may also seek recourse through the applicable data protection authority in your jurisdiction.