Privacy Policy — bbe99

Section 1

Data We Collect

When you register and use the bbe99 platform, we collect personal data through several channels. The categories of data we collect, and the specific circumstances in which they arise, are set out below.

1.1 Registration Data

When you create a bbe99 player account, we collect the following information which you provide directly:

• Full legal name — as it appears on your government-issued identification document;
• Date of birth — to verify that you meet the 18+ age eligibility requirement;
• Residential address — including district, city, and postal code within Bangladesh or your country of residence;
• Mobile phone number — used for OTP two-factor authentication and account notifications;
• Email address — used for account communications, transaction receipts, and promotional notifications (where opted in);
• Preferred currency — Bangladeshi Taka (৳ BDT) by default.

1.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer process, which complies with anti-money laundering obligations, we may collect copies of the following documents:

• National Identity Card (NID) — both sides;
• Passport — bio-data page;
• Proof of address — recent utility bill or bank statement issued within the past three months;
• Selfie photograph alongside the submitted identity document, for liveness verification purposes.

KYC documents are processed by our internal compliance team and by our third-party identity verification partner, under strict confidentiality obligations. These documents are retained for the period required by applicable AML regulations.

1.3 Financial & Transaction Data

When you deposit or withdraw funds on bbe99, we collect transaction-level data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction reference numbers, amounts, timestamps, and the bKash/Nagad wallet phone number or card number suffix associated with each transaction. We do not store full card numbers or mobile wallet PINs — all sensitive payment data is tokenised at the point of entry.

1.4 Technical & Usage Data

We automatically collect certain technical information when you access the bbe99 platform, including your IP address, device type and operating system, browser type and version, session duration, pages visited, game titles played, bet amounts and game outcomes, and referral source. This data is used for fraud detection, platform optimisation, and responsible gaming monitoring.

Section 2

How We Use Your Data

bbe99 processes your personal data only where we have a lawful basis for doing so. The table below summarises our primary processing activities, their purpose, and the lawful basis on which each rests.

Where we rely on consent as our lawful basis — particularly for marketing communications — you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Section 3

Data Sharing & Third Parties

bbe99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

3.1 Service Providers

We engage a small number of carefully vetted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, and card network processors, for the sole purpose of processing financial transactions;
• KYC and identity verification providers — to perform automated and manual identity verification checks;
• Cloud hosting and infrastructure providers — to host and operate the bbe99 platform securely;
• Fraud detection and cybersecurity partners — to monitor for suspicious activity and protect the platform from abuse;
• Customer support software providers — to operate our live chat and ticketing systems.

All service providers are contractually bound to process data only in accordance with our instructions, to implement appropriate security measures, and not to use or disclose data for any purpose beyond the service they provide to bbe99.

3.2 Legal & Regulatory Disclosure

bbe99 may disclose personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts where we are required to do so by applicable law, court order, or in response to a valid legal process. We will, where permitted by law, notify the affected player of any such disclosure.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of bbe99 or its assets, personal data held by the Company may be transferred to the acquiring entity. In such circumstances, players will be notified of the transfer and of any material changes to this Privacy Policy as a result.

Section 4

Cookies & Tracking Technologies

bbe99 uses cookies and similar tracking technologies to operate and improve the platform experience. A cookie is a small text file placed on your device when you visit the bbe99 website. Cookies help us remember your preferences, keep you logged in, and understand how players interact with the platform.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without rendering the platform inoperable.
• Functional Cookies: These cookies remember your preferences — such as your language selection, display settings, and recently played games — to provide a more personalised experience across sessions.
• Analytics Cookies: We use analytics technologies to collect aggregate, anonymised data about how players navigate the bbe99 platform. This data helps us identify areas for improvement, diagnose technical issues, and understand which features are most valuable to our players. Analytics data is not linked to your individual identity.
• Security & Fraud Prevention Cookies: These cookies help our fraud detection systems identify unusual patterns of behaviour that may indicate account takeover attempts, bot activity, or other malicious use of the platform.

4.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that blocking strictly necessary cookies will impair your ability to use the bbe99 platform, including logging in and processing transactions. Your browser's help documentation will explain how to manage cookie settings specific to your browser version.

Section 5

Data Retention & Storage

bbe99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction policy. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for statistical or analytical purposes indefinitely.

5.1 Data Storage Location

bbe99 player data is stored on secure servers operated by our cloud infrastructure partners. All data is stored with appropriate access controls, encryption at rest, and regular security audits. Data transfers between bbe99 and its service providers are conducted over encrypted channels only.

Section 6

Your Privacy Rights

As a player on the bbe99 platform, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting our Data Privacy team via the live chat or by emailing support at the address shown in the footer of this page.

• Right of Access: You have the right to request a copy of the personal data bbe99 holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details directly through your account settings, or by contacting the support team for changes that require verification.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to overriding legal obligations — for example, we are required to retain transaction records for a minimum period under AML regulations, and this obligation takes precedence over erasure requests for the relevant data categories.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for fraud detection purposes, where you believe your individual rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as receipt of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Section 7

Data Security Measures

bbe99 implements a comprehensive, multi-layered security framework to protect player data against unauthorised access, disclosure, alteration, and destruction. Our security measures include both technical controls and organisational safeguards, and are reviewed and updated on a regular basis to reflect the evolving threat landscape.

7.1 Technical Security Controls

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the bbe99 platform is encrypted using TLS 1.3, the current industry standard for secure web communications. Our HTTPS certificate is validated by a trusted certificate authority.
• Encryption at Rest: Sensitive data stored on bbe99 servers — including KYC documents, account credentials, and financial records — is encrypted at rest using AES-256 encryption.
• Password Hashing: Player passwords are never stored in plaintext. They are processed using bcrypt, a computationally intensive hashing algorithm specifically designed to make brute-force attacks impractical.
• Payment Tokenisation: bKash, Nagad, and card payment credentials are tokenised at the point of entry and are never stored in raw form on bbe99 servers. Payment processing is handled by PCI-DSS compliant payment partners.
• Two-Factor Authentication (OTP): bbe99 supports OTP-based two-factor authentication for all player accounts. Players are strongly encouraged to enable this feature to add an additional layer of protection against unauthorised login.
• Intrusion Detection & Monitoring: Our infrastructure is monitored 24/7 by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.

7.2 Organisational Security Measures

• Access to personal data is restricted to authorised bbe99 personnel on a strict need-to-know basis;
• All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training;
• Third-party service providers with access to player data are subject to formal data processing agreements and regular security assessments;
• Regular penetration testing and vulnerability assessments are conducted by qualified external security professionals.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bbe99 will notify affected individuals without undue delay and will take all appropriate steps to contain and remediate the breach.

Section 8

Policy Updates & Contact

8.1 Updates to This Policy

bbe99 reviews this Privacy Policy periodically and updates it whenever our data processing practices change materially. When we make significant changes, we will notify active players via email or through a prominent notice on the platform. The "Effective Date" at the top of this page will always reflect the date on which the most recent version came into force. We encourage you to review this page regularly to stay informed about how we protect your personal data.

Your continued use of the bbe99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and contact our support team to discuss account closure options.

8.2 Contact Our Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how bbe99 handles your personal data, please contact us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the bbe99 platform
• Response Time: We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a full response within 30 calendar days, in accordance with data subject rights response timelines.
• Time Zone: All response times are calculated in Bangladesh Standard Time (BST, UTC+6).