bs99 Privacy Policy

bs99 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy describes how bs99 collects, processes, stores, and shares personal information relating to registered players and visitors to the bs99 website.

This Policy applies to all services offered by bs99, including cricket betting markets, live casino games, slots, crash games such as Plinko and Diamond Tycoon, and all associated account management, payment, and customer support functions. It should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which incorporate this Privacy Policy by reference.

By creating a bs99 account or by continuing to use the platform after this Policy's effective date, you acknowledge that you have read and understood how your personal data is handled as described in the sections below. If you do not agree with any part of this Policy, you must discontinue use of the platform and contact us to arrange account closure.

bs99 collects personal data in the following categories. We collect only the minimum data necessary for each identified purpose:

bs99 does not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health data, or biometric data unless specifically required and consented to for KYC purposes under applicable law.

bs99 collects personal data through the following channels:

• Direct submission: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a survey, you directly provide us with personal data.
• Automated technical collection: As you browse and interact with the bs99 platform, our servers automatically log technical data including your IP address, device identifiers, browser type, session timestamps, and pages accessed. This data is collected via server logs, cookies, and similar tracking technologies (see Section 7).
• Payment providers: When you initiate a transaction through bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners may share confirmation data with us for the purpose of crediting or debiting your account balance. bs99 does not store full card numbers or complete mobile wallet credentials.
• Identity verification partners: Where we engage third-party KYC providers to verify your identity documentation, those providers may return confirmation data and risk signals to bs99 as part of the verification workflow.
• Publicly available sources: In limited fraud-prevention or AML-compliance scenarios, bs99 may cross-reference publicly available records to verify identity or assess account risk.

bs99 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your bs99 account, including password resets and OTP-based session verification.
• Transaction processing: Executing deposits, crediting winnings, processing withdrawal requests to bKash, Nagad, Rocket, Upay, or card accounts, and maintaining accurate financial records.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information you provided matches your submitted documentation.
• Fraud prevention and security: Monitoring for suspicious login patterns, unusual transaction volumes, multi-accounting, bonus abuse, and other indicators of fraudulent or prohibited activity.
• AML and regulatory compliance: Meeting our obligations under anti-money laundering frameworks, including transaction monitoring, record retention, and where required, reporting to competent authorities.
• Responsible gaming: Monitoring your usage patterns to identify potential signs of problem gambling behaviour, enabling our team to reach out proactively where appropriate, and implementing tools such as deposit limits and self-exclusion at your request.
• Customer support: Responding to your queries, processing complaints, and resolving disputes in a timely and accurate manner.
• Platform improvement: Analysing aggregated and anonymised usage data to identify areas where the bs99 user experience can be improved, games performance optimised, and load times reduced.
• Marketing communications: Sending you personalised promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time.

bs99 does not use automated decision-making processes that produce legal or similarly significant effects on you without human oversight and review.

bs99 processes personal data under the following legal bases, which determine our right to handle your information for each specific purpose:

• Contractual necessity: Processing required to perform the contract between you and bs99 — including account creation, transaction processing, and customer support — is carried out on the basis of contractual necessity. Without this processing, bs99 cannot provide its services to you.
• Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and financial record retention — are required by applicable law. bs99 must carry out this processing regardless of your preference.
• Legitimate interests: Processing carried out to protect the security and integrity of the platform, prevent fraud, and improve our services is conducted on the basis of bs99's legitimate business interests, balanced against your right to privacy. We conduct proportionality assessments before relying on this basis.
• Consent: Marketing communications, non-essential cookies, and any other processing not covered by the above bases are carried out only with your explicit prior consent. You may withdraw consent at any time by contacting us at [email protected] or by updating your account preferences.

bs99 does not sell, rent, or trade personal data to third parties for commercial purposes. Data is shared only in the following controlled circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to the extent required to execute your requested deposit or withdrawal. Each payment partner is subject to their own data protection obligations.
• KYC and identity verification providers: Identity documents and verification requests may be processed by contracted third-party verification services. These providers act as data processors under binding data processing agreements and may not use your data for any purpose other than the verification service they provide to bs99.
• Game content providers: Licensed game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive a pseudonymous player session token to facilitate gameplay. These studios do not receive your full identity data.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful authority request, bs99 may disclose personal data to competent government agencies, law enforcement bodies, or financial intelligence units. We will notify you of any such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, personal data held by bs99 may be transferred to the acquiring entity as part of the business assets. We will notify affected users before any such transfer takes effect.

bs99 uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and understand how the platform is used. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your account language preference, and enable secure financial transaction workflows. These cookies cannot be disabled without preventing normal platform use.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors interact with the platform — such as pages visited and session duration — to help us identify technical issues and improve user experience. This data is aggregated and does not identify individual users.
• Functionality cookies: These cookies remember choices you have made on the platform, such as preferred bet stake sizes or display settings, to provide a more personalised experience on return visits.
• Marketing cookies: With your explicit consent, we may use cookies to understand which promotions you engage with and to avoid showing you the same offer repeatedly. These cookies are only active if you have opted in to marketing communications.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the platform. All other cookie categories can be disabled without impacting core functionality.

bs99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and transaction records: Retained for a minimum of five years from the date of account closure or the date of the last transaction, whichever is later. This period is mandated by financial record-keeping and AML obligations.
• Identity verification documents: Retained for a minimum of five years following account closure. Copies of documents such as NID cards and passports are stored in encrypted form with access limited to authorised compliance personnel.
• Customer support communications: Retained for three years from the date of the interaction to support dispute resolution and quality assurance review.
• Marketing consent records: Retained for the duration of your account and for two years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and log data: Server access logs and session data are retained for 90 days for security monitoring purposes, after which they are automatically purged.

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

bs99 applies a layered security architecture to protect personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bs99 servers, including login sessions, financial transactions, and support communications.
• Encrypted data storage for all sensitive personal data at rest, with encryption keys managed under strict access control policies.
• Role-based access controls ensuring that only authorised staff with a defined business need may access personal data, with all access events logged and periodically audited.
• OTP-based session verification for new device logins to prevent account takeover.
• Automated anomaly detection systems that flag unusual login locations, transaction patterns, or account behaviour for human review.
• Regular security assessments including vulnerability scanning and access control reviews conducted by our internal security team.

Notwithstanding the above, no method of data transmission or storage can be guaranteed to be 100% secure. In the event of a data security incident that is likely to result in a risk to your rights and interests, bs99 will notify affected players without undue delay and will take immediate steps to contain the incident and prevent further exposure.

As a bs99 account holder, you hold the following rights with respect to the personal data we process about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request".

bs99 is strictly an adults-only platform. Access to and use of any bs99 service is restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

If a parent or guardian believes that their child has submitted personal information to bs99 without their knowledge, they should contact us immediately at [email protected]. Upon verification, we will delete the relevant data promptly and close any associated account. Any balance held in a confirmed underage account will be returned to the payment source used for the original deposit.

bs99 employs age verification checks during the registration process and reserves the right to request documentary proof of age at any point during the account lifecycle. Failure to provide satisfactory proof will result in account suspension until verification is completed.

The bs99 platform may from time to time reference or display information relating to third-party services such as payment providers, sports governing bodies (ICC, BCB, BCCI), and game content studios. Where such references involve navigating away from the bs99 platform, bs99 has no control over and accepts no responsibility for the privacy practices or data handling policies of those third-party sites or services.

We strongly recommend that you review the privacy policy of any third-party service you interact with independently of bs99, particularly before submitting any personal information to that service. The presence of a third-party name or logo on the bs99 platform does not constitute an endorsement of that party's privacy practices.

bs99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Material updates — those that meaningfully affect your rights or how your data is used — will be communicated to registered account holders via their registered email address, with a minimum of 7 days' notice before the revised Policy takes effect.

Minor updates — such as typographical corrections, clarifications that do not change the substance of any section, or updated contact details — may be applied without prior notice. The "Last Updated" date at the top of this document will always reflect the most recent revision.

Your continued use of the bs99 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must stop using the platform and contact support to arrange account closure and data deletion where applicable.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the bs99 privacy team using the details below. All privacy communications are handled in English and responded to within 2 business days (Bangladesh Standard Time, UTC+6).

bs99 takes all privacy complaints seriously. If you are not satisfied with the outcome of a complaint handled by our support team, you may escalate the matter to the relevant data protection authority in your jurisdiction.