bhd99 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how bhd99 ("bhd99", "we", "us", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who register for an account on, or otherwise access or interact with, the bhd99 online casino and sports betting platform. This Policy applies to all players using the bhd99 platform from any location within Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other cities, towns, and districts across the country.

By registering an account with bhd99 or by using the bhd99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bhd99 platform. This Policy is incorporated by reference into the bhd99 Terms and Conditions, which you also agree to upon registration. If there is any inconsistency between this Policy and the Terms and Conditions, the Terms and Conditions will prevail to the extent of that inconsistency.

bhd99 collects personal data that you provide directly, data that is generated automatically through your use of the platform, and in some cases data received from third-party service providers such as payment processors. The categories of personal data we collect and their respective purposes are set out in the table below:

bhd99 uses the personal data it collects for the following specific purposes, all of which are necessary for the operation of a safe, fair, and responsible online gaming platform:

• Account management and authentication: to create and manage your bhd99 player account, verify your identity, process login requests, and maintain the security and integrity of your account throughout its lifecycle.
• Payment processing and transaction management: to process your deposits via bKash, Nagad, Rocket, and Upay, to fulfil your withdrawal requests, to maintain accurate transaction records, and to investigate and resolve payment disputes.
• Responsible gaming compliance: to monitor gameplay patterns for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion restrictions that you have set on your account, and to provide responsible gaming alerts and interventions where appropriate.
• Fraud prevention and AML compliance: to detect and prevent fraud, money laundering, collusion, bonus abuse, and other forms of prohibited conduct on the bhd99 platform, and to fulfil our legal obligations under applicable anti-money laundering regulations.
• Customer support: to respond to your queries, complaints, and support requests, to investigate disputes relating to game outcomes or payment transactions, and to communicate updates relevant to your account or to changes in bhd99 policies.
• Platform improvement and analytics: to analyse aggregated, anonymised gameplay and usage data to improve the bhd99 platform, optimise game selection, and enhance the overall player experience. This analysis is conducted on anonymised or pseudonymised data wherever possible and does not involve the direct use of personally identifiable information for commercial profiling.

bhd99 does not use your personal data for automated decision-making that produces legal effects or similarly significant effects on you without human review. Where automated systems flag an account for investigation (for example, in connection with suspected fraud or bonus abuse), a human member of the bhd99 team will review the flagged activity before any account action is taken.

bhd99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is necessary for bhd99 to perform its obligations under the contract with you (the Terms and Conditions), including account management, payment processing, and game delivery.
• Legal obligation: processing that is required for bhd99 to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing that is necessary for bhd99's legitimate interests in operating a secure, fair, and profitable online gaming platform, including fraud detection, security monitoring, and platform analytics — provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: where you have given explicit consent to a specific processing activity, such as receiving promotional communications from bhd99. You may withdraw consent at any time by contacting bhd99 customer support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

bhd99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties only where necessary and only to the extent required:

• Payment service providers: bhd99 shares transaction reference data (such as transaction IDs, amounts, and timestamps) with bKash, Nagad, Rocket, and Upay solely for the purpose of processing your deposits and withdrawals. bhd99 does not transmit your account credentials, password, or personal identification documents to these providers.
• Game software providers: bhd99 shares anonymised session identifiers with certified game software providers such as Evolution Gaming, Pragmatic Play, and Spribe solely for the purpose of enabling game functionality and resolving technical disputes relating to game outcomes. These providers do not receive your personally identifiable registration data.
• Regulatory and law enforcement authorities: bhd99 may disclose your personal data to relevant regulatory bodies or law enforcement authorities where required to do so by a valid legal obligation, court order, or regulatory instruction. In such cases bhd99 will disclose only the minimum personal data required to satisfy the legal obligation.
• Fraud prevention and security service providers: bhd99 may share technical identifiers (such as device fingerprints and IP addresses) with specialist fraud detection and cybersecurity service providers under strict data processing agreements that prohibit those providers from using the data for any purpose other than the contracted service.

All third parties with whom bhd99 shares personal data are required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to delete or return the data once the purpose for which it was shared has been fulfilled. bhd99 does not authorise any third party to use your personal data for their own independent marketing, profiling, or commercial purposes.

bhd99 understands that mobile banking data is particularly sensitive for players in Bangladesh, where bKash, Nagad, Rocket, and Upay are integral to everyday financial life. bhd99 is designed from the ground up to minimise its exposure to your mobile banking credentials. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the payment authentication process — including your PIN entry — takes place entirely within the respective mobile banking application on your device. bhd99 does not receive, intercept, store, or log your mobile banking PIN, OTP, or authentication token at any point during this process.

The only transaction data that bhd99 retains in relation to mobile banking payments is: the mobile banking channel used (e.g., bKash), the registered mobile number associated with the transaction, the transaction amount in BDT, the transaction reference ID provided by the mobile banking provider, and the timestamp of the transaction in Bangladesh Standard Time (BST, UTC+6). This data is retained solely for the purposes of transaction reconciliation, withdrawal processing, AML compliance, and the resolution of payment disputes. Your full mobile number is masked in bhd99 internal reporting systems and is accessible only to authorised bhd99 personnel with a legitimate operational need.

bhd99 uses cookies and similar tracking technologies on its platform to ensure core functionality, maintain session security, and analyse platform usage. The types of cookies used by bhd99 are as follows:

• Strictly necessary cookies: these are essential for the bhd99 platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during a session, security cookies that protect against cross-site request forgery, and preference cookies that remember your platform settings (such as display language). These cookies do not collect any personally identifiable information beyond what is necessary to maintain your session.
• Analytics cookies: bhd99 uses anonymised analytics cookies to understand how players navigate and use the platform. This data is collected in aggregated, non-personally-identifiable form and is used solely to improve platform performance and user experience. bhd99 does not use third-party advertising trackers or behavioural profiling cookies.
• Security and fraud detection tokens: bhd99 uses device fingerprinting tokens to identify suspicious access patterns, detect duplicate accounts, and prevent fraudulent activity. These tokens are pseudonymised and are not linked to your personally identifiable registration information in any externally accessible form.

Most mobile browsers allow you to control cookie settings through the browser's settings menu. However, disabling strictly necessary cookies may prevent you from logging in to or using the bhd99 platform. bhd99 does not use cookies to serve third-party advertising or to track your activity on websites other than the bhd99 platform itself.

bhd99 retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply:

• Active account data (registration information, transaction history, gameplay records): retained for the full duration of your account's active life and for a minimum of 5 years following permanent account closure, to satisfy AML record-keeping obligations and to enable the resolution of any post-closure disputes.
• Identity verification documents (KYC documents): retained for a minimum of 5 years from the date of submission, or for as long as required by applicable AML regulations, whichever is longer. KYC documents are stored in encrypted form and access is restricted to authorised bhd99 compliance personnel only.
• Support and communication records: retained for 2 years from the date of the last communication, to enable follow-up on unresolved issues and to maintain an audit trail of customer support interactions. After this period, support records are anonymised or deleted unless they are required as evidence in an ongoing dispute or legal proceeding.

As a bhd99 player, you have the following rights in relation to the personal data that bhd99 holds about you. To exercise any of these rights, contact bhd99 customer support via live chat or by email at [email protected]:

• Right of access: you have the right to request a copy of all personal data that bhd99 holds about you. bhd99 will respond to verified access requests within 30 days of receipt.
• Right of rectification: if any personal data that bhd99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that certain data fields (such as your registered date of birth) cannot be changed unilaterally and may require documentary evidence to support a correction request.
• Right of erasure: you have the right to request the deletion of your personal data from bhd99 systems, subject to bhd99's legal retention obligations. Where bhd99 is required by law to retain certain data for a specified period, it will delete that data as soon as the mandatory retention period has expired.
• Right to restriction of processing: you have the right to request that bhd99 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests, pending verification of whether bhd99's grounds override yours.
• Right to object: you have the right to object to bhd99 processing your personal data on the basis of legitimate interests. Where you object, bhd99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that the processing is necessary for the establishment, exercise, or defence of legal claims.

bhd99 will acknowledge all data rights requests within 5 business days of receipt and will aim to fully resolve the request within 30 calendar days. Where a request is complex or involves a large volume of data, bhd99 may extend this period by a further 30 days with notice to you. bhd99 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

bhd99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and the bhd99 platform; encryption at rest for all sensitive personal data stored in bhd99 databases; role-based access controls ensuring that bhd99 personnel can only access personal data that is necessary for their specific job function; regular security audits and penetration testing of the bhd99 platform infrastructure; and multi-factor authentication requirements for all bhd99 administrative and operational system access.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bhd99 will notify you without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. bhd99 encourages you to use a strong, unique password for your bhd99 account, to never share your login credentials with any third party, and to contact bhd99 support immediately if you believe your account security has been compromised.

The bhd99 platform is strictly intended for adults aged 21 years and above. bhd99 does not knowingly collect or process the personal data of any individual under the age of 21. If bhd99 discovers or reasonably suspects that personal data belonging to a person under the age of 21 has been collected through the platform — whether as a result of a false age declaration at registration or otherwise — bhd99 will immediately suspend the relevant account, delete the personal data of the underage individual from its systems, and take appropriate steps to prevent recurrence. If you are a parent or guardian and you believe that your child under the age of 21 has registered with bhd99 without your consent, please contact bhd99 customer support immediately at [email protected] so that we can take swift action.

bhd99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services offered by the bhd99 platform. When material changes are made to this Policy, bhd99 will post the updated Policy on the bhd99 website with a revised effective date and will make reasonable efforts to notify registered players of the change via SMS to their registered mobile number or via an in-platform notification. Your continued use of the bhd99 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed of how bhd99 is protecting your personal data.

If you have any questions, concerns, or requests in relation to this Privacy Policy or to the way in which bhd99 processes your personal data, please contact the bhd99 Data Support team. We are available 24 hours a day, 7 days a week via live chat on the bhd99 platform. You may also write to us by email — our address is [email protected]. Please note that this email address is provided for written correspondence only and is not a clickable link. When submitting a privacy-related query or data rights request, please include your registered mobile number and a description of your request so that we can locate your account and respond to you promptly and accurately.