99bdt Privacy Policy — How We Handle Your Personal Data

99bdt ("the Platform", "we", "us", "our") operates an online sports betting and casino gaming platform accessible at https://99bdt.io, targeted at adult players in Bangladesh. For the purposes of this Privacy Policy, 99bdt is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data we collect when you visit our website, register an account, make a deposit or withdrawal, participate in any promotion, or contact our customer support team. It applies regardless of the device you use to access the platform, including mobile phones, tablets, and desktop computers.

By registering an account on 99bdt, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the 99bdt platform. These terms should be read in conjunction with our Terms & Conditions.

The categories of personal data 99b dt collects about you depend on how you interact with the platform. The following table sets out the main categories of data we collect and examples of the specific information within each category:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, except where explicitly required by applicable law or regulatory obligation.

99bdt collects your personal data through the following means:

• Direct interactions: Data you provide when completing the account registration form, submitting KYC documents, making deposits or withdrawal requests, entering promotions, or contacting the support team via live chat or email.
• Automated technologies: Technical and usage data collected automatically when you visit or interact with the 99bdt platform, through server logs, session tracking, and cookie technologies. See Section 7 for full details on cookies.
• Third-party sources: Data received from payment processors (bKash, Nagad, Rocket, Upay) to confirm transaction status; data from identity verification and fraud-prevention service providers; and, where applicable, data from publicly available sources used to fulfil our anti-money-laundering (AML) obligations.
• Game providers: Aggregated game-session data and bet records received from third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming in connection with games hosted on the 99bdt platform.

99bdt uses your personal data only for legitimate, clearly defined purposes. The table below sets out each purpose and the corresponding lawful basis under which we process the data:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide access to the platform's betting and gaming services.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all account activity.
• Legal and regulatory compliance: To fulfil our Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations, including age verification and source-of-funds checks where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, and other unlawful conduct on the platform.
• Customer support: To respond to support queries, investigate complaints, and resolve disputes relating to bets, transactions, or account access.
• Promotions and communications: To notify you of bonuses, promotions, and platform updates relevant to your account, where you have opted in to receive such communications or where we have a legitimate interest in doing so.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate (anonymised) form in order to improve platform performance, game selection, and user experience.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour and to administer responsible gaming tools including deposit limits, session limits, and self-exclusion requests.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your explicit consent.

99bdt processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to enter into or perform the contract between you and 99bdt — primarily the account registration, deposit processing, withdrawal processing, and bet settlement functions of the platform.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML record-keeping, and age-verification obligations.
• Legitimate interests: Processing carried out for the legitimate business interests of 99bdt, such as fraud detection and prevention, platform security, responsible gaming monitoring, and product analytics, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit opt-in consent, primarily in the context of direct marketing communications. You may withdraw your consent to marketing communications at any time by contacting [email protected], without affecting the lawfulness of processing conducted before the withdrawal.

99bdt does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose:

• Payment service providers: Your financial transaction data is shared with bKash, Nagad, Rocket, and Upay solely for the purpose of processing deposits and withdrawals on your account. Each provider operates under its own privacy policy and applicable financial regulations.
• Identity verification and KYC providers: Your identity documents and personal details may be shared with authorised third-party KYC and fraud-prevention service providers to fulfil our legal verification obligations.
• Game providers: Necessary account and session data is shared with licensed game providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming in order to deliver the games accessible through the 99bdt platform.
• Legal and regulatory authorities: Where required by law, court order, or regulatory instruction, 99bdt may disclose personal data to relevant governmental, law-enforcement, or regulatory bodies.
• IT and infrastructure providers: Service providers that support the technical operation of the platform — including hosting, database management, and security services — may have incidental access to personal data under strict contractual data-processing agreements.

All third parties with whom 99bdt shares personal data are required to implement appropriate technical and organisational measures to protect that data and are prohibited from using it for any purpose other than those specified in their agreements with 99bdt.

99bdt uses cookies and similar tracking technologies to operate the platform effectively and to gather the technical and usage data described in Section 2. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used on the 99bdt platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Used to remember your preferences such as language settings and to personalise your experience on the platform across sessions.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the platform, enabling 99bdt to identify technical issues and improve platform performance. This data is aggregated and does not identify you individually.
• Security and fraud-prevention cookies: Used to detect and mitigate fraudulent activity, unusual login patterns, and bot behaviour on the platform.

Most web browsers allow you to control cookies through their settings. Blocking or deleting strictly necessary cookies may prevent the platform from functioning correctly and may affect your ability to log in or complete transactions. 99bdt does not use third-party advertising or retargeting cookies.

99bdt retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with 99bdt and for a minimum of five years following account closure, to comply with AML record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC documents: Identity verification documents are retained for a minimum of five years following account closure or the completion of the last transaction to which the verification related.
• Customer support communications: Live chat transcripts and email correspondence are retained for up to three years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or legal proceeding.
• Technical and usage data: Log files and session data are retained for up to 12 months and then deleted or anonymised.
• Marketing consent records: Records of your marketing consent or opt-out are retained for as long as your account remains active, and for up to three years following account closure.

Where personal data is no longer required, 99bdt will securely delete or anonymise it in accordance with our internal data disposal procedures.

As a player on the 99bdt platform, you hold the following rights in respect of your personal data. You may exercise any of these rights by submitting a written request to [email protected]. 99bdt will respond to all data rights requests within 30 days of receipt, or notify you if additional time is required for complex requests.

• Right of access: You may request a copy of the personal data 99bdt holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. You may also update many personal details directly through your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 99bdt's legal obligations to retain certain records as described in Section 8.
• Right to restrict processing: You may request that 99bdt restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that 99bdt provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on 99bdt's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that exercising certain rights — in particular the right to erasure — may result in the closure of your 99bdt account where the data concerned is required for the operation of your account or for compliance with legal obligations. 99bdt will inform you of any such consequences before acting on your request.

99bdt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 99bdt platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access controls: Access to personal data within 99bdt's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: Account login is protected by two-factor authentication (2FA) using one-time passwords (OTPs) delivered to your registered mobile number, reducing the risk of unauthorised account access.
• Encrypted data storage: Sensitive personal data, including identity document files and financial records, is stored in encrypted form within 99bdt's secure database infrastructure.
• Fraud monitoring: Automated systems continuously monitor account activity for patterns indicative of fraudulent activity, account takeover, or unusual transaction behaviour, triggering alerts for manual review where necessary.
• Regular security reviews: 99bdt conducts periodic internal security reviews and engages qualified security professionals to assess the platform's data protection posture.

While 99bdt takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also play an important role in protecting your own data by keeping your login credentials confidential and notifying us immediately if you suspect any unauthorised access to your account.

The 99bdt platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process, and access is denied to any applicant who cannot confirm they meet the minimum age requirement.

If you believe that a person under the age of 21 has registered an account on 99bdt or has submitted personal data to our platform, please notify us immediately at [email protected]. Upon confirmation, 99bdt will promptly close the relevant account and delete all associated personal data from our systems to the extent not required by law to be retained.

Parents and guardians are encouraged to make use of parental controls and content filtering tools on shared devices to prevent minors from accessing online gambling platforms. 99bdt supports responsible gaming initiatives and takes its age-verification obligations seriously.

99bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The most current version of this Policy will always be available on this page, with the "Last Updated" date at the top revised accordingly.

Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — 99bdt will notify registered players via their registered email address or through a prominent notice on the platform before the changes take effect. Where required by law, we will seek your explicit consent before implementing material changes that affect consent-based processing.

We encourage you to review this Privacy Policy periodically to stay informed about how 99bdt protects your personal data. Your continued use of the platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or wish to raise a concern about how 99bdt handles your personal data, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the 99bdt platform
• Response Time: Email queries are responded to within 4 hours during Bangladesh Standard Time (BST, UTC+6) business hours; data rights requests are handled within 30 days

All formal data rights requests must be submitted in writing to [email protected], clearly stating your full name, registered email address, and the specific right you wish to exercise. 99bdt may request additional identifying information to verify your identity before processing any data rights request, in order to ensure that personal data is not disclosed to or acted upon by an unauthorised person.

For general privacy concerns that cannot be resolved through our support process, you retain the right to escalate the matter to a relevant supervisory or data protection authority in accordance with applicable law.