bh99 Privacy Policy — How We Protect Your Personal Data

1 Introduction

bh99 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the bh99 online casino and sports betting platform ("the Platform"). This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, the circumstances in which we may share it with third parties, and the rights available to you with respect to your personal data.

By registering an account on bh99, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must discontinue use of the Platform. This Policy should be read in conjunction with the bh99 Terms & Conditions.

2 Information We Collect

bh99 collects personal data that is necessary to operate the Platform, verify player identity, process financial transactions, and comply with applicable anti-money-laundering and responsible gaming obligations. The categories of data we collect are set out below.

bh99 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data. The only exception is where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request — in which case such data is processed solely for the purpose of applying the self-exclusion.

3 How We Use Your Information

bh99 processes your personal data only for purposes that are legitimate, specified, and proportionate to the data collected. We process your personal data for the following purposes.

• Account management: To register your account, verify your identity, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and administer your account balance and bonus entitlements.
• Platform operation: To provide access to casino games, sports betting markets, live dealer tables, crash games, and all other Platform services.
• Legal compliance: To meet our obligations under applicable anti-money-laundering regulations, including carrying out customer due diligence, source-of-funds checks, and reporting obligations to relevant authorities.
• Responsible gaming: To monitor account activity for signs of problem gambling, to apply deposit limits, time-outs, and self-exclusions requested by you, and to ensure the Platform is not accessed by individuals under 21 years of age.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and improve our support services based on the records of your interactions with the bh99 support team.
• Marketing and promotions: To send you information about bh99 promotions, seasonal offers (including Eid, Pohela Boishakh, and cricket tournament offers), and platform updates — but only where you have not opted out of marketing communications. You may opt out at any time by contacting bh99 support.

4 Legal Basis for Processing

bh99 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing.

• Contractual necessity: Processing is necessary to perform our contract with you — i.e., to provide the bh99 Platform services you have registered for, to process your deposits and withdrawals, and to administer your account.
• Legal obligation: Processing is necessary for bh99 to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and responsible gaming obligations imposed by our operating framework.
• Legitimate interests: Processing is necessary for the purposes of bh99's legitimate interests, including fraud detection, platform security, product improvement, and direct marketing to existing account holders — provided such processing does not override your fundamental rights and interests.
• Consent: Where processing is based on your consent (for example, for certain optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, contact bh99 support via live chat.

5 Payment Data and Financial Security

bh99 processes payment data — including bKash, Nagad, Rocket, and Upay wallet transaction references — solely for the purpose of facilitating deposits, processing withdrawals, investigating payment disputes, and complying with financial record-keeping requirements.

bh99 does not store complete payment card numbers, CVV codes, or mobile wallet PINs on its servers at any time. Payment processing for card transactions is handled by PCI-DSS compliant payment processors. For bKash, Nagad, Rocket, and Upay transactions, bh99 integrates directly with the official APIs of those providers and does not retain wallet credentials beyond the transaction reference required for reconciliation.

6 Cookies and Tracking Technologies

bh99 uses cookies and similar tracking technologies to operate the Platform, remember your login session, maintain your preferences, and analyse Platform usage patterns. The types of cookies used are as follows.

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. Essential cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform, which games are most frequently played, and where technical issues occur. Analytics data is aggregated and does not identify individual players. You may opt out of analytics cookies by contacting bh99 support.
• Preference cookies: Used to remember your language settings, display preferences, and responsible gaming tool configurations. Disabling preference cookies may require you to re-enter your preferences on each visit.

Most mobile browsers on Android and iOS allow you to manage cookie settings through the browser's privacy or settings menu. Disabling essential cookies will prevent you from logging into your bh99 account. bh99 does not use third-party advertising tracking cookies or cross-site behavioural advertising technologies.

7 Sharing Your Information

bh99 does not sell your personal data to any third party. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Game studios and platform providers: Licensed game studios (including but not limited to Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) receive limited technical session data necessary to deliver game content to your device. Game studios do not receive your identity or payment data.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors receive only the data required to authenticate and complete financial transactions initiated by you. bh99 does not share account profile data with payment processors beyond what is necessary for fraud screening.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or legitimate regulatory demand, bh99 will disclose personal data to the relevant authority. bh99 will notify you of such disclosure where it is legally permitted to do so.
• Fraud prevention and security services: bh99 may share account and technical data with third-party fraud detection and platform security services for the purpose of identifying and preventing fraudulent activity, account takeover attempts, and money laundering.

All third-party service providers engaged by bh99 are required to process personal data only on bh99's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return all personal data upon termination of the service relationship.

8 Data Retention

bh99 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our internal data retention policy. The standard retention periods applicable to your data are as follows: account and identity data is retained for a minimum of five years from account closure; transaction records are retained for a minimum of five years from the date of each transaction; support communications are retained for two years from the date of the communication.

Where you request deletion of your account and there is no outstanding legal obligation requiring retention, bh99 will delete or anonymise your personal data within 30 days of receiving and verifying your deletion request. Please note that transaction records may be retained beyond the deletion period where required by anti-money-laundering or financial record-keeping law, even if your account profile has been deleted.

9 Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights with respect to the personal data bh99 holds about you. To exercise any of these rights, please contact bh99 support via live chat or email us at [email protected]. We will respond to all verified data rights requests within 30 days.

• Right of access: You have the right to request a copy of the personal data bh99 holds about you and information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: If the personal data bh99 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Account details such as your registered mobile number may be updated directly through the account settings section of the Platform.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to bh99's legal data retention obligations.
• Right to restriction: You have the right to request that bh99 restricts processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is being considered.
• Right to object: You have the right to object to processing of your personal data where bh99 relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to processing of your personal data for direct marketing purposes, including profiling for marketing.

bh99 will not charge a fee for handling data rights requests. Where a request is manifestly unfounded or excessive, bh99 reserves the right to charge a reasonable fee or decline the request, providing written reasons for that decision. Identity verification will be required before any data rights request is fulfilled to protect your data from unauthorised disclosure.

10 Data Security

bh99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption of all data transmitted between your device and bh99 servers, encrypted storage of sensitive account data, access controls limiting data access to authorised bh99 personnel on a need-to-know basis, regular security assessments and penetration testing of Platform infrastructure, and two-factor authentication options for account login.

While bh99 takes all reasonable steps to protect your personal data, no data transmission over the internet or mobile network is guaranteed to be 100% secure. You are responsible for keeping your bh99 account credentials confidential and for ensuring that your device is protected by adequate security measures including an up-to-date operating system and anti-malware software. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bh99 will notify you without undue delay.

11 Protection of Minors

bh99 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the bh99 account registration process. If bh99 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that a minor has registered a bh99 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12 Changes to This Privacy Policy

bh99 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or industry best practices. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered account holders via the contact details held on file.

Your continued use of the bh99 Platform following any update to this Privacy Policy constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically so that you are always informed of the current version of our Privacy Policy.

13 Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bh99 processes your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days.

Email us at: [email protected]