bp999 Privacy Policy

1Introduction

This Privacy Policy (the "Policy") describes how bp999 ("we", "us", "our", or the "Platform") collects, uses, stores, shares, and protects personal data provided by users ("you", "Player", or "User") who access or register on the bp999 website at https://bp999.io and all associated services offered thereon (the "Services").

bp999 is an online casino and sports betting platform designed for adult players based in Bangladesh. We are deeply committed to safeguarding the personal data of every individual who trusts us with their information. This Policy is intended to be transparent, specific, and written in plain English so that every Bangladeshi player can clearly understand how their data is handled.

By registering an account with bp999 or continuing to use the Services after the effective date of this Policy, you acknowledge that you have read and understood this document in full and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact us to request account closure.

2Data We Collect

bp999 collects personal data in three principal ways: directly from you when you register or interact with the platform, automatically when you access our website, and from third-party service providers who assist with identity verification and payment processing.

2.1 Registration & Identity Data

When you create a bp999 account, we collect the following information to verify your identity and set up your account:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to confirm you are 21 years of age or older)
• Residential address in Bangladesh (district, city, postal code)
• Mobile phone number (linked to your bKash, Nagad, Rocket, or Upay account)
• Email address (optional but recommended for account recovery)
• National ID Card (NID) number or passport number (required for KYC verification)
• Photograph or scanned copy of identity document (collected during KYC only)

2.2 Financial & Transaction Data

To process deposits and withdrawals, we collect transactional data including:

• bKash, Nagad, Rocket, or Upay account numbers used for transactions
• Card number (last four digits only — full card numbers are never stored by bp999), card type, and expiry date for Visa and Mastercard transactions
• Transaction amounts, timestamps, and reference IDs for all deposits and withdrawals
• Account balance history and wagering activity logs

2.3 Technical & Usage Data

When you visit the bp999 website, our servers automatically record certain technical information:

2.4 Communications Data

When you contact bp999 via live chat, WhatsApp, or email, we retain a record of the conversation including message content, timestamps, and any attachments you provide. This data is used to resolve your enquiry and to improve our customer support quality.

3How We Use Your Data

bp999 uses the personal data we collect for the following specific and legitimate purposes:

• Account creation and management: To register your account, authenticate your identity, and maintain accurate records associated with your profile.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and to maintain accurate financial records.
• Identity verification (KYC): To comply with our obligation to verify that every player is a real person, is aged 21 or above, and is a resident of Bangladesh acting on their own behalf.
• Customer support: To respond to your enquiries, resolve disputes, and deliver a satisfactory support experience across live chat, WhatsApp, and email.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, enforce deposit limits you have set, and action self-exclusion requests promptly.
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, money laundering, and unauthorised access attempts.
• Platform improvement: To analyse aggregated usage data and improve the performance, usability, and game selection of the bp999 platform for all players.
• Marketing communications: To send bonus offers, seasonal promotions (e.g., Eid, Pohela Boishakh), BPL and IPL match alerts, and platform updates — but only to players who have explicitly opted in to receive such communications.
• Legal compliance: To retain records as required by applicable law and to respond to lawful requests from competent authorities.

4Legal Basis for Processing

bp999 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to fulfil our contractual obligations to you under the bp999 Terms & Conditions — for example, processing your deposit or crediting a bonus to your account.
• Legal obligation: Processing that is required to comply with applicable legal requirements — for example, retaining KYC documentation and transaction records.
• Legitimate interests: Processing that serves bp999's legitimate business interests in a manner that does not override your fundamental rights — for example, fraud prevention, platform security monitoring, and internal analytics.
• Consent: Processing based on a freely given, specific, and informed consent that you have provided — for example, sending you promotional emails or WhatsApp bonus notifications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5Data Sharing & Disclosure

bp999 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with a limited set of trusted partners and authorities in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks receive the minimum transaction data necessary to process your deposits and withdrawals. Each of these partners operates under their own privacy framework and applicable Bangladeshi financial regulations.
• Identity verification services: Third-party KYC providers may receive copies of your identity documents for the purpose of verifying your age and identity. These providers are contractually bound to process your data solely for verification purposes and to maintain equivalent data security standards.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session data necessary to deliver their games via our platform. They do not receive your full name, NID, or financial details.
• IT and security service providers: Companies that provide hosting infrastructure, cybersecurity monitoring, and DDoS protection services may process limited technical data as part of their contracted service delivery.
• Legal authorities: bp999 will disclose personal data to law enforcement, regulatory authorities, or courts when required to do so by a lawful order or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to individuals.

6Cookies & Tracking Technologies

bp999 uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and gather anonymised analytics data. A cookie is a small text file placed on your device by your web browser when you visit a website.

The following categories of cookies are used on the bp999 platform:

You can manage or disable non-essential cookies at any time through your browser's settings. Note that disabling certain cookies may impair the functionality of the bp999 platform, including the ability to remain logged in between sessions.

7Data Retention

bp999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is longer. The following retention periods apply:

• Active account data: Retained for the duration of your active account and for a minimum of five (5) years after account closure, to satisfy legal record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, in accordance with anti-money laundering (AML) requirements.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction, consistent with standard financial record-keeping practice.
• Customer support communications: Retained for two (2) years from the date of the last message in a given support thread.
• Marketing consent records: Retained for the duration of your opt-in status plus three (3) years after you withdraw consent, to demonstrate compliance.
• Anonymised analytics data: May be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8Data Security

bp999 implements a layered approach to data security, combining technical and organisational measures to protect your personal information from unauthorised access, accidental loss, disclosure, or destruction.

• SSL/TLS encryption: All data in transit between your device and bp999 servers is encrypted using TLS 1.2 or higher.
• Encrypted data storage: Sensitive fields including identity document scans, NID numbers, and financial account references are stored in encrypted form at rest.
• Access controls: Internal access to player personal data is restricted to authorised staff on a need-to-know basis. All internal access is logged and regularly audited.
• Session security: Login sessions are protected with session tokens that expire automatically after a period of inactivity. Concurrent login detection is in place to alert you to unexpected account access.
• Regular security audits: bp999 conducts periodic security reviews and vulnerability assessments of its platform infrastructure.
• Incident response: In the event of a data security incident that poses a risk to your rights, bp999 will notify affected players and take immediate remedial steps.

9Your Data Rights

As a player on the bp999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to complete it within 30 calendar days.

• Right of Access: You may request a copy of all personal data bp999 holds about you, along with information on how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you have withdrawn consent. Note that this right is subject to legal retention obligations — we cannot delete data we are required by law to keep.
• Right to Restrict Processing: You may request that bp999 restrict the processing of your data in certain circumstances — for example, while a correction request is being investigated.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data on the basis of legitimate interests, including profiling for responsible gaming purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal does not affect the lawfulness of prior processing.

10Children's Privacy

The bp999 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If you are a parent or guardian and believe that a minor has accessed the bp999 platform or provided personal data to us, please contact us immediately at [email protected].

Upon receipt of a verified report of underage access, bp999 will immediately close the relevant account, delete any associated personal data that is not required to be retained for legal purposes, and refund any net deposits made by the minor to the originating payment account.

11Third-Party Links

The bp999 website may contain references to third-party game providers and payment partners. While we take care in selecting our partners, bp999 is not responsible for the privacy practices or content of any external website or service. This Privacy Policy applies solely to the bp999 platform at https://bp999.io.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your bp999 account, including your chosen mobile banking application (bKash, Nagad, Rocket, or Upay) and any game studio whose games you access via our platform.

12Policy Updates

bp999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the bp999 website for a minimum of 14 days prior to the changes taking effect.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bp999 protects your personal data. Continued use of the platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you do not agree with a material change to this Policy, you have the right to close your account before the change takes effect by contacting our support team at [email protected]. We will process your closure request and delete or retain your data in accordance with Section 7 (Data Retention) of this Policy.

13Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how bp999 handles your personal data, please reach out to our support team through any of the following channels:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the in-platform chat widget
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Service Area: Serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh