bp999 Privacy Policy

1 Data We Collect

bp999 collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser when you visit bp999, and from third-party service providers involved in payment processing and identity verification. The categories of personal data bp999 may collect are set out below.

1.1 Registration & Identity Data

When you create a bp999 account, you provide us with identity information necessary to open and maintain your account. This includes your full legal name, date of birth, gender (optional), a valid Bangladesh mobile number, an active email address, and your residential address. This data is used to verify your identity, confirm you meet the 18+ age requirement, and comply with Know Your Customer (KYC) obligations.

1.2 KYC Verification Documents

To complete the account verification process, bp999 may request copies of official identity documents. Acceptable documents include a Bangladesh National Identity Card (NID), passport, driving licence, or a recent utility bill or bank statement as proof of address. These documents are stored securely and accessed only by authorised compliance personnel.

1.3 Financial & Transaction Data

bp999 records all deposit and withdrawal transactions conducted on your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts in BDT, transaction timestamps, and reference numbers. bp999 does not store full card numbers or mobile banking PINs — payment authentication is handled directly by the relevant payment provider.

1.4 Gaming Activity Data

We maintain records of your gaming and betting activity on bp999, including game sessions, bet amounts, wager history, casino game selections, sportsbook markets accessed, and outcomes. This data is used to calculate wagering requirements, detect unusual patterns, and support responsible gaming monitoring.

1.5 Technical & Device Data

When you access bp999, our systems automatically collect certain technical data. This includes your IP address, device type and model, operating system, browser type and version, screen resolution, and session timestamps. This information is used to optimise the platform experience, detect fraud, and maintain platform security.

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, NID, email, mobile number	Account registration, KYC, age verification
Financial Data	bKash/Nagad transaction IDs, deposit amounts in BDT	Payment processing, fraud prevention
Gaming Activity	Bet history, game sessions, wager amounts	Responsible gaming, bonus management
Technical Data	IP address, device model, browser, session logs	Security, fraud detection, UX optimisation
Communications Data	Support emails, live chat transcripts	Customer service, dispute resolution

1.6 Communications Data

When you contact bp999 via email at [email protected] or through the live chat facility, we retain records of those communications including the content, date, time, and any identifiers associated with your account. These records are used to resolve disputes, improve support quality, and maintain an accurate history of account-related interactions.

2 How We Use Your Data

bp999 processes your personal data only where a lawful basis exists for doing so. The principal lawful bases on which bp999 relies are: the performance of a contract with you (operating your account and providing gaming services), compliance with a legal obligation (KYC, anti-money laundering), the pursuit of legitimate interests (fraud prevention, platform security), and, where required, your consent (marketing communications).

2.1 Account Operation & Service Delivery

The primary use of your data is to operate your bp999 account and deliver the services you have signed up for. This includes processing deposits and withdrawals in BDT, granting access to the cricket sportsbook, live casino, and slots lobby, calculating and crediting bonuses, and managing your account preferences and communication settings.

2.2 Identity Verification & Fraud Prevention

bp999 uses identity and financial data to verify that you are who you claim to be and to detect and prevent fraudulent activity on the platform. This includes cross-referencing submitted KYC documents, monitoring transaction patterns for irregularities, and conducting automated and manual checks against internal risk models.

2.3 Responsible Gaming Monitoring

Gaming activity data is analysed to identify patterns that may indicate problem gambling behaviour. Where bp999's responsible gaming monitoring systems identify a player who may be at risk, bp999 may proactively reach out to that player with information about self-exclusion tools, deposit limits, and support resources. This processing is conducted in the legitimate interest of player wellbeing.

2.4 Legal & Regulatory Compliance

bp999 is required by applicable law to retain certain categories of data for defined minimum periods. This includes transaction records, KYC documents, and account history. This data may be disclosed to regulatory or law-enforcement authorities where bp999 is under a legal obligation to do so.

2.5 Marketing Communications

With your consent, bp999 may send you promotional communications about offers, new games, seasonal promotions (such as BPL, Eid, or Pohela Boishakh specials), and platform updates via email or SMS. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by updating your notification preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3 Data Sharing & Disclosure

bp999 does not sell or rent personal data to third parties. Data is shared only in the circumstances described in this section, and only to the extent necessary to fulfil the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, bp999 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and the relevant card networks (Visa, Mastercard). Each payment provider operates under its own privacy and data-security framework, and bp999 selects only providers who maintain industry-standard security practices.

3.2 Game Content Providers

bp999's casino and sportsbook content is powered by third-party game studios and platform providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and others. These providers may receive a session token and anonymised player identifier to deliver game content and calculate outcomes. They do not receive your full identity data or payment details.

3.3 KYC & Identity Verification Partners

Where bp999 uses a third-party identity verification service to assist with KYC document checks, that provider will receive the relevant identity documents and personal data necessary to perform the verification. All such providers are bound by data-processing agreements that restrict their use of your data to the verification purpose only.

3.4 Legal & Regulatory Disclosure

bp999 may disclose personal data to law-enforcement agencies, courts, regulatory bodies, or other competent authorities where such disclosure is required by law, court order, or in connection with the investigation or prevention of fraud, money laundering, or other criminal activity. In such cases, bp999 will disclose only the minimum data necessary to comply with the legal requirement.

3.5 Business Transfers

In the event that bp999 undergoes a corporate restructuring, merger, acquisition, or sale of assets, personal data held by bp999 may be transferred to the relevant successor entity. In such circumstances, bp999 will notify affected players and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this policy.

4 Cookies & Tracking

bp999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. A cookie is a small text file placed on your device by your web browser when you visit bp999. You can control cookie settings through your browser, though disabling certain cookies may affect platform functionality.

4.1 Essential Cookies

These cookies are strictly necessary for the bp999 platform to function. They maintain your login session, preserve your account security token, and remember your language and currency display preferences. Essential cookies cannot be disabled without impairing core platform functionality.

4.2 Analytics Cookies

bp999 uses analytics tools to understand how players navigate the platform — which pages are visited most frequently, how long sessions last, and where players exit the site. This data is aggregated and anonymised before analysis and is used solely to improve the platform experience. No individual player is identified through analytics data.

4.3 Security Cookies

Security cookies assist bp999 in detecting and preventing fraudulent access to player accounts. They help identify unusual login patterns, flag potentially compromised sessions, and ensure that account actions are being performed by the genuine account holder rather than an automated process or third party.

4.4 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block or delete all cookies, or to specify which websites are permitted to set cookies on your device. Please note that blocking essential cookies will prevent you from logging into your bp999 account and using the platform's core features. For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

5 Data Retention

bp999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and internal policy retention requirements. The retention periods applicable to each principal data category are summarised below.

Data Category	Retention Period	Reason
Account & Identity Data	Duration of account + 5 years after closure	Legal compliance, dispute resolution
KYC Documents	Duration of account + 5 years after closure	Anti-money laundering obligations
Transaction Records	Duration of account + 5 years after closure	Financial record-keeping requirements
Gaming Activity Logs	3 years from date of activity	Responsible gaming monitoring, dispute resolution
Support Communications	3 years from date of communication	Dispute resolution, quality assurance
Technical / Device Logs	90 days from date of collection	Security monitoring, fraud detection
Marketing Preferences	Until consent is withdrawn	Consent-based processing

Once the applicable retention period has expired and no legal basis for continued retention exists, bp999 will securely delete or anonymise the relevant personal data in accordance with its internal data-destruction procedures. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform-improvement purposes.

6 Your Privacy Rights

As a bp999 player, you hold a number of rights in relation to the personal data we hold about you. bp999 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact the bp999 data team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and aim to respond within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data bp999 holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon a verified request, bp999 will provide you with a summary of your personal data, the purposes for which it is being processed, and the categories of third parties with whom it has been shared.

6.2 Right to Rectification

If any personal data bp999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain information directly through your account settings. For data that cannot be self-edited — such as KYC documents — please contact support.

6.3 Right to Erasure

You may request that bp999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing and no overriding legitimate interest exists. Please note that bp999 may be required to retain certain data for legal compliance purposes even following an erasure request, in which case you will be informed of the specific categories of data that cannot be deleted and the reason.

6.4 Right to Restrict Processing

In certain circumstances — for example, while the accuracy of data is contested, or while an objection to processing is under consideration — you may request that bp999 restrict the processing of your personal data to storage only, without any further use.

6.5 Right to Object

Where bp999 processes your data on the basis of legitimate interests, you have the right to object to that processing. bp999 will then reassess whether its legitimate interests are overridden by your privacy interests. You have an absolute right to object to the use of your personal data for direct marketing purposes, and bp999 will cease such use immediately upon receipt of a valid objection.

6.6 Right to Withdraw Consent

Where processing is based on your consent — for example, the sending of promotional emails or SMS messages — you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. To withdraw consent, contact [email protected] or adjust your notification settings within your bp999 account.

7 Data Security

bp999 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly to reflect the evolving threat landscape.

7.1 Encryption

All data transmitted between your device and the bp999 platform is encrypted using TLS (Transport Layer Security) protocols. Sensitive data held at rest — including KYC documents and financial records — is stored using encryption at the database level. bp999's SSL certificate is maintained and renewed to ensure continuous encrypted communication across all platform touchpoints.

7.2 Access Controls

Access to player personal data within bp999 is restricted on a strict need-to-know basis. Internal systems implement role-based access controls so that only personnel whose job function requires access to specific categories of data can retrieve it. All internal access events are logged and subject to periodic audit review.

7.3 Incident Response

bp999 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to player data, bp999 will take immediate containment steps, conduct a root-cause investigation, and notify affected players and relevant authorities within the timeframes required by applicable law. Players will be informed of the nature of the breach, the data categories affected, the likely consequences, and the measures taken to address it.

7.4 Your Role in Account Security

While bp999 takes all reasonable steps to protect your data at the platform level, you also play a critical role in account security. You are responsible for keeping your bp999 login credentials — username, password, and OTP codes — strictly confidential. bp999 will never ask you to share your password via email, live chat, or any other channel. If you receive any such request, treat it as a phishing attempt and report it to [email protected] immediately.

8 Policy Updates & Contact

8.1 Changes to This Privacy Policy

bp999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, platform functionality, data-processing practices, or regulatory requirements. When material changes are made, bp999 will publish the revised policy on this page with an updated effective date and, where practicable, will notify registered players by email at their registered address.

We encourage you to review this Privacy Policy periodically to stay informed about how bp999 protects your data. Your continued use of the bp999 platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revised provision, you should cease using the platform and request account closure.

8.2 Relationship with Other Policies

This Privacy Policy forms part of bp999's overall legal framework for players and should be read in conjunction with the bp999 Terms & Conditions and the Responsible Gaming guidelines. In the event of any conflict between this Privacy Policy and those documents on a matter of data protection, this Privacy Policy shall take precedence.

8.3 Contact Us

If you have any questions, concerns, or complaints relating to this Privacy Policy or bp999's data-processing practices, please contact the bp999 support and data team:

• Email: [email protected]
• Response Language: English
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Subject Line for Data Requests: "Privacy Rights Request"

bp999 aims to resolve all privacy-related queries within 30 calendar days of receipt of a verified request. For complex or multi-faceted requests, bp999 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day period expires.