bdb99 Privacy Policy

This Privacy Policy ("Policy") is published by bdb99 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at bdb99.io ("the Platform"). It describes how bdb99 collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the Player") who visit, register on, or use the Platform in any capacity.

bdb99 is committed to handling personal data responsibly and in accordance with applicable data protection principles. We collect only the minimum data necessary for the purposes described in this Policy, and we do not use your information in ways that you would not reasonably expect.

This Policy should be read alongside the bdb99 Terms & Conditions and Responsible Gaming Policy. By accessing the Platform or creating a bdb99 account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

bdb99 collects personal data through several channels: directly from you when you register, make a deposit or withdrawal, contact support, or interact with the Platform; automatically through technical systems as you use the Platform; and, in limited circumstances, from third-party identity verification and payment processing partners.

The categories of data we may collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification in the KYC process.

bdb99 uses personal data only for the purposes for which it was collected or for closely related purposes that you would reasonably expect. The primary purposes for which we process your data are:

• Account management: To create, maintain, and administer your bdb99 player account, including verifying your identity, managing your balance, and processing your login authentication.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify payment method ownership; and to maintain financial records for audit and reconciliation purposes.
• Regulatory compliance: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, including verifying player identity and monitoring transactions for unusual patterns that may indicate financial crime.
• Customer support: To respond to your enquiries, complaints, and support requests submitted via live chat or email.
• Responsible gaming enforcement: To apply and monitor deposit limits, session limits, self-exclusion elections, and other player-protection measures you have activated.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and other prohibited conduct described in the Terms & Conditions.
• Platform improvement: To analyse anonymised usage patterns and technical performance data in order to improve the Platform's features, stability, and user experience.
• Marketing communications: With your explicit consent, to send you information about promotions, bonuses, and new game launches relevant to your preferences. You may withdraw marketing consent at any time by contacting [email protected].

bdb99 does not use automated decision-making or profiling processes that produce legal or similarly significant effects on players without human review. Where automated screening is used as part of our fraud-prevention or AML processes, all flagged cases are reviewed by a member of the bdb99 compliance team before any action is taken on your account.

bdb99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our obligations under the contract with you — namely, operating your player account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable KYC, AML, and record-keeping obligations.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where your explicit prior consent has been obtained and can be withdrawn at any time.

bdb99 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors: We share transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners solely to execute deposit and withdrawal instructions. These partners are contractually bound to protect your data and are not permitted to use it for their own marketing purposes.
• Identity verification providers: During KYC checks, identity document data may be shared with third-party verification service providers who assist in confirming the authenticity of documents and conducting sanctions screening.
• Game software providers: Your player account identifier (not your full personal details) may be shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of running game sessions and resolving disputes about game outcomes.
• Legal and regulatory authorities: We may disclose personal data where required to do so by law, court order, or competent regulatory authority. We will only disclose the minimum data required to satisfy such a request.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of bdb99's assets, player data may be transferred to the successor entity. We will notify affected players via email prior to any such transfer taking effect.

All third parties with whom bdb99 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond that for which it was disclosed.

bdb99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it by applicable law or regulatory obligation. The following general retention periods apply:

• Active account data: Retained for the lifetime of your active bdb99 account plus a minimum of 5 years following account closure, in line with standard AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Customer support records: Retained for 3 years from the date of the interaction, unless the record relates to an unresolved dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Retained until you withdraw your consent, after which the consent withdrawal record itself is kept for a further 3 years as evidence of compliance.
• Technical and usage logs: Typically retained in identifiable form for 12 months, after which they are anonymised or deleted.

When your data is no longer required for any retention purpose, bdb99 securely deletes or irreversibly anonymises it in accordance with our internal data disposal procedures.

bdb99 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and bdb99 servers.
• Encryption of sensitive data fields (including identity document images and payment reference data) at rest in our databases.
• Access controls that limit internal access to personal data to authorised personnel on a strict need-to-know basis.
• Regular internal security reviews and vulnerability assessments of Platform infrastructure.
• Incident response procedures, including mandatory internal notification protocols in the event of a data breach.

While bdb99 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for keeping your bdb99 login credentials confidential and for taking appropriate measures to secure the device you use to access the Platform. If you suspect that your account has been compromised, contact [email protected] immediately.

bdb99 uses cookies and similar browser-based technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and preferences that you have explicitly set. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as selected language, display settings, and last-visited game categories, so that your experience is consistent across sessions.
• Analytics cookies: Used to collect anonymised, aggregated data about how players navigate and use the Platform. This data helps us identify performance bottlenecks, popular features, and areas for improvement. We do not use third-party advertising analytics cookies.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. However, please note that disabling strictly necessary cookies will prevent you from logging in or using certain Platform features. Disabling functional cookies will mean your preferences are not saved between sessions.

bdb99 does not use cross-site tracking cookies, retargeting pixels, or third-party advertising network cookies on the Platform.

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in relation to the personal data bdb99 holds about you:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. Where the correction relates to identity data, we may require supporting documentation.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Note that we cannot delete data we are legally required to retain (e.g., AML transaction records).
• Right to restrict processing: You may request that we suspend the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request that we provide your data in a machine-readable format suitable for transfer to another service provider.
• Right to object: You may object at any time to the processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, though we may be able to demonstrate overriding grounds.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 days. In complex cases we may extend this by a further 30 days, in which case we will inform you of the extension and the reason for it.

The bdb99 Platform is strictly intended for adults aged 21 and above. bdb99 does not knowingly collect personal data from individuals under the age of 21. If you believe that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected]. Upon receiving and verifying such a notification, bdb99 will promptly delete all data associated with the minor's account and return any deposited funds to the original payment source.

The bdb99 Platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While the game interfaces are embedded within the bdb99 Platform, game providers operate their own game servers and may process limited technical data (such as session identifiers and game round results) to operate the game software. bdb99 is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policies of relevant game providers if you have specific concerns about how game session data is handled on their servers.

bdb99 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — for example, a change to the categories of data collected, the purposes for which data is used, or the parties with whom it is shared — bdb99 will notify registered players by email at least 14 days prior to the change taking effect.

The revised Policy will be published at bdb99.io/privacy-policy with an updated effective date. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of, and agreement to, the revised Policy. If you do not agree with the revised terms, you may close your account by contacting [email protected] prior to the effective date.

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which bdb99 handles your personal data, please contact our Data Protection team using the details below. We take all privacy enquiries seriously and commit to responding promptly and in good faith.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: "Privacy Enquiry" or "Data Rights Request"
• Response time: Acknowledgement within 5 business days; full response within 30 days
• Support hours: 24/7 live chat available on the Platform; email monitored daily during BST (UTC+6) business hours

If you are not satisfied with bdb99's response to your privacy complaint, you have the right to escalate the matter through applicable dispute resolution channels. bdb99 will cooperate fully with any such process.