Your Privacy at ba999app

Data We Collect

ba999app collects personal data from you in three ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party payment providers and identity verification services. We collect only what is necessary for the purposes set out in this Privacy Policy and do not collect sensitive personal data such as racial or ethnic origin, political opinions, or religious beliefs.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Bangladesh, email address, and mobile number linked to a Bangladeshi SIM (bKash, Nagad, Rocket, or Upay registered number).
• Identity verification documents: Copies of your National Identity Card (NID), passport, or driving licence when requested as part of the Know Your Customer (KYC) process.
• Payment information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay) and bank account details (for transfers to Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) used for deposits and withdrawals. We do not store full card numbers or mobile banking PINs.
• Support communications: The content of messages you send to ba999app via Live Chat, email, or any other support channel, along with your contact details and account reference.
• Responsible Gaming preferences: Self-exclusion elections, deposit limit settings, cool-off period requests, and any other Responsible Gaming choices you make via the platform.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Session and gameplay data: Login timestamps, session duration, pages visited, games played, bet amounts, game outcomes, and bonus activations.
• Transaction logs: Records of all deposits, withdrawal requests, bonus credits, and wagering activity associated with your BDT Wallet.
• Cookie and tracking data: See Section 4 (Cookies & Tracking) for full details on the cookies ba999app sets and how to manage them.

1.3 Information from Third Parties

• Payment confirmation data: Transaction reference numbers and status confirmations received from bKash, Nagad, Rocket, Upay, and banking partners when you make a deposit or receive a withdrawal.
• Identity verification results: Pass/fail outcomes and risk scores from third-party KYC and age-verification service providers used to confirm your identity and age.
• Fraud and risk data: Signals received from fraud-prevention and anti-money-laundering (AML) screening services to protect the platform and its players.

How We Use Your Data

ba999app processes personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those described in this Privacy Policy without first obtaining your explicit consent. The following table summarises the primary purposes for which ba999app processes personal data and the legal basis for each.

Where ba999app relies on your consent as the legal basis for processing — specifically for sending promotional emails and SMS about bonuses, BPL betting promotions, Eid offers, and other seasonal campaigns — you may withdraw that consent at any time by contacting Live Chat support or by following the unsubscribe link included in every marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Sharing & Disclosure

ba999app does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with carefully selected third-party service providers who assist us in operating the platform, always subject to strict contractual data protection obligations. The categories of third parties with whom ba999app shares personal data are listed below.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum personal and financial data necessary to execute deposit and withdrawal transactions. These providers operate their own privacy policies and are independent data controllers for the transaction data they process.
• Identity and age verification providers: Third-party KYC service providers receive identity document data and personal details to perform age verification and fraud screening on ba999app's behalf. These providers act as data processors under contract with ba999app.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a player session token and minimal gameplay data necessary to deliver the game within the ba999app platform. These providers do not receive your full personal profile, payment details, or contact information.
• IT infrastructure and hosting providers: Cloud hosting and content delivery network (CDN) providers who store platform data and serve platform content on ba999app's behalf, acting as data processors under contract.
• Analytics providers: Anonymised or pseudonymised technical and gameplay data may be shared with analytics providers to help ba999app understand platform usage patterns and improve user experience.
• Legal and regulatory authorities: ba999app may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory demand. ba999app will notify you of such a disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of ba999app's assets, player data may be transferred to the acquiring entity as part of the transaction, subject to the same data protection commitments set out in this Privacy Policy.

Cookies & Tracking

ba999app uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain the security of your account session, remember your preferences, and understand how players use the site so that we can make improvements. A cookie is a small text file placed on your device by a website you visit. Cookies set by ba999app are first-party cookies; cookies set by our analytics and support-chat providers are third-party cookies.

You can manage or delete cookies at any time using your browser's privacy settings. The method varies by browser — refer to your browser's help documentation for instructions on clearing cookies, blocking new cookies from specific sites, or enabling a "Do Not Track" signal. Please note that disabling strictly necessary cookies will impair core platform functionality, including the ability to log in to your ba999app account.

ba999app does not use cookies for cross-site advertising, retargeting, or behavioural profiling for the benefit of third-party advertisers. We do not participate in third-party advertising networks that track your activity across unrelated websites.

Data Security

ba999app implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly in line with evolving security standards and threat landscapes.

• TLS/SSL encryption: All data in transit between your device and ba999app's servers is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser address bar when using ba999app.ws.
• Data encryption at rest: Sensitive personal data, including identity document copies and payment account references, is encrypted in ba999app's databases using AES-256 encryption.
• Access controls: Access to personal data within ba999app's internal systems is restricted on a strict need-to-know basis. Staff who handle personal data are trained in data protection obligations and subject to confidentiality agreements.
• Password hashing: Account passwords are stored as salted cryptographic hashes — ba999app staff cannot read your password in plain text, and it is never transmitted or stored in an unencrypted form.
• Two-factor authentication (2FA): ba999app encourages all players to enable 2FA on their accounts for an additional layer of login security. 2FA settings are available in your account security preferences.
• Intrusion detection and monitoring: ba999app's platform is monitored continuously for unusual activity, unauthorised access attempts, and anomalous transaction patterns. Automated alerts trigger investigation procedures when suspicious behaviour is detected.
• Penetration testing: ba999app conducts regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a high risk to your personal data, ba999app will notify affected players promptly and take all reasonable steps to contain and remediate the breach. If you suspect that your ba999app account has been accessed without your authorisation, contact Live Chat support immediately so that the account can be secured.

Data Retention

ba999app retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, to maintain the contractual relationship with you as a player, and to comply with applicable legal and regulatory retention obligations. The following retention periods apply to the main categories of personal data held by ba999app.

When a retention period expires, ba999app will securely delete or irreversibly anonymise the relevant personal data. Anonymised, non-identifiable data derived from player activity may be retained indefinitely for aggregate statistical analysis and platform improvement purposes, as this data can no longer be associated with any individual player.

Where an account is closed at the player's request, the player's personal data transitions from "active" to "archived" status. Archived data is no longer accessible to ba999app's operational teams and is retained only in secure, access-restricted storage for the purpose of meeting the retention obligations set out above. Players who have closed their account and wish to query the status of their archived data may contact us at the details in Section 8.

Your Privacy Rights

ba999app respects your rights over your personal data. The following rights are available to you as a ba999app player. To exercise any of these rights, contact ba999app's support team via Live Chat or email. We will respond to verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of access: You have the right to request a copy of the personal data ba999app holds about you, along with information about how it is being used. We will provide this information in a clear, structured format.
• Right to rectification: If any personal data ba999app holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact and profile information directly via your account settings; for changes to core identity data, contact support.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that ba999app cannot delete data that we are legally required to retain under AML and financial record-keeping regulations — in such cases, your data will be archived rather than deleted until the applicable retention period expires.
• Right to restrict processing: You may request that ba999app restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is pending review.
• Right to object: You have the right to object to ba999app's processing of your personal data where it is based on legitimate interest, including processing for direct marketing purposes. Upon receiving an objection to marketing communications, ba999app will stop sending promotional messages immediately.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to withdraw consent: Where ba999app processes your data on the basis of your consent — specifically for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Contact & Complaints

If you have any questions about this Privacy Policy, about the personal data ba999app holds about you, or about how to exercise any of your privacy rights, please contact the ba999app support team using the details below. All privacy-related enquiries are handled in English and are treated confidentially.

• Email: [email protected] — please include "Privacy Enquiry" in the subject line so your message is routed to the correct team.
• Live Chat: 24/7 English-language Live Chat is available directly on the ba999app platform at ba999app.ws. This is the fastest channel for urgent data-related requests.
• Response time: ba999app aims to acknowledge all privacy enquiries within one business day and to provide a substantive response within 30 calendar days of receiving a verified request.

If you are dissatisfied with ba999app's response to a privacy enquiry or believe that ba999app has processed your personal data in a manner that is inconsistent with this Privacy Policy or applicable data protection law, you have the right to raise a formal complaint. ba999app takes all complaints seriously and will conduct an internal investigation, the outcome of which will be communicated to you in writing.

Changes to this Privacy Policy will be published at ba999app.ws/privacy-policy. The effective date at the top of the document will be updated to reflect the date of the most recent revision. We encourage you to review this Policy periodically. Where changes are material — meaning they significantly affect how your data is used or what rights you hold — ba999app will notify registered players via email or a prominent on-site notice before the changes take effect. Your continued use of the ba999app platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.