Privacy Policy for 99baje

1 Introduction & Scope

This Privacy Policy ("Policy") describes how 99baje ("the Platform", "We", "Us", "Our") collects, processes, stores, and protects the personal information of individuals ("You", "Your", "Player") who access or use the services available at https://99baje.net. This Policy applies to all registered players, visitors who browse the platform without registering, and any individual who contacts 99baje through our support channels.

By registering an account on 99baje, depositing funds, or otherwise using any part of the platform, you confirm that you have read this Privacy Policy in full and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

This Policy applies specifically to the 99baje platform as operated for players in Bangladesh. All personal data collected via 99baje is processed in accordance with the data protection obligations applicable in the jurisdictions relevant to the platform's operations. Where applicable law imposes stricter requirements than those set out in this Policy, those legal requirements shall take precedence.

This Policy should be read together with the 99baje Terms & Conditions, which govern the overall contractual relationship between you and the platform, and the Responsible Gaming policy, which sets out our commitments to player welfare. In the event of any conflict between these documents, the Terms & Conditions shall take precedence except where this Policy specifically addresses a data protection matter.

2 Data We Collect

99baje collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party service providers where necessary for verification or payment processing. The categories of data we collect are described below.

2.1 Registration & Account Data

When you create a 99baje account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the minimum age requirement of 18 years.
• Mobile phone number registered in your name, used for account security, OTP verification, and support communications.
• Email address, used for account notifications, transaction confirmations, and promotional communications (where you have opted in).
• Residential address within Bangladesh, including division, district, and postal code.
• Username and encrypted password for account access.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify player age and identity, we may request the following documents:

• Bangladesh National Identity Card (NID) — front and back scan or photograph.
• Passport or driving licence as an alternative identity document.
• Proof of address, such as a recent utility bill or bank statement issued within the last three months.
• Confirmation of the payment method used (e.g., screenshot of bKash or Nagad account in your name).

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank).
• Transaction reference numbers and payment account identifiers (e.g., your bKash number — last four digits only after initial verification).
• Betting history, game activity logs, and wagering records.
• Bonus credits applied, wagering progress, and promotion participation history.

2.4 Technical & Usage Data

When you access 99baje, our servers and analytics systems automatically record the following technical data:

• IP address and approximate geographic location (city level).
• Device type, operating system, browser type, and version.
• Pages visited, features used, time spent on each page, and click-path data.
• Session start and end times, login frequency, and platform navigation patterns.
• Error logs and crash reports generated during your session.

2.5 Communications Data

If you contact 99baje through our support email or live chat system, we retain records of that correspondence, including the content of messages, timestamps, and the resolution outcome. This data is used to improve support quality and to maintain an accurate record of player interactions.

3 How We Use Your Data

99baje uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows:

Where 99baje processes your data on the basis of consent — specifically for marketing communications — you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link included in any marketing email. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

99baje uses responsible gaming monitoring data to identify patterns that may indicate problematic gambling behaviour. This processing is carried out to fulfil our duty of care to players and to comply with platform policy obligations. Automated flags generated by this system may prompt a manual review by our responsible gaming team, who may reach out to you with welfare information or to offer self-exclusion tools.

4 Data Sharing & Third Parties

99baje does not sell, rent, or trade your personal data to third parties for their own independent commercial use. However, to operate the platform effectively and to comply with legal obligations, we share limited personal data with carefully selected third-party service providers and, where required, with regulatory or law enforcement bodies.

4.1 Payment Processors

To facilitate deposits and withdrawals, we share relevant transaction data with the payment providers you select, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data necessary to process your specific transaction and are bound by their own privacy and security standards. 99baje does not store your full mobile banking PIN or bank account password at any point.

4.2 Game Technology Providers

Third-party game studios — including Pragmatic Play, Spribe, Evolution Gaming, NetEnt, Microgaming, and Ezugi — may receive anonymised or pseudonymised session data to support game functionality, fair play certification, and technical support. These providers do not receive your full name, NID details, or financial account identifiers.

4.3 Identity Verification Services

Where automated KYC verification tools are used, your submitted identity documents may be processed by a third-party verification service provider operating under a data processing agreement with 99baje. Such providers are contractually prohibited from using your data for any purpose other than the specific verification task.

4.4 Legal & Regulatory Disclosure

99baje may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where we are legally compelled to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. We will notify affected players of such disclosures where we are legally permitted to do so.

5 Cookies & Tracking Technologies

99baje uses cookies and similar client-side technologies to enable core platform functionality, maintain session security, and gather aggregated usage analytics. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

5.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain preferences or session states. Cookies do not contain executable code and cannot access other files stored on your device.

5.2 Types of Cookies Used by 99baje

• Strictly Necessary Cookies: These cookies are required for the platform to function correctly. They manage your login session, maintain your account authentication state, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, which features are used, and where errors occur. This data helps us improve platform performance and user experience. No personally identifiable information is included in analytics data.
• Functional Cookies: These cookies remember your platform preferences, such as your preferred language setting and display options, so that you do not need to re-configure them on each visit.

5.3 What We Do Not Use Cookies For

99baje does not use advertising cookies, behavioural targeting cookies, or third-party social media tracking pixels. We do not share cookie data with advertising networks, and your browsing behaviour on 99baje is not used to serve you targeted advertisements on other websites.

5.4 Managing Your Cookie Preferences

You can control cookie storage through your browser settings. Most modern browsers allow you to view, block, or delete cookies at the individual site level. Please note that disabling strictly necessary cookies will prevent you from logging into your 99baje account and will impair platform functionality. Instructions for managing cookies in popular browsers are available in the help documentation for Chrome, Firefox, Safari, and Edge.

6 Data Retention & Storage

99baje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to maintain accurate records for dispute resolution, or to comply with applicable legal obligations. The following retention guidelines apply:

• Active Account Data: All personal data associated with your account is retained for the full duration of your active account relationship with 99baje.
• Closed Account Data: Following account closure, 99baje retains core account data (name, contact details, account history, transaction records) for a minimum period of five years to comply with AML record-keeping requirements and to enable dispute resolution.
• KYC Documents: Identity verification documents are retained for a minimum of five years following account closure, in compliance with financial crime prevention obligations.
• Support Communications: Customer support correspondence is retained for three years from the date of the last message in each support thread.
• Technical & Usage Logs: Server access logs and session data are retained for up to 12 months for security monitoring and fraud prevention purposes, after which they are automatically purged or anonymised.
• Marketing Data: If you have opted in to marketing communications, your contact details and preferences are retained until you withdraw consent, at which point they are removed from active marketing lists within 10 business days.

All personal data stored by 99baje is held on secure servers protected by access controls, encryption at rest, and regular security auditing. We periodically review our data holdings and delete or anonymise data that is no longer required for any legitimate purpose.

7 Your Privacy Rights

As a player on 99baje, you hold meaningful rights over the personal data we process about you. We are committed to honoring these rights promptly and transparently. The rights available to you include:

• Right of Access: You may request a copy of all personal data that 99baje holds about you. We will provide this information in a clear, readable format within a reasonable timeframe following a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Certain data fields — such as your registered name — may require re-verification before they can be amended.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention. Please note that where legal retention obligations apply (e.g., AML record-keeping), we may not be able to fulfil a full erasure request immediately.
• Right to Restrict Processing: You may request that 99baje limit the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being investigated.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on 99baje's legitimate interests, including profiling for responsible gaming purposes. We will assess such objections on a case-by-case basis.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect past processing.
• Right to Data Portability: Upon request, we can provide your account data and transaction history in a structured, commonly used format (such as CSV or PDF) that you can transfer to another service.

To exercise any of the rights listed above, please submit a written request to [email protected]. We may request proof of identity before processing your request in order to protect against fraudulent access to another player's data. We aim to respond to all privacy rights requests within 15 business days of receipt.

8 Data Security Measures

99baje takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, our layered approach to data protection reflects industry best practice.

• SSL/TLS Encryption in Transit: All data transmitted between your browser and 99baje's servers is encrypted using TLS 1.2 or higher. This applies to account login, deposits, withdrawals, KYC document uploads, and all support interactions.
• Encryption at Rest: Sensitive data fields — including passwords, NID numbers, and payment account identifiers — are stored using strong encryption or one-way hashing algorithms. Plaintext passwords are never stored.
• Access Controls: Access to personal data within 99baje's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories relevant to their specific role, and all access events are logged for audit purposes.
• Two-Factor Authentication: Player accounts support OTP-based two-factor authentication. We strongly recommend enabling this feature for your 99baje account to provide an additional layer of security beyond your password.
• Vulnerability Monitoring: 99baje conducts regular security reviews of its platform infrastructure, including vulnerability assessments and penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data security incident affecting your personal data, 99baje will notify affected players without undue delay once the scope and nature of the incident has been established. We will provide clear information about what data was affected and what steps you should take to protect yourself.

You also play an important role in keeping your account secure. You should choose a strong, unique password for your 99baje account, enable OTP two-factor authentication, avoid accessing your account from shared or public devices, and contact [email protected] immediately if you believe your account has been accessed without your authorisation.

For all privacy-related enquiries, data rights requests, or security concerns, please contact the 99baje Data Protection team at [email protected]. Our team operates on Bangladesh Standard Time (BST, UTC+6) and aims to acknowledge all privacy-related contacts within one business day.