Privacy Policy

Data We Collect

baii99 collects personal data in two principal ways: information you provide directly when you register and use the platform, and information gathered automatically through your interaction with our website, games, and payment systems. The categories below describe each type in detail.

Information you provide directly:

• Registration details: Full legal name, date of birth, gender, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), email address, and Bangladesh mobile phone number.
• Identity verification documents: Government-issued photo identification (National ID card, passport, or driving licence), selfie photograph, and any supplementary documents requested during KYC review.
• Payment information: Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay; bank account details for bank transfers; masked card numbers for Visa or Mastercard deposits. baii99 does not store full card numbers on its own servers.
• Communications: Content of messages, emails, and live-chat transcripts you send to baii99 support, including any attachments or screenshots provided as part of a dispute or support request.
• Responsible gaming inputs: Self-exclusion requests, deposit limit preferences, time-out configurations, and any self-assessment responses submitted through responsible gaming tools.

Information collected automatically:

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and language settings.
• Usage and session data: Pages visited, game sessions initiated, bet amounts, game outcomes, session duration, navigation paths, and feature interactions within the platform.
• Geolocation data: Approximate geographic location derived from IP address, used to verify that you are accessing the platform from an eligible jurisdiction and to personalise content where relevant.
• Cookies and tracking technologies: First-party and select third-party cookies, local storage objects, and session tokens. See the Cookies section below for full details.
• Transaction logs: Timestamped records of all deposits, withdrawals, bonus activations, and wagers associated with your account, retained for audit and compliance purposes.

How We Use Your Data

baii99 processes your personal data on the basis of contractual necessity (to deliver the services you signed up for), legal obligation (to meet compliance and anti-money laundering requirements), legitimate interest (to protect the platform and improve the player experience), and — where required — explicit consent (for optional marketing communications).

baii99 does not use automated decision-making or profiling that produces significant legal effects on individual players, except where required by our anti-fraud and responsible gaming systems. Where automated processes flag an account for review, a human compliance officer will assess the case before any account action is taken.

Data Sharing & Third Parties

baii99 does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the specified purpose. All third-party processors engaged by baii99 are bound by confidentiality obligations and data processing agreements.

• Payment processors: Your payment details are shared with the relevant mobile financial service provider (bKash, Nagad, Rocket, Upay) or card network (Visa, Mastercard) solely to process transactions you initiate. These providers operate under their own privacy frameworks and security standards.
• Identity verification providers: Where baii99 uses a third-party KYC service to verify identity documents, your ID data and selfie photograph are transmitted securely to that provider for verification purposes only. The data is not retained by the provider beyond the verification window.
• Game studio partners: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and game session data to deliver their games and resolve game-round disputes. Your full name and payment details are never shared with game studios.
• Analytics and platform performance: Anonymised or aggregated usage statistics may be shared with platform analytics tools to help us understand player behaviour at scale and improve the baii99 experience. No personally identifiable information is included in these datasets.
• Legal and regulatory authorities: baii99 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, court order, or to protect the rights and safety of our players and staff.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of baii99's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

Cookies & Tracking Technologies

baii99 uses cookies and similar tracking technologies to keep your session active, remember your preferences, protect against fraudulent access, and understand how players navigate the platform. The table below describes the categories of cookies in use and their purposes.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or fraud prevention cookies may prevent you from logging in or using certain features of the baii99 platform. baii99 does not respond to browser-level "Do Not Track" signals at this time, as there is no universally accepted standard for their interpretation.

Data Retention & Storage

baii99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold.

• Account and identity data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and financial record-keeping obligations.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial compliance requirements.
• KYC documents: Retained for the duration of your account plus five (5) years post-closure. Physical copies (if any) are securely destroyed after scanning and secure digital storage is confirmed.
• Support communications: Retained for three (3) years from the date of the last communication in a given support thread, to facilitate dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent obligations.
• Session and usage logs: Retained for twelve (12) months in detailed form, then aggregated and anonymised for long-term platform analytics. Anonymised aggregates are retained indefinitely.
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active self-exclusion period and to support responsible gaming monitoring obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using methods that prevent reconstruction of the original information. baii99 conducts periodic data audits to ensure retention schedules are applied consistently across all storage systems.

Data Security Measures

Protecting your personal data is a core operational priority at baii99. We implement a layered security architecture that combines technical controls, organisational policies, and ongoing monitoring to defend against unauthorised access, disclosure, alteration, or destruction of player data.

• Encryption at rest and in transit: All personal and financial data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher. Sensitive fields such as passwords are stored exclusively as salted cryptographic hashes — plaintext passwords are never stored.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff are granted the minimum level of data access required for their role. All access events are logged and subject to periodic review.
• Two-factor authentication: baii99 supports and encourages the use of two-factor authentication (2FA) for player accounts. Staff accounts with access to player data are required to use 2FA without exception.
• Penetration testing: baii99 engages qualified third-party security specialists to conduct regular penetration testing of the platform's infrastructure, APIs, and web application layer.
• Incident response: baii99 maintains a documented data breach response plan. In the event of a data breach that poses a risk to player rights, affected players will be notified promptly with details of the breach, the data involved, and the steps taken to contain it.
• Vendor security requirements: All third-party processors and service providers engaged by baii99 are required to demonstrate adequate data security standards, including encryption, access controls, and incident response capabilities, as a condition of engagement.

Your Privacy Rights

As a registered player on baii99, you hold a number of rights in relation to the personal data we process about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and your registered account details. We aim to respond within 30 days of receipt.

Policy Updates & Contact

baii99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, technology, regulatory requirements, or the services we offer. The effective date at the top of this document indicates when the current version was last revised.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — baii99 will notify registered players via the email address on file or through a prominent in-platform notice, at least fourteen (14) days before the changes take effect. For minor clarifications and non-material amendments, the updated Policy will be published on this page without separate individual notification.

Your continued use of baii99 following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update, you may request account closure before the updated Policy takes effect, and your personal data will be handled in accordance with the pre-update terms during the closure process.

• Data controller: baii99 is the data controller responsible for personal data collected through this platform.
• Privacy enquiries: For questions about this Privacy Policy, data subject rights requests, or concerns about data handling practices, contact us at [email protected] with "Privacy" in the subject line.
• Response time: baii99 aims to acknowledge all privacy-related communications within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.
• Related policies: This Privacy Policy should be read alongside the baii99 Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the platform.