Privacy Policy for bk99c

Data We Collect

bk99c collects personal data through several channels: directly from you during account registration and ongoing use of the platform, automatically through your device and browser interactions, and from third-party identity and payment verification services. We collect only the data that is necessary for the purposes described in this Policy.

1.1 Account Registration Data

When you create a bk99c account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you meet the 18+ age requirement)
• Email address (used for account communication and security notifications)
• Bangladeshi mobile phone number (used for two-factor authentication and account recovery)
• Residential address (district, city, or division within Bangladesh)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is mandatory for all withdrawal requests and may be requested at any time — we collect copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (for players who provide it as an alternative identity document)
• Driving licence (accepted as a supplementary proof of identity)
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• Proof of payment method ownership (screenshot of mobile banking account, bank statement header, or similar)

1.3 Transaction and Financial Data

When you make deposits or request withdrawals, we record transaction metadata including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in Bangladeshi Taka, timestamps, transaction reference numbers, and the result of each transaction. We do not store full mobile banking PINs or bank account passwords — only the account or wallet identifiers necessary to process your transaction.

1.4 Gameplay and Betting Data

We record a complete log of your betting and gaming activity on the platform. This includes all sports bets placed (market, selection, stake, odds, outcome), all casino game rounds played (game title, provider, stake, result), session start and end times, and balance history. This data is used for account integrity, dispute resolution, responsible gaming monitoring, and regulatory compliance.

1.5 Technical and Device Data

When you visit bk99c.app or use our Progressive Web App, we automatically collect certain technical data including your IP address, device type and model, operating system and version, browser type and version, approximate geographic location (derived from IP, not GPS), pages visited and time spent, referring URL, and session duration. This data helps us maintain platform security, prevent fraudulent access, and improve user experience.

1.6 Communications Data

If you contact bk99c support via email or live chat, we retain a record of that correspondence including the content of your messages, timestamps, and the resolution reached. This data is used for quality assurance, staff training, and dispute resolution.

How We Use Your Data

bk99c uses the personal data we collect for the following specific purposes. We rely on one or more lawful bases for each use — contract performance, compliance with a legal obligation, your explicit consent, or our legitimate business interests where these do not override your rights.

Account Operation and Service Delivery

Your registration and account data is used to create and maintain your bk99c player account, authenticate your identity each time you log in, process deposits and withdrawals via your chosen Bangladeshi payment method, display your account balance and transaction history, and deliver the betting and gaming services you have requested. Without this data, the core bk99c service cannot be provided.

Identity Verification and Fraud Prevention

We use your KYC documents and transaction metadata to verify that you are who you say you are, that you meet the 18+ age requirement, that your payment methods are registered in your own name, and to detect and prevent fraudulent activity including account takeover, bonus abuse, and money laundering. This processing is required by our anti-money laundering (AML) obligations and our commitment to platform integrity.

Responsible Gaming Monitoring

bk99c uses your gameplay data, session duration records, and deposit history to monitor for signs of problem gambling behaviour. Where our systems detect patterns consistent with compulsive gambling — such as escalating deposit frequency, extended sessions, or rapid loss-chasing — our responsible gaming team may reach out to offer support resources or activate account protections. This use is in your vital interests and is a core part of our commitment to player welfare.

Customer Support

Your account data, transaction history, and communication records are used by our support team (available 24/7 in English) to respond to your queries, investigate disputes, process complaints, and resolve any issues with your account or transactions.

Marketing Communications

With your explicit consent, we may use your email address and mobile number to send you information about promotions, bonuses, seasonal offers (such as BPL cricket season promotions or Eid special offers), and platform updates. You may withdraw this consent at any time via your account settings or by contacting [email protected]. Withdrawing marketing consent does not affect any other aspect of your account.

Platform Improvement and Analytics

Aggregated and anonymised gameplay, navigation, and session data is used to improve the bk99c platform — optimising page load times, improving the betting interface, identifying popular game categories, and enhancing the mobile experience. This analytics processing does not involve identifiable personal data.

Legal and Regulatory Compliance

bk99c retains certain categories of personal data to fulfil our obligations under applicable laws and regulations, including anti-money laundering requirements, financial record-keeping standards, and responses to lawful requests from Bangladeshi law enforcement or regulatory authorities. We will only disclose data to authorities where we are legally required to do so.

Cookies & Tracking Technologies

bk99c uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and understand how the site is used. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain viruses or executable code and cannot access other files on your device.

Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of essential cookies without stopping your use of the platform.
• Functional Cookies: Remember your preferences such as your preferred language, last visited game category, and responsible gaming settings. These improve your experience but are not strictly necessary.
• Analytics Cookies: Allow us to understand aggregate usage patterns — which pages are most visited, where users navigate from, and how long sessions last. We use anonymised analytics data only. No individual player is identified in analytics reports.
• Security Cookies: Used to detect fraudulent login attempts, bot activity, and unusual access patterns. These cookies compare current session characteristics against your normal usage baseline.

Managing Cookies

You can manage non-essential cookie preferences through your bk99c account settings. You may also configure your browser to block or delete cookies; however, doing so may affect the functionality of the platform, including your ability to remain logged in or access certain game features. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance.

Data Sharing & Third Parties

Payment Processors

To process your deposits and withdrawals, we share transaction data with your chosen payment provider: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. The data shared is limited to what is required to complete the transaction (account identifier, amount, reference number). Each payment provider operates under its own privacy policy and is independently responsible for data it holds about you.

Identity Verification Partners

For KYC processing, bk99c may use a third-party identity verification service to validate government-issued documents. These partners are bound by strict data processing agreements and are not permitted to use your identity documents for any purpose other than the specific verification task requested by bk99c.

Game Technology Providers

Casino and live dealer games on the bk99c platform are powered by third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game from one of these providers, your gameplay session data (player ID, stake, result) is transmitted to that provider's servers to run the game. Game providers may use this data for game integrity verification and RNG certification audits. They do not receive your name, contact details, or payment information.

Legal and Regulatory Authorities

bk99c may disclose personal data to Bangladeshi law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally compelled to do so — for example, in response to a court order, a regulatory investigation, or an anti-money laundering reporting obligation. We will notify you of any such disclosure to the extent permitted by law.

IT Infrastructure and Cloud Services

bk99c's platform is hosted on secure cloud infrastructure. Our hosting and infrastructure providers have access to server-level data as part of their service but operate under data processing agreements that strictly limit their use of that data to infrastructure operation only. All data stored on our infrastructure is encrypted at rest.

Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of bk99c's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players by email and by a notice on the platform before any such transfer occurs, giving you the opportunity to request account closure if you do not consent to the transfer.

Data Retention

bk99c retains your personal data for as long as your account is active and for a defined period after account closure, as required by law or justified by our legitimate business interests. We do not retain data indefinitely — each category of data has a specific retention period as outlined below.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical and analytics purposes.

If you request account closure, your account will be deactivated immediately and your personal data will be retained for the minimum period required by law before being deleted. During the retention period following account closure, your data will not be used for any active purpose (such as marketing or profiling) — it will be archived in a restricted-access environment accessible only for compliance and legal purposes.

Your Privacy Rights

As a bk99c player, you hold a number of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Data Rights Request" along with your registered email address and a brief description of your request.

Right of Access

You have the right to request a copy of all personal data bk99c holds about you. Upon a verified request, we will provide a structured, machine-readable export of your account data, transaction history, gameplay logs, and any other data linked to your player profile. We will fulfil access requests within 30 days of receipt.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as your registered email address or phone number, you may update these directly from your account settings. For identity documents or date of birth corrections, please contact support with the correct documentation.

Right to Erasure

You may request that bk99c delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other lawful basis exists, or where you object to processing based on legitimate interests and that interest does not override your rights. Please note that erasure requests may be declined or partially fulfilled where retention is required by law — for example, AML regulations require us to retain certain financial records for a minimum of five years regardless of your erasure request.

Right to Restrict Processing

You may ask bk99c to suspend the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while we assess an objection you have raised. During a processing restriction, we will continue to store your data but will not actively use it for any purpose other than legal compliance.

Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider if you choose. Contact our support team to submit a portability request.

Right to Object to Marketing

You have an absolute right to object to the use of your personal data for direct marketing at any time. You can exercise this right by updating your communication preferences in your account dashboard, clicking the unsubscribe link in any marketing email we send, or by contacting [email protected]. Marketing will cease within 5 business days of a verified opt-out request.

Right to Withdraw Consent

Where bk99c processes your data based on your consent (for example, for marketing communications or optional analytics participation), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

Data Security

bk99c implements a multi-layered security architecture to protect your personal data from unauthorised access, loss, alteration, or disclosure. Security is treated as a continuous operational priority, not a one-time implementation. Our key security measures include the following.

Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL encryption). Sensitive data stored in our databases — including identity documents, payment identifiers, and account credentials — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; we use a salted hashing algorithm (bcrypt) to store password credentials.

Access Controls

Access to player data within bk99c's internal systems is governed by strict role-based access controls (RBAC). Only employees who require access to specific categories of data to perform their job function are granted that access. Access logs are maintained and reviewed regularly. Administrative access to production systems requires multi-factor authentication.

Infrastructure Security

Our platform infrastructure is protected by firewalls, intrusion detection systems (IDS), distributed denial-of-service (DDoS) mitigation, and regular penetration testing. Our servers undergo regular security patching and vulnerability assessments. We maintain a formal incident response plan to address any security breach promptly and systematically.

Two-Factor Authentication

bk99c offers two-factor authentication (2FA) for player accounts, which we strongly recommend enabling. With 2FA active, logging in to your account requires both your password and a one-time code sent to your registered mobile number. This significantly reduces the risk of unauthorised account access even if your password is compromised.

Data Breach Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bk99c will notify affected players by email within 72 hours of becoming aware of the breach, to the extent practicable. Our breach notification will describe the nature of the breach, the categories of data affected, the steps we have taken to address it, and any actions we recommend you take to protect yourself. We maintain a breach register for all security incidents regardless of severity.

Policy Updates & Contact

bk99c reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to how we protect and use your personal data. When we make material changes to this Policy, we will notify active players by displaying a prominent notice on the bk99c homepage and, where practicable, by sending an email notification to your registered address. The updated Policy will carry a revised effective date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how bk99c handles your personal data. Your continued use of the bk99c platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you may request account closure by contacting our support team.

Minor Updates

Typographical corrections, clarifications that do not alter the substance of existing provisions, and updates to contact information or third-party provider lists may be made without formal notice. The version number displayed at the top of this page will reflect all updates, including minor revisions.

Governing Language

This Privacy Policy is written in English. English is the governing language for all interpretations, disputes, and data rights communications relating to this Policy. Any translation provided for convenience does not carry legal weight. In the event of any discrepancy between the English version and any translation, the English version prevails.

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, want to raise a privacy concern, or believe that bk99c has not handled your personal data in accordance with this Policy, please contact our dedicated data support team:

• Email: [email protected] — subject line "Privacy Inquiry" or "Data Rights Request"
• Live Chat: Available 24/7 in English via your account dashboard
• Operating Hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week
• Response Time: We aim to acknowledge all privacy-related queries within 5 business days

bk99c is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter by requesting a formal senior review. All escalated privacy complaints are reviewed within 10 business days and a written response will be provided in English.