Privacy Policy — How bh999b Protects Your Data

1 Information We Collect

bh999b collects personal data from players in Bangladesh through several channels: directly from you when you register an account and use the platform, automatically through technical systems as you interact with our website, and — in limited cases — from trusted third-party verification partners. The categories of data we collect are described below.

bh999b does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where required for identity verification), or health information beyond what is strictly necessary for responsible gaming compliance. We do not collect data from individuals below 18 years of age — see Section 9 of this Privacy Policy for our position on minors.

2 How We Use Your Data

Every piece of personal data collected by bh999b is used for a defined, documented purpose. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The primary uses of your data on the bh999b platform are as follows:

• Account Management: Creating, maintaining, and securing your bh999b player account, verifying your identity and age, and managing your login credentials and session security.
• Transaction Processing: Processing your deposits and withdrawal requests in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, SureCash, and connected bank partners. Ensuring funds are attributed accurately to the correct account.
• Platform Delivery: Providing access to casino games (slots, live casino, table games), sports betting markets (cricket BPL, IPL, T20 World Cup, football, kabaddi), and all other features of the bh999b platform.
• Fraud Prevention & Security: Monitoring account activity to detect suspicious behaviour, unauthorised access attempts, money laundering indicators, collusion, and other forms of platform abuse. Sharing relevant data with law enforcement where required by applicable law.
• Responsible Gaming: Using your account activity data to identify potential problem gambling patterns and, where necessary, proactively reaching out with responsible gaming information. Enforcing deposit limits, time-outs, and self-exclusion periods you have set.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions to improve service quality over time.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or in-account notification — but only where you have given explicit consent or where a legitimate interest applies. You may withdraw consent at any time.
• Legal & Regulatory Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory and law enforcement authorities, and maintaining records required for audit purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment method availability, and the overall player experience for users across Bangladesh.

3 Legal Basis for Processing

bh999b processes your personal data only where a recognised legal basis exists for doing so. The legal bases upon which we rely for each processing purpose are summarised in the table below:

Where bh999b relies on legitimate interests as its legal basis for processing, we have assessed that our interests are not overridden by your privacy rights. You have the right to object to processing based on legitimate interests — see Section 7 of this Privacy Policy for instructions on how to exercise that right.

4 Cookies & Tracking Technologies

bh999b uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform, remember your preferences, maintain your login session, and collect anonymised analytics data. Cookies are small text files stored on your device by your browser when you visit bh999b.app. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bh999b platform to function correctly. They enable core features such as logging in, maintaining your session, remembering your account balance during a game session, and enforcing security controls. These cookies cannot be disabled without making the platform inoperable.
• Functional Cookies: These cookies remember your preferences — such as your preferred language (English), your most recently played game category, and any responsible gaming settings you have applied — so that you do not need to reconfigure them on every visit.
• Analytics Cookies: bh999b uses privacy-conscious analytics tools to collect anonymised data about how players navigate and use the platform. This data helps us identify performance bottlenecks, popular game categories, and pages where players encounter difficulties. No personally identifiable information is attached to analytics cookie data.
• Security Cookies: Short-lived cookies used to detect and prevent cross-site request forgery (CSRF) attacks and other malicious interactions with the bh999b platform. These are regenerated on each session and expire automatically.

bh999b does not use third-party advertising cookies or behavioural profiling cookies that track your activity across other websites. Our cookie use is strictly limited to the functional and analytical purposes described above.

5 Data Sharing & Third Parties

bh999b shares your personal data only with carefully selected third-party service providers who assist in delivering the bh999b platform and its services to players in Bangladesh. Every third-party partner is subject to a written data processing agreement that obligates them to handle your data securely, use it only for the purpose for which it was shared, and not retain it beyond the period necessary. The third-party categories with whom we share data are as follows:

• Payment Processors: To process your BDT deposits and withdrawals, bh999b shares necessary transaction data with payment infrastructure providers including bKash, Nagad, Rocket, Upay, SureCash, and partner banks such as Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank. Only the minimum data required to complete your transaction is shared.
• Identity Verification Partners: Where KYC (Know Your Customer) verification is required, bh999b may share your identity data with specialist verification service providers to confirm your name, age, and address. These providers operate under strict data protection obligations.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data (such as player ID, stake amount, and game outcome) necessary to deliver and record the results of individual game rounds. No marketing data is shared with game studios.
• IT Infrastructure & Cloud Providers: bh999b's platform data is hosted on secure cloud infrastructure. Our hosting providers have no access to your personal data other than as incidental to providing server storage and computing services, and are bound by data processing agreements.
• Legal & Regulatory Authorities: bh999b will disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies where required to do so by applicable law, court order, or in response to a lawful investigation. We will notify you of such disclosure where permitted to do so.
• Fraud Prevention Networks: In cases of suspected fraud, money laundering, or chargeback abuse, bh999b may share relevant account data with industry fraud prevention networks and partner platforms to protect the integrity of online gambling services across Bangladesh and internationally.

bh999b does not engage in cross-border data transfers to jurisdictions outside of those strictly necessary to deliver the above services. Where data is transferred internationally, appropriate safeguards — including standard contractual clauses and data processing agreements — are in place.

6 Data Retention

bh999b retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The retention periods for each data category are as follows:

When the applicable retention period expires, bh999b securely deletes or anonymises your personal data so that it can no longer be attributed to you as an individual. If you have requested account closure, your personally identifiable data will be anonymised as soon as the applicable minimum retention period permits.

7 Your Privacy Rights

As a bh999b player, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected]. bh999b will respond to all privacy rights requests within a reasonable period and in any case within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that bh999b holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). We will provide this information in a clear, structured format at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You can update basic account details (such as your email address or phone number) directly from your bh999b account dashboard.
• Right to Erasure: In certain circumstances — for example, where we no longer need your data for the purpose for which it was collected — you have the right to request the deletion of your personal data. Note that this right is subject to our legal obligations to retain certain data (as described in Section 6 above).
• Right to Restriction of Processing: You may ask bh999b to restrict the processing of your personal data in specific situations — for example, while a dispute about the accuracy of your data is being resolved, or while your objection to processing based on legitimate interests is under review.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider if you choose.
• Right to Object: You have the right to object to processing of your personal data where bh999b relies on legitimate interests as its legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes — including profiling for marketing — at any time.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving marketing emails), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

8 Data Security Measures

bh999b implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Our security framework includes the following safeguards:

• SSL/TLS Encryption: All data transmitted between your device and bh999b's servers is encrypted using 128-bit SSL/TLS technology. This ensures that your login credentials, payment details, and account information cannot be intercepted in transit by any third party.
• Encrypted Data Storage: Sensitive personal data fields — including payment account identifiers, national ID numbers, and authentication credentials — are stored in encrypted form using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data stores.
• Two-Factor Authentication (2FA): bh999b offers two-factor authentication as an optional but strongly recommended security layer for all player accounts. When 2FA is enabled, access to your account requires both your password and a time-based one-time code, protecting you even if your password is compromised.
• Access Controls: Access to player personal data within bh999b's internal systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls, audit logging, and regular access reviews are applied to all internal data systems.
• Security Monitoring: bh999b's platform is monitored continuously for suspicious activity, including brute-force login attempts, unusual transaction patterns, and potential data breach indicators. Automated alerts are in place to trigger rapid response to any detected security incident.
• Data Breach Response: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bh999b will notify affected players without undue delay and take immediate steps to contain the breach, assess its impact, and prevent recurrence.

While bh999b takes all reasonable steps to secure your data, no internet-based platform can guarantee absolute security. You also play an important role in protecting your account by using a strong, unique password, enabling 2FA, and never sharing your login credentials with any other person.

9 Children & Minors

bh999b is strictly an adults-only platform. Access to, and registration on, bh999b is permitted only to individuals who are 18 years of age or older. We do not knowingly collect, store, or process personal data from any individual below the age of 18.

During account registration, all players are required to confirm that they are at least 18 years of age. bh999b reserves the right to request documentary proof of age from any player at any time. Where an account is found to belong to an individual under 18, the account will be suspended immediately, all associated funds will be withheld pending investigation, and the personal data collected in connection with that account will be deleted as soon as the investigation is concluded.

10 Updates to This Privacy Policy

bh999b reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, updates to the platform's data processing practices, changes in payment infrastructure, or other operational developments. When material changes are made to this policy, bh999b will take reasonable steps to notify registered players.

Notification of material changes may be delivered through one or more of the following channels: a prominent notice on the bh999b homepage, an in-account notification visible on your next login, or an email sent to the address registered on your account. The effective date shown at the top of this page will be updated to reflect the date on which the revised policy takes effect.

Your continued use of the bh999b platform after the revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and request account closure by contacting [email protected]. We encourage you to review this Privacy Policy periodically to stay informed about how bh999b is protecting your personal data.