Your Privacy Matters — bdb99 Data Policy

1 Data We Collect

bdb99 collects personal data in several ways — directly from you when you register and use our services, automatically as you interact with the platform, and in some cases from trusted third parties as part of our identity verification process. Below is a detailed breakdown of each category of data we collect.

1.1 Data You Provide Directly

When you create a bdb99 account, make a deposit, or contact our support team, you voluntarily provide us with personal information. This includes:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address (including city, district, and postal code).
• Identity verification (KYC) documents: National Identity Card (NID), passport, or other government-issued photo ID; proof of address documents such as a utility bill or bank statement.
• Financial data: Mobile Financial Service (MFS) account numbers (e.g., bKash, Nagad, Rocket, Upay), bank account details, and transaction reference numbers submitted during deposit or withdrawal requests.
• Communications data: The content of messages you send to our support team via live chat, email, or WhatsApp, including any attachments you provide.
• Preferences and self-declarations: Responsible gaming settings you apply to your account, including deposit limits, session time limits, and self-exclusion requests.

1.2 Data Collected Automatically

When you access or use the bdb99 platform, certain technical data is collected automatically by our systems. This data is primarily used for security, fraud prevention, and platform optimisation purposes:

• Device data: Device type, operating system, browser type and version, screen resolution, and language settings.
• Network data: IP address, approximate geolocation derived from IP, and internet service provider (ISP) name.
• Session data: Login timestamps, session duration, pages visited within the platform, features accessed, and actions performed (e.g., bets placed, games launched, deposits initiated).
• Cookie and tracking data: Data collected via cookies, local storage, and similar technologies — see Section 4 (Cookies & Tracking) for full details.

1.3 Data Received from Third Parties

In some circumstances, bdb99 may receive personal data about you from third-party sources. These include:

• KYC verification providers: Third-party identity verification services may return confirmation results, fraud risk scores, or document validation outcomes associated with the documents you submit.
• Payment processors: Transaction confirmation data, including transaction status, reference codes, and — where relevant — information required to reconcile a payment dispute.
• Fraud and sanctions screening services: Data from commercially operated risk databases used to detect fraudulent activity or screen for individuals or entities subject to financial sanctions.

2 How We Use Your Data

bdb99 uses the personal data we collect only for the purposes described below. For each purpose, we identify the legal basis on which we rely to process your data.

Marketing Communications

bdb99 will only send you promotional emails, SMS messages, or WhatsApp notifications if you have explicitly opted in to receive them during registration or subsequently through your account settings. You can withdraw your marketing consent at any time by updating your notification preferences in the account settings panel, or by contacting our support team. Withdrawal of marketing consent does not affect the processing of your data for other purposes listed above.

3 Data Sharing & Disclosure

bdb99 does not share your personal data with third parties except in the specific, limited circumstances described below. We do not sell your data. All third parties with whom we share data are contractually obligated to handle it securely and only for the defined purpose.

3.1 Service Providers

We share personal data with carefully selected service providers who assist in operating the bdb99 platform. These providers act as data processors — they process data on our behalf and under our instructions only:

• KYC & identity verification providers: To verify your identity and age as required by our operational obligations.
• Payment processing partners: Including bKash, Nagad, Rocket, Upay, and banking partners, to process your deposit and withdrawal transactions.
• Cloud hosting and infrastructure providers: To host the platform, store data securely, and maintain service availability.
• Fraud prevention and risk analytics providers: To identify and prevent fraudulent activity on the platform.
• Customer support tooling: Live chat and helpdesk software providers used to manage support interactions.

3.2 Legal and Regulatory Disclosures

bdb99 may be required by law to disclose personal data to government bodies, law enforcement agencies, or regulatory authorities. Such disclosures are made strictly in accordance with applicable legal requirements. Examples include:

• Compliance with a court order, subpoena, or lawful legal process.
• Reporting obligations under applicable anti-money laundering (AML) regulations, including suspicious transaction reporting.
• Cooperation with law enforcement investigations into fraud, cybercrime, or financial crime involving our platform.

Where we are legally permitted to do so, we will notify you of any such disclosure request.

3.3 Business Transfers

In the event that bdb99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. You will be notified via the email address associated with your account prior to any such transfer, and the receiving entity will be required to honour this Privacy Policy or provide equivalent protections.

4 Cookies & Tracking Technologies

bdb99 uses cookies and similar tracking technologies on its platform. This section explains what cookies are, which types we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files that are stored on your device (computer, smartphone, or tablet) when you visit a website. They allow the website to recognise your device, remember your preferences, and gather information about how you interact with the platform. Cookies cannot execute programs or deliver viruses to your device.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling functional or analytics cookies may affect your experience on the bdb99 platform — for example, your display preferences may not be saved between sessions.

For guidance on managing cookies in your specific browser, refer to your browser's official help documentation. On mobile devices, cookie settings are typically found under the browser's privacy or site settings menu.

5 Data Security

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a top priority at bdb99. We implement a multi-layered security framework that combines technical controls, operational procedures, and staff training.

Technical Security Measures

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.2 or higher. This applies to all platform pages including login, deposit, and account management.
• Encryption at rest: Sensitive data stored in our databases — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Firewalls and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems (IDS) that monitor for abnormal activity patterns.
• Access controls: Access to personal data within bdb99's internal systems is restricted to staff members who have a genuine operational need for it. All internal access is logged and reviewed periodically.
• Two-factor authentication: Two-factor authentication (2FA) is available to all registered players and is mandatory for all bdb99 internal system administrators.

Operational Security Practices

• Regular security audits and penetration testing are conducted by independent security specialists.
• All staff members with access to personal data undergo data protection and security awareness training.
• A formal incident response plan is in place to contain, investigate, and remediate any data security breach promptly.

Your Role in Security

While bdb99 takes all reasonable steps to protect your data, the security of your account also depends on actions you take. We strongly recommend the following:

• Use a strong, unique password for your bdb99 account — one not used on any other platform.
• Enable two-factor authentication (2FA) on your account.
• Never share your login credentials with anyone. bdb99 staff will never ask for your password.
• Log out of your account when using a shared or public device.
• Notify our support team immediately if you suspect that your account has been accessed without your authorisation.

6 Data Retention

bdb99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The table below sets out the standard retention periods for each major category of personal data.

Once a retention period expires and there is no overriding legal reason to retain data, bdb99 will either securely delete the data or anonymise it so that it can no longer be associated with any individual.

7 Your Rights

As an individual whose personal data is processed by bdb99, you hold a number of important rights with respect to your information. bdb99 is committed to respecting and facilitating the exercise of these rights. To submit a data rights request, contact our support team at [email protected] with the subject line "Data Rights Request".

Right of Access

You have the right to request a copy of the personal data bdb99 holds about you. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible. We will respond to access requests within 30 days of receipt.

Right to Rectification

If any of the personal data bdb99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates — such as changes to your contact details — can be made directly via your account settings panel. For changes to identity data (name, date of birth), you will need to contact our support team and provide supporting documentation.

Right to Erasure ("Right to Be Forgotten")

You may request that bdb99 delete your personal data. We will honour such requests where there is no overriding legal obligation requiring us to retain the data. Please note that, due to financial regulatory requirements, we are generally required to retain transaction records and KYC documents for the periods specified in Section 6, even after account closure. We will explain clearly what data can be deleted and what must be retained, and why.

Right to Restriction of Processing

In certain circumstances — for example, if you have contested the accuracy of data we hold or if you believe processing is unlawful — you may request that we restrict the processing of your personal data while the matter is investigated. During a restriction, we may store the data but not actively use it.

Right to Data Portability

Where processing is based on your consent or on performance of a contract, and where processing is carried out by automated means, you have the right to receive a copy of the data you have provided to us in a portable format. This allows you to transfer the data to another service provider if you wish.

Right to Object

You have the right to object to processing that is based on bdb99's legitimate interests, including profiling for fraud prevention. You also have the right to object at any time to the processing of your personal data for direct marketing purposes. On receipt of a marketing opt-out, we will stop all marketing communications immediately.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us in writing at [email protected]. We may need to verify your identity before processing your request. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. If your request is complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you promptly.

8 Contact & Data Protection Officer

bdb99 takes its data protection responsibilities seriously. If you have questions, concerns, or complaints regarding the way in which we process your personal data, we want to hear from you. Please use the contact details below to reach our data protection team.

General Privacy Enquiries

For general questions about this Privacy Policy or about how your data is handled, contact our support team:

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing.
• Live Chat: Available 24/7 via the bdb99 platform. Type "Privacy" in the chat to be connected with a relevant team member.
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and provide a substantive response within 10 business days.

Data Rights Requests

To exercise any of your data rights (access, rectification, erasure, portability, restriction, or objection), please email [email protected] with the subject line "Data Rights Request". Include your full name, registered email address, and a clear description of the right you wish to exercise. We will verify your identity before processing the request.

Updates to This Privacy Policy

bdb99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change to this policy, we will notify registered players via email and display a prominent notice on the bdb99 platform for at least 14 days following the update. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically.