btd99 Privacy Policy — How We Handle Your Data

btd99 operates Bangladesh's premier online casino and sports betting platform, accessible at btd99.io. As part of delivering that service to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond, we necessarily collect and process certain personal data about our users. We take that responsibility seriously.

This Privacy Policy sets out, in formal and complete terms, the categories of personal data btd99 collects, the purposes for which that data is processed, the legal bases on which we rely, the circumstances under which data may be shared with third parties, the retention periods we apply, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the btd99 website, any associated mobile-optimised interfaces, customer support communications, and promotional activities conducted on behalf of btd99. It does not apply to the data practices of third-party game studios, payment processors, or other external services that maintain their own independent privacy policies.

The Effective Date of this version of the Privacy Policy is 1 January 2026. This document supersedes all previous versions. Players who registered prior to this date should note that their data continues to be processed under these updated terms from the Effective Date forward.

btd99 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below provides a structured overview of the data categories, specific data points within each category, and the context in which collection occurs.

btd99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information beyond what is strictly necessary to operate responsible gaming tools (e.g., problem gambling risk assessments conducted with player consent).

btd99 collects personal data through the following channels and mechanisms:

• Direct Provision: Data you actively submit when registering an account, completing KYC verification, initiating a deposit or withdrawal, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you interact with the platform, including server logs, cookies, session tracking pixels, and device fingerprinting used for security and fraud prevention purposes.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. btd99 does not receive or store full mobile financial service credentials — only the account identifier and transaction reference required for reconciliation.
• Identity Verification Providers: Where btd99 uses a third-party KYC service to validate government-issued documents, that provider may return a verification status and a risk score to btd99 in addition to confirming the document's authenticity.
• Analytics Services: Aggregated, anonymised usage data collected via analytics tools to understand platform performance, identify popular game categories, and improve the user experience. This data is not used to identify individual players.

btd99 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely upon, and the processing activities associated with each, are as follows:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account creation and management, game service delivery, transaction processing, and withdrawal fulfilment.
• Legal Obligation: Processing required to comply with applicable legal requirements, including identity verification (KYC), anti-money laundering (AML) screening, record-keeping obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out to pursue the legitimate business interests of btd99, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent, which may be withdrawn at any time without detriment to your account status. Consent is the legal basis for direct marketing communications and for any processing of sensitive data related to responsible gaming assessments.

The personal data collected by btd99 is used exclusively for the following purposes:

• Account Management: Creating, maintaining, and securing your player account, including authentication, session management, and account recovery.
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay; reconciling transaction records; and investigating payment disputes.
• Identity and Age Verification: Verifying that you meet the minimum age requirement of 21 years and that the identity information provided at registration is accurate and genuine.
• Responsible Gaming: Monitoring gaming behaviour patterns to identify potential problem gambling indicators; administering deposit limits, loss limits, session time limits, and self-exclusion requests; and maintaining self-exclusion registers as required by our responsible gaming policy.
• Fraud Prevention and Security: Detecting and preventing unauthorised access, account takeover attempts, collusion, multi-accounting, bonus abuse, and money laundering activity.
• Customer Support: Responding to enquiries, resolving complaints, and investigating disputes using the communications and gaming activity data associated with your account.
• Legal Compliance: Meeting record-keeping, reporting, and cooperation obligations under applicable Bangladeshi law and any relevant international standards applicable to the operation of the platform.
• Service Improvement: Using aggregated, anonymised analytics to identify areas for platform improvement, optimise game loading performance, and enhance the overall player experience.
• Direct Marketing (with consent only): Sending promotional communications about new games, seasonal offers (e.g., Eid specials, Pohela Boishakh promotions, IPL and BPL cricket betting events), and personalised bonus offers — but only where you have provided explicit opt-in consent and have not subsequently withdrawn it.

btd99 does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated.
• KYC and Identity Verification Partners: Third-party verification services receive identity document images and personal details solely for the purpose of conducting age and identity checks. These providers are bound by confidentiality obligations and data processing agreements with btd99.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive a pseudonymous player identifier and session data necessary to deliver their game content. Full identity data is not shared with game studios.
• Fraud Prevention and Security Services: Specialist third-party services may process IP addresses, device identifiers, and behavioural data to assist btd99 in detecting and preventing fraudulent activity. Data shared is anonymised or pseudonymised wherever technically feasible.
• Legal and Regulatory Authorities: btd99 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or binding legal process. btd99 will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and accountants may access personal data on a need-to-know basis subject to binding professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all of btd99's business assets, player data may be transferred to the successor entity. Players will be notified of any such transfer and will retain the right to request account closure and data deletion before the transfer completes.

btd99 uses cookies and similar tracking technologies to operate core platform functionality, enhance security, and — where you have provided consent — personalise your experience and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies manage your authenticated session, maintain your language and currency preferences, and support the platform's security features. They cannot be disabled without impairing core functionality.
• Functional Cookies: Enable enhanced functionality such as remembering your preferred game categories, your responsible gaming limit settings, and your most recently played titles. Disabling these cookies may reduce convenience but will not prevent access to the platform.
• Analytics Cookies: Used — with your consent — to collect aggregated and anonymised data about how players navigate the platform, which games are most frequently accessed, and where technical errors occur. This data is used solely for internal service improvement.
• Security Cookies: Support fraud detection and bot mitigation systems by recording session fingerprinting data. These are classified as strictly necessary and cannot be disabled.

You may manage your cookie preferences through your browser settings. Please note that blocking strictly necessary cookies will prevent you from logging in to your account. btd99 does not use third-party advertising cookies or behavioural retargeting technologies.

btd99 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is technically not feasible, data is archived in an access-restricted environment pending secure deletion.

btd99 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:

• Transport Encryption: All data transmitted between your device and btd99 servers is encrypted using TLS 1.3. Connections using older, insecure protocol versions are rejected.
• Storage Encryption: Sensitive data fields — including identity document references, financial account identifiers, and KYC outcomes — are encrypted at rest using AES-256.
• Password Security: Account passwords are hashed using bcrypt with an appropriate cost factor. Plain-text passwords are never stored and are not accessible to any btd99 employee.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data receive mandatory privacy and security training and are subject to binding confidentiality obligations.
• Incident Response: btd99 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to affected players, btd99 will notify affected individuals without undue delay and will take prompt remediation steps.
• Third-Party Security Standards: All data processors and sub-processors engaged by btd99 are contractually required to implement security measures at least equivalent to those described in this section.

As a data subject, you hold the following rights with respect to the personal data btd99 holds about you. Requests to exercise any of these rights should be submitted to [email protected] with the subject line "Data Rights Request" and your registered account username included.

• Right of Access: You may request a copy of all personal data btd99 holds about you, together with information on the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or supplemented. Minor corrections (e.g., address updates) can often be completed directly through Account Settings.
• Right to Erasure: You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been processed unlawfully. This right is subject to overriding legal obligations that may require btd99 to retain certain data (see Section 8).
• Right to Restriction of Processing: You may request that btd99 restrict processing of your data — meaning we store it but do not actively use it — while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you provided to btd99, for the purpose of transferring it to another service provider.
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling conducted for responsible gaming monitoring. btd99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

btd99 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window.

The btd99 platform is strictly for adults aged 21 years and above. btd99 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. The minimum age of 21 exceeds the standard 18+ threshold applied by many platforms and reflects btd99's commitment to responsible gaming in the Bangladesh market.

If btd99 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately, the associated account will be closed, any funds held in the account will be returned to the payment source used for deposit, and the matter may be referred to the appropriate authorities where required by law.

Parents and guardians who believe that a minor in their care may have registered on the btd99 platform are encouraged to contact us immediately at [email protected]. We take such reports seriously and will investigate and act within 24 hours of a verified report.

The btd99 platform may display references to or integrate the content of third-party game studios (such as Pragmatic Play, Evolution Gaming, and Spribe) and payment service providers (such as bKash and Nagad). These third parties operate under their own independent privacy policies, and btd99 has no control over their data practices.

btd99 is not responsible for the privacy practices of any third-party service to which the platform connects or integrates. Players who access third-party services in connection with their btd99 account are encouraged to review the applicable privacy policies of those services independently.

btd99 does not embed third-party social media widgets, advertising networks, or tracking pixels on the platform that would allow those third parties to independently collect player data without prior notification.

btd99 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, evolving data processing practices, or the introduction of new platform features that involve the collection or use of personal data.

Where a proposed change is material — meaning it meaningfully alters the scope of data collected, the purposes for which it is used, or the rights available to players — btd99 will provide not less than 14 calendar days' advance notice via the email address registered to each affected player's account.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of any provision, or updates to contact details — may take effect immediately upon publication, without advance notice. The "Last Reviewed" date at the top of this document will be updated whenever any change is made.

Continued use of the btd99 platform after the stated Effective Date of any revised Policy constitutes acceptance of the revised terms. Players who do not accept the revised Policy should cease use of the platform and may request account closure in accordance with the process described in the Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data btd99 holds about you, please contact the btd99 Data Privacy team using the details below. All privacy-related correspondence should be submitted in English and should include your registered account username.

• Privacy Enquiries Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response Time: btd99 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Support Hours: Our customer support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays (Eid, Victory Day, Independence Day, and Pohela Boishakh).

When submitting a data rights request, please include sufficient information to allow us to verify your identity before disclosing or amending any personal data. btd99 may request a copy of a government-issued ID for verification purposes when processing access, rectification, or erasure requests.