ba99a Privacy Policy
How We Collect, Use, and Protect Your Data
ba99a is committed to protecting the privacy and personal data of every player who registers and uses our platform. This Privacy Policy explains in plain, formal English exactly what information we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own data.
Six Core Privacy Principles at ba99a
These principles underpin every data handling decision made at ba99a. They are not marketing statements — they reflect the operational standards applied to all personal data processed on the platform.
Purpose Limitation
ba99a collects personal data only for specific, legitimate purposes — account management, identity verification, payment processing, fraud prevention, and responsible gaming compliance. Data is never used for purposes beyond those stated in this policy without your prior consent.
Data Minimisation
We collect only the minimum personal data necessary to deliver and maintain our services. Where a task can be completed with anonymised or aggregated data, we prefer that approach. We do not request unnecessary documents, and we do not build behavioural profiles for third-party advertising.
Security by Design
All data transmitted between your device and ba99a's servers is protected by SSL/TLS encryption. Account passwords are stored using industry-standard hashing algorithms. Access to personal data is restricted to authorised staff on a strict need-to-know basis, and all access is logged and audited.
Your Rights First
You have the right to access, correct, and request deletion of your personal data held by ba99a, subject to legal retention requirements. You can exercise these rights at any time by contacting [email protected]. ba99a will respond to all data rights requests within 30 days of receipt.
No Data Selling
ba99a does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Data shared with third-party service providers is governed by strict data processing agreements that limit use to the specific service being provided to ba99a.
Retention Limits
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Upon account closure, ba99a will anonymise or delete personal data in accordance with its internal data retention schedule, except where legal obligations require longer retention.
Privacy Policy — Complete Text
1 About This Policy
This Privacy Policy ("Policy") describes how ba99a ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to any individual ("Player", "User", "you", "your") who accesses, browses, registers with, or transacts on the ba99a platform, including the website at ba99a.io and any associated subdomains or mobile-optimised pages.
This Policy forms part of ba99a's Terms & Conditions. By registering an account or continuing to use the ba99a platform, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.
Important: This Policy is written in English. Players accessing ba99a from Bangladesh are subject to this Policy in its English-language form. If you require clarification on any aspect of this Policy, contact [email protected] before registering an account.
ba99a is committed to handling all personal data in a manner that is lawful, fair, and transparent. This Policy is reviewed and updated periodically to reflect changes in our services, technology, or applicable legal requirements. The effective date of the current version is stated at the top of this page.
2 Data Controller
For the purposes of this Privacy Policy, ba99a acts as the data controller in respect of personal data collected from players using the ba99a platform. As data controller, ba99a determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.
Where ba99a engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or fraud prevention services — those third parties act as data processors and are contractually bound to process data only in accordance with ba99a's documented instructions and for no other purpose.
If you have any questions about ba99a's role as data controller, or wish to understand how data processing responsibilities are allocated between ba99a and its third-party partners, contact [email protected]. Our team will respond within 4 hours (BST, UTC+6).
3 Personal Data We Collect
ba99a collects the following categories of personal data from players, depending on the stage and nature of their interaction with the platform:
3.1 Registration Data
When you create a ba99a account, we collect the information you provide during the registration process, including: full legal name, date of birth, email address, mobile telephone number, and chosen username. This data is required to create and manage your account.
3.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) obligations, ba99a may collect copies of government-issued identification documents (such as your National Identity Card, passport, or driving licence), proof of address documents, and — where required — proof of payment method ownership. KYC documents are used solely for identity verification and regulatory compliance purposes.
3.3 Financial Data
When you make deposits or request withdrawals, ba99a collects transaction-level financial data including: payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, etc.), transaction reference numbers, deposit and withdrawal amounts in BDT (৳), and transaction timestamps. ba99a does not store full card numbers or mobile banking PINs — payment authentication is handled directly by the respective payment provider.
3.4 Gaming and Betting Activity Data
ba99a records all gaming and betting activity associated with your account, including: games played, bet amounts, wager outcomes, session start and end times, bonus usage, and responsible gaming tool settings. This data is used for account management, dispute resolution, fraud detection, and regulatory compliance.
3.5 Technical and Device Data
When you access ba99a, our systems automatically collect certain technical information, including: IP address, browser type and version, operating system, device type and identifier, referring URL, and pages visited within the platform. This data is used for security, fraud prevention, and platform performance optimisation.
3.6 Communications Data
If you contact ba99a's support team by email or live chat, we retain records of those communications, including the content of your messages and our responses. These records are used to manage your support request and to maintain a history of your interactions with ba99a.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, DOB, username | Account creation & management |
| KYC / Identity Data | NID, passport, proof of address | Age & identity verification |
| Financial Data | bKash/Nagad transaction refs, amounts | Payment processing & AML compliance |
| Gaming Activity Data | Bets placed, games played, session times | Account management, responsible gaming |
| Technical Data | IP address, device type, browser | Security, fraud prevention |
| Communications Data | Support emails, chat transcripts | Customer support management |
4 How We Collect Your Data
ba99a collects personal data through the following channels and mechanisms:
- Directly from you: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, completing responsible gaming self-assessment tools, or contacting support.
- Automatically through the platform: Technical and device data collected automatically when you access and navigate the ba99a website, including data gathered via cookies and similar tracking technologies (see Section 8).
- From third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank payment gateways when you initiate a deposit or withdrawal.
- From identity verification providers: Verification outcomes and flagging data returned by third-party KYC and fraud screening services when processing your identity documents.
- From fraud prevention and security services: Risk signals and device fingerprint data from third-party fraud detection partners used to protect ba99a players and the integrity of the platform.
5 How We Use Your Personal Data
ba99a uses the personal data it collects for the following purposes:
- Account Management: Creating, maintaining, and administering your ba99a player account, including processing login requests, managing account settings, and communicating account-related notifications.
- Identity Verification: Verifying that you meet ba99a's eligibility requirements, including confirming you are aged 21 or above, as required by ba99a's responsible gaming policy.
- Payment Processing: Processing deposit requests, executing approved withdrawal payments to your registered payment method, and maintaining records of all financial transactions for accounting and audit purposes.
- Fraud Prevention and Security: Detecting and investigating suspicious account activity, identifying potential bonus abuse, flagging multi-accounting, and protecting the platform against unauthorised access and financial crime.
- Anti-Money Laundering (AML) Compliance: Monitoring transactions for patterns consistent with money laundering or terrorist financing activity, and reporting suspicious activity to relevant authorities where legally required.
- Responsible Gaming: Monitoring gaming behaviour to identify indicators of problem gambling, administering deposit limits, session time limits, reality checks, and self-exclusion tools set by the player, and proactively contacting players who show signs of harmful gambling patterns.
- Customer Support: Managing and resolving support requests, disputes, and complaints submitted by players through ba99a's support channels.
- Platform Improvement: Analysing aggregated and anonymised usage data to identify opportunities to improve the platform's performance, user experience, and game offering.
- Legal Compliance: Fulfilling ba99a's obligations under applicable law, including responding to lawful requests from regulatory and law enforcement authorities.
ba99a does not use your personal data to serve you third-party advertising, build commercial behavioural profiles for resale, or make automated decisions that produce significant legal effects on you without human review.
6 Legal Basis for Processing
ba99a processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfil ba99a's obligations under the Terms & Conditions you accepted at registration, including account management, payment processing, and bet settlement.
- Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
- Legitimate Interests: Processing carried out to protect ba99a's legitimate business interests and those of its players, including fraud detection, security monitoring, platform improvement, and responsible gaming oversight — provided those interests are not overridden by your fundamental privacy rights.
- Consent: Where ba99a relies on your consent as the basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time by contacting [email protected], without affecting the lawfulness of processing carried out before withdrawal.
7 Sharing Your Personal Data
ba99a does not sell your personal data. ba99a shares personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:
7.1 Payment Service Providers
ba99a shares relevant transaction data with payment providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card network processors — to enable deposit and withdrawal processing. These providers receive only the data necessary to process the specific transaction and are not permitted to use it for any other purpose.
7.2 Identity Verification and KYC Providers
ba99a engages third-party identity verification services to process KYC documents submitted by players. These providers return a verification outcome to ba99a and are bound by strict data processing agreements that prohibit the use of player data for any purpose other than the verification service contracted by ba99a.
7.3 Fraud Prevention Services
ba99a uses third-party fraud detection and security services that may process technical data (such as device identifiers and IP addresses) to generate risk assessments. These services do not receive your name, payment details, or KYC documents.
7.4 Game Content Providers
Game studios whose content is hosted on ba99a — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive your player account identifier and relevant gaming session data to facilitate game delivery and fairness auditing. These providers do not receive your full name, NID, or payment details.
7.5 Legal and Regulatory Authorities
ba99a will disclose personal data to law enforcement, regulatory bodies, or other governmental authorities where required to do so by applicable law, lawful court order, or regulatory direction. ba99a will notify you of such disclosure where legally permitted to do so.
No Cross-Border Marketing: ba99a does not transfer your personal data to third-party marketing agencies, advertising networks, data brokers, or affiliate marketing platforms for commercial exploitation.
8 Cookies & Tracking Technologies
ba99a uses cookies and similar tracking technologies on its platform to enable core functionality, maintain session security, and gather anonymised analytics data to improve the user experience. The categories of cookies used are as follows:
8.1 Strictly Necessary Cookies
These cookies are essential for the ba99a platform to function correctly. They maintain your login session, remember your account preferences, and protect the platform against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing your ability to use the platform.
8.2 Analytics Cookies
ba99a uses privacy-respecting analytics tools to understand how players navigate the platform, which pages are most visited, and where technical errors occur. Analytics data is collected in aggregated, anonymised form and is not linked to individual player identities. ba99a does not use Google Analytics or other third-party advertising analytics platforms that build cross-site user profiles.
8.3 Security Cookies
ba99a's fraud detection systems may set cookies or use device-fingerprinting techniques to identify suspicious activity, such as multiple account creation from the same device or unusual login patterns. This processing is carried out in ba99a's legitimate interest to protect the security of the platform and its players.
Most web browsers allow you to control cookies through browser settings. Disabling strictly necessary cookies will prevent you from logging into your ba99a account. Disabling analytics or security cookies may reduce the platform's ability to protect your account from unauthorised access.
9 Data Security
ba99a implements technical and organisational security measures proportionate to the sensitivity of the personal data it holds. These measures include:
- SSL/TLS Encryption: All data transmitted between your browser or device and ba99a's servers is encrypted using SSL/TLS protocols. The padlock indicator in your browser confirms that your connection to ba99a.io is encrypted.
- Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. ba99a staff cannot retrieve your password in plaintext, and ba99a will never ask you to provide your password via email, live chat, or any other channel.
- Access Controls: Access to systems that store personal data is restricted to authorised ba99a personnel on a strictly enforced need-to-know basis. All access is logged and subject to periodic audit.
- Intrusion Detection: ba99a's infrastructure is monitored continuously for anomalous access patterns, unauthorised login attempts, and other indicators of security incidents.
- Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ba99a will notify affected players without undue delay via the registered email address on their account and will take immediate steps to contain and remediate the breach.
While ba99a takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ba99a login credentials and for notifying [email protected] immediately if you suspect any unauthorised activity on your account.
10 Data Retention
ba99a retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
- Active Account Data: Personal data associated with an active player account is retained for the duration of the account's active status plus a post-closure period necessary for legal and compliance purposes.
- KYC and Identity Documents: Identity verification documents are retained for a minimum period required to satisfy applicable anti-money-laundering record-keeping obligations, typically five years from the date of the player's last transaction.
- Financial Transaction Records: Records of all deposits, withdrawals, and wager transactions are retained for a minimum of five years from the date of the transaction, in compliance with financial record-keeping requirements.
- Support Communications: Records of support interactions are retained for three years from the date of the interaction, unless the interaction forms part of an ongoing dispute or legal matter, in which case records are retained until the matter is fully resolved.
- Technical and Analytics Data: Anonymised analytics data may be retained indefinitely as it does not constitute personal data. Device-level security data is retained for a maximum of 12 months from the date of collection.
Upon expiry of the applicable retention period, ba99a will securely delete or permanently anonymise the relevant personal data. Players who request early account closure may request deletion of their data by contacting [email protected], subject to ba99a's legal retention obligations.
11 Your Privacy Rights
As a player on the ba99a platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. ba99a will respond within 30 days of receipt of a valid request.
- Right of Access: You have the right to request a copy of the personal data ba99a holds about you, along with information about how that data is processed.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. For most account details, you can update information directly via Account Settings after login.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ba99a's legal retention obligations.
- Right to Restriction: You have the right to request that ba99a restricts the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is pending.
- Right to Data Portability: You have the right to receive personal data you have provided to ba99a in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract.
- Right to Object: You have the right to object to processing of your personal data carried out on the basis of ba99a's legitimate interests, where your particular circumstances make such processing disproportionate to those interests.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
ba99a will not charge a fee for processing data rights requests that are reasonable in scope. Where a request is manifestly unfounded or excessive, ba99a reserves the right to charge a reasonable administrative fee or decline to act, explaining the reason for that decision in writing.
12 Children & Minors
ba99a's platform is strictly for adults aged 21 years and above. ba99a does not knowingly collect personal data from any individual under the age of 21. The platform's registration process requires players to confirm their date of birth, and ba99a's KYC verification procedures are designed to detect and prevent under-age registrations.
If ba99a becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration, payment activity, or any other means — it will immediately suspend the relevant account, initiate a return of any balance to the originating payment method, and permanently delete all personal data associated with that account without undue delay.
21+ Only: If you are a parent or guardian and believe that a minor in your care has registered a ba99a account, contact [email protected] immediately. Our team will take prompt action to close the account and return any funds deposited.
13 Third-Party Services & External Links
The ba99a platform integrates third-party game content from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, and payment solutions from providers including bKash, Nagad, Rocket, and Upay. These third-party services are subject to their own privacy policies and data practices, which are separate from and independent of this Policy.
ba99a does not control the data practices of third-party service providers beyond the contractual obligations set out in ba99a's data processing agreements with those providers. ba99a is not responsible for the privacy practices of any third party whose services are integrated into the platform.
The ba99a platform does not contain links to external websites. All navigation on the platform directs players to pages within the ba99a domain. ba99a is not responsible for the privacy practices of any website that may link to ba99a from an external source.
14 Amendments to This Policy
ba99a reserves the right to amend this Privacy Policy at any time to reflect changes in its services, data practices, or applicable legal requirements. Where ba99a makes a material change to this Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — it will provide reasonable advance notice to registered players via the email address on their account.
The revised Policy will be published on this page with an updated effective date. Your continued use of the ba99a platform following publication of the amended Policy constitutes your acceptance of the revised data practices. If you do not agree to the amended Policy, you must cease using the platform and may request account closure by contacting [email protected].
For minor or administrative amendments that do not materially affect your rights, ba99a may update the Policy without providing individual player notification, but the effective date on this page will always reflect the date of the most recent revision.
15 Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about ba99a's data practices, please contact our support team using the details below. All privacy enquiries are handled in English and are responded to within 4 hours during standard BST hours (UTC+6).
Email: [email protected]
Response Time: Within 4 hours (BST, UTC+6), 7 days a week
Website: ba99a.io
When submitting a data rights request, please include your registered email address and a clear description of your request. ba99a may need to verify your identity before processing data access, correction, or deletion requests to ensure that personal data is not disclosed to unauthorised parties.
Explore ba99a's Full Game Library
Now that you understand how ba99a protects your data, discover our full range of cricket betting, live casino games, slots, and more — all in a safe, encrypted environment built for Bangladesh players.