bai99 Privacy Policy

1 Introduction

bai99 ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the bai99 online gaming platform ("the Platform") available at https://bai99.io. This Privacy Policy ("Policy") sets out, in formal and transparent terms, our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Policy applies to all players, visitors, and prospective users of the bai99 Platform, regardless of the device or method used to access it. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and that you consent to the data processing activities described herein to the extent that consent is the applicable legal basis.

bai99 takes its obligations under applicable data protection law seriously. We do not engage in the unauthorised sale, distribution, or misuse of personal data. All data handling practices described in this Policy are designed to be proportionate, transparent, and in the best interest of our players.

2 Data Controller

For the purposes of applicable data protection legislation, bai99 acts as the data controller in respect of the personal data it collects and processes through the Platform. As data controller, bai99 is responsible for determining the purposes and means by which your personal data is processed.

If you have any questions regarding our role as data controller, the legal bases on which we rely, or how your data is handled, please contact our Data Protection contact using the details provided in Section 15 of this Policy.

3 Personal Data We Collect

bai99 collects personal data across several categories depending on how you interact with the Platform. The following table summarises the categories of data we collect and examples of specific data items within each category:

bai99 does not intentionally collect special categories of personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) unless it is strictly necessary for responsible gaming compliance purposes, in which case explicit consent will be obtained.

4 How We Collect Your Data

bai99 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to us when you register an account, complete the KYC verification process, make deposits or withdrawal requests, use the live chat support service, respond to surveys or promotions, or contact us via email or other communication channels.

4.2 Automated Collection

When you access and navigate the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, browser fingerprint, pages visited, session duration, and click patterns. See Section 8 for full details on our cookies and tracking practices.

4.3 Third-Party Sources

In certain circumstances, bai99 may receive personal data about you from third-party sources, including:

• Payment service providers (such as bKash, Nagad, Rocket, and Upay) for the purpose of confirming transaction details and preventing fraud.
• Identity verification service providers engaged to assist with KYC and anti-money laundering (AML) checks.
• Fraud prevention agencies and sanctions screening databases where we are legally required or entitled to conduct such checks.
• Publicly available sources such as government databases or public records, where relevant to compliance obligations.

5 Legal Basis for Processing

bai99 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform the contract between bai99 and you, including account management, transaction processing, bonus administration, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and record-keeping obligations imposed on operators in the gaming sector.
• Legitimate Interests: Processing carried out in pursuit of bai99's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, product improvement, and internal analytics.
• Consent: Where bai99 relies on your consent as the legal basis for processing (for example, for certain marketing communications or optional responsible gaming monitoring), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Personal Data

bai99 uses the personal data we collect for the following purposes:

• Creating and managing your player account, including authentication and account security.
• Processing deposits, withdrawals, and all financial transactions via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Verifying your identity and age (21+ requirement) in compliance with our KYC obligations.
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other unlawful conduct on the Platform.
• Administering bonuses, promotions, tournaments, and loyalty programmes, including verifying eligibility and detecting abuse.
• Providing customer support and responding to queries, complaints, and disputes.
• Monitoring gaming activity to identify indicators of problem gambling and delivering responsible gaming interventions where appropriate.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account alerts.
• Sending marketing communications where you have opted in to receive them, and providing personalised promotions based on your gaming preferences.
• Improving the Platform through internal analytics, A/B testing, and user experience research.
• Complying with any applicable legal, regulatory, or court-ordered obligations.

bai99 will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without first obtaining your consent or establishing an alternative legal basis.

7 Data Sharing & Disclosure

bai99 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent strictly necessary for the purposes described in this Policy:

7.1 Payment Service Providers

bai99 shares financial and identity data with payment processors (including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank and BRAC Bank) solely for the purpose of executing deposit and withdrawal transactions and preventing payment fraud.

7.2 Identity Verification Providers

To fulfil our KYC and AML obligations, bai99 may share identity and document data with third-party verification service providers who are bound by strict confidentiality and data processing agreements.

7.3 Technology & Infrastructure Partners

bai99 uses trusted third-party technology providers for hosting, cloud infrastructure, analytics, and customer support tooling. These providers process data only on our behalf and under our instruction, and are contractually prohibited from using your data for their own purposes.

7.4 Game Content Providers

Certain game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical data (such as session tokens and bet amounts) necessary for game delivery and fair-play verification. No personally identifiable information is shared with game studios beyond what is technically required.

7.5 Legal & Regulatory Authorities

bai99 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, court order, or legitimate regulatory request. We will notify you of any such disclosure where we are legally permitted to do so.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to a successor entity as part of the transaction. We will notify affected players before any such transfer and ensure that the recipient provides equivalent data protection commitments.

8 Cookies & Tracking Technologies

bai99 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to improve your experience, and to collect analytical data about Platform usage. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these without affecting Platform functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gaming limits, and display preferences to personalise your experience across sessions.
• Analytical Cookies: Used to collect aggregated, anonymised data on how players interact with the Platform — for example, which pages are visited most frequently and where users encounter errors. This data is used solely for Platform improvement.
• Security Cookies: Used for fraud prevention, bot detection, and abuse monitoring to protect both the Platform and our players.

bai99 does not deploy third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings, though disabling essential cookies may impair your ability to use certain Platform features.

9 Data Security

bai99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and bai99's servers is encrypted using industry-standard 256-bit SSL/TLS protocols across every page of the Platform, including login, registration, and cashier pages.
• Encrypted Data Storage: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bai99 employees, contractors, and service providers are granted access only to the data necessary to perform their specific role, and all access is logged and audited.
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication. Players are also encouraged to enable available account security features.
• Security Monitoring: bai99 maintains continuous monitoring of its infrastructure for anomalous activity, intrusion attempts, and data breach indicators. Incident response procedures are in place to enable rapid containment and remediation.
• Regular Security Reviews: Our security posture is reviewed on a regular basis through internal assessments and third-party security evaluations.

While bai99 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that affects your rights and freedoms, bai99 will notify you in accordance with applicable legal requirements.

10 Data Retention

bai99 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required or permitted by applicable law. The following general retention principles apply:

• Active Accounts: Personal data associated with an active player account is retained for the duration of the account's active status, plus any mandatory statutory retention period that applies after closure.
• Closed Accounts: Following account closure, bai99 retains identity, financial, and transaction data for a minimum of five (5) years in order to comply with anti-money laundering, fraud prevention, and financial record-keeping obligations.
• KYC Documents: Identity verification documents are retained for the period required by applicable AML regulations, typically five (5) years from the date of the most recent transaction or account closure, whichever is later.
• Communications & Support Records: Customer support correspondence and complaint records are retained for a period of three (3) years from the date of the last interaction unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Where you have consented to receive marketing communications, your preferences data is retained until you withdraw consent or until twelve (12) months have elapsed since your last interaction with a marketing communication, whichever comes first.
• Technical & Log Data: Server logs and technical session data are retained for a maximum of twelve (12) months for security monitoring and fraud analysis purposes, after which they are anonymised or securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

11 Your Data Subject Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data bai99 holds about you:

• Right of Access: You have the right to request a copy of the personal data bai99 holds about you, together with information about how it is processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to exceptions where continued retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You have the right to request that bai99 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where bai99 relies on legitimate interests as the legal basis. You also have the absolute right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12 Children's Privacy

The bai99 Platform is strictly intended for individuals aged 21 years and above. bai99 does not knowingly collect, process, or retain personal data from anyone under the age of 21. Registration by underage individuals is prohibited and constitutes a breach of our Terms & Conditions.

If bai99 becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered or is using the Platform, please notify us immediately at [email protected] so that we can investigate and act promptly.

bai99 employs age verification controls during the registration process and may request documentary proof of age at any point during a player's lifecycle on the Platform as part of our ongoing KYC obligations.

13 Third-Party Links

The bai99 Platform may contain references to third-party payment providers and game studios. bai99 does not control the privacy practices of these third parties and is not responsible for the content or privacy policies of any external platform or service.

This Privacy Policy applies solely to personal data processed by bai99 in connection with the Platform. We encourage you to review the privacy policies of any third-party services you interact with independently of the bai99 Platform to understand how they handle your personal data.

14 Updates to This Privacy Policy

bai99 reviews this Privacy Policy on a regular basis to ensure it remains accurate, current, and compliant with applicable law. We reserve the right to amend or update this Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Where the change significantly affects the way we process your personal data, notify registered players by email to the address associated with their account.
• Where required by applicable law, seek your fresh consent before implementing the change.

We encourage you to review this page periodically to stay informed of our current data practices. Your continued use of the Platform following any update to this Policy constitutes your acknowledgment of the changes and, where consent is the applicable legal basis, your acceptance of the updated terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bai99 handles your personal data, please contact us using the following details:

bai99 aims to acknowledge all privacy-related inquiries within 2 business days and provide a full response within 30 days. For data subject requests, please include "Data Subject Request" in the subject line of your email along with a copy of valid photo identification to allow us to verify your identity before processing.