Privacy Policy — How bz99 Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") describes how bz99 ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects personal data relating to individuals who visit, register with, or use the bz99 platform at bz99.lat ("the Website"). It applies to all players, prospective players, and visitors regardless of the device or browser used to access the platform.

By registering an account, making a deposit, or using any feature of the bz99 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to request account closure.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and any other document, this Policy shall prevail with respect to matters of personal data and privacy.

bz99 collects two broad categories of personal data: information you provide to us directly, and information collected automatically as you use the platform. The table below summarises the key data types and the primary purpose for which each is collected.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request. In that limited circumstance, such data is used solely to process the request and is not shared with any third party.

bz99 collects personal data through the following channels:

• Direct interactions: Data you provide when completing the registration form, submitting identity documents for KYC verification, making a deposit or withdrawal request, contacting support via live chat or email, or completing any other form on the platform.
• Automated technologies: As you navigate the platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. This occurs each time you visit the Website, regardless of whether you are logged in.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, or a partner bank, the payment provider shares transaction confirmation data with bz99 to enable crediting or debiting of your account balance.
• Identity verification partners: During KYC verification, we may work with accredited identity verification service providers who process the documents you submit and return a verified status to bz99. These providers are bound by strict data processing agreements.
• Third-party game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session and game-outcome data with bz99 for reconciliation and dispute resolution purposes.

bz99 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your player account, including verifying your identity and age (21+) at registration and at any subsequent verification checkpoint.
• Service delivery: Processing deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method; crediting winnings; settling sports bets on cricket (BPL, IPL, T20 World Cup), football, kabaddi, and other markets; and providing access to 500+ casino games.
• Legal and regulatory compliance: Meeting our anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations, including monitoring for unusual transaction patterns and maintaining records as required.
• Platform security and fraud prevention: Detecting and investigating suspicious account activity, protecting against unauthorised access, and investigating potential breaches of our Terms & Conditions.
• Customer support: Responding to enquiries, resolving complaints, and improving the quality of our support services by reviewing live chat and email records.
• Responsible gaming: Monitoring your gaming activity to identify potential problem gambling indicators and, where appropriate, prompting you to review your deposit limits, session reminders, or self-exclusion options.
• Marketing communications: Sending promotional emails and SMS messages about bonuses, new games, cricket betting specials, and seasonal offers — but only where you have opted in to receive such communications. You may withdraw consent at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, interface design, page performance, and the overall player experience.

bz99 does not use personal data for automated decision-making or profiling in ways that produce legal or similarly significant effects on players, except in the context of automated fraud detection systems which flag accounts for human review.

bz99 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to enter into or perform the contract represented by your acceptance of our Terms & Conditions — including account creation, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML checks, KYC verification, and the retention of financial records.
• Legitimate interests: Processing carried out in pursuit of bz99's legitimate business interests — such as fraud prevention, platform security, and improving our services — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bz99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following specific and limited circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, partner banks, and card networks (Visa, Mastercard) solely to process deposits and withdrawals to and from your account.
• Identity verification providers: Identity and document data is shared with accredited KYC service providers for the sole purpose of verifying your age and identity. These providers may not use your data for any other purpose.
• Game technology providers: Game session and outcome data is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — strictly for the purpose of game reconciliation and technical support.
• Legal and regulatory authorities: Where required by applicable law, court order, or a request from a competent authority, bz99 may disclose personal data to law enforcement agencies, financial regulators, or other governmental bodies. We will always seek to limit such disclosures to the minimum necessary.
• Professional advisers: Data may be shared with lawyers, auditors, and accountants on a strictly confidential, need-to-know basis in connection with legal proceedings, financial audits, or corporate transactions.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of bz99 or its assets, personal data may be transferred to the acquiring entity. Affected players will be notified in advance, and the acquiring entity will be required to honour the terms of this Privacy Policy.

bz99 uses cookies and similar technologies (such as pixel tags and local storage) to operate the platform, remember your preferences, maintain your session security, and understand how players interact with the Website. Cookies are small text files placed on your device when you visit the platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These enable you to log in, navigate between pages, and maintain a secure session. They cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as preferred language, last game played, and display settings to provide a more personalised experience on return visits.
• Analytics cookies: Collect aggregated, anonymised information about how players use the platform — including which pages are visited most frequently and where errors occur — to help us improve the service. No personally identifiable information is contained in analytics data.
• Security cookies: Support our fraud detection and session integrity systems. These are necessary to protect player accounts from unauthorised access.

You can control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may prevent you from using certain features of the platform, including logging in to your bz99 account. bz99 does not use third-party advertising cookies or cookies that track your activity across other websites.

bz99 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping standards.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory request or legal proceeding.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or for the duration of any unresolved dispute, whichever is later.
• Marketing preference records: Opt-in and opt-out records are retained indefinitely to demonstrate compliance with consent requirements, even after marketing communications have ceased.
• Technical and usage data: Aggregated and anonymised after thirteen (13) months and retained indefinitely in anonymised form for statistical analysis.

When personal data is no longer required and there is no legal basis for continued retention, bz99 will securely delete or irreversibly anonymise it. Deletion procedures are conducted on a scheduled basis and include secure overwriting of stored files.

bz99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bz99 platform.
• Encryption at rest for all sensitive personal and financial data stored on our servers.
• Role-based access control (RBAC) ensuring that bz99 staff can only access personal data relevant to their specific job function.
• Multi-factor authentication (MFA) required for all administrative access to systems holding player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection and monitoring systems that provide real-time alerts on suspicious access patterns or attempted breaches.
• Data minimisation practices that limit the personal data visible to any single system or team member to the minimum necessary for their function.

While bz99 takes all reasonable precautions to secure your personal data, no internet-based system can guarantee absolute security. You are responsible for keeping your own login credentials secure and for promptly reporting any suspected unauthorised access to your account.

As a bz99 player and data subject, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Privacy team at [email protected]. bz99 will respond to all verified requests within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data bz99 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to bz99's legal obligations to retain certain data (e.g., financial records and KYC documents) for regulatory compliance periods.
• Right to restrict processing: You have the right to request that bz99 restrict the processing of your personal data in specific circumstances, such as while the accuracy of the data is disputed.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that certain rights may be limited where bz99 is required to retain or process data to comply with legal obligations, including AML and KYC requirements. Where a right cannot be fulfilled in full, bz99 will explain the specific reason for the limitation.

The bz99 platform integrates with third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — and payment service providers including bKash, Nagad, Rocket, and Upay. While bz99 takes care to work only with reputable partners, we are not responsible for the privacy practices of any third-party service.

Each third-party provider operates under its own privacy policy. We recommend reviewing the privacy notices of any third-party service you interact with, particularly payment wallet providers, before authorising transactions. bz99 data processing agreements with these partners require them to process personal data only for the specific, limited purpose for which it was shared.

The bz99 platform does not contain links to external third-party websites that are not part of the bz99 service. Where such links might appear in promotional content, bz99 is not responsible for the content or privacy practices of any linked external site.

If bz99 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data relating to that individual, and return any deposits to the payment method from which they were made, subject to verification. Age verification checks are conducted at the point of registration and may be repeated at any time during the account's lifetime.

If you are a parent or guardian and believe that a minor in your care has accessed the bz99 platform or provided us with personal data, please contact us immediately at [email protected] so that we can take prompt action.

bz99 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — those that significantly affect how we collect, use, or share your personal data — we will notify registered players by email to the address on file and/or by displaying a prominent notice on the platform, no fewer than 14 days before the changes take effect.

For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), the revised Policy will be published at this URL without individual notification. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the bz99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should stop using the platform and request account closure through our support team.

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights, please contact our dedicated Privacy team through the following channels. All contacts are plain text — do not send account credentials or passwords via email.

• Privacy Enquiries: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 directly within the bz99 platform — average response under 5 minutes.

bz99 will acknowledge all privacy-related enquiries within 48 hours of receipt and will provide a substantive response within 30 calendar days. Complex Subject Access Requests may require up to an additional 30 days in exceptional circumstances; where this is the case, we will inform you within the initial 30-day period and provide a reason for the extension.