Your Privacy Matters to Us

Introduction

bac99 is committed to protecting the privacy of every player who uses our platform. We recognise that personal data is sensitive and that you place trust in us when you share your information during registration, verification, and day-to-day use of our services. This Policy sets out clearly what data we hold, why we hold it, who we may share it with, and what rights you have in relation to your personal data.

This Policy applies to all personal data collected through the bac99 website at https://bac99.io, our customer support channels (including email correspondence at [email protected]), and any related mobile web interface. It covers players based in Bangladesh and any other jurisdiction from which bac99 accepts registrations.

We encourage you to read this Policy in full. If you have questions about any part of it, our support team is available 24 hours a day, 7 days a week via email at [email protected].

Data Controller

For the purposes of this Privacy Policy, bac99 acts as the data controller — the entity that determines the purposes and means by which your personal data is processed. All enquiries relating to the processing of your personal data, including subject access requests and deletion requests, should be directed to our support team:

• Contact Email: [email protected] (plain text — not a clickable link)
• Website: https://bac99.io
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

We will respond to all formal data-related enquiries within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Data We Collect

bac99 collects the following categories of personal data from players:

3.1 Registration Data

When you create a bac99 account, we collect: your full legal name, date of birth, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), email address, and mobile phone number. This data is required to create and manage your account and to verify your identity.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering and responsible gaming obligations, and to process withdrawals, we may request: a copy of your national identity card (NID) or passport; a recent proof of address such as a utility bill or bank statement; and evidence of payment method ownership such as a screenshot of your registered bKash, Nagad, Rocket, or Upay account. KYC documents are stored securely and handled only by authorised compliance personnel.

3.3 Financial Transaction Data

When you make deposits or withdrawals, we record: the transaction amount in Bangladeshi Taka (৳), the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), the date and time of the transaction, and a reference identifier. We do not store full payment credentials such as complete bank account numbers or mobile wallet PINs.

3.4 Gaming Activity Data

We maintain a record of your gameplay and betting history on the bac99 platform, including: games played, bet amounts and outcomes, sports markets wagered on, session durations, and responsible gaming tool usage. This data is used for dispute resolution, responsible gaming monitoring, fraud prevention, and platform improvement.

3.5 Technical and Device Data

When you access bac99, we automatically collect: your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance analytics.

3.6 Communications Data

If you contact our support team or submit a complaint, we retain records of that correspondence including your messages, our responses, and any attachments you provide. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

How We Collect Data

bac99 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or respond to a survey;
• Automatically — through server logs, cookies, and analytics tools as you navigate and interact with the bac99 website and mobile interface;
• From payment partners — transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank transfer providers when you initiate a payment;
• From identity verification services — where we engage third-party KYC providers to assist with the verification of identity documents submitted by players;
• From fraud prevention services — IP reputation data and device fingerprinting signals used to detect suspicious registration or payment activity.

How We Use Your Data

bac99 uses the personal data we collect for the following purposes:

5.1 Account Operation

To create and maintain your account, authenticate your login sessions, track your balance and transaction history, apply responsible gaming limits you have set, and communicate important account-related updates to you via your registered email address.

5.2 Identity and Age Verification

To verify that you meet the minimum age requirement of 21 years, confirm your identity for compliance purposes, and process withdrawal requests. KYC verification is a regulatory and responsible gaming obligation that bac99 takes seriously.

5.3 Payment Processing

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment channels, reconcile your account balance, and maintain auditable financial records as required for compliance purposes.

5.4 Responsible Gaming Monitoring

To monitor your gaming activity patterns for signs of problem gambling behaviour, apply voluntary or mandatory limits, enforce self-exclusion requests, and ensure that the bac99 platform is used responsibly. This monitoring is a core obligation of our responsible gaming commitments.

5.5 Fraud Prevention and Security

To detect and prevent fraudulent account registrations, payment fraud, bonus abuse, collusion, money laundering, and other prohibited activities as described in our Terms & Conditions. This includes automated fraud scoring based on device, IP, and behavioural signals.

5.6 Legal and Regulatory Compliance

To meet our obligations under applicable anti-money laundering, responsible gaming, and data protection requirements; respond to lawful requests from law enforcement or regulatory authorities; and maintain records required for audit and compliance review purposes.

5.7 Customer Support

To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our customer support operations through training and quality assurance review of support correspondence.

5.8 Platform Improvement

To analyse aggregated and anonymised usage data to understand how players interact with the bac99 platform, identify technical issues, improve game and feature performance, and develop new offerings tailored to the preferences of our Bangladesh player community.

5.9 Marketing Communications

Where you have opted in to receive marketing communications, to send you information about promotions, bonuses, seasonal offers (such as Eid, Pohela Boishakh, or BPL cricket promotions), and new games or features on the bac99 platform. You may opt out of marketing communications at any time by contacting us at [email protected].

Legal Bases for Processing

bac99 processes your personal data on the following legal bases:

• Contractual Necessity — Processing required to perform our obligations under the Terms & Conditions you agreed to when registering, including account management, payment processing, and customer support;
• Legal Obligation — Processing required to comply with applicable anti-money laundering, responsible gaming, and data retention laws;
• Legitimate Interests — Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent — Processing for marketing communications and optional analytics features, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

bac99 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

7.1 Payment Processing Partners

We share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment providers to process your deposits and withdrawals. These partners process data only as needed to execute the payment transaction and are subject to their own privacy obligations.

7.2 Game Content Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and game data to enable gameplay, resolve game-level disputes, and comply with their own licensing obligations. No unnecessary personal data beyond what is required for game delivery is shared with these providers.

7.3 Identity Verification Services

KYC document data may be shared with contracted identity verification service providers for the purpose of authenticating the documents you submit. These providers are bound by strict confidentiality agreements and data processing obligations.

7.4 Fraud Prevention Services

Technical data such as IP addresses and device identifiers may be shared with fraud prevention platforms to detect and block fraudulent activity. This sharing is limited to the data necessary for risk scoring and does not include financial or game history data.

7.5 Law Enforcement and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law or by a lawful order. In such cases, we disclose only the data specifically requested and will notify you where we are legally permitted to do so.

Data Retention

bac99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to meet our legal, compliance, and audit obligations. The following retention periods apply as general guidelines:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

Security Measures

bac99 applies a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data from unauthorised access, loss, alteration, or disclosure.

9.1 Technical Controls

All data transmitted between your device and the bac99 platform is encrypted using 256-bit SSL/TLS encryption. Our databases are protected by access controls, encrypted at rest, and hosted in secure data centres with physical and logical access restrictions. We apply regular security patches and conduct periodic vulnerability assessments.

9.2 Access Controls

Access to personal data within bac99 is restricted on a strict need-to-know basis. Only authorised personnel with a specific operational requirement — such as compliance officers processing KYC reviews or support agents handling a player's complaint — are granted access to personal data. All internal access is logged and audited.

9.3 Incident Response

bac99 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights or interests, we will notify you at your registered email address promptly and without undue delay, describing the nature of the incident, the data affected, and the steps we are taking to address it.

Cookies & Tracking Technologies

bac99 uses cookies and similar technologies to operate the platform, remember your preferences, and analyse how our services are used. This section explains what cookies we use and why.

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember information about your session. Cookies cannot execute code or carry viruses, and they do not give us access to your device beyond the data they store.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling essential cookies will impair or prevent normal functioning of your bac99 account, including the ability to log in and maintain a session.

To manage cookies in your browser, refer to the help documentation for your specific browser (for example, Chrome, Firefox, Safari, or the Android/iOS browser you use on your mobile device in Bangladesh).

10.4 No Third-Party Advertising Cookies

bac99 does not use third-party advertising networks, retargeting pixels, or social media tracking tags on our platform. We do not allow any external advertising party to place cookies on your device through the bac99 website.

Your Rights

You have the following rights in relation to the personal data that bac99 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will respond within 30 calendar days.

Minors

The bac99 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we reserve the right to request proof of age at any point during a player's use of the platform.

If you are a parent or guardian and believe that a minor under your care has registered on the bac99 platform or provided personal data to us, please contact us immediately at [email protected]. Upon confirmation of a minor's registration, we will immediately suspend the account, void any associated transactions, and permanently delete all personal data associated with that account.

We encourage parents and guardians of young adults in Bangladesh to be aware of online gambling platforms and to make use of parental control tools available through internet service providers and device manufacturers to restrict access where appropriate.

International Data Transfers

bac99 operates as an internationally licensed platform. This means that some of the personal data we collect may be stored or processed in jurisdictions outside Bangladesh. Where data is transferred internationally — for example, to servers operated by our payment processing partners, game content providers, or cloud infrastructure providers — bac99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards for international transfers may include: standard contractual clauses incorporated into our agreements with third-party processors; data processing agreements that impose obligations on recipients to maintain equivalent levels of data protection; and in some cases, transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

If you would like more information about the international transfers applicable to your personal data, please contact us at [email protected].

Third-Party Links

The bac99 website may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay), game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and sporting bodies (BPL, IPL, ICC, FIFA). While we only reference partners we consider reputable, bac99 is not responsible for the privacy practices of any third-party service.

We encourage you to review the privacy policies of any third-party service you interact with, particularly your chosen payment provider. bac99 has no control over, and accepts no responsibility for, the content, privacy policies, or practices of third-party websites or services.

Policy Changes

bac99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where practicable, send a notification to your registered email address summarising the key changes.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the bac99 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you may request account closure as described in our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bac99 processes your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Support Email: [email protected] (plain text — not a clickable link)
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Target: Within 30 calendar days for formal data rights requests; within 2 hours for general support queries
• Website: https://bac99.io