Privacy Policy

This Privacy Policy ("Policy") describes how bda999 ("we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the player", "the user") who access or use the bda999 platform at bda999.org, including any associated mobile experiences, customer support channels, and promotional communications.

By registering a bda999 account, making a deposit, or otherwise using any part of the bda999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the bda999 platform.

bda999 is committed to handling your personal information responsibly and in accordance with applicable data protection principles. We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, accidental loss, destruction, or disclosure. This Policy is reviewed periodically and updated to reflect changes in our data practices or applicable legal requirements.

When you register a bda999 account, we collect the following personal identification data, which is necessary to verify your identity and comply with our Know Your Customer (KYC) obligations:

• Full legal name as it appears on your official government-issued identification document.
• Date of birth to confirm you meet the minimum age requirement of 21 years.
• Residential address including street, city, and postal code within Bangladesh.
• Mobile phone number for account verification, two-factor authentication, and support communications.
• Email address for account correspondence, transactional notifications, and promotional communications where consent has been given.
• Government-issued ID such as National Identity Card (NID), passport, or driving licence, collected during the KYC verification process.

To process deposits and withdrawals, bda999 collects certain financial information. All payment data is handled in accordance with applicable financial security standards. Specifically, we collect:

• Mobile financial service account references for bKash, Nagad, Rocket, and Upay transactions — specifically the registered mobile number associated with the wallet.
• Bank account details where bank transfer is used as the deposit or withdrawal method, including account holder name, account number, and bank name.
• Transaction records including deposit amounts, withdrawal requests, transaction timestamps, and reference numbers, retained for accounting and audit purposes.
• Card details for Visa or Mastercard transactions. Full card numbers are never stored by bda999 — payment card data is tokenised and handled by our payment processor.

When you access bda999, we automatically collect certain technical data about your device and browsing behaviour. This data is used to operate and improve the platform, detect fraud, and ensure account security:

• IP address and approximate geographic location, used for fraud detection and access control.
• Device type, operating system, and browser used to access the platform.
• Session data including login timestamps, session duration, pages visited, and features used.
• Betting and gaming history including game titles played, wager amounts, outcomes, and bonus usage, retained for account management and responsible gaming monitoring.
• Cookie and local storage data as described in the Cookies section of this Policy.

bda999 processes your personal data for the following lawful purposes. In each case, we rely on one of the following legal bases: contractual necessity, legitimate interest, legal obligation, or your explicit consent.

bda999 does not sell your personal data. We may share your data with the following categories of trusted third-party service providers, strictly for the purposes outlined in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and licensed bank partners — to facilitate deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and age-verification services used to confirm player identity and comply with player protection requirements.
• Game content providers: Studio partners such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data to deliver and support game content. They do not receive your full personal profile.
• Fraud and risk management providers: Third-party services used to detect suspicious activity, bot traffic, and multi-accounting behaviour on the bda999 platform.
• Analytics and performance tools: Anonymised or aggregated usage data may be shared with performance analytics providers to help bda999 improve platform reliability and user experience.
• Legal and regulatory authorities: bda999 will disclose personal data to competent authorities where required to do so by law, court order, or formal regulatory request.

All third-party service providers engaged by bda999 are required to process personal data only as instructed by bda999 and are contractually prohibited from using your data for their own independent purposes.

bda999 uses cookies and similar technologies (such as local storage and session storage) to provide core platform functionality and improve your experience. A cookie is a small text file stored on your device when you visit bda999.org. The following types of cookies are used:

• Strictly necessary cookies: Required for the bda999 platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language setting, display options, and notification preferences, so you do not need to re-enter these each time you visit.
• Analytics cookies: Anonymised cookies that help bda999 understand how players navigate the platform, which features are most used, and where technical issues may arise. This data is aggregated and cannot be used to identify individual players.
• Security and fraud-detection cookies: Used to identify unusual access patterns, detect bot activity, and flag potentially fraudulent sessions for review.

bda999 does not use third-party advertising cookies or cross-site tracking pixels. You may control cookie settings through your browser settings; however, disabling strictly necessary cookies may prevent you from accessing certain features of the bda999 platform.

bda999 retains your personal data for as long as your account remains active and for a defined period following account closure, as required by applicable financial record-keeping and player protection obligations. General retention principles are as follows:

• Active account data: Retained for the full duration of the account relationship plus a minimum of five years following account closure.
• Transaction records: Financial transaction records are retained for a minimum of seven years to comply with financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of last account activity or account closure, whichever is later.
• Marketing consent records: Records of your marketing consent preferences are retained for the period during which consent remains active and for a reasonable period afterwards as evidence of consent.
• Technical logs: Server access logs and security event logs are retained for up to 12 months for fraud investigation and incident response purposes.

When personal data is no longer required, bda999 will securely delete or anonymise it so that it can no longer be associated with any individual player.

As a bda999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your full name, registered email address, and a description of your request. bda999 will respond within a reasonable timeframe, typically within 30 days.

• Right of access: You may request a copy of all personal data bda999 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your bda999 account.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to any mandatory retention obligations that require bda999 to retain the data for a specified period.
• Right to restrict processing: You may request that bda999 temporarily restrict the processing of your data while a dispute or verification request is resolved.
• Right to withdraw consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing of your personal data where bda999 relies on legitimate interest as the legal basis, subject to bda999's overriding legitimate grounds.

bda999 implements a combination of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and bda999.org.
• Encryption at rest for sensitive personal and financial data stored on bda999 servers.
• Two-factor authentication (2FA) available for player accounts to add a second layer of login security.
• Access controls that restrict internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the bda999 platform infrastructure.
• Fraud monitoring systems that operate continuously to detect and respond to suspicious account activity in real time.

Despite these measures, no online platform can guarantee absolute security. bda999 encourages all players to use a strong, unique password for their account, enable two-factor authentication where available, and never share their login credentials with any third party. If you suspect your account has been compromised, contact bda999 support immediately at [email protected].

bda999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated effective date. Where required by applicable law, or where the changes materially affect how we process your data, bda999 will notify registered players by email or via an on-platform notification prior to the changes taking effect.

Your continued use of the bda999 platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should close your account and cease using the platform. For questions about this Policy or how bda999 handles your personal data, please contact our support team at [email protected].