br99 Privacy Policy
Your personal data matters. This Privacy Policy explains exactly what information br99 collects from players in Bangladesh, how it is used, who it may be shared with, and the rights you hold over your own data.
br99 is committed to protecting the privacy and personal data of every player who registers and uses our platform. This Privacy Policy sets out, in plain English, how br99 collects, processes, stores, and shares your personal information. It also explains the choices you have and the rights you can exercise over your data at any time. We recommend reading this document alongside our Terms & Conditions and our Responsible Gaming Policy for a complete picture of how br99 operates.
Minimal Data Collection
br99 collects only the personal data that is genuinely necessary to operate the platform, verify player identity, process payments in BDT, and comply with applicable anti-fraud and security requirements. We do not harvest data for its own sake.
Secure by Design
All personal data stored by br99 is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player data within the br99 organisation is restricted on a strict need-to-know basis with role-based access controls.
Your Data, Your Rights
Players have the right to access, correct, and request deletion of personal data held by br99, subject to legal and regulatory retention requirements. Requests can be submitted at any time by contacting [email protected].
No Selling of Data
br99 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Data shared with third parties is limited to what is operationally necessary — for example, sharing your mobile number with bKash to process a deposit.
Transparent Cookie Use
br99 uses session and analytics cookies to improve platform performance and personalise your experience. The cookies section of this policy explains each category of cookie used, its purpose, and how long it persists on your device.
Clear Retention Periods
br99 retains personal data only for as long as it is needed for the original collection purpose or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule.
1. Information We Collect
br99 collects personal data through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and from third-party service providers such as payment processors and identity verification services. The categories of personal data we collect are described below.
1.1 Registration Data
When you create a br99 account, we collect the following information that you provide voluntarily:
- Full legal name as it appears on your government-issued identity document.
- Date of birth, used to verify that you meet the 18+ age requirement.
- Residential address in Bangladesh, including division, district, and postal code.
- Mobile phone number, used for account authentication, transaction notifications, and support communications.
- Email address, used for account notices, promotional communications (where opted in), and support correspondence.
- Preferred payment method, such as bKash, Nagad, Rocket, or Upay, along with the associated account number or wallet identifier required to process deposits and withdrawals.
- Username and password (password stored as a one-way cryptographic hash — never in plain text).
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer process, we may collect copies of identity documents including your National Identity Card (NID), passport, or birth certificate. We may also collect a recent utility bill or bank statement as proof of address, and a selfie photograph for liveness verification. KYC documents are processed securely and retained only for the period required by our compliance obligations.
1.3 Transaction Data
br99 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, bet placements, game results, bonus credits and debits, and wallet balance history. Transaction records are denominated in Bangladeshi Taka (BDT) and are retained for audit and regulatory compliance purposes.
1.4 Technical and Device Data
When you access br99, our servers and analytics systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, session duration, and pages visited. This data is used for security monitoring, fraud detection, and platform performance optimisation. It is not used to personally identify you in isolation but may be combined with account data where necessary for security investigations.
1.5 Communications Data
If you contact br99 support by email or live chat, we retain records of that correspondence including the content of messages, timestamps, and any attachments. This data is used to resolve your query, improve support quality, and maintain an audit trail of customer interactions.
| Data Category | Source | Purpose |
|---|---|---|
| Registration data | Provided by you at sign-up | Account creation, identity verification, communications |
| KYC documents | Provided by you on request | Age & identity verification, fraud prevention |
| Transaction records | Generated by platform activity | Payment processing, audit trail, dispute resolution |
| Technical / device data | Automatically collected | Security, fraud detection, performance analytics |
| Support communications | Provided by you via email / chat | Query resolution, quality assurance |
2. How We Use Your Data
br99 processes your personal data only for the purposes described below. We rely on the following legal bases for processing: performance of a contract (operating your account), legitimate interests (fraud prevention and platform security), compliance with legal obligations (KYC and financial record-keeping), and consent (marketing communications, where you have opted in).
2.1 Account Management
Your registration data is used to create and maintain your br99 account, authenticate your identity each time you log in, process your deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other supported channels, and communicate essential account notices such as security alerts, transaction confirmations, and policy updates.
2.2 Identity and Age Verification
br99 is legally and ethically obligated to verify that all players are at least 18 years of age and are who they claim to be. Your NID, passport, or other KYC documents are used solely for this purpose. Verification is carried out internally by the br99 compliance team and, in some cases, via an authorised third-party identity verification service. The results are recorded in your account file and retained as part of our compliance record.
2.3 Fraud Prevention and Security
Technical and behavioural data collected during your sessions on br99 is analysed by our security systems to detect and prevent unauthorised account access, money laundering, bonus abuse, multi-accounting, and other forms of fraud. Where suspicious activity is detected, we may restrict account functionality, conduct additional verification checks, or in serious cases, close the account and refer the matter to the appropriate authorities.
2.4 Responsible Gaming
br99 monitors player behaviour patterns — including session duration, deposit frequency, and wagering volumes — to identify players who may be showing signs of problem gambling. Where such indicators are present, br99 may proactively contact the player, apply responsible gaming restrictions, or offer access to self-exclusion tools. This processing is carried out in the player's genuine interest and forms a core part of our commitment to player welfare.
2.5 Marketing Communications
With your explicit consent, br99 may send you promotional communications about new games, seasonal bonuses (such as Eid or BPL season promotions), and platform updates by email or SMS. You may withdraw consent and unsubscribe from marketing communications at any time by contacting [email protected] or using the unsubscribe link included in every marketing email. Withdrawing consent for marketing will not affect your ability to use the br99 platform.
2.6 Platform Improvement
Aggregated and anonymised usage data is used to improve the br99 platform, optimise game loading performance, identify navigation issues, and develop new features. This processing does not involve personally identifiable data and is carried out on the basis of br99's legitimate interest in maintaining a high-quality product for Bangladeshi players.
3. Data Sharing & Third Parties
br99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.
3.1 Payment Service Providers
To process deposits and withdrawals in BDT, br99 shares the minimum necessary payment data with our partner payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. The data shared is limited to what is technically required to initiate and confirm the transaction. Each payment provider operates under their own privacy policy and is independently responsible for how they handle data shared with them.
3.2 Identity Verification Services
Where br99 uses a third-party service to assist with KYC and age verification, your identity document images and biometric data (where applicable) may be shared with that provider. Such providers are contractually bound to use your data exclusively for the verification purpose and to delete it promptly once the verification process is complete.
3.3 Game Studio Partners
br99 integrates games from certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, your player session data (such as player ID, bet amounts, and game results) is transmitted to the relevant studio's servers to render the game. No personally identifiable registration data such as your name, address, or NID is shared with game studios.
3.4 Legal and Regulatory Disclosure
br99 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by a valid legal instrument such as a court order, statutory notice, or lawful request from a competent authority. br99 will notify you of any such disclosure request where legally permitted to do so.
3.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of substantially all of br99's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such change in data controller by email and/or a prominent notice on the br99 platform, and your data will continue to be handled in accordance with this Privacy Policy unless you are given notice of material changes.
5. Data Security
br99 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or destruction.
5.1 Technical Measures
All data transmitted between your device and br99.bet is encrypted using TLS 1.3 with 256-bit encryption. Player passwords are stored exclusively as salted cryptographic hashes using the bcrypt algorithm — they are never stored in plain text and cannot be retrieved even by br99 staff. Player financial data is stored in isolated database segments with strict access controls. br99's infrastructure undergoes regular security assessments including vulnerability scanning and penetration testing.
5.2 Organisational Measures
Access to personal data within the br99 organisation is granted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and receive regular training on data protection best practices. br99 maintains a documented incident response procedure for data breaches, including notification protocols for affected players where required.
5.3 Your Role in Data Security
While br99 takes every reasonable precaution to protect your data, the security of your account also depends on your own practices. You are responsible for keeping your login credentials confidential, using a strong and unique password for your br99 account, and logging out of shared devices after each session. If you believe your account has been compromised, contact [email protected] immediately so that br99 can take prompt protective action.
6. Data Retention
br99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below reflect both operational necessity and standard compliance obligations for financial services platforms operating in the Bangladesh market.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contractual obligation, dispute resolution |
| KYC identity documents | Duration of account + 5 years post-closure | Anti-money laundering compliance |
| Financial transaction records | 7 years from transaction date | Financial audit and regulatory record-keeping |
| Support communications | 3 years from last interaction | Quality assurance and dispute evidence |
| Technical / session logs | Up to 12 months | Security monitoring and fraud investigation |
| Marketing consent records | Until consent is withdrawn + 2 years | Evidence of lawful marketing basis |
6.1 Deletion and Anonymisation
Once a retention period expires, br99 will either securely delete the relevant personal data or anonymise it in a way that makes it impossible to re-link to an individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes. Deletion requests submitted by players are actioned within 30 days, subject to the retention obligations described above — data that must be kept for legal compliance cannot be deleted upon request alone but will be fully removed once the mandatory retention period has passed.
7. Your Privacy Rights
As a player on br99, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the br99 Data Team at [email protected] with your registered account email address and a clear description of your request. br99 will respond within 30 days of receiving a valid request.
7.1 Right to Access
You have the right to request a copy of the personal data that br99 holds about you. This includes your registration details, KYC records, transaction history, and any support communications. br99 will provide this data in a structured, machine-readable format (such as CSV or JSON) where technically feasible.
7.2 Right to Rectification
If any personal data that br99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as a misspelled address, you may be able to update your details directly in your account settings. For corrections to identity-verified data such as your name or date of birth, additional documentation may be required.
7.3 Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the original purpose, where you have withdrawn consent, or where you believe the data has been processed unlawfully. As noted in the Data Retention section, some data must be retained to meet legal obligations and cannot be erased upon request alone.
7.4 Right to Restrict Processing
You may request that br99 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated. During a processing restriction, br99 will continue to store the data but will not actively use it for any other purpose.
7.5 Right to Withdraw Marketing Consent
Where you have consented to receive marketing communications from br99, you may withdraw that consent at any time. You can unsubscribe from marketing emails using the unsubscribe link included in every marketing message, or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent before the withdrawal was received.
7.6 How to Submit a Privacy Request
All privacy rights requests should be submitted in writing to [email protected] from the email address registered on your br99 account. Please include in your message: your full name, your br99 username, the right you wish to exercise, and sufficient detail to allow br99 to locate and process your request. br99 may ask for additional verification to confirm your identity before processing the request, particularly for access and deletion requests.
8. Updates to This Policy
br99 reviews and updates this Privacy Policy periodically to reflect changes in platform functionality, applicable law, and industry best practice. The effective date shown at the top of this document and in the hero section above will be updated each time a new version is published.
8.1 Notification of Changes
Where changes to this Privacy Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — br99 will notify registered players at least 14 days in advance by email to the address on file and by displaying a prominent notice on the br99 platform. Minor changes such as wording clarifications, corrected links, or administrative updates may be made without advance notice. Continued use of the br99 platform after any update constitutes acceptance of the revised Privacy Policy.
8.2 Historical Versions
Previous versions of this Privacy Policy are available on request. If you wish to obtain an archived copy of a prior version, please contact [email protected] specifying the version date you require. br99 retains archived policy versions for a minimum of five years from the date each version was superseded.
8.3 Contact for Privacy Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or how br99 handles your personal data, please contact us at [email protected]. The br99 support team is available 24 hours a day, 7 days a week, including during Bangladeshi public holidays. We treat all privacy-related communications with high priority and will acknowledge receipt within 24 hours and provide a substantive response within 30 days.
Your Privacy is Protected at br99
With your data handled transparently and securely, you can focus on what matters — enjoying live casino, cricket betting, and slots on Bangladesh's trusted platform. 18+ only. Play responsibly.