Your Privacy Matters
at bdd99

1 Introduction

This Privacy Policy ("Policy") describes how bdd99 ("bdd99", "the Platform", "we", "us", "our") collects, uses, stores, protects, and shares the personal data of individuals ("Player", "User", "you") who register accounts, access services, or otherwise interact with the bdd99 platform at bdd99.io.

bdd99 is committed to handling your personal information with care, transparency, and respect. We recognise that privacy is a fundamental right, and we have designed our data practices to be consistent with that principle. This Policy has been written in plain English to ensure that every player — regardless of technical background — can understand exactly how their data is handled.

This Policy should be read alongside the bdd99 Terms & Conditions and the Responsible Gaming guidelines. By registering an account or using the bdd99 platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

2 Data Controller

For the purposes of this Privacy Policy, bdd99 acts as the data controller in respect of all personal data collected from players and visitors to the bdd99 platform. As data controller, bdd99 is responsible for determining the purposes and means of processing your personal data.

If you have any questions about how bdd99 processes your personal data, or if you wish to exercise any of your data rights described in Section 11, please contact the bdd99 privacy team using the contact details provided in Section 16 of this Policy.

3 Data We Collect

bdd99 collects several categories of personal data in order to deliver its services, comply with legal obligations, and maintain the security of the platform. The categories of data we collect are described below.

3.1 Registration Data

When you register a bdd99 account, we collect:

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer requirements and to process withdrawals, we collect:

• Government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documentation where required.
• Proof that the payment method is registered in your name (e.g., a screenshot from your bKash or Nagad app).
• Selfie or liveness verification image where required by our compliance process.

3.3 Financial & Transaction Data

When you make deposits or withdraw funds, we collect and retain records of:

• Deposit amounts, timestamps, and originating payment method identifiers (e.g., bKash or Nagad mobile number, bank account reference).
• Withdrawal requests, amounts, destination payment method, and processing status.
• Account balance history and bonus credit/debit records.
• Transaction IDs provided by payment processors for reconciliation purposes.

3.4 Behavioural & Usage Data

When you use the bdd99 platform, we automatically record:

• Games played, bet amounts, win/loss outcomes, and session duration.
• Pages visited, features accessed, and navigation patterns within the platform.
• Device type, operating system, browser type and version, and screen resolution.
• IP address and approximate geolocation (country and city level).
• Login timestamps and session activity logs.

3.5 Communication Data

When you contact bdd99 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages, the support agent's responses, and any attachments or screenshots shared during the interaction.

4 How We Collect Your Data

bdd99 collects personal data through the following channels:

5 How We Use Your Data

bdd99 processes your personal data for the following defined purposes:

5.1 Account Management & Service Delivery

• Creating and maintaining your bdd99 account and ensuring your continued access to platform services.
• Processing deposits and withdrawal requests through your chosen payment methods (bKash, Nagad, Rocket, Upay, and banking partners).
• Delivering game content, sports betting markets, live casino feeds, and all other platform features.
• Providing customer support and resolving disputes or complaints raised by your account.

5.2 Identity Verification & Compliance

• Verifying your age (21+) and identity in accordance with our KYC obligations.
• Screening against fraud, money laundering, and prohibited-player lists as required by our anti-money laundering (AML) policies.
• Maintaining financial records in compliance with standard record-keeping requirements.

5.3 Platform Security & Integrity

• Detecting and preventing fraud, multi-accounting, bonus abuse, collusion, and other rule violations.
• Monitoring for unusual account activity that may indicate unauthorised access.
• Investigating and responding to suspected security incidents.

5.4 Platform Improvement

• Analysing aggregated, anonymised usage data to understand how players interact with the platform and identify areas for improvement.
• Testing new features, game content, and platform optimisations.
• Generating internal performance and revenue reports using aggregated data.

5.5 Responsible Gaming

• Monitoring account activity to identify patterns that may indicate problem gambling behaviour.
• Applying and enforcing deposit limits, cooling-off periods, and self-exclusion requests made by players.
• Proactively reaching out to players showing risk indicators, where appropriate.

5.6 Marketing Communications

• Sending promotional offers, bonus notifications, and platform news to players who have opted in to receive marketing communications.
• Personalising promotional content based on your game history and platform preferences, where you have consented to personalised marketing.

6 Legal Basis for Processing

bdd99 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

7 Cookies & Tracking Technologies

bdd99 uses cookies and similar browser-based tracking technologies to maintain session continuity, remember your preferences, and analyse platform performance. The following cookie categories are used on the bdd99 platform:

7.1 Strictly Necessary Cookies

These cookies are essential for the bdd99 platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that distribute platform traffic. No personal data collected via strictly necessary cookies is shared with third parties.

7.2 Functional Cookies

Functional cookies remember your platform preferences, such as your preferred language settings, game lobby layout preferences, and notification settings. Disabling these cookies may affect your platform experience but will not prevent access to core services.

7.3 Analytics Cookies

bdd99 uses analytics cookies to understand aggregate patterns in how players navigate and use the platform. This data is used in anonymised, aggregated form to improve the platform experience. Analytics data is not linked to individual player profiles for external marketing purposes.

7.4 Security & Fraud Detection Cookies

These cookies support our device fingerprinting and fraud detection systems by recording device identifiers, browser characteristics, and session patterns. This data is processed to identify suspicious activity, detect multi-accounting, and protect the integrity of the platform.

You can manage cookie preferences through your browser settings. Note that disabling cookies beyond the strictly necessary category may affect certain platform features. Clearing cookies will log you out of your current bdd99 session.

8 Data Sharing & Disclosure

bdd99 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

8.1 Payment Service Providers

To process your deposits and withdrawals, bdd99 shares necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners receive only the transaction data required to complete the payment and are contractually prohibited from using that data for any other purpose.

8.2 Identity Verification Providers

bdd99 uses specialist third-party KYC and identity verification service providers to assist with confirming player identity and age. When you submit KYC documents, relevant data is shared with these providers for the sole purpose of completing the verification process. These providers are bound by strict data processing agreements.

8.3 Technology & Infrastructure Partners

bdd99 relies on third-party hosting, cloud infrastructure, and cybersecurity service providers to operate the platform. These providers process personal data only as data processors acting on bdd99's documented instructions and are not permitted to use your data for their own purposes.

8.4 Game Content Providers

Game studios and content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and RNG (random number generation) audit data as part of their game delivery and certification obligations. Identifiable personal data is not shared with game studios except where required by a specific game provider's responsible gaming or player verification requirement.

8.5 Legal & Regulatory Disclosure

bdd99 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where we are required to do so by applicable law, court order, or lawful regulatory demand. We will notify you of any such disclosure where permitted to do so by law.

8.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bdd99's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it before the transfer takes effect.

9 Data Retention

bdd99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Once the applicable retention period has expired, your personal data is securely deleted or irreversibly anonymised. If you request early deletion of your data, bdd99 will honour that request to the extent permitted by our legal retention obligations. Data that must be retained for legal compliance reasons cannot be deleted prior to the end of the mandatory retention period, even upon request.

10 Data Security

bdd99 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security practices include:

• Encryption in transit: All data transmitted between your device and the bdd99 platform is protected using TLS 1.2 or higher (256-bit SSL encryption). All payment data is transmitted over encrypted channels.
• Encryption at rest: Sensitive personal data, including identity documents and payment records, is encrypted at rest using industry-standard AES-256 encryption.
• Password security: Account passwords are never stored in plain text. They are stored as salted cryptographic hashes using a modern hashing algorithm. bdd99 staff cannot view or retrieve your password.
• Access controls: Access to personal data is strictly limited to bdd99 personnel and authorised service providers who require it to perform their duties. Role-based access controls are enforced across all internal systems.
• Infrastructure security: The bdd99 platform is hosted on secured cloud infrastructure with active intrusion detection, DDoS mitigation, and regular vulnerability scanning.
• Security audits: bdd99 conducts periodic internal and third-party security assessments to identify and remediate potential vulnerabilities in our systems and data handling processes.
• Staff training: All bdd99 personnel with access to personal data receive mandatory data protection and security awareness training.

11 Your Data Rights

As a bdd99 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the bdd99 privacy team at [email protected] with the subject line "Data Rights Request" and your registered username.

• Right of Access: You may request a copy of all personal data bdd99 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Corrections are processed within 14 business days.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations outlined in Section 9.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in specific circumstances, such as while the accuracy of data is under dispute.
• Right to Data Portability: You may request an export of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV).
• Right to Object: You may object to the processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interests, subject to bdd99's legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bdd99 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

12 Minors & Age Policy

The bdd99 platform is strictly intended for adults aged 21 and above. bdd99 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the bdd99 account registration and KYC process, and accounts found to belong to individuals under the minimum age requirement will be immediately suspended and all funds returned to the originating payment method.

If you believe that a minor has registered an account on bdd99 or that personal data belonging to a minor has been collected, please contact us immediately at [email protected]. We will investigate and take appropriate action, including permanent closure of the account and secure deletion of any data collected.

13 Marketing Communications

bdd99 may send you promotional communications including bonus offers, seasonal promotions (such as those around IPL, BPL, and Eid), platform news, and new game announcements. Marketing communications are sent only to players who have actively opted in during registration or via their account settings.

13.1 Opting Out of Marketing

You may opt out of receiving marketing communications from bdd99 at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by bdd99.
• Updating your communication preferences in your bdd99 account settings.
• Contacting the bdd99 support team at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional messages — you will continue to receive essential account communications such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification updates regardless of your marketing preferences.

13.2 Personalised Promotions

Where you have consented to personalised marketing, bdd99 may tailor promotional offers based on your game history, preferred betting markets, and platform usage patterns. This personalisation is performed internally and does not involve sharing your data with external advertising platforms. You may opt out of personalised marketing while retaining general marketing communications via your account settings.

14 International Data Transfers

bdd99 operates using cloud infrastructure and third-party service providers that may process your personal data in locations outside of Bangladesh. Where personal data is transferred internationally, bdd99 ensures that appropriate safeguards are in place to protect your data to the same standard as within Bangladesh. These safeguards include contractual data processing agreements with all international service providers that require them to maintain equivalent data protection standards.

Game content providers such as Pragmatic Play, Evolution Gaming, and other studios may process anonymised game session data on servers located in various international jurisdictions as part of their game delivery infrastructure. bdd99 ensures that such processing occurs under appropriate contractual protections.

15 Policy Amendments

bdd99 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — such as changes to the categories of data collected, new data sharing arrangements, or changes to your rights — will be communicated to registered players via the email address on their account before the changes take effect. Non-material updates, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be made without prior notice.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. You are encouraged to review this Policy periodically to stay informed of how bdd99 protects your data. Your continued use of the bdd99 platform following notification of a material change constitutes your acceptance of the updated Policy. If you do not agree with any amendment, you may close your account in accordance with the account closure process described in the bdd99 Terms & Conditions.

16 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the bdd99 privacy team using the details below:

• Email: [email protected] — please include "Privacy Request" in your subject line along with your registered username.
• Live Chat: Available 24/7 from within your bdd99 account dashboard. For data rights requests, please follow up by email to ensure a written record is maintained.
• Response Time: All privacy-related enquiries are responded to within 30 calendar days (Bangladesh Standard Time, UTC+6). Urgent security concerns are prioritised and typically addressed within 24 hours.