ba999a Privacy Policy

1 Information We Collect

1.1 Registration Data. When you create a ba999a account, we collect your full legal name, date of birth, email address, mobile phone number, and chosen username. This information is required to establish and maintain your account.

1.2 Identity Verification (KYC) Data. To comply with our platform's know-your-customer (KYC) process, we may collect copies of government-issued identification documents (such as your National Identity Card, passport, or driver's licence), proof of address documents, and photographs where required for verification purposes.

1.3 Financial Data. We collect details of your deposit and withdrawal transactions, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and reference numbers. We do not store full payment card numbers on our servers.

1.4 Usage and Technical Data. We automatically collect certain technical information when you access ba999a, including your IP address, device type and operating system, browser type and version, session duration, pages visited, games played, bets placed, and other platform interaction data.

1.5 Communication Data. When you contact ba999a's customer support team via email ([email protected]) or Telegram (@ba999a_support), we retain records of those communications, including the content of messages and any attachments, for quality assurance and dispute resolution purposes.

1.6 Cookies and Tracking Technologies. ba999a uses cookies and similar tracking technologies to maintain your session, remember your preferences, analyse platform usage patterns, and detect fraudulent activity. See Section 9 for full details of our cookie usage.

2 How We Use Your Information

ba999a uses the personal data we collect for the following specific purposes:

ba999a will not use your personal data for any purpose not listed above without first obtaining your explicit consent, except where required by applicable law or a legitimate legal obligation.

3 Legal Basis for Processing

3.1 Contractual Necessity. The majority of the personal data we process is necessary to perform our contractual obligations to you as a registered ba999a account holder — specifically, to create and manage your account, process your financial transactions, and deliver our gaming and betting services.

3.2 Legal Obligation. Certain processing activities — in particular, identity verification (KYC), transaction monitoring, and record retention — are carried out because they are necessary for ba999a to meet its platform security and compliance obligations.

3.3 Legitimate Interests. We process certain categories of data (such as usage analytics and fraud detection signals) on the basis of ba999a's legitimate interests in securing its platform, preventing financial crime, and improving our services, provided these interests are not overridden by your fundamental rights and freedoms.

3.4 Consent. Where ba999a processes your personal data on the basis of your consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4 Sharing Your Information

4.1 ba999a does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your information only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, and card networks) solely to process your deposit and withdrawal transactions.
• Identity Verification Partners: KYC documents may be shared with authorised identity verification service providers to confirm the authenticity of submitted documents.
• Fraud Prevention Services: Device and IP data may be shared with fraud detection providers to identify and prevent suspicious account activity.
• Game and Technology Providers: Certain gameplay data (such as bet history and game session IDs) is shared with third-party game studios (e.g., Pragmatic Play, Evolution Gaming, Spribe) as required to deliver and audit game outcomes.
• Legal and Regulatory Requests: ba999a may disclose personal data if required to do so by a valid court order, legal process, or to protect the rights, property, or safety of ba999a, its users, or the public.

4.2 All third-party service providers with whom ba999a shares personal data are contractually bound to process that data solely for the agreed purpose and to maintain appropriate security standards.

5 Data Security

5.1 ba999a implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and ba999a servers.
• Encrypted storage of sensitive personal and financial records on secured servers.
• Role-based access controls ensuring only authorised personnel can access personal data.
• Regular security audits and penetration testing of the ba999a platform infrastructure.
• Multi-factor authentication requirements for ba999a administrative and operational staff.
• Automated monitoring systems for unusual login activity, account takeover attempts, and transaction anomalies.

5.2 While ba999a takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights, ba999a will notify affected users without undue delay.

5.3 You are responsible for maintaining the confidentiality of your ba999a account credentials. Never share your password with any third party. If you suspect your account has been accessed without your authorisation, contact our support team immediately.

6 Data Retention

6.1 ba999a retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable security, audit, and legal obligations.

6.2 As a general principle, ba999a retains active account data for the duration of your account's existence. Following account closure, personal data (including transaction history, KYC documents, and communication records) is retained for a minimum period of five (5) years to satisfy security obligations and facilitate resolution of any post-closure disputes.

6.3 Certain categories of data may be retained for longer periods where required by applicable law or where ba999a has a legitimate ongoing need — for example, data relating to a suspected fraud investigation may be retained until that investigation is formally closed.

6.4 When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

7 International Data Transfers

7.1 ba999a's primary services are directed at players in Bangladesh. However, some of ba999a's third-party technology, payment processing, and game-delivery partners operate infrastructure located outside Bangladesh. Where your personal data is transferred to and processed in a country outside Bangladesh, ba999a ensures that appropriate safeguards are in place — including contractual data-transfer clauses or equivalent protections — to ensure your data receives a standard of protection consistent with this Policy.

7.2 By using ba999a and providing your personal data, you acknowledge that your data may be transferred to and processed by ba999a's authorised service partners in other countries in accordance with the safeguards described above.

8 Your Data Rights

As a ba999a account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". ba999a will acknowledge your request within 5 business days and respond substantively within 30 days.

9 Cookies & Tracking Technologies

9.1 ba999a uses cookies — small text files placed on your device — and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Essential Cookies: Required for core platform functionality, including maintaining your login session and ensuring secure access to your account. These cannot be disabled without disrupting your use of ba999a.
• Performance Cookies: Used to collect anonymised data about how users navigate the Platform, helping us identify areas for improvement. No personally identifiable information is collected via these cookies.
• Fraud Prevention Cookies: Used to detect and prevent automated bots, account takeover attempts, and other suspicious activity patterns on the Platform.
• Preference Cookies: Used to remember your language, display, and notification settings so the Platform behaves consistently across sessions.

9.2 Most web browsers allow you to control cookie settings through the browser's preferences menu. Disabling or deleting essential cookies may prevent ba999a from functioning correctly and may require you to log in again on each visit.

9.3 ba999a does not use third-party advertising cookies or cross-site tracking cookies to serve targeted advertisements on external websites.

10 Marketing Communications

10.1 ba999a may send you promotional communications — including bonus offers, tournament announcements, seasonal promotions (such as Eid, Pohela Boishakh, or BPL-season offers), and platform updates — via the email address or phone number registered to your account.

10.2 You may opt out of receiving marketing communications at any time by contacting our support team at [email protected]. Please allow up to 5 business days for opt-out requests to take effect across all communication channels.

10.3 Opting out of marketing communications does not affect the delivery of transactional notifications, such as deposit confirmations, withdrawal updates, password reset emails, and account security alerts. These communications are necessary to operate your account and cannot be disabled while your account is active.

11 Children's Privacy

11.1 ba999a is strictly an adults-only platform. Our services are not directed at, and we do not knowingly collect personal data from, any individual under the age of 21 years. Registration requires confirmation that the user is aged 21 or above, and identity verification (KYC) is used to enforce this requirement.

11.2 If ba999a discovers that personal data has been collected from an individual under the age of 21, that account will be immediately closed, all associated data will be deleted, and any funds will be returned to the verified payment source where possible.

11.3 If you believe that a minor has registered a ba999a account, please notify us immediately at [email protected] so that we may investigate and take appropriate action without delay.

12 Changes to This Privacy Policy

12.1 ba999a reserves the right to update this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this document will be revised, and registered account holders will be notified via the email address associated with their account where appropriate.

12.2 Your continued use of the ba999a Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using ba999a and may request account closure in accordance with the Terms & Conditions.

12.3 We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

13 Contact & Privacy Enquiries

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or ba999a's data handling practices, please contact our team using the details below. All privacy enquiries are treated as confidential.

• Email: [email protected] (plain text — not a clickable link)
• Telegram: @ba999a_support
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Subject Line for Privacy Requests: "Privacy Enquiry" or "Data Rights Request"

13.2 ba999a aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days of receipt.