99baji Privacy Policy

1 Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data collected by 99baji ("we", "us", "our") through the website accessible at 99baji.bio, its subdomains, and any associated mobile web applications (collectively the "Platform"). It applies to all registered players, prospective players, and casual visitors who access the Platform from Bangladesh or elsewhere.

1.2 99baji is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We apply the same high standard of data care to every player, regardless of their location within Bangladesh — whether they are based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh.

1.3 This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the 99baji Platform.

1.4 By accessing the Platform or creating a 99baji account, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2 Data We Collect

2.1 99baji collects personal data through several channels: directly from you during registration and account use, automatically through technical systems as you interact with the Platform, and occasionally from third-party identity verification and payment processing partners. The categories of personal data we collect are detailed below.

2.2 We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, or health information, unless specifically required by law and only with your explicit consent.

2.3 Where you provide us with personal data relating to third parties (for example, a referee's details in a referral programme), you confirm that you have obtained appropriate consent from that third party to share their information with 99baji.

3 How We Use Your Data

3.1 99baji uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your 99baji account, including sending account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
• Identity Verification (KYC): To verify your identity and age (18+) in accordance with our fraud prevention and anti-money laundering obligations before processing your first withdrawal request.
• Transaction Processing: To process deposits via bKash, Nagad, Rocket, Upay, and bank transfers, and to process withdrawal requests to your verified payment method.
• Platform Personalisation: To customise your experience on the Platform — for example, displaying games or promotions relevant to your betting history, preferred sports (such as cricket BPL, IPL, T20 World Cup), or casino game preferences.
• Customer Support: To respond to your enquiries, complaints, and support requests via live chat or email, and to maintain records of those communications for quality assurance.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct described in the Terms & Conditions.
• Responsible Gaming: To monitor betting patterns that may indicate problematic gambling behaviour, and to enforce self-exclusion and deposit limit settings applied to your account.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers) by email or SMS — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal Compliance: To comply with applicable anti-money laundering regulations, respond to lawful requests from competent authorities, and fulfil our legal and regulatory obligations.
• Platform Improvement: To analyse aggregate usage data to identify technical issues, improve navigation, and develop new features that better serve Bangladeshi players.

3.2 We do not use your personal data for automated decision-making that produces legal effects concerning you, except in the case of automated fraud detection systems that may temporarily suspend an account pending a manual review. In such cases, you have the right to request human review of any automated decision.

4 Legal Basis for Processing

4.1 99baji processes your personal data on the following legal grounds:

• Contract Performance: Processing is necessary to perform the contract between you and 99baji — specifically to operate your account, process transactions, and provide the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering legislation, identity verification requirements, and lawful requests from competent authorities.
• Legitimate Interests: Processing is necessary for 99baji's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent: For specific processing activities such as marketing communications, we rely on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

5 Cookies & Tracking Technologies

5.1 99baji uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse how players use the site. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymous, aggregated information about how visitors use the Platform — which pages are most visited, how long sessions last, and which features are used most often. This data helps us improve the Platform experience for all players.
• Functional Cookies: These cookies remember your preferences (such as language settings and game category filters) so you do not have to re-enter them on every visit.
• Marketing Cookies: These cookies track your browsing behaviour to enable us to show you relevant promotional content on the Platform. We do not use third-party advertising networks to serve ads based on your activity outside of the 99baji Platform.

5.2 You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. Disabling performance or marketing cookies will not affect your ability to place bets or manage your account.

5.3 We do not use cross-site tracking cookies that follow you to third-party websites after you leave the 99baji Platform.

6 Data Sharing & Disclosure

6.1 99baji does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Processors: We share necessary financial and identity data with payment service providers (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard) to process your deposit and withdrawal transactions. These providers act as data processors and are contractually required to maintain the security and confidentiality of your data.
• KYC Verification Partners: We may share identity documents with approved third-party KYC and identity verification services to assist with the verification process. These partners are bound by strict confidentiality obligations.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive necessary session data (such as a pseudonymous player identifier and session token) to operate their game software within the Platform. They do not receive your full identity or payment details.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or binding regulatory directive. We will notify you of any such disclosure where permitted by law.
• Business Succession: In the event of a merger, acquisition, or sale of all or substantially all of 99baji's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to your data being subject to any different privacy policy.

6.2 All third parties with whom we share personal data are required to process that data in accordance with applicable data protection principles and to implement appropriate security measures. We do not permit third-party processors to use your data for their own marketing or business purposes.

7 Data Retention

7.1 99baji retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the full duration of your active account. If your account is dormant for more than 24 consecutive months with no login activity, we will contact you to confirm whether you wish to keep the account open before any data is archived.
• Post-Closure Account Data: Following account closure (whether requested by you or enforced by 99baji), we retain your core account and transaction records for a period of five (5) years. This retention is necessary to comply with anti-money laundering obligations and to handle any post-closure disputes or legal claims.
• KYC Documents: Identity documents and proof-of-address submissions are retained for five (5) years from the date of verification, after which they are securely and permanently deleted from our systems.
• Support Communications: Live chat transcripts and support emails are retained for three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Records of your marketing consent or opt-out are retained indefinitely so that we can demonstrate compliance with your stated preferences.
• Technical & Log Data: Server logs and session data are retained for a rolling period of twelve (12) months for security monitoring and fraud detection purposes.

7.2 At the end of each applicable retention period, personal data is securely deleted or anonymised (so that it can no longer be attributed to you) in accordance with our internal data disposal procedures.

8 Data Security

8.1 99baji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 99baji's servers is encrypted using industry-standard TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Secure Data Centres: Player data is stored on secure servers protected by physical access controls, firewall systems, and intrusion detection software. Servers are hosted in facilities with 24/7 physical security monitoring.
• Access Controls: Access to personal data within 99baji is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific job function. All internal access to personal data is logged and audited.
• Password Security: Account passwords are stored as cryptographic hashes — never in plain text. 99baji cannot retrieve your password; it can only be reset via a verified process to your registered email or phone number.
• Two-Factor Authentication: 99baji offers optional two-factor authentication (2FA) for player accounts as an additional layer of protection against unauthorised access. We strongly recommend that all players enable 2FA.
• Penetration Testing: The Platform undergoes periodic security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.

8.2 While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that affects your personal data, we will notify you promptly and provide clear guidance on the steps you should take to protect your account.

8.3 You are also responsible for maintaining the security of your own account. You must keep your 99baji password confidential, use a strong and unique password, and notify our support team immediately if you suspect that your account has been accessed without your authorisation.

9 Your Privacy Rights

9.1 As a 99baji player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]":

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, and machine-readable format within five (5) business days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Note that this right is subject to legal retention obligations — we may be required to retain certain data for anti-money laundering compliance even after an erasure request.
• Right to Restrict Processing: You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a portable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

9.2 We will respond to all data rights requests within five (5) business days. Where a request is complex or involves a large volume of data, we may extend this period by a further ten (10) business days, in which case we will notify you of the extension and the reason for it.

9.3 We will not charge a fee for exercising any of the rights listed above unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse the request, providing our reasons in writing.

10 Children's Privacy

10.1 The 99baji Platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or use the Platform in any capacity.

10.2 If 99baji becomes aware that it has inadvertently collected personal data from a person under the age of 18, we will immediately close the associated account, delete all personal data collected in connection with that account, and forfeit any funds held in that account in accordance with our Terms & Conditions.

10.3 Parents and guardians in Bangladesh are advised to use parental control software to prevent minors in their households from accessing online gambling platforms, including 99baji. If you believe a minor has registered an account, please contact us immediately at [email protected].

11 Third-Party Links

11.1 The 99baji Platform may contain links to third-party websites — for example, links to the websites of payment service providers such as bKash or Nagad, or to game studio websites. These links are provided for informational convenience only.

11.2 99baji has no control over the content, privacy practices, or data handling of any third-party website. This Privacy Policy applies solely to data collected and processed by 99baji through the Platform. When you click a link to a third-party site, you leave the 99baji Platform and are subject to that third party's own privacy policy.

11.3 We encourage you to review the privacy policy of any third-party website you visit before providing any personal information on that site. 99baji accepts no responsibility or liability for the privacy practices of third-party websites.

12 Changes to This Privacy Policy

12.1 99baji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Send an email notification to all registered players at their registered email address; and
• Where appropriate, display a prominent notice on the Platform homepage for a period of at least fourteen (14) days following the update.

12.2 Your continued use of the Platform following the publication of an updated Privacy Policy — or following the expiry of any notice period we have provided — constitutes your acceptance of the revised Policy.

12.3 If you do not agree with a material change to this Policy, you must cease using the Platform and contact [email protected] to request account closure prior to the effective date of the change.

13 Contact Us

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to 99baji's handling of your personal data, please contact our Data Support team through any of the following channels:

• Live Chat: Available 24/7 directly within the Platform. Average response time: 2–5 minutes.
• Email: [email protected] — for data rights requests, please use the subject line "Data Rights Request — [Your Username]"
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

13.2 We treat all privacy-related communications with the highest priority. If your query relates to a potential data breach, account compromise, or urgent security matter, please mark your message as "URGENT — Security" so that it is escalated to our security team immediately.