ba99ba Privacy Policy

How We Use Your Data

ba99ba uses personal data collected from players across Bangladesh for a defined set of purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The following list explains each use case and its corresponding justification.

• Account Creation and Management: We use your identity and contact data to create your ba99ba account, maintain your account profile, authenticate your identity at login, and communicate important account-related notifications such as deposit confirmations, withdrawal approvals, and security alerts.
• Processing Transactions: Your financial data — including your registered bKash, Nagad, Rocket, or Upay account details — is used solely to process deposits and withdrawals in BDT, apply bonus credits, and maintain an accurate transaction history in your account.
• Identity Verification and KYC: We are required to verify the identity and age of all players before permitting withdrawals above certain thresholds and as part of our standard account review process. KYC documentation is used exclusively for this verification purpose and is handled by trained compliance staff under strict access controls.
• Fraud Detection and Prevention: Technical and usage data — including IP addresses, device fingerprints, and betting patterns — is analysed by our automated fraud detection systems to identify and prevent prohibited conduct, including multi-accounting, bonus abuse, collusion, and money laundering.
• Responsible Gaming Monitoring: ba99ba uses usage and betting-pattern data to identify players who may be exhibiting signs of problem gambling. This monitoring is conducted in the interest of player welfare and may result in proactive outreach from our support team, or the application of responsible gaming tools on your account. For more information, see our Responsible Gaming page.
• Customer Support: Communication data from your interactions with our live chat and email support channels is retained to provide continuity of support, resolve complaints, and train support staff. Support records may also be reviewed in the context of dispute resolution.
• Platform Improvement and Analytics: Aggregated and anonymised usage data is used to analyse how players interact with ba99ba's games, navigation, and features. This analysis informs improvements to the Platform and is not linked back to individual player identities.
• Promotional Communications: Where you have provided consent or where we have a legitimate interest in doing so, we may send you personalised promotional emails regarding relevant bonuses, tournaments, and seasonal offers (e.g., Eid promotions, Pohela Boishakh offers). You may opt out of marketing communications at any time via your account settings or by contacting support.

Data Sharing & Disclosure

ba99ba does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard receive the financial data strictly required to process your deposits and withdrawals in BDT. These providers operate under their own privacy policies and security standards.
• Game Content Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to maintain game-state integrity and resolve technical disputes. They do not receive your name, contact details, or financial information.
• Identity Verification Services: Third-party KYC providers may process copies of your identity documents to confirm the authenticity of the documents submitted. These providers are bound by strict data-processing agreements and may not use your data for any independent purpose.
• Fraud Prevention and Security Partners: Specialist fraud detection platforms receive technical data (IP addresses, device identifiers, behavioural signals) under contractual obligations to help ba99ba protect the Platform and its players from fraudulent activity.
• Legal and Regulatory Authorities: ba99ba will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when legally required to do so — for example, in response to a valid court order, subpoena, or regulatory investigation. ba99ba will notify affected players of such disclosure requests where legally permitted to do so.
• Business Transfers: In the event that ba99ba undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Platform at least 30 days before your personal data becomes subject to a different privacy policy as a result of such a transaction.

Data Retention

ba99ba retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention schedule applies to the main data categories held by ba99ba:

Once the applicable retention period has expired, ba99ba will securely delete or anonymise personal data in accordance with industry-standard data destruction procedures. Anonymised data that no longer relates to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

If you submit a deletion request before the end of the applicable retention period, ba99ba will evaluate whether the request can be fulfilled. Requests will be declined where retention is required by law — for example, where transaction records must be preserved for AML compliance — and in such cases ba99ba will explain the reason in writing within 30 days of receiving your request.

Your Privacy Rights

As a ba99ba player, you have a number of rights in relation to the personal data we hold about you. ba99ba respects these rights and has processes in place to handle all legitimate requests in a timely and transparent manner. Your rights are as follows:

• Right of Access: You may request a copy of all personal data ba99ba holds about you. We will provide this in a commonly used electronic format within 30 days of receiving a verified request.
• Right to Rectification: If you believe that any personal data ba99ba holds about you is inaccurate or incomplete, you may request that we correct or update it. Minor details such as your registered mobile number or email address can be updated directly through your account settings. For identity-related corrections, please contact support.
• Right to Erasure: You may request that ba99ba delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Please note that this right is subject to legal retention obligations as described in the Data Retention section above.
• Right to Restriction of Processing: You may request that ba99ba temporarily restrict the processing of your data — for example, while the accuracy of data is being contested, or while a legitimate-interest objection is being assessed. During a restriction period, ba99ba will continue to store the data but will not actively process it.
• Right to Object: You may object to ba99ba's processing of your personal data where that processing is based on legitimate interests or where data is being used for direct marketing. Upon receiving a valid objection to direct marketing, ba99ba will cease that processing immediately.
• Right to Data Portability: Where ba99ba processes your personal data by automated means and on the basis of your consent or a contract with you, you have the right to receive a structured, commonly used, machine-readable copy of that data, and to request that we transmit it directly to another data controller where technically feasible.
• Right to Withdraw Consent: Where ba99ba relies on your consent as the legal basis for processing (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Contact & Complaints

ba99ba is committed to handling all privacy-related queries, requests, and complaints with transparency and care. If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about the way in which ba99ba has handled your personal data, please contact our dedicated Privacy support team using the details below.

All privacy-related communications should be directed to: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" so that your message is routed promptly to the appropriate team. Our support team is available 24/7 and responds to privacy-related requests within a target timeframe of 5 business days for general enquiries, and within 30 calendar days for formal data subject rights requests.

If you are not satisfied with ba99ba's response to your complaint or data subject request, you have the right to escalate the matter further. We recommend documenting your initial request and ba99ba's response before escalating, as this information will be useful to any reviewing authority.

ba99ba takes every privacy complaint seriously. We review all complaints internally, and where a complaint identifies a genuine issue with our data handling practices, we will take corrective action and inform the complainant of the outcome. We are committed to continuous improvement in our data protection practices and treat feedback from players across Dhaka, Chittagong, Sylhet, Khulna, and all regions of Bangladesh as a valuable input to that process.