bj99 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Information

bj99 ("we", "us", "our") operates the online betting and casino platform accessible at bj99.biz (the "Platform"). bj99 is the data controller responsible for the personal information collected through the Platform and is accountable for how that information is stored, processed, and protected.

bj99 is a platform dedicated to serving the Bangladesh market, providing cricket betting, live casino games, slots, Dragon Tiger, American Football wagering, and related gaming services to adults aged 21 and above. All data processing activities described in this Privacy Policy are carried out in connection with the provision of those services.

If you have any questions about how bj99 handles your personal data, or if you wish to exercise any of your data rights, you may contact our Data Support team at any time. Contact details are provided in Section 16 of this Policy.

This Privacy Policy applies to all personal data collected by bj99 through the following channels:

• The bj99.biz website and any subdomains or mobile-optimised versions thereof.
• Any native mobile application published by bj99 for Android or iOS devices.
• Communications between you and bj99 via live chat, email, or any other messaging channel.
• Payment and identity verification procedures initiated in connection with your Account.
• Any promotional campaign, survey, or competition operated by or on behalf of bj99.

This Policy does not apply to third-party websites or services that may be linked to or integrated within the Platform. bj99 is not responsible for the privacy practices of any third party and encourages you to review the privacy notices of any external service you access.

bj99 collects the following categories of personal data. The precise data points collected in each category depend on how you interact with the Platform and whether you complete the full registration and verification process.

3.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification.
• Date of birth (to verify that you are at least 21 years of age).
• Residential address, city, and postal code within Bangladesh.
• Mobile telephone number registered in Bangladesh.
• Email address.
• Username chosen at registration.

3.2 Identity Verification Documents

• National Identity Card (NID) number and a scanned copy or photograph of the NID.
• Passport number and a copy of the passport biographical page, where applicable.
• Driving licence copy, where submitted as an alternative verification document.
• Utility bill, bank statement, or mobile financial service (bKash / Nagad / Rocket) transaction statement submitted as proof of address.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction amounts, dates, and reference numbers.
• Payment method identifiers (bKash account number, Nagad number, Rocket number, Upay account, bank account details, Visa/Mastercard last four digits).
• Account balance history and bonus credit records.
• Pending withdrawal status and payment processor response codes.

3.4 Betting and Gaming Activity Data

• Bets placed, including stake amounts, markets selected, odds accepted, and settlement outcomes.
• Casino game sessions including game title, provider, stake, result, and duration.
• Bonus offers claimed, wagering requirement progress, and promotional participation history.
• Session start and end times, expressed in Bangladesh Standard Time (BST, UTC+6).

3.5 Technical and Device Data

• IP address at the time of each login and material transaction.
• Device type, operating system version, and browser type and version.
• Unique device identifiers where applicable.
• Geolocation data derived from IP address (city-level, not GPS-level).
• Server log data including page requests, error codes, and session timestamps.

3.6 Communications Data

• Content of live chat conversations between you and bj99 support agents.
• Email correspondence sent to or received from [email protected].
• Records of formal complaints and dispute notices.
• Survey responses and feedback submissions, where you choose to participate.

bj99 collects personal data through the following means:

bj99 processes your personal data on one or more of the following lawful bases, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing required to perform the contract between bj99 and you — including registering your Account, accepting bets, settling winnings, processing deposits and withdrawals, and providing customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) checks, KYC identity verification, age verification, and record-keeping requirements.
• Legitimate Interests: Processing carried out in the legitimate business interests of bj99, provided those interests are not overridden by your own rights and interests. This includes fraud detection, security monitoring, platform optimisation, and responsible gaming monitoring.
• Consent: Processing for which you have provided a specific, informed, and freely given consent — such as the receipt of promotional communications. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of processing carried out before withdrawal.

bj99 uses the personal data it collects for the following purposes, each of which is grounded in one of the lawful bases described in Section 5:

• Account Management: Creating, maintaining, and securing your bj99 Account; verifying your identity; resetting your credentials; and managing Account closures or self-exclusions.
• Service Delivery: Processing your bets and casino game sessions; crediting winnings and bonuses; facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners.
• Identity and Age Verification: Confirming that you are at least 21 years of age and that the personal details you have provided are accurate and consistent with your submitted identity documents.
• Fraud Prevention and Security: Detecting and investigating suspicious login activity, unusual betting patterns, multiple Account creation, chargebacks, and any other conduct that may indicate fraud, money laundering, or a breach of our Terms & Conditions.
• Responsible Gaming: Monitoring your gambling behaviour to identify potential signs of problem gambling; enforcing deposit limits, loss limits, and self-exclusion requests; and proactively reaching out where our responsible gaming systems flag a concern.
• Legal Compliance: Satisfying our obligations under applicable anti-money-laundering legislation, tax reporting requirements, and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: Responding to your queries, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game offerings, interface design, and payment processing performance.
• Marketing Communications: Sending you promotional offers, seasonal bonuses (such as Eid and Pohela Boishakh promotions), BPL cricket offers, and other relevant updates — only where you have given your explicit consent or where permitted under applicable law. You may opt out at any time.

bj99 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly and to gather analytical data that helps us understand how the Platform is used. The following categories of cookies are employed:

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session authentication tokens that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, odds format, and preferred payment method to personalise your experience on return visits.
• Analytical Cookies: Used to collect anonymised data about how visitors navigate the Platform — including which pages are visited most frequently and where users encounter errors — to improve the site's design and performance. No personally identifiable information is transmitted via analytical cookies.
• Fraud Prevention Cookies: Persistent device-fingerprint tokens used by our security and fraud detection systems to identify suspicious access patterns, including multiple Account creation attempts from a single device.

You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your bj99 Account and using the Platform. Disabling other cookie categories will not affect your ability to access core services but may reduce the personalisation of your experience.

bj99 shares your personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment Processors and Mobile Financial Services: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions. These entities act as independent data controllers for transaction data processed through their own systems.
• KYC and Identity Verification Providers: Third-party identity verification services that assist bj99 in confirming the authenticity of submitted identity documents and cross-referencing personal details against relevant databases for AML and fraud prevention purposes.
• Game Content Providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other game studios — receive session data (stake amounts, game rounds, outcomes) necessary to operate their games within the bj99 environment. These providers operate under strict data processing agreements with bj99.
• IT Infrastructure and Cloud Hosting Providers: Secure server hosting and cloud infrastructure partners who store Platform data on behalf of bj99. All such partners are bound by confidentiality obligations and are prohibited from using your data for their own purposes.
• Legal and Regulatory Authorities: Bangladeshi law enforcement agencies, financial intelligence units, and regulatory bodies when required by law or in response to a lawful order, subpoena, or court directive. bj99 will notify you of such disclosures where permitted by law.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by bj99 on a confidential basis, to the extent they require access to personal data in connection with their professional services.

All third-party data processors engaged by bj99 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with bj99's documented instructions.

Certain third-party service providers used by bj99 — including game content providers such as Pragmatic Play, Evolution Gaming, and NetEnt — are headquartered or operate data centres outside of Bangladesh. Where your personal data is transferred to or processed in a jurisdiction outside Bangladesh, bj99 takes steps to ensure that appropriate safeguards are in place to protect your information.

Such safeguards include contractual data processing agreements that impose data protection standards consistent with internationally recognised frameworks, technical security measures (including encryption in transit and at rest), and access controls that limit which individuals within a receiving organisation can access your data.

bj99 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention standards:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

bj99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bj99 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. No data is transmitted in plain text over any public network.
• Password Hashing: Account passwords are stored exclusively as salted cryptographic hashes. bj99 employees cannot view your password in any form, and bj99 will never ask you to provide your password via chat, email, or any other channel.
• Access Controls: Personal data is accessible only to bj99 employees and contractors who require access to perform their specific job functions. All internal access is logged and audited.
• Fraud Detection Systems: Automated real-time monitoring systems analyse login activity, transaction patterns, and device signals to detect and block suspicious behaviour before it results in Account compromise.
• Penetration Testing: The Platform's infrastructure is subject to periodic security assessments and penetration tests conducted by qualified security professionals.
• Incident Response: bj99 maintains a documented data breach response procedure. In the event of a security incident that creates a risk to your personal data, bj99 will notify affected individuals promptly and take all reasonable remediation steps.

As a player whose personal data is processed by bj99, you hold the following rights with respect to that data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and clearly describe the right you wish to exercise and the data to which your request relates.

• Right of Access: You have the right to request a copy of the personal data that bj99 holds about you, together with information about how it is being processed. bj99 will respond to a Subject Access Request within 30 days.
• Right to Rectification: If you believe that any personal data held by bj99 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain Account details directly through your Account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request that bj99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that this right is subject to legal retention obligations — bj99 cannot delete transaction records that are required to be retained for AML compliance purposes.
• Right to Restriction of Processing: You may request that bj99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bj99's legitimate interests, including profiling for fraud prevention or responsible gaming monitoring. bj99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of prior processing.

bj99 is strictly an adult platform. No person under the age of 21 years is permitted to register an Account or use any service on the Platform. bj99 does not knowingly collect personal data from individuals under 21.

As part of our registration and ongoing KYC verification process, bj99 takes active steps to verify the age of all registered Players. Where bj99 discovers or has reasonable grounds to suspect that an Account has been registered by or is being used by a person under 21 years of age, the Account will be suspended immediately, all balances will be frozen pending investigation, and the matter will be escalated in accordance with our responsible gaming and compliance procedures.

If you are a parent or guardian and believe that a person under 21 in your care has registered on bj99 without your knowledge, please contact us immediately at [email protected]. We will investigate and act promptly. We also strongly encourage parents and guardians to install parental control software on shared devices to prevent minors from accessing online gambling platforms.

The bj99 Platform may contain references to, or integrations with, third-party services including game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe), payment processors (bKash, Nagad, Rocket, Visa, Mastercard), and analytics or fraud prevention tools. Each of these third parties operates under its own privacy policy and is independently responsible for how it processes your data within its own systems.

bj99 does not control and is not responsible for the privacy practices, data retention policies, or security standards of any third party. Before providing personal information directly to any third-party service, you are encouraged to review that party's privacy policy. bj99's Privacy Policy applies solely to data collected and processed by bj99 through the Platform.

bj99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our services. When material changes are made, the "Last Updated" date at the top of this page will be revised, and where reasonably practicable, we will notify registered Players via email or an in-Platform notification before the revised Policy takes effect.

Your continued use of the bj99 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and contact us to arrange Account closure and data handling in accordance with your rights under Section 12.

We recommend that you review this Privacy Policy periodically — at a minimum, whenever you receive a notification of changes from bj99. Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data bj99 holds about you, please contact our Data Support team through one of the following channels:

• Live Chat: Available 24/7 within your Account dashboard. Average response time: under 2 minutes. Use the subject "Privacy / Data Rights" when initiating your chat.
• Email: [email protected] — use the subject line "Data Rights Request" or "Privacy Policy Enquiry". Responses are provided within 10 business days (Bangladesh Standard Time, UTC+6).
• Postal Address: For formal written requests, please address correspondence to the bj99 Data Support Team. Include your full name, registered email address, Account username, and a clear description of your request. Allow up to 15 business days for postal responses.