Privacy Policy — bd899

1 Who We Are

bd899 is an online betting and casino platform operating at bd899.io, designed and built specifically for players based in Bangladesh. We offer a comprehensive range of Services including sports betting (with a particular focus on cricket), live casino tables, slot games, and fishing arcade titles.

For the purposes of this Privacy Policy, "bd899", "we", "us", and "our" refers to the bd899 platform and its operating entity. "you" and "your" refers to any individual who visits our website, registers an account, or uses any of our Services. "personal data" means any information that identifies or can be used to identify you as an individual.

2 Personal Data We Collect

bd899 collects personal data through several channels: directly from you when you register or use our Services, automatically through your interaction with our platform, and in some cases from third-party sources for verification purposes.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, username, email address, mobile number, and preferred currency (BDT or INR).
• Identity verification (KYC) documents: National Identity Card (NID), passport, driving licence, and proof of address such as a utility bill or bank statement.
• Payment information: Mobile banking account numbers for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other supported institutions. We do not store full card numbers — payment card data is handled exclusively by our PCI-DSS-compliant payment processors.
• Communications: Messages sent to our support team via live chat or email, together with any attachments or screenshots you provide.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, time-out configurations, and any other player-protection preferences you submit.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type and model, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, games played, bets placed (amounts, markets, outcomes), session duration, login timestamps, and navigation paths within the platform.
• Geolocation data: Approximate location derived from your IP address, used for fraud prevention and to confirm you are accessing the platform from a permitted jurisdiction.
• Cookie data: Session identifiers, preference cookies, and analytics cookies as described in Section 6.

2.3 Data from Third Parties

• Identity verification providers: Where we use a third-party KYC service to cross-check documents against public records or government databases.
• Fraud and risk intelligence: Data from industry-standard fraud prevention networks to identify players who have been excluded from or sanctioned by other licensed operators.
• Payment processors: Transaction status and reference data returned by bKash, Nagad, Rocket, Upay, and other payment partners after you initiate a deposit or withdrawal.

3 How We Use Your Personal Data

The table below summarises the primary purposes for which bd899 processes your personal data and the type of data involved in each activity.

bd899 does not use personal data for fully automated decision-making that produces legal or similarly significant effects on players without the involvement of a human reviewer.

4 Legal Basis for Processing

Every processing activity carried out by bd899 rests on one of the following legal grounds:

• Performance of a contract: Processing necessary to create and manage your account, accept and settle bets, process payments, and deliver all core platform Services.
• Legal obligation: Processing required to comply with anti-money laundering (AML) rules, age verification requirements, regulatory reporting obligations, and lawful requests from competent authorities.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, personalised promotions, and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 How We Share Your Data

bd899 does not sell or rent your personal data. We share it only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Game and Technology Providers

Third-party game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — receive session identifiers and wager data necessary to run their games and settle results. These providers are bound by strict data processing agreements and are not permitted to use this data for their own marketing purposes.

5.2 Payment Processors

When you initiate a deposit or withdrawal, the relevant transaction details are shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or your selected bank). Each provider operates under their own privacy policy and is independently responsible for your data once it leaves bd899's systems.

5.3 Identity Verification Partners

bd899 may share your submitted KYC documents with accredited identity verification service providers to validate authenticity and confirm your age. These providers process data solely on our instruction and do not retain documents beyond the period required for verification.

5.4 Fraud Prevention Networks

In the interest of player protection and platform integrity, bd899 may participate in industry-standard fraud prevention schemes. Account data associated with confirmed fraud, bonus abuse, or money laundering may be shared with such networks so that other operators may benefit from the same protections.

5.5 Legal and Regulatory Authorities

bd899 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, warrant, or binding regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.

5.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd899's business, your personal data may be transferred to the acquiring entity as part of that transaction, provided the receiving party agrees to honour the protections set out in this Privacy Policy.

6 Cookies & Tracking Technologies

bd899 uses cookies and similar tracking technologies to maintain session state, remember your preferences, detect fraud, and analyse platform usage. Cookies are small text files placed on your device when you visit our website.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function — including session management, authentication tokens, and security checks. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency selection (BDT or INR), and preferred layout. Disabling these may affect your experience.
• Analytics cookies: Collect anonymised data about how players interact with bd899 — such as which pages are visited most frequently and where users encounter errors. This data is used to improve our platform.
• Marketing cookies (consent-based): Track whether you arrived at bd899 via a specific campaign or referral link. Only placed with your explicit consent.

6.2 Managing Cookies

You can control non-essential cookies through your browser settings. Clearing cookies will log you out of your current session and may reset your saved preferences. Note that disabling strictly necessary cookies will prevent you from using the bd899 platform.

7 Data Retention

bd899 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account data and transaction records: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering regulatory requirements.
• KYC documents: Retained for 5 years from the date of verification, or 5 years after the end of the customer relationship, whichever is later.
• Support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Betting and gaming history: Retained for 5 years for regulatory compliance and responsible gaming monitoring purposes.
• Marketing consent records: Retained for 3 years from the date consent was given or last confirmed.
• Analytics data: Anonymised after 13 months and retained indefinitely in aggregated, non-identifiable form.

Once the applicable retention period expires, personal data is securely and irreversibly deleted from our systems, or anonymised in such a way that re-identification is not possible.

8 Your Privacy Rights

As a bd899 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request".

• Right of access: You may request a copy of all personal data bd899 holds about you, along with information about how it is being processed.
• Right to rectification: You may ask us to correct any inaccurate personal data or to complete any data that is incomplete.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may ask us to pause processing of your personal data in certain circumstances — for example, while a correction request is being reviewed.
• Right to data portability: You may request a copy of the personal data you have provided to bd899 in a commonly used, machine-readable format (e.g., CSV).
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests.

bd899 will respond to all verified privacy rights requests within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

9 Data Security

bd899 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All communications between your device and bd899's servers are encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive data stored on our servers — including KYC documents and payment account references — is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted to authorised bd899 personnel on a strict need-to-know basis. All staff with data access undergo regular security training.
• Infrastructure security: Our platform is hosted on servers with firewall protection, intrusion detection systems, and regular independent security audits.
• Incident response: In the event of a personal data breach that poses a risk to your rights, bd899 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

10 Children's Privacy

bd899 is strictly an adults-only platform. Access to and use of our Services is prohibited for any individual under the age of 21. We do not knowingly collect personal data from persons under the age of 21. If you believe a minor has registered on our platform or provided personal data to us, please notify us immediately at [email protected].

Upon receiving a valid report, bd899 will promptly investigate the matter, close the relevant account, delete all associated personal data, and reverse any transactions made through that account to the extent technically possible.

11 Third-Party Links

The bd899 platform may contain references to third-party game providers, payment partners, or sports data services. While we take care to work only with reputable partners, bd899 is not responsible for the privacy practices of any third-party websites or services that operate independently of our platform.

We encourage you to review the privacy policies of any third-party service before providing your personal data to them. The presence of a third-party name or logo on the bd899 platform does not constitute an endorsement of their privacy practices.

12 Updates to This Privacy Policy

bd899 reviews this Privacy Policy regularly and updates it whenever our data practices change or when required by law. The "Last updated" date at the top of this page reflects when the most recent changes took effect.

When material changes are made — such as introducing a new category of data collection, adding a new third-party data recipient, or significantly altering how we use existing data — we will notify all registered players by email at least 14 days before the changes take effect. Your continued use of the bd899 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes.

We recommend bookmarking this page and revisiting it periodically, particularly before making deposits or providing new personal information.

13 Contact Us & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd899 handles your personal data, please contact our privacy team using the details below. All communications must be submitted in English.

• Email: [email protected] — subject line: "Privacy Request — [query type]"
• Response time: We acknowledge all privacy correspondence within 5 business days and aim to resolve substantive requests within 30 calendar days.
• Live chat: Available 24/7 through the bd899 platform after login for general privacy queries.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. bd899 will cooperate fully with any lawful investigation or inquiry by a competent supervisory authority.