Privacy Policy for
baa99 Players
At baa99, protecting the personal data of every player is a core operational commitment, not an afterthought. This Privacy Policy explains in plain English exactly what information baa99 collects when you use our platform, why we collect it, how we store and protect it, and the rights you hold over your own data. This policy applies to all baa99 account holders and visitors accessing the platform from Bangladesh and elsewhere.
Privacy at a Glance
The following cards summarise baa99's key privacy commitments. Full details for each area are provided in the numbered sections below.
256-Bit SSL Encryption
Every page of the baa99 platform — including account login, cashier, and game sessions — is served over a 256-bit SSL-encrypted connection. Your personal data and financial transactions are encrypted in transit at all times.
No Sale of Personal Data
baa99 does not sell, rent, or trade your personal information to third-party marketing companies, data brokers, or advertisers. Your data is used solely to operate and improve the baa99 platform and to fulfil regulatory obligations.
Limited Third-Party Sharing
Data is shared only with trusted operational partners — payment processors (bKash, Nagad, Rocket), game providers, and identity verification services — strictly as needed to deliver baa99's services to you.
Clear Retention Limits
baa99 does not retain personal data indefinitely. Data is held for as long as it is needed for the purpose it was collected, subject to legal and regulatory retention requirements applicable in the jurisdictions in which baa99 operates.
Direct Contact for Privacy Queries
For any privacy-related questions, data access requests, or concerns about how your information is handled, you may contact the baa99 support team directly. All privacy correspondence is handled in English on Bangladesh Standard Time.
1. Information We Collect
baa99 collects personal information about you when you register an account, make deposits or withdrawals, use platform features, contact our support team, or otherwise interact with the baa99 website or mobile browser experience. The categories of information we collect are described below.
Registration information: When you create a baa99 account, we collect your full legal name, date of birth, email address, Bangladesh mobile phone number, and the password you choose. This information is required to create and secure your account and to verify your identity.
Identity verification documents: When you request a withdrawal for the first time, or when baa99 initiates a verification review, we collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. These documents are used solely for age and identity verification purposes.
Financial information: When you make a deposit or withdrawal, baa99 collects details of the payment method used, including the mobile wallet number (bKash, Nagad, Rocket, Upay, or SureCash) or bank account details. baa99 does not store full card numbers or full bank account credentials on its own servers. Payment processing is handled by the respective payment provider under their own security infrastructure.
Transaction records: baa99 maintains a complete record of all deposits, withdrawals, bonus claims, and betting activity associated with your account. These records are retained for regulatory compliance and for resolving any disputes that may arise.
Technical and usage data: When you access baa99, our servers automatically record certain technical information including your IP address, browser type and version, device type, operating system, referring URL, pages visited, session duration, and clickstream data. This information helps us optimise platform performance, detect fraudulent access, and improve the user experience.
Communications: When you contact baa99 customer support via email or live chat, we retain a record of those communications, including the content of your messages and the support agent's responses. This helps us maintain service quality and resolve recurring issues efficiently.
| Data Categories Summary | |
|---|---|
| Identity Data | Name, DOB, NID, passport |
| Contact Data | Email, mobile number |
| Financial Data | Wallet numbers, bank details |
| Transaction Data | Deposits, withdrawals, bets |
| Technical Data | IP address, device, browser |
| Communications | Support chat and email logs |
2. How We Use Your Data
baa99 uses the personal data we collect for specific, legitimate purposes directly related to operating and improving the platform. We do not use your data for purposes that are incompatible with those stated in this policy. The primary purposes for which baa99 processes your personal data are as follows:
- Account creation and management: Your registration data is used to create and maintain your baa99 account, authenticate your identity when you log in, and communicate important account-related notices to you.
- Identity and age verification: Document-based verification is used to confirm that you are at least 18 years of age and that you are the person named on the account before withdrawals are processed.
- Payment processing: Financial data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, SureCash, or your bank) solely for the purpose of completing deposit and withdrawal transactions.
- Responsible gaming compliance: Transaction and behavioural data is monitored to identify patterns consistent with problem gambling, in support of baa99's responsible gaming obligations. This may include identifying unusual session lengths, rapid loss patterns, or requests for self-exclusion assistance.
- Fraud prevention and security: Technical and financial data is analysed to detect and prevent fraudulent account activity, money laundering, bonus abuse, and unauthorised account access.
- Platform improvement: Aggregated, anonymised usage data is used to analyse how players interact with the baa99 platform, identify performance issues, and prioritise product improvements.
- Customer support: Communication records are used by the support team to resolve queries, investigate complaints, and maintain service quality standards.
- Promotional communications: If you have opted in to marketing communications, your contact details may be used to send you information about baa99 promotions, bonuses, and seasonal offers relevant to the Bangladesh market. You may opt out of marketing emails at any time by contacting support.
baa99 does not use automated decision-making or profiling processes that produce legal or similarly significant effects on individual players without human review. Where automated systems flag an account for investigation, a member of the baa99 team reviews the case before any consequential action is taken.
3. Data Sharing and Disclosure
baa99 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.
Payment service providers: To process deposits and withdrawals, baa99 shares the relevant payment details with the payment provider you have selected — such as bKash, Nagad, Rocket, Upay, or SureCash — or with your bank. Each payment provider processes your data under their own privacy policy and security standards. baa99 recommends that you review the privacy policy of your chosen payment provider.
Game providers: Third-party game studios whose games are hosted on the baa99 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive session data (such as a pseudonymous player token and bet values) necessary to deliver game functionality. These providers do not receive your full identity or financial data.
Identity verification services: Where baa99 uses a third-party identity verification service to validate identity documents, that service will receive a copy of the document you submit. Such services are contractually bound to use that data solely for verification purposes and to maintain it under appropriate security controls.
Legal and regulatory disclosure: baa99 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation. Where legally permissible, baa99 will notify affected account holders of such disclosure requests.
Business transfers: In the event that baa99 undergoes a merger, acquisition, or transfer of its business assets, personal data held by baa99 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any material change to the data controller responsible for their personal data.
- bKash, Nagad, Rocket, Upay, SureCash (payments)
- Your bank (bank transfers)
- Game providers (session tokens only)
- Identity verification partners
- Authorities (if legally required)
5. Data Security Measures
baa99 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security posture is reviewed and updated on a regular basis in line with industry standards.
Encryption in transit: All data exchanged between your browser and the baa99 platform is encrypted using 256-bit SSL/TLS protocols. This applies to every page of the platform including the login page, cashier, account settings, and game sessions.
Encryption at rest: Sensitive data fields — including identity document images and financial account references — are encrypted when stored in baa99's database infrastructure. Passwords are stored using a one-way cryptographic hashing algorithm and are never stored or transmitted in plain text.
Access controls: Access to personal data within baa99's internal systems is restricted on a strict need-to-know basis. Staff members can only access the categories of player data relevant to their specific role. All internal data access is logged and subject to periodic audit.
Fraud and anomaly detection: baa99 uses automated monitoring systems to detect unusual patterns of account access, login attempts from unfamiliar locations, and financial activity inconsistent with normal player behaviour. Suspicious events trigger an immediate security review.
Your responsibility: While baa99 maintains strong platform-level security, the security of your baa99 account also depends on you keeping your login credentials confidential. baa99 strongly recommends using a unique password for your baa99 account and enabling optional two-factor authentication (2FA) via your account settings.
- 256-bit SSL/TLS on all pages
- Encrypted storage for sensitive fields
- One-way password hashing
- Role-based internal access control
- Automated anomaly detection
- Optional account-level 2FA
6. Data Retention Policy
baa99 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Once data is no longer needed, it is securely deleted or anonymised so that it can no longer be associated with an individual player.
The following retention periods apply as a general guide. Specific circumstances — such as an ongoing investigation, unresolved dispute, or a regulatory hold — may require data to be retained beyond these standard periods.
| Data Category | Standard Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Regulatory and anti-fraud obligations |
| Identity verification documents | 5 years from date of verification | AML compliance and dispute resolution |
| Transaction records | 5 years from transaction date | Financial record-keeping requirements |
| Support communications | 3 years from last interaction | Quality assurance and dispute history |
| Technical / session logs | 90 days | Security monitoring and debugging |
| Marketing preferences | Until opt-out or account closure | Communication consent management |
7. Your Privacy Rights
As a baa99 account holder, you hold the following rights in relation to the personal data baa99 holds about you. To exercise any of these rights, contact the baa99 support team at [email protected]. All requests are handled in English on Bangladesh Standard Time and will be actioned as promptly as circumstances allow.
Right of Access
You may request a copy of the personal data baa99 holds about you at any time. We will provide this in a structured, readable format.
Right to Rectification
If any personal data baa99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to baa99's legal retention obligations.
Right to Restrict Processing
You may request that baa99 restrict processing of your data while a correction request or objection is being assessed.
Right to Data Portability
You may request your personal data in a machine-readable format for transfer to another service provider where technically feasible.
Right to Object
You may object to baa99 processing your data for direct marketing purposes. Opt-out requests for marketing emails are honoured immediately upon receipt.
8. Changes to This Policy
baa99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When a material change is made to this policy, the revised version will be published on this page with an updated effective date.
For changes that materially affect how baa99 processes your personal data — such as the introduction of a new data sharing arrangement or a change to retention periods — baa99 will provide direct notice to affected account holders via their registered email address, in addition to publishing the updated policy on this page.
Your continued use of the baa99 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a revised policy, you should discontinue use of the platform and contact the support team to discuss your options.
Previous versions of this Privacy Policy are retained in baa99's internal records and are available upon request. If you have any questions about this policy or about any historical version, please contact the baa99 support team at [email protected]. All enquiries are handled in English, 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).
Questions About Your Privacy?
Our support team is available around the clock to answer any privacy-related questions or data requests. You can also explore the full baa99 platform with confidence knowing your data is protected. 18+ only.