Privacy Policy for
bha99 — Your Data, Protected
At bha99, the privacy and security of your personal information is a core responsibility, not an afterthought. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and the rights you hold as a player registered on Bangladesh's trusted online casino and sportsbook platform.
Six Pillars of Data Protection at bha99
These principles guide every decision we make about your personal data — from the moment you register to the day you close your account.
All data transmitted between your device and the bha99 platform is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Your account credentials, payment details, and personal information are never sent in plain text.
bha99 does not sell, rent, or trade your personal data to marketing agencies, data brokers, or any other commercial third parties. Your information is used solely to operate your account, process your transactions, and improve your experience on the platform.
Data collected for one stated purpose is not repurposed for a different use without your knowledge. If bha99 intends to use your data in a new way, you will be notified and given the opportunity to update your preferences before that use begins.
We only collect the personal data that is genuinely necessary to operate your account, verify your identity, process financial transactions, and comply with applicable platform requirements. We do not collect data speculatively or for undefined future use.
You have the right to access, correct, and in certain circumstances request the deletion of your personal data. You may also object to specific types of processing or request a portable copy of your data. bha99 responds to all valid data rights requests within 30 days.
This Privacy Policy is written in plain, accessible English — not buried in legal jargon. bha99 believes you deserve to understand exactly how your data is handled. If any part of this policy is unclear, our support team is available to explain it in plain terms.
1. Data We Collect
1.1 Information You Provide Directly
When you register an account, interact with customer support, or complete identity verification, bha 99 collects personal information that you provide directly. This includes:
- Your full legal name as it appears on your official government-issued identification
- A valid email address that you own and actively monitor
- A Bangladeshi mobile phone number registered in your own name
- Your date of birth (used to verify that you meet the 18+ age requirement)
- Your residential address in Bangladesh
- A username and password of your own choosing
- Identity documents submitted for KYC verification, such as a National Identity Card (NID), passport, or driving licence
- Payment method details, including mobile banking account identifiers for bKash, Nagad, or Rocket, and bank account references for bank transfer methods
1.2 Information Collected Automatically
When you access the bha99 Platform — whether via a desktop browser or a mobile device — certain technical information is collected automatically. This data is used to maintain platform security, detect fraud, and optimise the user experience:
- IP address and approximate geographic location derived from that IP
- Device type, operating system, and browser version
- Pages viewed, time spent on each page, and navigation path through the Platform
- Date and time of each session
- Referring URL (the website or link that directed you to bha99)
- In-platform activity logs, including games played, bets placed, deposit and withdrawal actions, and bonus claim events
1.3 Financial Transaction Data
Every deposit and withdrawal transaction processed through your bha99 account generates a transaction record. This record includes the transaction amount in BDT, the payment method used (e.g., bKash, Nagad, Dutch-Bangla Bank), the transaction timestamp, the transaction reference number, and the outcome status (completed, pending, or failed). Transaction records are retained in accordance with the data retention schedule described in Section 6 of this policy.
1.4 Communications Data
If you contact bha99's support team via email, live chat, or any other channel, the content of that communication — including your messages, attachments, and any personal information you choose to include — is stored. This data is used to resolve your query, maintain quality assurance records, and, where legally required, to comply with lawful information requests.
Important Notice: bha99 will never ask you to share your full password, PIN, or one-time verification code via email, live chat, or phone. If you receive any such request claiming to be from bha99, do not comply and report it immediately to [email protected].
1.5 Summary of Data Categories
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, NID number, passport scan | Registration / KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration / account update |
| Financial Data | bKash/Nagad account, bank account reference, transaction history | Deposit / withdrawal |
| Technical Data | IP address, device type, browser, session logs | Every platform visit |
| Usage Data | Games played, bets placed, pages visited, time on site | Active session |
| Communications Data | Support chat transcripts, email correspondence | Customer support interaction |
| Marketing Preferences | Opt-in / opt-out status, preferred communication channel | Account settings / registration |
2. How We Use Your Data
2.1 Account Management and Service Delivery
The primary purpose for which bha99 processes your personal data is to operate your account and deliver the services you have requested. This includes creating and maintaining your account, processing your deposits and withdrawals through your chosen payment method, settling bets and crediting winnings, applying bonuses and promotions you have opted into, and providing customer support when you contact us. Without this processing, bha99 cannot provide you with the services described on the Platform.
2.2 Identity Verification and Fraud Prevention
bha99 uses the identity and financial data you provide to verify your age, confirm your identity, and authenticate your payment methods. This verification process protects both the integrity of the Platform and the security of your account. bha99 also analyses transaction patterns and session behaviour to detect and prevent fraud, money laundering, unauthorised access, and other activities that could harm players or the Platform.
2.3 Responsible Gaming Monitoring
bha99 takes its responsible gaming obligations seriously. Usage data — including session frequency, deposit amounts, bet sizes, and time spent on the Platform — is monitored to identify patterns that may indicate problematic gambling behaviour. Where such patterns are detected, bha99 may proactively reach out to the relevant player, apply account limits, or take other protective measures. This processing is carried out in the genuine interest of player welfare and platform integrity.
2.4 Communications and Marketing
bha99 uses your contact details to send transactional communications that are essential to your account — including deposit confirmations, withdrawal notifications, security alerts, and verification requests. These communications cannot be opted out of while your account is active.
With your separate consent, bha99 may also send promotional communications about new games, seasonal bonuses (such as Eid or BPL season offers), and platform updates. You may withdraw your consent to marketing communications at any time by updating your preferences in your account settings or by contacting [email protected].
2.5 Platform Improvement and Analytics
Aggregated and anonymised usage data is analysed to understand how players interact with the Platform, identify areas where the user experience can be improved, and make informed decisions about new features, game additions, and promotional strategies. This analytics processing uses data in a form that cannot be traced back to any individual player.
2.6 Legal and Regulatory Obligations
bha99 may be required by law to retain certain categories of data, disclose information to competent authorities, or take specific actions with respect to your account. Where such obligations arise, bha99 will comply fully with the applicable legal requirement. In circumstances where bha99 is legally prevented from disclosing the reason for an action taken on your account, we will inform you that we are unable to provide further details at that time.
Legal Basis for Processing: bha99 processes your personal data on the following legal bases: (a) performance of the contract between you and bha99 (account operation and service delivery); (b) compliance with a legal obligation (KYC, fraud prevention, regulatory reporting); (c) legitimate interests of bha99 (platform security, responsible gaming monitoring, analytics); and (d) your consent (marketing communications, optional personalisation features).
3. Data Sharing & Third Parties
3.1 Payment Service Providers
To process your deposits and withdrawals, bha99 shares relevant financial data with your chosen payment service providers. For mobile banking transactions, this means sharing the necessary identifiers with bKash, Nagad, Rocket, or Upay as applicable. For bank transfers, relevant account reference data is shared with Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or whichever institution you have selected. Card payments are processed through Visa or Mastercard-certified payment gateways. Each of these providers operates under their own privacy policy, which governs their handling of the data shared with them.
3.2 Game Providers
The casino games, slots, and live dealer experiences on the bha99 Platform are supplied by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games within your session, a session token and certain technical identifiers are shared with the relevant game provider. Game providers do not receive your full name, payment details, or contact information unless specifically required for the resolution of a game dispute.
3.3 Identity Verification Partners
Where bha99 uses third-party identity verification services to validate documents submitted during the KYC process, copies of those documents and associated personal data may be shared with the verification partner. All such partners are subject to contractual data processing agreements that restrict them from using your data for any purpose other than the verification service they provide to bha99.
3.4 Legal and Regulatory Disclosures
bha99 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required to do so by applicable law, where required by a court order, or where bha99 reasonably believes that disclosure is necessary to prevent imminent harm, fraud, or criminal activity. Such disclosures are made on a minimum-necessary basis.
3.5 What bha99 Will Never Do
bha99 makes the following firm commitments regarding data sharing:
- bha99 will never sell your personal data to any third party for commercial gain
- bha99 will never share your data with advertising networks for the purpose of serving targeted advertisements on other websites
- bha99 will never share your data with other gambling operators or their affiliates
- bha99 will never transfer your data to a jurisdiction with lower data protection standards without implementing appropriate safeguards
Third-Party Links: The bha99 Platform may contain references to third-party game providers or payment partners. bha99 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external service before interacting with them directly.
4. Cookies & Tracking
4.1 What Are Cookies?
Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognise your device across multiple visits, remember your preferences, and track certain aspects of your behaviour on the site. bha99 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the Platform effectively.
4.2 Categories of Cookies Used by bha99
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Keep you logged in, maintain session security, process transactions | No — essential to Platform operation |
| Functional | Remember language preferences, display settings, and previously viewed content | Yes — via account settings |
| Analytics | Measure page traffic, session duration, game popularity, and navigation paths | Yes — via account settings |
| Security | Detect fraud, bot activity, and suspicious login attempts | No — essential to account protection |
4.3 Managing Cookies
You may control how cookies are handled on your device through your browser settings. Most modern browsers allow you to view, block, or delete individual cookies. Please be aware that disabling strictly necessary or security cookies will impair your ability to use the bha99 Platform — you may not be able to log in or complete transactions if these cookies are blocked. Instructions for managing cookies in your browser are typically found under the browser's Privacy or Security settings menu.
4.4 Session Tokens and Local Storage
In addition to standard cookies, bha99 uses session tokens stored in your browser's local storage to maintain your authenticated session securely. These tokens expire automatically when you log out or when a defined period of inactivity has elapsed. They are not accessible to third-party scripts running on the Platform and are never transmitted in plain text.
5. Data Security
5.1 Technical Safeguards
bha99 implements a range of technical security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and our servers; AES-256 encryption for sensitive data at rest in our database systems; strict firewall configurations and intrusion detection systems on all production servers; and regular third-party security audits and penetration testing.
5.2 Organisational Safeguards
Access to personal data within the bha99 organisation is granted on a strict need-to-know basis. Staff members who handle personal data are trained in data protection obligations and are bound by confidentiality agreements. Access logs are maintained for all systems that process personal data, and those logs are reviewed regularly for anomalies. When an employee's role changes or they leave the organisation, their access rights are revoked immediately.
5.3 Data Breach Response
In the event that bha99 becomes aware of a data security breach that is likely to result in a risk to your rights and freedoms, bha99 will notify affected players via their registered email address without undue delay. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences of the breach, and the measures taken or proposed to address it. bha99 maintains a documented incident response plan that is reviewed and updated annually.
5.4 Your Responsibilities
While bha99 takes extensive steps to protect your data on our systems, the security of your account also depends on actions you take. You are responsible for:
- Keeping your password confidential and not sharing it with any other person
- Using a strong, unique password that is not used for any other online account
- Logging out of your bha99 account when using a shared or public device
- Notifying bha99 promptly if you suspect any unauthorised access to your account
- Keeping your registered email address and mobile number current so that security alerts reach you
Security Tip: bha99 recommends enabling two-factor authentication on your account for an additional layer of protection. With two-factor authentication active, even if your password is compromised, an attacker cannot access your account without also controlling your registered mobile device.
6. Data Retention
6.1 Retention Principles
bha99 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable law. When the retention period for a given category of data expires, that data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.
6.2 Retention Schedule
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal obligation / dispute resolution |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| KYC verification documents | 5 years after account closure | Anti-money laundering compliance |
| Customer support communications | 3 years from last interaction | Quality assurance / dispute evidence |
| Session and technical logs | 13 months from collection | Security monitoring / fraud detection |
| Marketing preference records | Duration of account | Consent management |
| Anonymised analytics data | Indefinite (no personal data retained) | Platform improvement |
6.3 Deletion Requests
You may request the deletion of your personal data by contacting [email protected]. bha99 will assess your request and delete or anonymise your data where there is no overriding legal obligation to retain it. In cases where a legal retention requirement applies — for example, to financial transaction records — bha99 will inform you that your data must be retained for the specified period and will delete it promptly once that period expires.
7. Your Privacy Rights
7.1 Right of Access
You have the right to request a copy of the personal data that bha99 holds about you. Upon receipt of a valid access request, bha99 will provide a summary of your data in a commonly used, machine-readable format within 30 days. This summary will include the categories of data held, the purposes for which it is processed, and the retention period applicable to each category.
7.2 Right to Rectification
If any personal data that bha99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as your email address, mobile number, or residential address, you may update these directly through your account settings. For identity data — such as your legal name or date of birth — corrections must be supported by documentary evidence submitted to [email protected].
7.3 Right to Erasure
You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. As noted in Section 6, certain categories of data must be retained for defined periods to comply with legal obligations; in these cases, your data will be deleted as soon as the retention period expires.
7.4 Right to Object
You have the right to object to the processing of your personal data where bha99 relies on legitimate interests as the legal basis for that processing. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time. Upon receipt of a valid objection to marketing, bha99 will cease marketing communications immediately.
7.5 Right to Data Portability
Where bha99 processes your data on the basis of your consent or the performance of a contract, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you may transmit it to another controller of your choosing.
7.6 How to Exercise Your Rights
To exercise any of the rights described in this section, please contact the bha99 Privacy Team in writing at [email protected]. Your request should include your full name, registered email address, and a clear description of the right you wish to exercise. bha99 may need to verify your identity before processing your request. All valid requests will be responded to within 30 days of receipt.
Free of Charge: Exercising your privacy rights is free of charge. bha99 will not charge any fee for processing a data rights request unless it is manifestly unfounded or excessive — in which case a reasonable administrative fee may be applied, and you will be informed in advance.
8. Contact & Complaints
8.1 Privacy Team Contact
If you have any questions about this Privacy Policy, wish to exercise a data right, or have concerns about how bha99 handles your personal data, please contact the bha99 Privacy Team. All privacy-related correspondence should be directed to:
bha99 Privacy Team
Email: [email protected]
Subject Line: Privacy Policy Enquiry — [Your Account Username]
Response Time: Within 48 hours for general queries; within 30 days for formal data rights requests
8.2 Complaints Process
If you believe that bha99 has handled your personal data in a way that violates this Privacy Policy or applicable data protection principles, you are encouraged to raise your concern directly with the bha99 Privacy Team in the first instance. bha99 takes all privacy complaints seriously and will investigate each one thoroughly. You will receive an acknowledgement of your complaint within 48 hours and a substantive response within 10 business days.
8.3 Policy Updates
bha99 reviews this Privacy Policy regularly to ensure it remains accurate and reflects current data processing practices. When material changes are made, registered players will be notified via their registered email address at least 14 days before the changes take effect. The effective date at the top of this page will be updated to reflect the date on which the revised policy comes into force. Continued use of the bha99 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should close your account before the effective date.
8.4 Children and Minors
The bha99 Platform is strictly intended for adults aged 18 and above. bha99 does not knowingly collect or process personal data relating to individuals under the age of 18. If bha99 becomes aware that a registered account belongs to a person under 18, that account will be suspended immediately, all pending transactions will be reversed, and the account data will be handled in accordance with the applicable legal requirements for data relating to minors. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].
Ready to Play on Bangladesh's Trusted Platform?
Your data is protected by 256-bit SSL encryption and processed in full compliance with this Privacy Policy. Explore cricket betting, live casino games, and premium slots — all in a safe and reliable environment built for Bangladeshi players.
18+ only · Play Responsibly · SSL Secured · bha99.net