bj99 Privacy
Policy

1 Introduction

bj99 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data obtained from users ("you", "your", "User") who access or use our online gaming and sports betting platform.

This policy should be read in conjunction with our Terms & Conditions, which govern your use of the bj99 platform. Where there is any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Continued use of the platform following any such update constitutes your acceptance of the revised policy.

2 Data Controller

For the purposes of applicable data protection laws, bj99 acts as the data controller with respect to the personal information collected through the platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable legal requirements.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact our data protection team, please reach us at:

• Email: [email protected]
• Live Chat: Available 24/7 via the platform

3 Data We Collect

We collect several categories of personal information necessary to operate the bj99 platform, comply with legal obligations, and provide you with a secure and personalized gaming experience. The types of data we collect include:

3.1 Registration Information

When you create a bj99 account, we collect:

• Full legal name
• Date of birth (to verify you are 18 years or older)
• Email address
• Mobile phone number
• Residential address
• Chosen username and password (passwords are encrypted and not accessible to our staff)
• Preferred currency (BDT or others supported by the platform)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer compliance obligations, we may request:

• Copy of government-issued photo identification (National ID Card, Passport, Driving Licence)
• Proof of address documents (utility bill, bank statement, government letter dated within the last three months)
• Proof of payment method ownership (screenshot of mobile wallet, bank card photo, account statement)
• Selfie photograph holding your identification document

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment methods used (bKash, Nagad, Rocket, bank transfer, etc.)
• Payment method details necessary to process transactions (mobile wallet numbers, bank account details—sensitive card information is handled by PCI-compliant third-party processors and not stored by bj99)
• Wagering history including bets placed, games played, winnings, and losses
• Bonus and promotional activity records

3.4 Technical & Device Information

When you access the bj99 platform, we automatically collect:

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Screen resolution and device identifiers
• Pages visited, features used, and clickstream data
• Referral source (how you arrived at our website)
• Date, time, and duration of your sessions

3.5 Communications & Support Data

• Records of correspondence with our customer support team via live chat, email, or phone
• Survey responses, feedback forms, and promotional communications preferences
• Marketing consent status and communication history

4 How We Use Your Data

bj99 processes your personal data for the following legitimate purposes:

• Account Management: To create, maintain, and administer your bj99 account, authenticate your identity during login, and provide access to platform features.
• Transaction Processing: To process deposits, withdrawals, and in-game wagers; to maintain accurate financial records; and to comply with anti-money laundering regulations.
• Age Verification & KYC Compliance: To verify that you meet the minimum age requirement (18+) and to fulfill our legal obligations to confirm your identity, prevent fraud, and detect suspicious activity.
• Customer Support: To respond to your inquiries, resolve technical issues, handle complaints, and provide assistance via live chat, email, or phone.
• Platform Security & Fraud Prevention: To monitor account activity for signs of unauthorized access, collusion, bonus abuse, or other violations of our Terms & Conditions.
• Legal & Regulatory Compliance: To meet our obligations under applicable laws and regulations, respond to lawful requests from regulatory authorities, law enforcement agencies, and courts of competent jurisdiction.
• Personalization & Platform Improvement: To understand how you use our platform, improve the quality and relevance of our services, optimize game recommendations, and develop new features based on aggregated usage patterns.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have provided explicit consent and in accordance with your current marketing preferences.
• Responsible Gaming: To monitor gaming patterns and proactively identify users who may be exhibiting signs of problem gambling, enabling our responsible gaming team to intervene appropriately and compassionately.

5 Legal Basis for Processing

We rely on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, transaction processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering legislation, age verification requirements, tax reporting obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud detection and prevention, platform security, internal analytics, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, particularly in relation to marketing communications. You may withdraw your consent at any time by contacting our support team or updating your account communication preferences.

6 Data Sharing & Disclosure

bj99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients for the purposes described in this policy:

• Payment Service Providers: Local and international payment processors (including bKash, Nagad, Rocket, and banking partners) that facilitate your deposits and withdrawals. These providers receive only the data necessary to execute the requested transaction and are bound by strict confidentiality and security obligations.
• KYC & Identity Verification Partners: Licensed identity verification agencies that assist us in confirming your identity and age as part of our compliance obligations. All such partners are contractually required to handle your documents securely and to use them only for the purposes for which they are shared.
• Game Content Providers: Third-party game developers and platform providers whose titles are featured on bj99. These providers may receive limited technical and gameplay data necessary for game operation, fairness auditing, and jackpot management. No financial or sensitive personal data is shared beyond what is technically necessary.
• Fraud Prevention & Security Services: Specialist third-party fraud detection and cybersecurity firms engaged by bj99 to monitor account activity, identify suspicious patterns, and protect the integrity of the platform.
• Analytics Providers: Aggregated, anonymized, or pseudonymized usage data may be shared with analytics platforms to help us understand user behavior and improve the platform experience. No data shared in this context can be used to directly identify an individual user.
• Regulatory Authorities & Law Enforcement: We will disclose your personal data to relevant governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of bj99, its users, or the public.
• Professional Advisers: Legal counsel, auditors, accountants, and compliance consultants engaged by bj99 on a confidential professional basis where disclosure of relevant data is necessary for them to provide their services.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bj99's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

All third parties with whom we share personal data are required to maintain appropriate technical and organizational security measures and to process your data only in accordance with our instructions or as required by law.

7 Data Retention

We retain your personal data for as long as your bj99 account remains active and for such further period as is necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are determined as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and financial record-keeping requirements.
• KYC Documents: Identity and verification documents are retained for the period required by applicable KYC and AML regulations from the date of verification or the date of account closure, whichever is later.
• Transaction Records: Full financial transaction histories are retained for a minimum of seven (7) years to satisfy tax reporting, AML compliance, and audit requirements.
• Customer Support Communications: Support tickets, chat logs, and email correspondence are retained for up to three (3) years from the date of resolution to assist with any follow-up disputes or regulatory enquiries.
• Marketing Consent Records: Records of your marketing consent status and preferences are retained for the duration of your account plus three (3) years to evidence compliance with applicable marketing regulations.
• Technical & Log Data: Server logs and technical access records are retained for up to twelve (12) months before being anonymized or deleted.

Once the applicable retention period expires, we will securely delete or anonymize your personal data in accordance with our internal data destruction procedures.

8 Security Measures

bj99 takes the security of your personal data seriously. We maintain a comprehensive information security program that incorporates the following technical and organizational safeguards:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is protected using industry-standard Transport Layer Security (TLS) encryption.
• Data Encryption at Rest: Sensitive personal data stored on our servers, including identity documents and financial records, is encrypted using strong encryption standards.
• Access Controls: Access to personal data is strictly limited to bj99 personnel and authorized third parties who require it to perform their designated functions. All access is logged and subject to regular review.
• Password Security: User passwords are hashed using strong one-way hashing algorithms. We never store passwords in plain text and our staff cannot retrieve your password, only reset it.
• Two-Factor Authentication (2FA): We offer 2FA as an optional enhanced security measure on user accounts to provide an additional layer of protection against unauthorized access.
• Vulnerability Management: We conduct regular security assessments, penetration testing, and vulnerability scanning of our platform to identify and remediate potential security weaknesses.
• Incident Response: We maintain a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify you and relevant authorities as required by applicable law within the prescribed timeframes.

9 Your Data Protection Rights

Subject to applicable law and certain legal exceptions, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how we process it. We will respond to verified access requests within a reasonable period, typically within thirty (30) days.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and we have no overriding legitimate grounds. This right is subject to legal retention obligations that may require us to retain certain data.
• Right to Restriction of Processing: You have the right to request that we restrict processing of your personal data in certain circumstances, such as where you contest its accuracy or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another controller.
• Right to Object: You have the right to object at any time to processing of your personal data based on legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] or via live chat. We may require you to verify your identity before processing your request to ensure we do not disclose your data to unauthorized parties.

10 Cookies & Tracking Technologies

bj99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and serve relevant content. A cookie is a small text file placed on your device when you visit our website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable core features such as account login, session management, and security. They cannot be disabled without significantly impairing platform functionality.
• Performance & Analytics Cookies: Help us understand how visitors use the platform by collecting aggregated, anonymized data on page visits, navigation paths, and feature usage. This information is used solely to improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and deposit limits to provide a more personalized experience across sessions.
• Marketing Cookies: Used — with your consent — to track visits from marketing channels and serve relevant promotional content. These cookies may be set by our marketing partners and are subject to those partners' own privacy policies.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the bj99 platform. For detailed information on managing cookies, please refer to your browser's help documentation.

11 Third-Party Links

The bj99 platform may contain links to third-party websites, services, or applications, including payment gateways and game provider portals. This Privacy Policy applies solely to data collected and processed by bj99 in connection with the bj99 platform.

We are not responsible for the privacy practices, content, or security of any third-party website or service. We strongly encourage you to review the privacy policies of any third-party sites you visit through links on the bj99 platform before providing them with any personal information.

12 Children's Privacy

The bj99 platform is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18. If we discover or are notified that we have inadvertently collected data from a minor, we will immediately close the associated account and delete all related personal data from our systems.

If you are a parent or guardian and believe that your child has created an account on the bj99 platform, please contact us immediately at [email protected] so that we can take prompt corrective action. We take underage gambling extremely seriously and co-operate fully with all relevant authorities and parental notification initiatives.

For guidance on protecting minors from gambling-related content, we recommend exploring parental control software and website-filtering tools available on your device or through your internet service provider.

13 International Data Transfers

bj99 operates globally and your personal data may be transferred to, stored, or processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your home jurisdiction.

Whenever we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your data and to ensure that the transfer complies with applicable data protection requirements. Such safeguards may include:

• Transferring data only to countries that provide an adequate level of data protection as determined by relevant regulatory bodies.
• Implementing standard contractual clauses or equivalent binding agreements with data recipients that require them to protect personal data to a standard consistent with this Privacy Policy and applicable law.
• Ensuring that our third-party service providers and partners have equivalent data security and privacy programs in place before any international transfer takes place.

For further information about the safeguards we apply to international data transfers, please contact us at [email protected].

14 Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, regulatory guidance, or platform features. When we make material changes to this policy, we will notify you by email (to the address registered on your account) and by displaying a prominent notice on the bj99 platform for a reasonable period before the changes take effect.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. We encourage you to review this policy periodically to stay informed about how we are protecting your personal information.

Your continued use of the bj99 platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and contact us to close your account.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, please do not hesitate to get in touch with our team through any of the following channels:

• Email: [email protected] — for formal data requests, privacy complaints, or KYC-related enquiries.
• Live Chat: Available 24 hours a day, 7 days a week directly on the bj99 platform — the quickest way to reach our support team for general privacy questions.
• Response Times: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days of receipt. For complex data access or deletion requests, we will notify you if additional time is required.

For self-exclusion requests, responsible gaming support, or urgent account restrictions, please visit our Responsible Gaming page or use our 24/7 live chat for immediate assistance. For answers to common account and platform questions, please visit our FAQ page.