bha99 Privacy Policy — How We Handle Your Personal Data

1 Introduction

bha99 ("bha99", "we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our online betting and casino platform (the "Platform"). This Privacy Policy describes in detail how bha99 collects, uses, stores, shares, and protects personal information provided by users based in Bangladesh and other permitted jurisdictions.

By registering an account on bha99 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to the practices described in this policy, you must not use the Platform.

This Privacy Policy should be read alongside the bha99 Terms & Conditions, which together form the complete agreement governing your use of the Platform. Capitalised terms not defined in this policy carry the meanings given to them in the Terms & Conditions.

2 Data We Collect

bha99 collects personal data through multiple channels, including account registration, identity verification, payment processing, platform usage, and communications with our support team. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create a bha99 account, we collect: your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This information is required to create and administer your account.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to verify that you are aged 21 or older, we may collect copies of: a government-issued identity document (National ID card, passport, or driver's licence), proof of residential address (utility bill or bank statement dated within the last three months), and where required, a selfie or live photo for document matching purposes.

2.3 Financial Data

We collect transaction records including deposit and withdrawal amounts, timestamps, payment method identifiers (e.g., bKash mobile number, Nagad account reference), and transaction status. We do not store full card numbers or mobile banking PINs. Payment card data is handled directly by our certified payment processor.

2.4 Usage and Behavioural Data

We automatically collect data about how you interact with the Platform, including: pages visited, games played, bet history, session duration, click-stream data, device type, operating system, browser type and version, IP address, and approximate geographic location derived from IP.

2.5 Communications Data

If you contact bha99 support or respond to any communication from us, we retain records of that correspondence including email content, live chat transcripts, and the date and time of contact.

3 How We Use Your Data

bha99 uses your personal data only for the purposes described in this policy. We do not use your data in ways that are incompatible with these stated purposes without your prior consent.

• Account administration: Creating, maintaining, and securing your bha99 account, and enabling you to log in and use the Platform.
• Identity verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our KYC obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank in Bangladeshi Taka.
• Platform operation: Delivering the sportsbook, live casino, and slots experience; recording bet outcomes; calculating and crediting winnings; applying bonuses and promotions.
• Fraud prevention and security: Monitoring for suspicious account activity, preventing bonus abuse, detecting unauthorised access, and safeguarding the integrity of the Platform.
• Customer support: Responding to your enquiries, resolving disputes, and processing complaints efficiently.
• Regulatory compliance: Meeting anti-money laundering (AML) obligations, retaining records as required, and cooperating with lawful requests from competent authorities.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviour and applying any self-exclusion, deposit limit, or cooling-off requests you have made.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, design, and content offerings.
• Marketing communications: Sending you information about bha99 promotions, bonuses, and platform updates — but only where you have given consent or where we have a legitimate interest in doing so. You may opt out at any time.

4 Legal Basis for Processing

bha99 processes personal data on the following legal bases, depending on the purpose of processing:

4.1 Contractual Necessity

Processing your registration data, KYC data, and financial data is necessary for bha99 to perform its contractual obligations to you — namely to provide you with a functional betting and casino account, to process your BDT deposits and withdrawals, and to credit your winnings. Without this processing, bha99 cannot provide the Platform to you.

4.2 Legal Obligation

Certain processing activities — such as age verification, identity checks, transaction record keeping, and cooperation with law enforcement — are required by applicable law. bha99 carries out this processing to comply with its legal obligations as a platform operator.

4.3 Legitimate Interests

bha99 processes usage data, device data, and communications data on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. This includes fraud detection, responsible gaming monitoring, and platform analytics. We have assessed that these interests are not overridden by your privacy rights.

4.4 Consent

Where bha99 sends marketing communications beyond transactional messages, or where it processes data that is not strictly necessary for platform operation, we will seek your prior consent. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.

5 Sharing Your Data

bha99 does not sell, rent, or trade your personal data to any third party for their own commercial use. We share personal data only in the circumstances described below, and only to the minimum extent necessary.

5.1 Service Providers

bha99 engages third-party service providers to perform functions on our behalf, including payment processing (bKash, Nagad, Rocket, Upay, and card processors), identity verification services, cloud hosting and data storage, customer support software, and platform analytics. These providers are contractually prohibited from using your data for any purpose other than the service they provide to bha99.

5.2 Game Providers

When you play games supplied by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session and game-outcome data may be shared with those providers for the purpose of operating the game and resolving disputes. Game providers are bound by confidentiality obligations.

5.3 Legal and Regulatory Disclosure

bha99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or when we reasonably believe that disclosure is necessary to prevent fraud, protect the safety of any person, or protect bha99's legal rights.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of bha99's assets, your personal data may be transferred to the acquiring entity. We will notify you by email prior to any such transfer taking effect and will ensure the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

6 Payment Data

bha99 takes the security of financial data with the utmost seriousness. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction is processed through certified payment gateways that operate independently of bha99's core systems.

bha99 retains only the minimum transaction metadata necessary for record keeping and dispute resolution: the payment method type, the last four digits of a card (where applicable), the mobile account reference (for MFS methods), the transaction amount in BDT, and the timestamp. Full card numbers, CVV codes, and mobile banking PINs are never stored on bha99's servers.

All financial transactions processed through the Platform use SSL/TLS encryption. bha99 complies with its anti-money laundering obligations and may request additional documentation before processing large or unusual withdrawals. Withdrawal requests are fulfilled only to the same payment method used for the originating deposit, wherever technically possible, to prevent financial fraud.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. bha99 uses cookies and similar technologies (such as local storage and session tokens) to maintain your logged-in session, remember your preferences, and collect aggregated analytics about platform performance.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancer cookies. These cannot be disabled without breaking the Platform.
• Preference cookies: Remember your language or display settings so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — pages visited, time spent, errors encountered — to help bha99 improve its service. We use first-party analytics only.

7.3 What We Do Not Use

bha99 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling networks. We do not share cookie data with external advertising platforms.

7.4 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8 Data Retention

bha99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Once the applicable retention period has expired, bha99 will securely delete or irreversibly anonymise your personal data. If you request account closure, we will process your request promptly while retaining only the data we are legally required to keep.

9 Security Measures

bha99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bha99's servers
• Encrypted storage for sensitive data fields including identity documents and financial records
• Role-based access controls ensuring that personal data is accessible only to bha99 staff who require it to perform their job function
• Two-factor authentication for internal administrative access to data systems
• Regular security audits and vulnerability assessments conducted by qualified security professionals
• Automated anomaly detection to identify and respond to unusual account activity in real time
• Secure data centre facilities with physical access controls for servers storing bha99 player data

Despite these measures, no system is entirely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bha99 will notify affected players without undue delay and will take immediate remedial action.

10 Your Rights

As a bha99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days.

10.1 Right of Access

You have the right to request a copy of the personal data bha99 holds about you, together with information about how it is being processed. This is sometimes called a Subject Access Request (SAR).

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account information such as your email address directly within your account settings.

10.3 Right to Erasure

In certain circumstances you may request that bha99 delete your personal data. This right is not absolute — we may need to retain data to comply with legal obligations or to defend against legal claims. Where erasure is not possible in full, we will inform you of what data must be retained and why.

10.4 Right to Restrict Processing

You may request that bha99 restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.

10.5 Right to Data Portability

Where bha99 processes your personal data on the basis of your consent or a contract with you, you have the right to receive a structured, commonly used, machine-readable copy of that data.

10.6 Right to Object

You have the right to object to processing based on bha99's legitimate interests, including profiling. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.

10.7 Withdrawing Consent

Where bha99 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal. To withdraw marketing consent, email [email protected] or use the unsubscribe link in any marketing communication.

11 Children's Privacy

The bha99 Platform is strictly intended for adults aged 21 years and older. bha99 does not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is a mandatory step in the bha99 registration process, and accounts found to belong to individuals under 21 will be closed immediately with all associated data deleted.

If you believe that bha99 has inadvertently collected data from a person under the age of 21, please contact us immediately at [email protected] and we will take prompt action to delete the relevant data.

12 Changes to This Privacy Policy

bha99 reserves the right to update or modify this Privacy Policy at any time. When we make changes that are material to your privacy rights or to how we process your personal data, we will notify registered players by email at least 14 days before the changes take effect.

The updated policy will always be published on this page with a revised "Last Updated" date at the top. For minor or non-material changes — such as corrections to spelling, formatting updates, or editorial clarifications that do not affect the substance of the policy — we may update the page without prior notice.

Your continued use of the bha99 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the changes, you must stop using the Platform and contact [email protected] to request account closure.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bha99 handles your personal data, please contact our Data Protection team. We are committed to addressing all privacy-related enquiries promptly and transparently.

You can reach us at the following email address. Please note this is a plain-text address — it is not a clickable link:

[email protected]

When contacting us regarding a data request, please include your registered email address and the nature of your request so we can handle it efficiently. bha99 aims to acknowledge all privacy-related correspondence within 5 business days and to resolve data requests within 30 days of receipt.

Bangladesh Standard Time (BST, UTC+6) applies to all bha99 support operations. Our team is available 24 hours a day, 7 days a week.