bp99 Privacy Policy
At bp99, your privacy is a fundamental priority. This Privacy Policy explains what personal data we collect from players across Bangladesh, how we use and protect that information, and the rights you hold over your own data.
How bp99 Approaches Your Privacy
Six core principles guide every decision bp99 makes about your personal data. These are not aspirations — they are operational standards enforced across every team, system, and process on the bp99 platform.
bp99 tells you exactly what data is collected, why it is collected, and how long it is retained. There are no hidden data practices. This policy reflects the complete picture of how bp99 handles your personal information.
Data collected by bp99 is used only for the specific purposes stated in this policy — account management, payment processing, security, and service improvement. Your data is never sold to third parties for marketing or profiling purposes.
bp99 collects only the minimum personal data necessary to provide a safe, compliant, and functional gambling platform. If a piece of information is not strictly required, bp99 does not ask for it.
All personal data stored by bp99 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player records is restricted to authorised personnel only and is subject to strict internal access controls.
Every bp99 player has the right to access, correct, or request deletion of their personal data. bp99 provides a straightforward process for exercising these rights, with all requests handled within 30 days of receipt.
This Privacy Policy is reviewed and updated on a regular basis to reflect changes in bp99's data practices, platform features, and applicable data protection standards. The effective date at the top of this page always reflects the most recent revision.
Summary: bp99 collects personal data solely to operate a safe, verified, and compliant online casino and sports betting platform for players in Bangladesh. We do not sell your data to third parties. We use industry-standard encryption to protect every record. You may contact us at [email protected] at any time to exercise your privacy rights. Please read this policy in full to understand all details of our data practices.
Introduction
This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and shared by bp99 ("bp99", "we", "us", "our") in connection with the operation of the bp99 online casino and sports betting platform, accessible at https://bp99.io ("the Platform"). It applies to all registered players, prospective players who visit the Platform without registering, and any individual who communicates with bp99 through any support or enquiry channel.
bp99 is committed to handling all personal data with care, transparency, and in accordance with widely recognised data protection principles. This Policy explains, in plain English, exactly what data we collect from players across Bangladesh, the specific purposes for which that data is used, the legal basis on which processing is carried out, how long data is retained, and the rights you have in relation to your own personal information.
By accessing the bp99 Platform, registering an account, making a deposit, or using any service provided through the Platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must not use the bp99 Platform.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which contain additional provisions that affect how bp99 manages player information in specific contexts.
Data We Collect
bp99 collects personal data through multiple touchpoints on the Platform. The categories of data we collect, and the circumstances in which each category is gathered, are described below.
2.1 Registration Data
When you create a bp99 account, we collect the following information:
- Full legal name (as it appears on your government-issued identification)
- Date of birth (to verify that you meet the 21+ age requirement)
- Mobile phone number registered in Bangladesh
- Email address
- Residential address in Bangladesh
- Username and encrypted password
- The mobile financial service account (bKash, Nagad, Rocket, or Upay) you link to your bp99 profile
2.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) obligations, bp99 may request and retain copies of the following documents:
- National Identity Card (NID) or passport
- Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)
- Confirmation of mobile financial service account ownership
- Selfie photograph for identity matching purposes, where required
2.3 Transaction Data
bp99 records all financial transactions carried out on the Platform, including:
- Deposit amounts, dates, and times
- Withdrawal requests, amounts, and processing status
- Mobile financial service transaction reference numbers
- Bonus credits and wagering activity
- Currency (Bangladeshi Taka, BDT) and ৳ amounts involved in all transactions
2.4 Gaming Activity Data
bp99 logs all activity carried out on the Platform in connection with your account, including:
- Games played, bet amounts, results, and session durations
- Sports bets placed, markets selected, odds, and outcomes
- Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
- Bonus offer claims and wagering progress
2.5 Technical & Device Data
When you access the bp99 Platform, our servers automatically collect certain technical information, including:
- IP address and approximate geographic location (country/city level)
- Device type, operating system, and browser version
- Referring website URL (if you arrived at bp99 via a link)
- Pages visited on the Platform, time spent, and navigation path
- Date and time stamps of all access events
2.6 Communications Data
When you contact bp99's support team or submit any enquiry via email, we retain a record of that communication, including the content of messages, attachments submitted, and the date and time of correspondence. This data is used to resolve your enquiry and to maintain a support history for your account.
Note on Sensitive Data: bp99 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, political opinions, health data (other than responsible gaming self-disclosures), or biometric data (other than identity photographs used solely for KYC verification). If you voluntarily provide such information in a support message, we will handle it with additional care and will not use it for any purpose other than responding to your specific enquiry.
How We Use Your Data
bp99 uses personal data for the following specific purposes. We do not use personal data for any purpose not listed here without first providing you with appropriate notice and, where required, obtaining your consent.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, KYC data |
| Age and identity verification | Registration data, KYC documents |
| Processing deposits and withdrawals | Transaction data, registration data |
| Providing casino and sports betting services | Gaming activity data, transaction data |
| Fraud detection and prevention | Technical data, transaction data, gaming activity data |
| Anti-money laundering (AML) compliance | KYC data, transaction data, registration data |
| Responsible gaming monitoring | Gaming activity data, communications data |
| Customer support and dispute resolution | Communications data, registration data, transaction data |
| Platform improvement and analytics | Technical data, gaming activity data (anonymised) |
| Promotional communications (with consent) | Registration data, gaming activity data |
| Legal and regulatory compliance | All categories, as required by applicable law |
Where bp99 intends to use your personal data for a purpose materially different from those listed above, we will notify you in advance and, where legally required, request your explicit consent before any such processing takes place.
Legal Basis for Processing
bp99 processes your personal data on one or more of the following legal grounds, depending on the specific activity involved:
4.1 Contractual Necessity
The majority of data processing carried out by bp99 is necessary for the performance of the contract between bp99 and you as a registered player — specifically, to create and maintain your account, process financial transactions, provide access to games, and deliver customer support. Without this processing, bp99 cannot provide its core services.
4.2 Legal Obligation
bp99 is required by applicable legal and regulatory standards to verify the age and identity of all players (KYC), monitor transactions for signs of money laundering or fraud (AML), and maintain accurate records of all player activity for specified retention periods. Processing carried out for these purposes is legally mandated, not optional.
4.3 Legitimate Interests
bp99 processes certain technical and behavioural data on the basis of its legitimate interest in operating a secure, reliable, and commercially viable platform. This includes fraud detection, platform performance monitoring, and anonymised analytics. Where bp99 relies on legitimate interests, we have assessed that our interests do not override your fundamental privacy rights.
4.4 Consent
Where bp99 sends you promotional communications about bonus offers, new games, or seasonal promotions (such as Eid or BPL cricket season campaigns), we do so only with your prior consent, which you provide at the point of registration or via your account preferences. You may withdraw this consent at any time by contacting [email protected] or by updating your communication preferences in your account settings.
Data Sharing
bp99 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
5.1 Game Technology Providers
The games available on the bp99 Platform are powered by third-party software providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive session tokens, bet data, and game result records in order to render and settle game rounds correctly. They are not provided with your full personal profile or payment details.
5.2 Payment Processing Partners
When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, bp99 shares the transaction amount and your registered mobile financial service account number with the relevant payment provider solely to execute the transaction. bp99 does not store full payment credentials on our own servers.
5.3 Identity Verification Services
bp99 may use third-party KYC verification service providers to authenticate the identity documents you submit. These providers process your KYC data under strict contractual data protection obligations and are not permitted to use your data for any purpose other than the verification service they provide to bp99.
5.4 Legal and Regulatory Disclosure
bp99 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. bp99 will comply with all valid legal orders and will notify affected players of any such disclosure to the extent permitted by law.
5.5 Business Transfers
In the event that bp99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, bp99 will ensure that the receiving entity is bound by data protection obligations consistent with this Policy, and will notify affected players of any material change to how their data is handled.
No Third-Party Marketing: bp99 will never share your personal data with advertisers, data brokers, social media platforms, or any other third party for the purpose of targeting you with external marketing or advertising. Your bp99 account data is used exclusively in connection with your use of the bp99 Platform.
Cookies & Tracking Technologies
bp99 uses cookies and similar tracking technologies on the Platform to ensure correct functionality, improve performance, and understand how players interact with the site. The following types of cookies are used:
6.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function correctly. They manage your session authentication, maintain your login state, and enable secure navigation between pages. Without these cookies, core Platform features — including the ability to log in and play games — would not be available. These cookies cannot be disabled without breaking the Platform.
6.2 Performance & Analytics Cookies
bp99 uses anonymised analytics cookies to understand aggregate patterns of usage on the Platform, such as which pages receive the most traffic, average session durations, and which game categories are most popular. This data helps bp99 improve the Platform experience for all players. No personally identifiable information is included in these analytics reports.
6.3 Functional Cookies
Functional cookies store your preferences — such as your chosen display language (English) and any responsible gaming settings you have configured — so that these preferences persist across sessions. Disabling functional cookies may affect the personalised experience on the Platform.
6.4 Managing Cookies
You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your bp99 account. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation. bp99 does not use cookies to track your activity on websites other than bp99.io.
Data Retention
bp99 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory obligations that require longer retention. The following retention periods apply to the main categories of player data:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration & account data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC / identity documents | 5 years from account closure | AML regulatory requirement |
| Transaction records | 5 years from transaction date | Financial record-keeping obligations |
| Gaming activity logs | 3 years from session date | Dispute resolution, fraud detection |
| Support communications | 3 years from last communication | Dispute resolution, audit trail |
| Technical / device logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of valid consent |
When the applicable retention period expires, bp99 will securely delete or anonymise the relevant data so that it can no longer be associated with any individual player. Where anonymisation is used rather than deletion, the resulting data may be retained indefinitely for aggregate statistical purposes, but it will not be linked back to your personal profile.
Data Security
bp99 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:
- 256-bit SSL/TLS encryption: All data transmitted between your device and the bp99 Platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser address bar.
- AES-256 encryption at rest: Personal data and financial records stored in bp99's databases are encrypted using AES-256 symmetric encryption, ensuring that data remains protected even in the event of unauthorised database access.
- Access controls: Access to player data is restricted to bp99 employees and service providers who require it to perform their specific job functions. All access events are logged and subject to regular audit.
- Two-factor authentication (2FA): bp99 supports two-factor authentication for player accounts and enforces it for all internal administrative access to player records.
- Penetration testing: bp99's technical infrastructure is subject to regular security testing by qualified professionals to identify and remediate vulnerabilities before they can be exploited.
- Incident response: bp99 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to players, bp99 will notify affected individuals and take immediate steps to contain the breach and prevent further harm.
Despite these measures, no digital system can guarantee absolute security. bp99 encourages you to take your own precautions, including using a strong and unique password for your bp99 account, enabling two-factor authentication, and not accessing your account from public or shared devices.
Security Incident Notification: If you suspect that your bp99 account has been accessed without your authorisation, please contact our support team immediately at [email protected]. bp99 will investigate all reported incidents promptly and take appropriate remedial action, which may include temporarily locking your account to prevent further unauthorised activity.
Your Privacy Rights
As a bp99 player, you have the following rights in relation to your personal data. bp99 will respond to all valid rights requests within 30 days of receipt. In cases of complex or multiple requests, bp99 may extend this period by up to a further 30 days, with notice provided to you before the initial deadline.
9.1 Right to Access
You have the right to request a copy of all personal data that bp99 holds about you. bp99 will provide this information in a clear, structured format, free of charge for the first request in any 12-month period. Subsequent requests within the same period may incur a reasonable administrative fee.
9.2 Right to Rectification
If any personal data bp99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For changes to core account information (such as your legal name or address), bp99 may require supporting documentation before making the amendment.
9.3 Right to Erasure
You may request that bp99 delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent and there is no other legal basis for processing. Please note that this right is subject to override where bp99 is required to retain data by law (for example, for AML record-keeping purposes). In such cases, bp99 will explain the basis for retaining the data.
9.4 Right to Restrict Processing
You may request that bp99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute, or while bp99 is assessing a deletion request. During a restriction period, bp99 will continue to store your data but will not process it for any other purpose without your consent (except for legal compliance purposes).
9.5 Right to Data Portability
Where bp99 processes your personal data on the basis of consent or contractual necessity, and where that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that bp99 transmit this data directly to another service provider where technically feasible.
9.6 Right to Object
You have the right to object to bp99's processing of your personal data where that processing is based on bp99's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes, including profiling carried out in connection with direct marketing. bp99 will cease such processing immediately upon receipt of a valid objection.
9.7 Exercising Your Rights
To exercise any of the rights described above, please contact bp99's support team at [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise. bp99 may need to verify your identity before processing the request. Please do not include your password or full payment account number in any email to bp99.
Children's Privacy
The bp99 Platform is strictly intended for adults aged 21 years and above. bp99 does not knowingly collect, process, or store any personal data from individuals under the age of 21. If bp99 discovers or reasonably suspects that a registered account belongs to a person under 21 years of age, the account will be closed immediately, all associated data will be securely deleted (subject to any legal retention obligations), and the matter may be referred to relevant authorities.
If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered a bp99 account or provided personal data to bp99, please contact us immediately at [email protected]. bp99 will investigate all such reports and take prompt corrective action.
bp99 strongly supports responsible gambling and takes the prevention of underage gambling seriously as both an ethical and legal obligation. Our age verification procedures are designed to identify and reject registrations from individuals who do not meet the minimum age requirement.
Third-Party Links
The bp99 Platform may contain links to the websites or services of third parties, including game providers and payment partners. These third-party sites operate under their own privacy policies, which are entirely separate from this Policy. bp99 is not responsible for the privacy practices, content, or security of any third-party website, and we recommend that you review the privacy policy of any third-party site before providing personal information to it.
The inclusion of a link to a third-party website on the bp99 Platform does not imply any endorsement, approval, or warranty by bp99 of that website or its operator.
Policy Updates
bp99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When material changes are made to this Policy, bp99 will notify registered players via email to the address associated with their account, and will update the effective date displayed at the top of this page.
Your continued use of the bp99 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must discontinue use of the Platform and may request account closure by contacting our support team. We encourage you to review this Policy periodically to stay informed about how bp99 protects your personal data.
Previous versions of this Privacy Policy are available upon request by contacting [email protected]. bp99 maintains an internal archive of all previous policy versions, together with the dates on which each version was in effect.
Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or about the way bp99 handles your personal data, please contact our support team using the details below. bp99 is committed to resolving all privacy-related enquiries promptly and transparently.
bp99 Privacy Support
Platform: bp99.io
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Response Time: Within 2 business days for privacy enquiries
Language: English
Time Zone: Bangladesh Standard Time (BST, UTC+6)
When contacting bp99 regarding a privacy matter, please include your registered username or email address, a clear description of your enquiry or complaint, and any relevant reference numbers (for example, a transaction ID or previous support ticket number). This will help our team locate your records and respond to your request as efficiently as possible.
bp99 treats all privacy complaints seriously. If you are not satisfied with the response you receive, you may escalate your concern in writing to [email protected] with the subject line "Privacy Escalation" and your matter will be reviewed by a senior member of our support team.
Explore bp99's Full Platform
Now that you understand how bp99 protects your data, explore everything the platform has to offer — from live cricket betting and BPL odds to 500+ slot games and live casino tables. Your privacy is always protected.