br99 Privacy Policy

1. Introduction

br99 ("the Platform", "we", "us", "our"), accessible at br99.onl, is committed to protecting the privacy and personal data of every player who registers with or uses the Platform. This Privacy Policy ("Policy") sets out in clear terms what personal data we collect, why we collect it, how we use and protect it, with whom we may share it, and what rights you have as a data subject.

This Policy applies to all users of the br99 Platform, including registered players, visitors who browse the site without registering, and individuals who contact our support team. By accessing br99.onl or registering an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, which together form the complete framework governing your relationship with br99. In the event of a conflict between this Policy and any other document, this Policy governs with respect to personal data matters.

2. Data Controller

For the purposes of this Policy, br99 acts as the data controller in respect of all personal data collected through the br99 Platform. As data controller, br99 determines the purposes and means by which your personal data is processed.

All queries, requests, and complaints relating to how br99 handles personal data should be directed to our support team at the contact details provided in Section 15 of this Policy. We take all data-related enquiries seriously and will respond within the timeframes outlined under Section 11 (Your Rights).

3. Data We Collect

br99 collects personal data in two broad categories: data you provide directly, and data collected automatically as you use the Platform. The following table summarises the types of personal data we collect:

4. How We Collect Your Data

br99 collects personal data through the following means:

4.1 Direct Collection

You provide data directly to br99 when you complete the registration form, submit KYC verification documents, initiate a deposit or withdrawal, contact our customer support team, respond to surveys or promotional offers, or update your account profile.

4.2 Automated Collection

When you access br99.onl, our servers and analytics tools automatically collect certain technical and usage data. This includes your IP address, the device and browser you are using, the pages you visit, and the duration of each session. This data is collected using server logs, cookies, and similar tracking technologies — see Section 8 for full details on our cookie practices.

4.3 Third-Party Sources

We may receive limited personal data from third parties in specific circumstances, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and others) confirming transaction status.
• Identity verification service providers used in our KYC process.
• Fraud detection and anti-money-laundering screening services.
• Analytics providers that aggregate anonymised platform usage data.

Where data is received from third parties, it is used solely for the purposes described in Section 5 and is subject to the same security standards applied to directly collected data.

5. How We Use Your Data

br99 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your player account, including authentication and password recovery.
• Transaction processing: Processing deposits and withdrawals through bKash, Nagad, Rocket, and other supported payment methods, and maintaining accurate financial records in BDT.
• Identity verification (KYC): Verifying your age (minimum 21 years) and identity in accordance with responsible gaming obligations and applicable legal requirements.
• Service delivery: Providing access to casino games, sports and cricket betting markets, promotional offers, and customer support.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and other illegal or prohibited conduct.
• Legal compliance: Meeting our obligations under applicable laws and cooperating with regulatory bodies or law enforcement agencies where required.
• Platform improvement: Analysing aggregated usage patterns to improve game performance, page design, payment flows, and overall user experience on the Platform.
• Marketing communications: Sending promotional emails, SMS alerts, and bonus notifications to players who have opted in to receive such communications. You may withdraw consent at any time.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling and providing appropriate intervention tools, in accordance with our Responsible Gaming Policy.
• Dispute resolution: Maintaining records necessary to resolve disputes fairly, including bet settlement disputes and payment queries.

6. Legal Basis for Processing

br99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil the Terms and Conditions you entered into with br99, including account creation, game provision, and payment processing.
• Legitimate interests: Processing carried out to pursue br99's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable laws, regulations, or orders from competent authorities.
• Consent: Processing of data for marketing communications and optional analytics, where you have given your explicit, freely revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Data

br99 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may share your data with the following categories of recipients strictly on a need-to-know basis:

7.1 Payment Service Providers

To process deposits and withdrawals, br99 shares the minimum necessary data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers are contractually bound to handle your data securely and to use it solely for payment processing purposes.

7.2 Game Content Providers

Certain game data (such as session identifiers and bet records) is shared with licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver game content, record outcomes, and ensure RNG integrity. Personal identity data is not shared with game providers.

7.3 Identity Verification and Compliance Services

To fulfil KYC and anti-money-laundering obligations, br99 may share identity documents and verification data with specialist third-party compliance service providers. These providers operate under strict data processing agreements with br99.

7.4 Legal and Regulatory Disclosure

br99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of br99, its players, or the public.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of br99's assets, player data may be transferred as part of that transaction. Affected players will be notified in advance via their registered email address.

8. Cookies and Tracking Technologies

br99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the site to recognise your device on return visits and to remember your preferences.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled.
• Functional cookies: Allow the Platform to remember your preferences such as language settings and display options, improving your experience across sessions.
• Analytics cookies: Collect anonymised data about how visitors use the Platform — pages viewed, time on site, and navigation paths — to help us improve design and performance. Analytics cookies are only placed with your consent.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These are only placed with your explicit consent.

8.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the br99 Platform, including the ability to stay logged in during a session. For specific instructions on managing cookies, refer to the help documentation of the browser you are using.

9. Data Retention

br99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a minimum of five years after account closure, to satisfy legal and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Support communications: Retained for three years from the date of the interaction, unless required for longer in connection with an unresolved dispute.
• Marketing consent records: Retained for as long as you remain an active subscriber plus two years following withdrawal of consent.
• Technical and usage logs: Typically retained for 12 months on a rolling basis, after which they are anonymised or deleted.

Where data is no longer required and no legal obligation mandates its retention, br99 will securely delete or anonymise it in accordance with our internal data destruction procedures.

10. Security Measures

br99 applies a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The primary measures in place include:

• Transport encryption: All data transmitted between your device and br99 servers is encrypted using 256-bit TLS/SSL protocols.
• Password hashing: Account passwords are stored as one-way cryptographic hashes. Plain-text passwords are never stored or transmitted.
• Access controls: Access to personal data within br99's systems is restricted on a strict need-to-know basis. Staff access to player data is logged and audited.
• Intrusion detection: br99's infrastructure is monitored continuously for suspicious activity, with automated alerts triggering immediate security review.
• Data minimisation: Systems are designed to collect and retain only the minimum data necessary for each specific purpose.
• Vendor security assessments: Third-party service providers with access to player data are required to demonstrate adequate security controls before being engaged and on an ongoing basis.

11. Your Rights

As a player whose personal data is processed by br99, you hold the following rights with respect to your personal information:

• Right of access: You may request a copy of the personal data br99 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that br99 limit the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: Where technically feasible and permitted by applicable law, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account details. br99 will acknowledge your request within 72 hours and fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, of which you will be notified.

12. Minors

The br99 Platform is strictly for individuals aged 21 years and above. br99 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that a minor may have registered or used the br99 Platform are encouraged to contact us immediately at [email protected]. We will investigate and act promptly. We also strongly encourage the use of parental control software to prevent minors from accessing online gaming platforms.

13. International Data Transfers

br99 primarily processes and stores personal data within servers located in secure data centres. In some circumstances, particularly where third-party service providers such as game content suppliers or payment processors operate internationally, personal data may be transferred to and processed in countries outside Bangladesh.

Where such international transfers occur, br99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements that impose binding data protection obligations on recipients of transferred data.

By using the br99 Platform, you acknowledge and consent to the potential transfer of your personal data in the circumstances described in this section, subject always to the protections outlined herein.

14. Changes to This Policy

br99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address held on their account at least 14 days before the revised Policy takes effect.

The "Effective Date" at the top of this document reflects when the current version came into force. We encourage you to review this Policy regularly. Your continued use of the br99 Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

The most current version of this Policy is always available at br99.onl/privacy-policy. If you have any questions about a recent change, please contact our support team before continuing to use the Platform.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which br99 processes your personal data, please contact us through the following channel. Our support team operates 24 hours a day, seven days a week, in English.

Email: [email protected]

Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

Response Time: We acknowledge all data-related enquiries within 72 hours and aim to resolve them within 30 calendar days.