bab99 Privacy Policy — Your Data, Explained

Introduction

This Privacy Policy describes how bab99 ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal information provided by or about players ("you", "your") who register for and use the bab99 online casino and sports betting platform at bab99.bet. By creating a bab99 account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

bab99 is committed to handling all personal data with care, transparency, and in compliance with applicable data protection principles. This policy applies to all personal data we hold about registered players and to data collected through the Platform's standard operation. We do not sell personal data to third parties for their own marketing purposes. We do not use personal data to profile players in ways that are unrelated to the operation of the bab99 service.

1. Information We Collect

bab99 collects personal information that is necessary for the operation of the Platform, the verification of player identity, the processing of financial transactions, and compliance with applicable legal obligations. The categories of personal data we collect are described below. We do not collect more data than is necessary for these purposes.

2. How We Use Your Information

bab99 uses the personal data it collects only for the purposes set out below. We do not use your data for any purpose that is incompatible with the reasons it was originally collected.

• Account creation, identity verification, and KYC compliance. bab99 is required to verify the identity of players before processing withdrawals and in certain other circumstances to comply with anti-money laundering obligations.
• Processing deposits and withdrawals. Transaction data is required to record, reconcile, and where necessary, investigate financial activity on the Platform including deposits and withdrawals via bKash, Nagad, and Rocket.
• Delivering and improving the bab99 Platform. Technical and gaming activity data helps us diagnose errors, optimise performance on Bangladesh mobile networks, improve game loading times, and develop new features.
• Fraud prevention and security monitoring. Technical data including IP address, device identifiers, and login patterns are analysed to detect and prevent fraudulent activity, account takeover attempts, and bot usage.
• Responsible gaming monitoring. Gaming activity data is reviewed to identify patterns that may indicate problem gambling, to enforce self-exclusion periods, and to respond to player requests to set deposit limits or session controls.
• Customer support. Communications data is retained so that bab99 support staff can review the history of your queries, maintain continuity of service, and investigate complaints fairly and accurately.

3. Legal Basis for Processing

bab99 processes personal data only where there is a valid legal basis to do so. The legal bases on which we rely are as follows, depending on the nature of the processing activity.

• Contract performance: the processing of registration, identity, transaction, and gaming activity data is necessary to perform the contract between bab99 and the player — namely, to provide access to the Platform and to process financial transactions connected with gameplay.
• Legal obligation: KYC verification, anti-money laundering screening, and the retention of transaction records for prescribed periods are required by applicable law. bab99 must process personal data to comply with these obligations regardless of any other consideration.
• Legitimate interests: fraud prevention, security monitoring, Platform performance analysis, and the detection of responsible gaming indicators are processed on the basis of bab99's legitimate interest in operating a safe, fair, and reliable platform.
• Consent: where we send you promotional communications about bab99 offers and bonuses, we do so only where you have opted in to receive such communications. You may withdraw consent at any time by contacting bab99 support.

4. Sharing Your Information

bab99 does not sell, rent, or trade personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, and Rocket receive transaction identifiers and amounts necessary to process deposits and withdrawals. These providers operate under their own privacy policies and are not permitted to use data shared by bab99 for any purpose other than processing the relevant transaction.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised session tokens so that games can be delivered to your device and your game results can be recorded. These providers do not receive your name, mobile number, or payment details.
• Fraud and security services: anonymised technical data may be shared with trusted third-party fraud detection and security services. These services process data only on bab99's instructions and under strict contractual data protection obligations.
• Legal and regulatory authorities: bab99 will disclose personal data to law enforcement, regulators, or other competent authorities when required to do so by applicable law, court order, or in response to a lawful request. bab99 will notify the relevant player of such disclosure to the extent permitted by law.

5. Cookies and Tracking Technologies

bab99 uses cookies and similar browser storage technologies to maintain session state, remember your login, and measure Platform performance. We do not use third-party advertising cookies or cross-site tracking pixels. The categories of cookies we use are described below.

• Essential cookies: required for the Platform to function correctly. These cookies maintain your login session, store your language preference, and remember your responsible gaming settings. You cannot opt out of essential cookies without also opting out of using the Platform.
• Performance cookies: used to measure how the Platform performs on different devices, screen sizes, and network conditions in Bangladesh. Data collected by performance cookies is aggregated and anonymised — it is not linked to individual player accounts.
• Functional cookies: used to remember optional preferences you have set, such as a preferred payment method display or notification settings. Functional cookies can be cleared at any time through your device's browser settings without affecting your ability to use the Platform.

6. Data Security

bab99 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers, access controls that restrict internal access to personal data to authorised personnel only, regular security reviews of Platform infrastructure, and secure storage of account credentials using modern hashing techniques. No password or payment PIN is stored in plain text.

While bab99 takes all reasonable steps to protect personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bab99 will notify affected players without undue delay. You can help protect your account by keeping your login credentials confidential, not sharing your OTP with anyone, and notifying bab99 support immediately if you suspect any unauthorised activity on your account.

7. Data Retention

bab99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The retention periods we apply are as follows: account registration and identity data is retained for the lifetime of your account and for a minimum of five years following account closure to comply with anti-money laundering record-keeping obligations; transaction records are retained for a minimum of five years from the date of the transaction; gaming activity data is retained for two years from the date of the relevant session; communications data is retained for two years from the date of the last communication.

When personal data is no longer required and there is no legal obligation to retain it, bab99 will securely delete or anonymise it. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and performance analysis purposes. You may request early deletion of your personal data by contacting bab99 support, subject to any overriding legal retention obligation.

8. Your Privacy Rights

As a bab99 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact bab99 support through the in-platform support channel or by emailing [email protected]. bab99 will respond to all valid requests within a reasonable timeframe.

• Right of access: you have the right to request a copy of the personal data bab99 holds about you, along with information about how it is being used. We will provide this information free of charge in a structured, commonly used format.
• Right to rectification: if personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details (such as your registered mobile number) can often be updated directly through your account settings.
• Right to erasure: you have the right to request that bab99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to bab99's legal obligations to retain certain data.
• Right to restrict processing: you have the right to request that bab99 restrict the processing of your personal data in certain circumstances, such as while a complaint is being investigated or where you contest the accuracy of the data we hold.
• Right to withdraw consent: where bab99 processes your personal data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

9. Children's Privacy

The bab99 Platform is strictly for adults aged 21 and above. bab99 does not knowingly collect, store, or process personal data relating to any person under the age of 21. If bab99 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and you believe that a person under 21 in your care has registered an account with bab99, please contact bab99 support at [email protected] immediately so that we can investigate and take appropriate action.

10. Changes to This Privacy Policy

bab99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last updated" date at the top of this page and, where reasonably practicable, notify registered players via the contact details on file. The version published on this page is the current operative version. We encourage you to review this Privacy Policy periodically. Your continued use of the bab99 Platform after any amendment constitutes your acceptance of the updated Privacy Policy.