bde99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how bde99 ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the bde99 platform available at https://bde99.io, including all associated games, betting markets, promotions, and customer support channels.

bde99 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account on bde99 or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood how we process your personal data as described herein.

This Policy should be read alongside the bde99 Terms & Conditions, which govern the overall relationship between you and bde99, and the Responsible Gaming Policy, which addresses the specific data processing activities associated with player protection tools.

2. Data Controller

For the purposes of this Policy, bde99 acts as the data controller in respect of the personal data collected through the platform. As data controller, bde99 determines the purposes for which and the means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact bde99's data support team at any time. Contact details are provided in Section 16 of this Policy.

3. Data We Collect

bde99 collects the following categories of personal data from users of the platform. We only collect data that is necessary for the specific purpose for which it is being processed.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, NID / passport number, photograph	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address in Bangladesh	Account communications, transaction alerts, support
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet numbers, Visa/Mastercard details (partial), transaction history	Processing deposits and withdrawals, fraud prevention
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Platform security, fraud detection, performance optimisation
Usage Data	Pages visited, games played, bet amounts, session duration, feature interactions	Personalisation, responsible gaming monitoring, analytics
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer service, dispute resolution, quality assurance
Preference Data	Marketing consent settings, responsible gaming limits, language preferences	Personalised service delivery, compliance with player-set restrictions

4. How We Collect Data

bde99 collects your personal data through the following means:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or interact with any other feature of the platform that requires you to provide information.
• Automatically: When you access and navigate the bde99 platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies. See Section 10 for full details on our cookie practices.
• From third parties: bde99 may receive data about you from identity verification providers (KYC/AML partners), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud prevention services, and game studio partners where such data is necessary for the delivery or security of our services.

5. Legal Basis for Processing

bde99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to open and maintain your account, facilitate deposits and withdrawals, and deliver the gambling and betting services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements, and other legal obligations to which bde99 is subject.
• Legitimate interests: Processing carried out for the purposes of platform security, fraud detection, responsible gaming monitoring, and general business analytics, where these interests are not overridden by your privacy rights.
• Consent: Where bde99 processes your data for direct marketing purposes or for the use of non-essential cookies, we do so only where you have given your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. How We Use Your Data

bde99 uses your personal data for the following specific purposes:

• To create, verify, and maintain your bde99 account and ensure it is used only by the registered account holder.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or card) and to maintain an accurate record of your transaction history.
• To conduct Know Your Customer (KYC) and age verification checks as required to confirm that you meet the 21+ eligibility requirement and that your identity matches the payment method used.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other forms of prohibited conduct on the platform.
• To monitor your gameplay patterns and account activity for the purpose of identifying signs of problem gambling and providing appropriate responsible gaming interventions.
• To communicate with you regarding your account, transactions, promotions (where you have opted in), and any changes to our policies.
• To analyse aggregate usage data in order to improve the platform, optimise game performance, and enhance the overall user experience for players across Bangladesh.
• To respond to, investigate, and resolve customer support enquiries and formal complaints.

7. Data Sharing

bde99 does not sell, rent, or trade your personal data to third parties. We may share your data with carefully selected third parties only in the following circumstances and only to the extent strictly necessary:

7.1 Service Providers

bde99 works with trusted third-party service providers who process personal data on our behalf, including identity verification and KYC providers, payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game studio technology providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), cloud hosting and infrastructure providers, and fraud detection and cybersecurity specialists. All such providers are bound by data processing agreements that require them to handle your data in accordance with applicable data protection standards.

7.2 Legal and Regulatory Authorities

bde99 may be required to disclose your personal data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally compelled to do so or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, bde99 will disclose only the minimum amount of data required to satisfy the legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bde99's business assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the successor entity will be required to honour the commitments made in this Privacy Policy.

8. International Transfers

Some of bde99's service providers and technology partners may be located outside Bangladesh. Where your personal data is transferred to or accessed from a location outside your home jurisdiction, bde99 takes appropriate steps to ensure that such transfers are conducted in accordance with applicable data protection requirements and that your data benefits from a level of protection equivalent to that described in this Policy.

These safeguards may include the use of standard contractual clauses, data processing agreements with appropriate security obligations, or transfers to recipients in jurisdictions that provide an adequate level of data protection as recognised by applicable law.

9. Data Retention

bde99 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with bde99, plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping obligations.
• Communications data: Live chat transcripts and support correspondence are retained for up to 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and usage data: Aggregated or anonymised analytics data may be retained indefinitely. Individual-level technical logs are typically retained for up to 12 months.
• Marketing preferences: Consent and opt-out records are retained for the duration of your account relationship and for 3 years following account closure.

When retention periods expire, bde99 securely deletes or anonymises the relevant personal data in accordance with our internal data destruction procedures.

10. Cookies & Tracking Technologies

bde99 uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform effectively, maintain your logged-in session, and analyse how users interact with our services. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account from unauthorised access. These cookies cannot be disabled without impairing core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how users navigate the bde99 platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve platform performance.
• Functional cookies: Used to remember your preferences such as display settings and responsible gaming limit configurations so that they are preserved across sessions.

bde99 does not use third-party advertising cookies or cross-site tracking technologies. You may manage your cookie preferences through your browser settings, though disabling strictly necessary cookies may prevent you from accessing certain features of the platform.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bde99. To exercise any of these rights, please contact our support team using the details provided in Section 16.

• Right of access: You may request a copy of the personal data bde99 holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Please note that this right may be limited where bde99 is required to retain data to comply with legal obligations.
• Right to restriction of processing: You may request that bde99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where technically feasible, you may request that bde99 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where bde99 processes your data on the basis of your consent (such as for direct marketing), you may withdraw that consent at any time by updating your account preferences or contacting our support team.
• Right to object: You may object to the processing of your personal data where bde99 relies on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds for the processing that override your rights.

bde99 will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reasons for it.

12. Security Measures

bde99 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bde99 servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls that restrict employee access to personal data to those with a legitimate business need.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Multi-factor authentication requirements for privileged system access.
• Incident response procedures designed to identify, contain, and notify affected users of any personal data breaches within the timeframes required by applicable law.

While bde99 takes all reasonable steps to protect your data, no method of electronic transmission or storage is entirely risk-free. You are encouraged to protect your own account by using a strong, unique password and enabling any two-factor authentication options available within your account settings.

13. Children's Privacy

The bde99 platform is strictly intended for adults aged 21 years and above. bde99 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under this age threshold, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a person under the age of 21 has registered an account on bde99, please contact our support team immediately so that we can investigate and take appropriate action.

14. Third-Party Links

The bde99 platform may contain references to third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment partners (such as bKash, Nagad, Rocket, and Upay). While bde99 selects its partners carefully, we are not responsible for the privacy practices of third-party organisations. Where you interact directly with a third-party service, your data will be subject to that third party's own privacy policy. We encourage you to review the privacy policies of any third-party services you use in connection with the bde99 platform.

15. Policy Amendments

bde99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to our platform. When material changes are made, bde99 will notify registered players by email and by displaying a prominent notice on the platform for a period of at least 14 days prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the bde99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with any changes, you should cease using the platform and contact support to request account closure.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bde99, please contact our data support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the bde99 platform
• Email: [email protected]
• Response Time: bde99 aims to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 calendar days (BST, UTC+6)

When submitting a data rights request, please provide sufficient information to allow us to verify your identity and locate your account. This is necessary to protect the security of your personal data and to ensure that requests are fulfilled only to the verified account holder.