Privacy Policy — bg99

This Privacy Policy ("Policy") is issued by bg99 ("we", "us", "our"), the operator of the online betting and gaming platform available at https://bg99.vip (the "Platform"). This Policy applies to all registered players, visitors, and any other individuals whose personal data is processed in connection with the Platform.

bg99 is committed to handling your personal data with the highest standards of transparency, integrity, and security. We recognise that players in Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy sets out in plain, formal English exactly what data we collect, why we collect it, how it is stored and protected, who may have access to it, and how long we retain it.

This Policy should be read in conjunction with bg99's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an Account or using the Platform in any way, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

bg99 collects personal data through several channels, including Account registration, KYC verification, payment processing, platform usage, and customer support interactions. The categories of personal data we collect are described below.

We may also receive personal data about you from third parties in limited circumstances — for example, from our payment processors when verifying a transaction, or from our fraud detection service providers when assessing the risk profile of an Account activity.

bg99 uses the personal data it collects exclusively for the following purposes. We process your data only where we have a valid legal basis to do so, as set out in Section 4 of this Policy.

• Account Management: To create, maintain, and administer your registered Account on the Platform, including verifying your identity and managing your profile settings.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain an accurate transaction history for your Account.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by our responsible gaming and anti-fraud policies.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised Account access, bonus abuse, and any other activity that violates our Terms and Conditions.
• Responsible Gaming Compliance: To administer self-exclusion orders, deposit limits, loss limits, and session time reminders, and to identify players who may be showing signs of problem gambling.
• Customer Support: To respond to your enquiries, complaints, and disputes, and to maintain records of support interactions for quality assurance and audit purposes.
• Platform Improvement: To analyse usage patterns and platform performance data — in aggregated, anonymised form where possible — in order to improve our service offering for all players.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering, counter-financing of terrorism, and other legal requirements that apply to online gaming platforms serving the Bangladesh market.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal announcements — but only where you have given explicit consent and only via channels you have opted into. See Section 12 for full details.

bg99 processes your personal data on one or more of the following legal grounds depending on the specific purpose of processing:

• Contract Performance: Processing is necessary to enter into and perform the contractual agreement between you and bg99 as set out in our Terms and Conditions. This covers Account registration, transaction processing, bet settlement, and customer support.
• Legitimate Interests: Processing is necessary for bg99's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. This covers fraud prevention, platform security, abuse detection, and internal analytics used to improve our services.
• Legal Obligation: Processing is required in order for bg99 to comply with applicable legal obligations, including identity verification requirements, transaction record-keeping obligations, and cooperation with lawful requests from competent authorities.
• Consent: Where processing is based on your consent — primarily for direct marketing communications — you may withdraw that consent at any time by updating your notification preferences within your Account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

bg99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the specific, limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

• Payment Processors: Your financial data is shared with our authorised payment partners — including bKash, Nagad, Rocket, Upay, and card processing networks — solely for the purpose of processing your deposit and withdrawal transactions. These providers are bound by their own strict data protection obligations.
• KYC and Identity Verification Providers: Your identity documents and verification data may be shared with our third-party KYC service providers who assist us in verifying your age and identity. These providers operate under binding confidentiality agreements and may not use your data for any purpose other than the verification service they provide to bg99.
• Fraud Detection and Risk Management Services: Usage data, device identifiers, and IP addresses may be shared with specialist fraud detection providers to help us identify and investigate suspicious activity and protect all players on the Platform.
• Game Technology Providers: Certain anonymised or pseudonymised usage data (such as game session outcomes) may be shared with our game technology partners — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — for the purposes of game performance monitoring and fairness auditing.
• Legal Authorities: bg99 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by law, court order, or in response to a lawful regulatory request. bg99 will seek to notify the affected player of any such disclosure where it is legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of bg99's operating entity, player data may be transferred to the acquirer as part of the transaction. In such an event, players will be notified in advance and given the opportunity to close their Accounts if they do not wish their data to be transferred.

All third-party service providers who handle personal data on bg99's behalf are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they provide to us.

bg99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow us to recognise your browser, maintain your session, and remember your preferences between visits.

The following categories of cookies are used on the bg99 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as session management, Account authentication, and security. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as display settings, preferred language, and responsible gaming configurations. These are not essential but improve your experience on the Platform.
• Analytics Cookies: Used to collect anonymised data about how players navigate and interact with the Platform. This information helps us identify technical issues and improve platform performance and usability.
• Fraud Prevention Cookies: Used by our risk management systems to detect unusual access patterns, bot activity, and other forms of fraud. These cookies form part of our security infrastructure and cannot be disabled.

You may manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies will not prevent you from using the Platform but may affect the quality of your experience. Disabling strictly necessary or fraud prevention cookies may impair security features and Account access.

bg99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Where a legal obligation requires us to retain data beyond the standard period, we will retain only the minimum data necessary to fulfil that obligation and will delete it promptly once the obligation is satisfied.

bg99 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. While no digital platform can guarantee absolute security, our measures represent current industry best practice for online gaming platforms.

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Our Platform enforces HTTPS exclusively — unencrypted HTTP connections are automatically redirected.
• Encryption at Rest: Personal data stored in our databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect and are subject to regular rotation.
• Access Controls: Access to personal data within bg99's internal systems is governed by role-based access controls. Employees access only the data necessary for their specific job function. All data access is logged and subject to periodic audit.
• Password Security: Account passwords are stored as salted cryptographic hashes. bg99 employees cannot view your password in plain text. We strongly encourage players to use a unique, strong password for their bg99 Account.
• Intrusion Detection: Our platform infrastructure is monitored continuously by automated intrusion detection systems. Anomalous access patterns trigger alerts that are reviewed by our security team.
• Vulnerability Management: We conduct periodic security assessments of our platform infrastructure and address identified vulnerabilities in a timely manner consistent with their severity rating.

In the event of a personal data breach that is likely to result in a high risk to your rights, bg99 will notify affected players without undue delay using the contact details held on your Account. You are responsible for maintaining the security of your own login credentials. bg99 recommends enabling any two-factor authentication features offered on the Platform and never sharing your password with any third party.

As a player whose personal data is processed by bg99, you have the following rights in relation to that data. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your Account.

• Right of Access: You have the right to request a copy of the personal data that bg99 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For data that you can edit directly in your Account dashboard, you may update it yourself without submitting a request.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations — some data cannot be deleted prior to the expiry of the mandatory retention period.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, such as where you contest its accuracy or where you have objected to processing and a decision on the objection is pending.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on bg99's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

We aim to respond to all valid rights requests within 30 calendar days. If a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no fee for submitting a rights request, though we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

The bg99 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not use the Platform, create an Account, or provide any personal data to bg99.

If bg99 becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any winnings accrued will be voided in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that your child may have registered an Account or provided personal data to bg99 without your knowledge, please contact us immediately at [email protected]. We will act promptly to investigate and remediate the situation.

The bg99 Platform integrates with a number of third-party technology providers to deliver our full service offering. These include game technology providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and infrastructure and security vendors.

Each of these third-party providers operates under its own privacy policy and data governance framework. bg99 vets all technology partners prior to engagement and requires contractual assurances that their data handling practices meet appropriate standards. However, once data is transmitted to a third-party provider for the purpose of performing their service, that provider's own privacy policy governs the handling of that data within their systems.

bg99 does not control and is not responsible for the privacy practices of any third-party website that may be referenced or linked to from within the Platform. We recommend that you review the privacy policy of any third-party site you visit independently of the bg99 Platform.

bg99 may send you promotional messages about bonuses, seasonal offers, and new Platform features via email or in-Platform notifications. We will only send marketing communications to you where you have given explicit consent during registration or via your Account notification settings.

Marketing communications from bg99 may include information about:

• Welcome bonuses and deposit match promotions
• Seasonal offers tied to BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, and other events relevant to the Bangladesh market
• New game launches from our provider partners
• Platform feature updates and service improvements
• Responsible gaming reminders and self-assessment prompts

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your Account dashboard settings
• Clicking the unsubscribe link included in any marketing email from bg99
• Sending a written opt-out request to [email protected]

Opting out of marketing communications will not affect your ability to use the Platform or receive essential transactional notifications (such as deposit confirmations, withdrawal processing updates, and security alerts), which are sent regardless of marketing preference settings.

bg99 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, new legal or regulatory requirements, or improvements to our Platform and services. The revised Policy will be published at https://bg99.vip/privacy-policy with an updated effective date at the top of the document.

Where a change to this Policy is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify registered players via the email address associated with their Account at least 14 days before the change takes effect. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes.

We encourage all players to review this Policy periodically to stay informed about how bg99 protects their personal data. The version number and effective date displayed at the top of this page allow you to identify whether this is the most current version of the Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bg99 processes your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

Privacy and Data Enquiries
Platform: bg99.vip
Email: [email protected]
Response time: Within 2 business days for general enquiries; within 30 calendar days for formal rights requests.
Operating hours: Monday to Sunday, 09:00 – 23:00 BST (UTC+6)
Service region: Bangladesh

When submitting a rights request or privacy complaint, please include your registered Account username, the email address associated with your Account, and a clear description of your request or concern. This will allow us to locate your data accurately and respond as efficiently as possible.