ba99f Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data ba99f collects, how we use it, who we share it with, and the rights you hold as a registered player on the ba99f platform in Bangladesh.
Information We Collect
ba99f collects personal data through several channels: directly from you when you register an account or make a transaction, automatically through your use of the platform, and from trusted third-party sources where permitted by law. The categories of data we collect are described below.
Registration Data
When you create a ba99f account, we collect the following information you provide directly:
- Full legal name as it appears on your official identity document.
- Date of birth, for the purpose of verifying that you meet the 18+ minimum age requirement.
- Valid Bangladesh mobile number linked to your bKash, Nagad, or Rocket account.
- Email address (where provided during registration or subsequent account management).
- Preferred payment method and any payment account identifiers necessary to process deposits and withdrawals.
- Residential address and city (e.g., Dhaka, Chittagong, Sylhet, Khulna) where requested for identity verification purposes.
Identity Verification Data
To comply with our age verification and anti-money laundering obligations, ba99f may collect copies of identity documents including your National Identity Card (NID), passport, or birth certificate. These documents are processed and stored under strict access controls and are used exclusively for the purpose of verifying your identity.
Transaction Data
Every deposit, withdrawal, bonus claim, and wagering transaction conducted on ba99f is recorded in your account history. Transaction data includes the amount in BDT, the payment method used, the date and time of the transaction (Bangladesh Standard Time, UTC+6), and the game or market associated with the wager.
Device and Technical Data
When you access ba99f, our servers automatically log certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session duration. This data is used for fraud detection, platform security, and to optimise the ba99f experience across devices.
Behavioural and Usage Data
ba99f records in-platform activity including the games you play, the sports markets you bet on, the frequency and duration of your sessions, the features you interact with, and your responsible gaming tool usage (such as deposit limits set and self-exclusion requests). This data is used to personalise your ba99f experience and to monitor for problem gambling indicators as part of our Responsible Gaming obligations.
Communication Data
When you contact ba99f customer support — via email at [email protected] or through the platform's live chat feature — we retain records of your communications, including message content, timestamps, and the resolution outcome. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.
- Identity & registration data
- Transaction records (BDT)
- Device & technical data
- Behavioural & usage data
- Support communications
- Verification documents
All data transmitted between your device and ba99f's servers is protected by industry-standard 256-bit SSL encryption. This ensures that your personal details, payment information, and login credentials are secure in transit at all times.
ba99f uses your personal data only for the purposes stated in this Privacy Policy. We do not sell, rent, or trade your personal information to third-party marketers. Your data is used to operate your account, process payments, and keep the platform safe and fair.
ba99f uses behavioural data to identify early signs of problem gambling. If your usage patterns suggest distress, our responsible gaming team may reach out proactively. This is done in your best interest, not for commercial profiling purposes.
Payment data shared with ba99f for bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank transactions is handled under strict financial data security standards. ba99f does not store full payment credentials on its own servers.
ba99f processes transaction and behavioural data through automated fraud and anti-money laundering (AML) detection systems. Where suspicious activity is identified, the relevant account data may be shared with financial intelligence authorities as required by law.
With your consent, ba99f uses your contact details to send promotional offers, seasonal bonuses, and platform updates. You may withdraw consent for marketing communications at any time by contacting [email protected] — this will not affect your account or access to ba99f services.
How We Use Your Data
ba99f processes the personal data we collect for the following specific, lawful purposes. We do not use your data for any purpose not described in this Privacy Policy without first obtaining your explicit consent.
Account Management
Your registration data is used to create and maintain your ba99f account, verify your identity, process login requests, and manage account security. This includes processing ba99f login attempts, resetting credentials upon verified request, and maintaining accurate account records throughout your relationship with ba99f.
Payment Processing
Transaction data is used to process your deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank), to verify that payments originate from accounts registered in your own name, and to maintain an accurate BDT balance in your ba99f wallet.
Legal and Regulatory Compliance
ba99f is required to retain certain personal data to satisfy legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification record-keeping, and the resolution of player disputes. Data retained for compliance purposes is held for the minimum period required by applicable law.
Fraud Prevention and Security
Technical and behavioural data is analysed by ba99f's fraud detection systems to identify unusual account activity, prevent unauthorised access, detect bonus abuse, and protect the integrity of the ba99f platform. Where fraud is confirmed, relevant data may be shared with law enforcement or financial authorities.
Platform Personalisation
Behavioural data — such as the games you play most frequently, your preferred betting markets, and your session patterns — is used to personalise your ba99f experience. This includes surfacing relevant game recommendations, tailoring promotional offers to your activity profile, and optimising the interface you see when you ba99f login.
Customer Support
Communication data is used by ba99f's support team to respond to your queries, process complaints, resolve disputes, and improve the quality of our service. Support records are retained for a period of 36 months from the date of the last interaction.
Responsible Gaming
ba99f uses your wagering history, session data, and deposit patterns to monitor for indicators of problem gambling. Where our systems or support staff identify concerning patterns, we may intervene proactively to offer responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion. This processing is conducted in your interest and is a core component of ba99f's duty of care to its players.
- Contract: Account & payment services
- Legal Obligation: AML & age verification
- Legitimate Interest: Fraud detection & security
- Consent: Marketing communications
- Vital Interest: Responsible gaming monitoring
Third-Party Data Sharing
ba99f does not share your personal data with third parties except in the limited circumstances described below. In all cases where data is shared, ba99f requires that the receiving party maintains appropriate data security standards and uses the data only for the specific purpose for which it was disclosed.
Payment Service Providers
To process your deposits and withdrawals, ba99f must share the minimum necessary payment data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank). This data sharing is strictly limited to what is required to execute the transaction and is governed by the payment provider's own privacy policy and data security obligations.
Game Content Providers
ba99f aggregates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these providers, limited technical data (such as a session identifier and stake amount) may be transmitted to the provider's game server. Game providers do not receive your full registration data or payment details.
Identity Verification Partners
ba99f may use trusted third-party identity verification services to validate the authenticity of documents submitted during the age verification process. These partners are contractually bound to process your data only for the verification purpose and to delete it upon completion of the check.
Legal and Regulatory Authorities
ba99f will disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or regulatory authorities where required to do so by law or in response to a valid legal order. ba99f will not notify the account holder of such disclosure where doing so is prohibited by law or would compromise an ongoing investigation.
Business Transfers
In the event that ba99f undergoes a merger, acquisition, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, ba99f will notify affected players prior to the transfer where practicable, and the acquiring entity will be required to honour the terms of this Privacy Policy.
Fraud Prevention Networks
ba99f participates in industry fraud prevention networks through which limited account data (such as flagged payment identifiers and confirmed fraud indicators) may be shared with other operators to prevent cross-platform fraud. Data shared in this context is anonymised or pseudonymised wherever technically possible.
- Payment processors (bKash, Nagad etc.)
- Game content providers
- Identity verification partners
- Regulatory & legal authorities
- Fraud prevention networks
Cookies & Tracking Technologies
ba99f uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your logged-in session, and analyse how players interact with the site. This section explains the types of cookies we use and how you can manage your cookie preferences.
What Are Cookies?
Cookies are small text files that are placed on your device by a website when you visit it. They are widely used to make websites function correctly and to provide usage information to the site operator. Cookies do not contain executable code and cannot access other data stored on your device.
Types of Cookies Used by ba99f
ba99f uses the following categories of cookies on its platform:
- Strictly Necessary Cookies: These are essential for the ba99f platform to function. They maintain your login session after you complete ba99f login, store your language and currency display preferences, and enable core security features. These cookies cannot be disabled without impairing platform functionality.
- Analytics Cookies: ba99f uses analytics cookies to understand how players navigate the platform, which games are most popular, and where users encounter difficulties. This data is processed in aggregated, anonymised form and is used solely to improve the ba99f experience.
- Functional Cookies: These cookies remember your choices — such as your preferred game categories, responsible gaming settings, and notification preferences — so that ba99f can deliver a personalised experience on each visit.
- Fraud Detection Cookies: ba99f's security systems use cookies and device fingerprinting to detect unauthorised access, account takeover attempts, and suspicious betting patterns. These cookies are strictly necessary for platform security and cannot be disabled.
Managing Cookies
You may adjust your browser's cookie settings to refuse non-essential cookies at any time. Instructions for managing cookies vary by browser and device — refer to your browser's help documentation for specific guidance. Please note that disabling certain cookies may affect the functionality of the ba99f platform, including the ability to maintain a logged-in session.
Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal that you can enable to request that websites do not track your activity. ba99f's fraud detection and session management systems require minimal tracking to operate securely and may not fully honour DNT signals where doing so would compromise account security.
Data Retention
ba99f retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods set out below reflect ba99f's standard data lifecycle policy.
Account Data
Active account registration data is retained for the full duration of your ba99f account. Following account closure — whether player-initiated or ba99f-initiated — your core account data (name, date of birth, registered mobile number, and account history) is retained for a minimum period of five years to satisfy AML record-keeping requirements and to enable the resolution of any post-closure disputes.
Transaction Records
All deposit, withdrawal, bonus, and wagering transaction records are retained for a minimum of five years from the date of the transaction. This retention period is aligned with standard financial record-keeping requirements and ensures that ba99f can provide a complete account history in the event of a dispute or regulatory inquiry.
Identity Verification Documents
Copies of identity documents submitted for age verification or KYC (Know Your Customer) purposes are retained for the duration of the account and for five years following account closure. Documents may be deleted earlier where retention is no longer justified and no legal hold is in place.
Support Communications
Customer support interaction records are retained for 36 months from the date of the last communication in the relevant support thread. After this period, records are deleted or anonymised unless they are subject to an active legal hold or regulatory inquiry.
Analytics and Behavioural Data
Aggregated, anonymised analytics data may be retained indefinitely for the purpose of improving the ba99f platform. Individual behavioural records linked to your account are retained for the duration of your active account and deleted within 12 months of account closure, subject to any overriding legal obligation.
Marketing Data
Where you have consented to receive promotional communications from ba99f, your contact details are retained on the ba99f marketing list until you opt out. Following opt-out, your contact details are removed from active marketing lists within 14 days and a suppression record is maintained to prevent inadvertent re-addition.
Data Security
ba99f takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. While no digital system can guarantee absolute security, ba99f's security posture reflects current industry best practices for online gaming and fintech platforms.
Encryption
All data transmitted between your device and ba99f's platform is encrypted using 256-bit SSL/TLS protocols. Data stored on ba99f's servers — including account credentials, identity documents, and transaction records — is encrypted at rest using AES-256 encryption. Encryption keys are managed under strict access controls and rotated on a regular schedule.
Access Controls
Access to ba99f's internal systems and player data is restricted on a need-to-know basis. Staff members are granted the minimum level of system access required to perform their specific role. All internal access is authenticated via multi-factor authentication (MFA), and access logs are reviewed regularly for anomalous activity.
Penetration Testing and Audits
ba99f's platform undergoes periodic independent security audits and penetration testing conducted by qualified third-party security firms. Findings from these assessments are actioned promptly, and ba99f maintains a vulnerability management programme to ensure that identified risks are addressed within defined remediation timelines.
Incident Response
ba99f maintains a documented data breach response plan. In the event of a confirmed security incident that affects your personal data, ba99f will assess the nature and scope of the breach, take immediate containment action, and notify affected players and relevant authorities within the timeframes required by applicable law. You will be informed of any breach that poses a high risk to your rights and interests.
Responsible Disclosure
If you identify a potential security vulnerability on the ba99f platform, we encourage you to report it responsibly by emailing [email protected] with a description of the issue. ba99f will acknowledge your report within 72 hours and work to address confirmed vulnerabilities promptly. We ask that you do not publicly disclose any vulnerability until ba99f has had a reasonable opportunity to investigate and remediate it.
- 256-bit SSL/TLS in transit
- AES-256 encryption at rest
- MFA for all staff access
- Regular third-party audits
- Real-time access log review
- Documented breach response plan
Your Privacy Rights
As a ba99f player, you hold a number of rights in relation to the personal data we hold about you. ba99f is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact ba99f's data team at [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number for identity verification purposes.
Right of Access
You have the right to request a copy of the personal data that ba99f holds about you. Upon a verified access request, ba99f will provide you with a summary of your account data, transaction history, and any other personal data processed in connection with your account, within a reasonable timeframe and free of charge for the first request.
Right to Rectification
If you believe that personal data ba99f holds about you is inaccurate or incomplete, you have the right to request that it be corrected. ba99f will verify the requested correction against your registered identity documents and update the relevant records within 14 days of receiving a valid rectification request.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. Please note that ba99f is legally required to retain certain data (such as transaction records and identity verification documents) for a minimum of five years after account closure, which limits the scope of erasure that can be applied during that period.
Right to Restrict Processing
You have the right to request that ba99f restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being verified, or where you have objected to processing and ba99f is assessing whether its legitimate interests override your objection. During a restriction period, ba99f will continue to store your data but will not process it for other purposes.
Right to Data Portability
Where processing is based on your consent or on a contract with you, you may request that ba99f provides your personal data in a structured, commonly used, and machine-readable format. This right applies to data you have provided directly to ba99f (such as registration data and preference settings) and does not extend to derived or inferred data.
Right to Object
You have the right to object to ba99f processing your personal data on the basis of legitimate interests — including profiling for personalisation purposes — by contacting [email protected]. You may also opt out of direct marketing communications at any time without affecting your access to ba99f's platform. Note that objections to processing that is strictly necessary for fraud prevention, AML compliance, or responsible gaming monitoring cannot be upheld, as this processing is required for the safe operation of the platform.
Right to Withdraw Consent
Where ba99f processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
- Access your data
- Correct inaccurate data
- Request erasure
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
Policy Updates & Contact
ba99f reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. All updates will be published on this page with a revised effective date. Where changes are material — meaning they significantly affect the way we process your personal data or your rights — ba99f will notify registered players via their registered mobile number or email address at least 14 days before the changes take effect.
Version History
The current version of this Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions. If you continue to use the ba99f platform after any update to this Privacy Policy, you are deemed to have accepted the revised terms. If you do not agree with an updated version of this policy, you should discontinue use of the ba99f platform and contact [email protected] to close your account.
Contact ba99f's Data Team
If you have any questions about this Privacy Policy, wish to exercise a privacy right, or wish to raise a concern about how ba99f handles your personal data, please contact our data team using the details below. We aim to resolve all privacy-related enquiries within 30 days.
- Email: [email protected] (use subject line "Privacy Rights Request" for formal rights requests)
- Platform: ba99f in-platform live chat (available 24/7 for general enquiries)
- Response Time: Within 30 days for formal requests; within 24 hours for general support queries
Complaints
If you are dissatisfied with ba99f's handling of your personal data or our response to a privacy rights request, you have the right to escalate your complaint through ba99f's formal complaints process by contacting [email protected] with the subject line "Privacy Complaint". ba99f will acknowledge your complaint within 72 hours and provide a substantive response within 30 days.
Children's Privacy
The ba99f platform is strictly for adults aged 18 and above. ba99f does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered a ba99f account or provided personal data to ba99f, please contact [email protected] immediately. ba99f will investigate and, where confirmed, delete the relevant data and close the account without delay.
- Effective: 1 January 2026
- Review cycle: Annual
- Applies to: Bangladesh players
- Contact: [email protected]
- Age restriction: 18+ only
Questions About Your Privacy?
Our support team is available 24/7 to address any questions about how ba99f handles your personal data. You can also explore our full Terms & Conditions, Responsible Gaming policy, or head straight to the games.