baa99 Privacy Policy — How We Protect Your Personal Data
At baa99, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains exactly what personal information we collect, how we use it, who we share it with, and the rights you hold as a baa99 player in Bangladesh. We are committed to transparent, responsible data handling at every step.
Six Privacy Principles We Live By
These core principles guide every decision baa99 makes about the collection, storage, and use of your personal data as a registered player on our Bangladesh platform.
baa99 collects only the personal data that is strictly necessary for operating your account, processing transactions in BDT, and complying with applicable verification requirements. We do not collect data for its own sake.
All data transmitted between your device and baa99 servers is protected by 256-bit SSL/TLS encryption. Stored sensitive data — including payment details and identity documents — is encrypted at rest using industry-standard protocols.
As a baa99 player, you have the right to access, correct, and request deletion of the personal data we hold about you. Submit a data request at any time by contacting [email protected] and we will respond within 30 days.
baa99 does not sell, rent, or trade your personal information to unaffiliated third parties for commercial marketing purposes. Your data is used solely to operate, improve, and secure the baa99 platform for your benefit.
baa99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and regulatory obligations. When data is no longer required, it is securely deleted.
In the unlikely event of a data security incident that affects your personal information, baa99 will notify affected players promptly and take immediate remedial action. Transparency in security incidents is a non-negotiable commitment.
1 Who We Are
baa99 ("the Company", "we", "us", "our") is the operator of the online sports betting and casino platform accessible at baa99.io ("the Platform"). baa99 is the data controller responsible for the personal information of players registered on the Platform. We are committed to handling your personal data with care, transparency, and in accordance with internationally recognised data protection principles.
The baa99 Platform is designed specifically for the Bangladesh market, serving adult players aged 21 and above across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond. Our platform supports deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and all financial transactions are denominated in Bangladeshi Taka (BDT).
If you have any questions about how baa99 processes your personal data, you may contact our data support team at any time by emailing [email protected] (plain text — not a clickable link).
2 Personal Data We Collect
When you register for a baa99 account and use our services, we collect the following categories of personal data:
- Full legal name, date of birth, and gender
- Residential address (including city, district, and postcode)
- Email address and mobile telephone number
- Username and encrypted password
- National Identity Card (NID) number or passport number (submitted during KYC verification)
- bKash, Nagad, Rocket, or Upay mobile number used for deposits and withdrawals
- Partial card numbers (last four digits) where Visa or Mastercard is used
- Transaction history, including deposit amounts, withdrawal requests, and bet settlements in BDT
- Bonus and promotional credit history
- Copies of government-issued identity documents uploaded during KYC
- Proof of address documents (e.g., utility bills, bank statements)
- Proof of payment method ownership where required
- IP address, device type, operating system, and browser version
- Session duration, pages visited, and features used within the Platform
- Betting history, game preferences, and wagering patterns
- Login timestamps and geolocation data (country and city level only)
- Cookie identifiers and similar tracking data (see Section 7)
- Content of messages sent to baa99 support via email or live chat
- Complaint and dispute correspondence records
- Survey responses and feedback submitted voluntarily
| Data Category | Examples | Mandatory? |
|---|---|---|
| Identity | Full name, NID, date of birth | Yes — required for account creation |
| Contact | Email address, mobile number | Yes — required for account creation |
| Financial | bKash number, transaction history | Yes — required for deposits/withdrawals |
| Verification Docs | NID copy, proof of address | Yes — required for KYC compliance |
| Technical | IP address, device data | Automatic — collected on platform use |
| Behavioural | Betting history, session data | Automatic — collected on platform use |
| Communications | Support chat transcripts | Voluntary — when you contact us |
3 How We Collect Your Data
baa99 collects personal data through the following channels and mechanisms:
- Direct provision: Information you provide when registering an account, completing KYC verification, making a deposit, contacting customer support, or responding to a survey.
- Automated collection: Technical and behavioural data collected automatically as you navigate and interact with the Platform, including through cookies, server logs, and analytics tools.
- Payment processors: Confirmation data received from bKash, Nagad, Rocket, Upay, and card processors when a deposit or withdrawal is initiated.
- Identity verification providers: Results of identity checks performed by third-party KYC and fraud prevention service providers.
- Responsible gaming tools: Records of self-exclusion requests, deposit limit settings, and session time limits that you configure within your account dashboard.
4 How We Use Your Personal Data
baa99 uses the personal data it collects for the following specific and legitimate purposes:
To create and maintain your baa99 player account, verify your identity and age, process deposits and withdrawals in BDT, and provide you with access to cricket betting, live casino, and slots products available on the Platform.
To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to process withdrawal requests to your registered payment account; to maintain accurate financial records; and to settle winning bets and bonus awards promptly.
To comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations; to detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct; and to maintain records required by applicable law.
To monitor betting behaviour for signs of problem gambling; to enforce self-exclusion and account restriction tools selected by players; to implement deposit limits, loss limits, and session time limits; and to ensure only players aged 21 and above access the Platform.
To respond to your enquiries, process complaints, investigate disputes, and communicate with you about account-related matters. All support communications are conducted in English.
To analyse aggregated and anonymised usage data to improve the design, performance, and content of the baa99 Platform; to troubleshoot technical issues; and to develop new betting markets, game categories, and features for Bangladeshi players.
With your consent, to send you personalised promotional offers, bonus notifications, and news about new baa99 products via email or SMS. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing will not affect the delivery of service-related account communications.
5 Legal Basis for Processing
baa99 processes your personal data only where a lawful basis exists for doing so. The applicable legal bases are as follows:
- Contractual necessity: Processing required to perform the contract between you and baa99, including account registration, bet placement, deposit processing, and withdrawal execution.
- Legal obligation: Processing required to comply with applicable AML, KYC, and responsible gaming obligations, including age verification and transaction record-keeping.
- Legitimate interests: Processing necessary for baa99's legitimate business interests, including fraud prevention, Platform security, abuse detection, and service improvement, where those interests are not overridden by your rights and interests.
- Consent: Where you have given explicit consent — for example, to receive marketing communications — baa99 will process your data for that purpose. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing and Disclosure
baa99 does not sell, rent, or otherwise share your personal data with unaffiliated third parties for their own commercial purposes. We may, however, share your personal data with the following categories of trusted third parties where necessary and proportionate:
- Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction securely.
- Identity verification partners: Third-party KYC service providers receive your identity document data solely for the purpose of verifying your identity and age in compliance with our obligations.
- Fraud prevention services: We share relevant transactional and behavioural data with fraud detection partners to identify and prevent account abuse, bonus fraud, and financial crime.
- Technology and hosting providers: Third-party cloud infrastructure providers who host baa99's Platform and data on our behalf, under strict contractual data processing agreements.
- Legal and regulatory authorities: Where required by law, court order, or legitimate regulatory request, baa99 may disclose personal data to competent authorities.
- Responsible gaming organisations: In cases of player self-exclusion, limited anonymised data may be shared with responsible gaming networks to enforce cross-platform exclusions.
7 Cookies and Tracking Technologies
The baa99 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure betting experience. A cookie is a small text file placed on your device when you visit a website. baa99 uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud prevention | No — essential for Platform operation |
| Functional | Remembering your language preference, bet slip settings, and display preferences | Yes — via browser settings |
| Analytics | Measuring page performance, understanding navigation patterns, improving user experience | Yes — via browser settings |
| Marketing | Delivering relevant promotional content to you based on your on-platform behaviour | Yes — withdraw consent via email to support |
You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair your ability to use the baa99 Platform and may prevent you from logging in or placing bets. Disabling analytics or marketing cookies will not affect your access to core Platform features.
8 Data Retention
baa99 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and no longer. The following general retention periods apply:
- Active account data: Retained for the full duration of your baa99 account and for a period of five years following account closure, in accordance with standard financial record-keeping obligations.
- KYC and identity documents: Retained for a minimum of five years following account closure, as required for AML compliance purposes.
- Transaction records: Retained for a minimum of five years following each transaction date.
- Customer support communications: Retained for three years following the closure of each support ticket or complaint.
- Marketing consent records: Retained for the duration of your consent and for one year following withdrawal of consent, to demonstrate lawful processing history.
- Self-exclusion records: Retained for the full duration of the self-exclusion period plus five years, to prevent re-registration during an active exclusion.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised aggregate data may be retained indefinitely for statistical and research purposes.
9 Data Security
baa99 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and baa99 servers
- Encryption of sensitive stored data, including identity documents and financial records, using AES-256 encryption at rest
- Strict role-based access controls ensuring only authorised baa99 personnel can access personal data, and only to the extent necessary for their job function
- Regular third-party penetration testing and vulnerability assessments of the baa99 Platform infrastructure
- Multi-factor authentication requirements for all internal baa99 administrative systems
- Continuous real-time monitoring and automated alerting for suspicious access patterns or anomalous activity
- A documented incident response procedure ensuring prompt containment, investigation, and notification in the event of a data security breach
While baa99 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your baa99 login credentials. baa99 will never ask for your password via email, live chat, or telephone.
10 Your Data Rights
As a baa99 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within 5 business days and respond fully within 30 days.
You have the right to request a copy of all personal data baa99 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared. We will provide this information in a clear, readable format.
If any personal data baa99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your baa99 account profile. For changes to identity or verification data, please contact support.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Please note that erasure requests may be declined where baa99 is required by law to retain data — for example, for AML compliance purposes.
You have the right to request that baa99 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
You have the right to object to baa99's processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes. You may opt out of direct marketing communications at any time without giving a reason.
11 Children's Privacy
The baa99 Platform is strictly intended for adults aged 21 years and above. baa99 does not knowingly collect personal data from any individual under the age of 21, and we have no intention of doing so. If you are under 21 years of age, you must not register a baa99 account, deposit funds, or use any baa99 service.
If baa99 becomes aware — through our KYC procedures or any other means — that personal data has been collected from an individual under the age of 21, we will immediately suspend that account, delete the associated personal data, and return any funds deposited to the payment method from which they originated.
If you have reason to believe that a person under the age of 21 has registered a baa99 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
12 Third-Party Links
The baa99 Platform may, from time to time, contain references to game providers and sports data partners (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While baa99 works with these trusted industry partners, this Privacy Policy applies only to data processed by baa99 itself and does not extend to the data practices of any third-party technology or content providers.
baa99 is not responsible for the privacy practices of third-party game studios, data feed providers, or any other external party. We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with the baa99 Platform.
13 Changes to This Privacy Policy
baa99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the baa99 Platform and, where appropriate, by sending an email notification to your registered email address.
The effective date at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this policy periodically to stay informed about how baa99 protects your personal data. Your continued use of the baa99 Platform following the posting of any updated Privacy Policy constitutes your acknowledgement of the revised terms.
Previous versions of this Privacy Policy are available on request by contacting [email protected]. We will retain prior versions for reference and audit purposes in accordance with our document retention procedures.
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way baa99 processes your personal data, please do not hesitate to reach out to our dedicated data support team:
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
baa99 is committed to resolving all data-related queries and complaints promptly and fairly. If you are dissatisfied with our response to a data complaint, you have the right to escalate the matter through appropriate legal channels in your jurisdiction.
Explore baa99 — Bangladesh's Premier Betting Platform
Now that you understand how we keep your data safe, explore everything baa99 has to offer — from live cricket betting and BPL markets to slots, live casino, and instant BDT deposits via bKash and Nagad. All in a secure, SSL-encrypted environment built for Bangladeshi players aged 21 and above.