bdt99 Privacy Policy — How We Protect Your Personal Data
At bdt99, the privacy and security of every player in Bangladesh is a core commitment, not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored, and what rights you hold over your own information at all times.
Six Data Protection Principles We Follow
bdt99's approach to personal data is built on six foundational principles. Every data handling decision we make is measured against these standards to ensure your privacy is respected across all interactions with the platform.
Transparency
We are open and straightforward about what personal data bdt99 collects, what we use it for, and who we share it with. This Privacy Policy is written in plain English so that every Bangladesh player can understand their data rights without needing a legal background.
Data Minimisation
bdt99 collects only the data that is genuinely necessary for the purposes described in this policy. We do not collect personal information speculatively or in bulk. Each data point we hold serves a defined, documented purpose tied to operating a safe and compliant betting platform.
Security by Design
All personal data held by bdt99 is protected using industry-standard security measures, including SSL/TLS encryption for all data in transit and AES-256 encryption for sensitive data at rest. Our infrastructure is regularly audited to ensure it meets contemporary security benchmarks.
Your Rights First
Every bdt99 player holds enforceable rights over their personal data — including the right to access, correct, and request deletion of their information. bdt99 processes all data rights requests within 30 days and provides a clear, free-of-charge pathway for submitting them.
Limited Retention
bdt99 does not retain personal data indefinitely. Each category of data is held only for as long as it is needed for the purposes for which it was collected, or as required by applicable legal and anti-money-laundering obligations. Once a retention period expires, data is securely deleted or anonymised.
Lawful Processing
bdt99 only processes personal data where a valid legal basis exists — such as the performance of a contract with you, compliance with a legal obligation, your explicit consent, or a legitimate interest that does not override your fundamental privacy rights. We document our legal basis for every processing activity.
Table of Contents
1 Introduction
This Privacy Policy ("Policy") is published by bdt99 (referred to hereinafter as "bdt99", "we", "us", or "our") and applies to all personal data collected, processed, and stored in connection with the operation of the bdt99 online betting and gaming platform, accessible at bdt99.im, as well as any related mobile interfaces, applications, or communication channels operated by bdt99.
This Policy has been prepared to inform you — our registered players, prospective users, and website visitors in Bangladesh and beyond — of the types of personal information we collect, the purposes for which that information is used, the safeguards we apply to protect it, and the rights you hold over your own data.
By creating an account with bdt99, making a deposit, placing a bet, or otherwise accessing the bdt99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform and may request account closure in accordance with our Terms and Conditions.
Effective Date: This Privacy Policy is effective as of January 2026 and supersedes all prior versions. The most current version of this Policy is always available at bdt99.im/privacy-policy. We encourage all players to review this Policy periodically to remain informed of any updates.
2 Data We Collect
bdt99 collects personal data in two broad categories: information you provide directly to us, and information generated automatically as a result of your use of the platform. The specific types of data we collect are described below.
2.1 Information You Provide Directly
- Identity Data: Full legal name, date of birth, gender, and National Identity Card (NID) number or passport number as provided during account registration or identity verification.
- Contact Data: Mobile phone number, email address, and residential address (city, district, and postal area within Bangladesh).
- Account Credentials: Your chosen username and an encrypted version of your password. bdt99 does not store passwords in plain text under any circumstances.
- Financial Data: Payment method details such as your registered bKash, Nagad, Rocket, or Upay mobile wallet number, or the last four digits and expiry date of a Visa or Mastercard. Full card numbers are never stored on bdt99 systems.
- Verification Documents: Copies of government-issued identity documents (NID, passport, or birth certificate) submitted as part of our Know Your Customer (KYC) process.
- Support Communications: Records of all correspondence between you and bdt99 via live chat, email, or any other support channel, including the content of queries, complaints, and their resolutions.
2.2 Information Collected Automatically
- Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, time spent on each page, games played, bets placed, session start and end times, and in-platform navigation patterns.
- Transaction Data: Full records of all deposits, withdrawals, wagers, wins, losses, and bonus redemptions associated with your account.
- Geolocation Data: Approximate geographic location derived from your IP address, used for fraud prevention and jurisdictional compliance checks.
- Cookie Data: Information collected via cookies and similar tracking technologies as described in Section 7 of this Policy.
Sensitive Data: bdt99 does not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless required by law or with your explicit written consent. If you voluntarily disclose such information in the course of a support interaction, it will be treated with the highest level of confidentiality.
3 How We Collect Data
bdt99 collects personal data through the following mechanisms:
- Direct Input: Information you enter into forms on the bdt99 platform, including the account registration form, deposit and withdrawal forms, support contact forms, and identity verification submission portals.
- Automated Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and server-side logging systems that record technical and behavioural data during your visit to the bdt99 website or use of the mobile interface.
- Third-Party Payment Providers: Transaction confirmation and wallet identifier data received from payment processors such as bKash, Nagad, Rocket, and Upay when you make deposits or withdrawals. bdt99 receives only the data necessary to confirm and reconcile transactions; we do not receive full access to your mobile banking account.
- Identity Verification Partners: Data received from third-party KYC verification services used to authenticate the identity documents you submit during the verification process.
- Game Providers: Game round data, round identifiers, and outcome records provided by integrated game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi in relation to games played on the bdt99 platform.
- Publicly Available Sources: In connection with fraud prevention or due diligence activities, bdt99 may cross-reference data you provide against publicly available databases, sanctions lists, and politically exposed persons (PEP) registers.
4 Legal Basis for Processing
bdt99 processes your personal data only where a recognised legal basis exists for doing so. The following table summarises the primary legal bases on which bdt99 relies for each category of processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and maintenance | Performance of a contract with you |
| Processing deposits and withdrawals | Performance of a contract with you |
| Identity verification (KYC) | Legal obligation (anti-money-laundering compliance) |
| Fraud detection and prevention | Legitimate interests of bdt99 |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Marketing communications | Your explicit consent (opt-in) |
| Analytics and platform improvement | Legitimate interests of bdt99 |
| Customer support and dispute resolution | Performance of a contract with you |
| Cookie-based tracking (non-essential) | Your explicit consent (opt-in) |
Where bdt99 relies on legitimate interests as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights and freedoms. You may request a copy of this assessment by contacting [email protected].
5 How We Use Your Data
bdt99 uses the personal data it collects for the following specific purposes:
- To create, verify, and maintain your bdt99 account and ensure the accuracy of the information held on it.
- To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to reconcile all financial transactions associated with your account.
- To verify your identity and age in accordance with our 21+ age restriction policy and applicable anti-money-laundering obligations.
- To monitor your account for indicators of problem gambling and, where appropriate, to contact you with information about responsible gaming tools and support resources.
- To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and any other form of prohibited conduct as defined in our Terms and Conditions.
- To deliver customer support, resolve complaints, and respond to enquiries submitted via live chat or email.
- To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts.
- To send you promotional communications about bdt99 bonuses, offers, and new games — but only where you have provided your explicit consent to receive such communications and have not subsequently withdrawn that consent.
- To analyse usage patterns and platform performance in aggregate for the purpose of improving the bdt99 user experience, fixing technical issues, and informing product development decisions.
- To comply with applicable legal and regulatory requirements, including the retention of transaction records for the statutory minimum period.
No Selling of Data: bdt99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only in the limited circumstances described in Section 6 of this Policy.
6 Sharing Your Data
bdt99 shares personal data with third parties only to the extent necessary to operate the platform, comply with legal obligations, and protect the interests of our players. The categories of recipients with whom bdt99 may share your data are as follows:
6.1 Payment Processors
bdt99 shares the minimum necessary transactional data with payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard to facilitate the processing of deposits and withdrawals. Each of these providers operates under its own privacy policy and data protection standards.
6.2 Identity Verification Partners
Where you submit identity documents for KYC verification, bdt99 shares those documents with our contracted identity verification partners for the sole purpose of authenticating your identity. These partners are contractually bound to process your data only for this specified purpose.
6.3 Game Providers
Certain game providers integrated within the bdt99 platform — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — receive an anonymised or pseudonymised player identifier and the details of game rounds you initiate, solely for the purpose of delivering the game service, settling outcomes, and ensuring fair play. Game providers do not receive your full identity data, contact details, or financial information.
6.4 Legal and Regulatory Authorities
bdt99 may disclose your personal data to law enforcement agencies, regulators, tax authorities, or courts where required to do so by applicable law, a lawful court order, or where disclosure is necessary to protect the safety of individuals or to prevent or detect serious crime.
6.5 Professional Advisors
bdt99 may share personal data with legal counsel, auditors, or other professional advisors where necessary in connection with the conduct of bdt99's business, subject to binding confidentiality obligations.
Data Processing Agreements: All third parties who process personal data on bdt99's behalf are required to enter into a formal data processing agreement with bdt99. These agreements require third parties to process data only on bdt99's documented instructions, to maintain appropriate security measures, and to assist bdt99 in meeting its obligations to data subjects.
7 Cookies & Tracking Technologies
bdt99 uses cookies and similar tracking technologies on the bdt99 website and mobile interface. Cookies are small text files placed on your device that allow bdt99 to recognise your browser and remember certain information about your session and preferences.
7.1 Types of Cookies Used
- Strictly Necessary Cookies: These cookies are essential for the bdt99 platform to function. They enable core features such as account login session management, security token validation, and navigation between pages. These cookies cannot be disabled without impairing platform functionality.
- Performance & Analytics Cookies: These cookies collect information about how you use the bdt99 platform — which pages you visit most frequently, how long you spend on each section, and where you encounter errors. This data is aggregated and anonymised and is used solely to improve the platform's performance and user experience.
- Functional Cookies: These cookies allow the platform to remember your preferences, such as your chosen display settings and notification preferences, so that you do not need to re-enter them on every visit.
- Marketing & Targeting Cookies: Where you have given your explicit consent, bdt99 may place marketing cookies that help us deliver more relevant promotional content about bdt99 bonuses, games, and events. You may withdraw this consent at any time via the cookie preference settings accessible from the platform.
7.2 Managing Cookies
You may control or disable cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the bdt99 platform. Most modern browsers provide clear guidance on how to manage cookie settings in their help documentation.
8 Data Security
bdt99 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration.
8.1 Technical Measures
- All data transmitted between your device and the bdt99 platform is encrypted using TLS 1.2 or higher (SSL encryption), indicated by the padlock symbol in your browser's address bar.
- Sensitive data at rest, including identity documents and financial records, is encrypted using AES-256 encryption.
- bdt99 systems are protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability scanning.
- Passwords are stored using a one-way cryptographic hash function with salting; plain-text passwords are never stored or transmitted by bdt99.
- Access to personal data within bdt99's internal systems is controlled on a role-based, need-to-know basis. Staff who do not require access to specific data categories are not granted it.
8.2 Organisational Measures
- All bdt99 personnel who handle personal data receive mandatory data protection training covering their responsibilities under this Policy.
- bdt99 maintains a formal incident response plan for data breaches. In the event of a breach that poses a risk to your rights and freedoms, bdt99 will notify affected players and the relevant authorities within the timeframes required by applicable law.
- Third-party vendors and service providers who access bdt99 player data are contractually required to maintain security standards equivalent to those applied by bdt99 itself.
Your Role in Security: While bdt99 invests heavily in platform security, the security of your account also depends on you keeping your login credentials confidential. Please review Section 4 of our Terms and Conditions for your responsibilities in relation to account security. If you suspect any unauthorised access, contact [email protected] immediately.
9 Data Retention
bdt99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of data held by bdt99:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / AML compliance |
| Identity verification documents | 5 years after account closure | Legal obligation / AML compliance |
| Transaction records (deposits & withdrawals) | 7 years from transaction date | Legal obligation / financial record-keeping |
| Betting and game history | 5 years from account closure | Legitimate interests / dispute resolution |
| Support communications | 3 years from the date of the interaction | Legitimate interests / dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation (proof of consent) |
| Technical / server logs | 12 months from generation | Legitimate interests / security |
| Cookie data (analytics) | 13 months from placement | Consent |
At the end of the applicable retention period, personal data is securely deleted or, where deletion is technically impractical in the short term, anonymised so that it can no longer be attributed to any identifiable individual. Anonymised and aggregated data may be retained beyond these periods for statistical and analytical purposes.
10 Your Rights
As a data subject whose personal information is processed by bdt99, you hold the following rights in relation to that data. bdt99 will process all valid rights requests free of charge and within 30 calendar days of receipt.
- Right of Access: You have the right to request a copy of the personal data bdt99 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
- Right to Rectification: If any personal data bdt99 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
- Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute — bdt99 may be required to retain certain data to comply with legal obligations (see Section 9). We will inform you of any applicable retention requirements at the time of your request.
- Right to Restriction: You may request that bdt99 restrict the processing of your personal data in circumstances where the accuracy of the data is contested, where processing is unlawful, or where you have objected to processing pending the outcome of that objection.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object at any time to the processing of your personal data where bdt99 relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
To exercise any of these rights, please contact bdt99 by emailing [email protected] or by initiating a data rights request via the live chat facility on the bdt99 platform. Please include your registered username and a clear description of the right you wish to exercise. bdt99 may need to verify your identity before processing your request.
Complaints: If you are not satisfied with how bdt99 has handled your personal data or responded to a rights request, you have the right to lodge a complaint with the relevant data protection authority. bdt99 would welcome the opportunity to resolve any concern directly before a formal complaint is submitted and encourages you to contact us in the first instance.
11 Children's Privacy
The bdt99 platform is strictly for adults aged 21 years and above in Bangladesh. bdt99 does not knowingly collect, process, or store any personal data relating to individuals under the age of 21. The 21+ minimum age threshold is actively enforced through age verification checks conducted at registration and during the KYC process.
If bdt99 becomes aware that personal data has been inadvertently collected from an individual who is below the minimum age threshold, that data will be deleted promptly and the associated account will be permanently closed in accordance with our Terms and Conditions.
Parents and guardians are strongly encouraged to use parental control software to prevent minors from accessing online betting and gaming platforms. If you believe that a minor in your household has registered with or is accessing the bdt99 platform, please notify us immediately at [email protected] so that we can take the appropriate action.
12 Third-Party Services
The bdt99 platform integrates with a number of third-party services in order to deliver the full range of features available to players. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi), and identity verification partners.
Each of these third-party providers operates independently and is governed by its own privacy policy. bdt99 is not responsible for the data practices of third-party providers beyond the contractual obligations we impose on them through our data processing agreements. We encourage you to review the privacy policies of the payment providers you use, as those policies govern how your mobile banking data is handled at the provider's end.
bdt99 does not currently use third-party social media tracking pixels, embedded social sharing widgets, or third-party advertising networks on the bdt99 platform. Any future integration of such services will be communicated through an updated version of this Privacy Policy.
13 Changes to This Policy
bdt99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made to this Policy, bdt99 will notify registered players by displaying a prominent notice on the platform and, where practicable, by sending a notification to the email address registered on the account.
The revised Policy will take effect from the date stated in the updated document. Your continued use of the bdt99 platform after that date constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change to this Policy, you should discontinue use of the platform and request account closure in accordance with our Terms and Conditions.
The version history of this Privacy Policy, including the effective date of each version, is maintained internally by bdt99 and is available upon request by contacting [email protected].
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to bdt99's data handling practices generally, please contact us through any of the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week, directly on the bdt99 platform.
- Response Time: bdt99 support teams aim to respond to all privacy-related enquiries within 2–5 minutes via live chat and within 24 hours via email.
When contacting bdt99 about a data protection matter, please include your registered username and a clear description of your query or request so that we can assist you as efficiently as possible. For formal data rights requests, please refer to the process described in Section 10 of this Policy.
Bangladesh Standard Time: bdt99 support operates around the clock. All response time commitments are measured in Bangladesh Standard Time (BST, UTC+6). Our average live chat response time is 2–5 minutes regardless of the time of day.
Explore bdt99 — Bangladesh's Trusted Betting Platform
Your data is protected. Your experience is our priority. Browse our full range of games and sports markets, or visit our FAQ if you have questions about your account.