ba99ap Privacy Policy

1 Data We Collect

ba99ap collects personal data from players at various stages of account registration, identity verification, payment processing, and platform use. The categories of personal data we collect are described below. We collect only what is necessary and proportionate to deliver a secure, compliant, and personalised ba99ap experience for Bangladeshi players.

1.1 Registration Data

When you create a ba99ap account, we collect the following information:

• Full legal name (as it appears on your national identity card or passport)
• Date of birth (to verify you are 18 years of age or older)
• Email address
• Mobile phone number (Bangladeshi number, e.g., bKash or Nagad registered number)
• Chosen username and encrypted password
• Residential address (city, district, and division within Bangladesh)

1.2 Identity Verification Data

To comply with our anti-money-laundering (AML) obligations and to verify player identity before processing withdrawals, ba99ap may request one or more of the following documents:

• National Identity Card (NID) — front and back copy
• Passport — bio-data page copy
• Driver's licence
• Proof of address — bank statement or utility bill issued within the last 90 days
• Screenshot of your bKash, Nagad, or Rocket account showing your registered mobile number

Document copies submitted for verification are stored securely and used solely for the purposes of identity verification and regulatory compliance. They are not shared with third parties except as required by law or as described in Section 3 of this policy.

1.3 Financial Transaction Data

ba99ap records the details of all financial transactions conducted on your account, including:

• Deposit amounts, dates, and payment method (e.g., bKash, Nagad, Rocket, Upay, bank name)
• Withdrawal amounts, dates, destination payment method, and processing status
• Wager history, game results, and account balance movements
• Bonus credits, wagering progress, and promotional redemptions

All financial data is denominated in Bangladeshi Taka (৳ BDT). ba99ap does not store full payment account numbers. Where mobile financial service identifiers (such as a bKash or Nagad mobile number) are recorded, they are stored in encrypted form.

1.4 Technical and Usage Data

When you access ba99ap.org, our servers automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation path
• Session duration and login timestamps
• Referring URL (the website you came from before visiting ba99ap.org, if applicable)

This technical data is used for platform security, fraud prevention, and anonymised analytics to improve the ba99ap experience. It is not used to identify you individually in the context of marketing without your consent.

1.5 Customer Support Communications

When you contact ba99ap support via email at support@ba99ap.org or via any in-platform support channel, we retain a record of the communication, including the content of your message, your email address or username, and our responses. These records are kept to resolve disputes, improve support quality, and for compliance purposes.

2 How We Use Your Data

ba99ap uses the personal data it collects for the following lawful purposes. We do not use your data for any purpose beyond what is described in this section without first obtaining your explicit consent.

2.1 Promotional Communications

ba99ap will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or subsequently via your account settings. Promotional messages may include details of welcome bonuses, seasonal offers tied to BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh, and other ba99ap promotions relevant to Bangladeshi players. You may opt out of promotional communications at any time by adjusting your preferences in your account settings or by contacting support@ba99ap.org. Opting out of marketing will not affect transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts), which are essential to account operation.

2.2 Automated Decision-Making

ba99ap uses automated systems to detect fraudulent activity, identify duplicate accounts, and flag unusual transaction patterns for manual review by our compliance team. These systems may temporarily restrict account functionality while a review is in progress. If you believe an automated decision has incorrectly affected your account, you have the right to request human review by contacting support@ba99ap.org.

3 Data Sharing & Disclosure

ba99ap does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

3.1 Payment Processors

To process your deposits and withdrawals, ba99ap shares relevant financial identifiers with the mobile financial service providers and banking institutions you select, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these providers operates under their own privacy policies and regulatory obligations. ba99ap shares only the minimum information required to complete each transaction.

3.2 Game Software Providers

ba99ap's casino and sports betting products are powered by third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game hosted by one of these providers, your game session data (username, game activity, and wager amounts) may be transmitted to the relevant provider's servers for game hosting and integrity purposes. These providers are contractually required to handle your data securely and may not use it for any purpose other than game delivery.

3.3 Legal and Regulatory Disclosure

ba99ap may be required to disclose your personal data to law enforcement agencies, regulatory authorities, or courts in response to a valid legal request, court order, or regulatory investigation. In such cases, ba99ap will disclose only the minimum data required by law and will, where legally permitted, notify you that such a disclosure has been made.

3.4 Business Transfers

In the event that ba99ap undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to the privacy terms that apply to your data prior to the transfer taking effect.

4 Cookies & Tracking

ba99ap uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather anonymised analytics that help us improve the ba99ap experience for Bangladeshi players. This section explains the types of cookies we use and how you can manage your preferences.

4.1 Essential Cookies

These cookies are strictly necessary for the ba99ap platform to function. They maintain your login session, remember your account preferences (such as language and notification settings), and enable the secure processing of transactions. Essential cookies cannot be disabled without impairing your ability to use ba99ap. They do not collect any information that could be used to identify you outside of the ba99ap platform.

4.2 Analytics Cookies

ba99ap uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most, where players encounter difficulties, and how game categories perform. This data is aggregated and does not identify individual players. Analytics data is used solely to improve the ba99ap platform. ba99ap does not use Google Analytics or any third-party analytics service that transmits identifiable player data to external servers.

4.3 Security Cookies

ba99ap sets security cookies to detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery (CSRF) attacks. These cookies are essential to maintaining the integrity and security of your ba99ap account and cannot be disabled.

4.4 No Advertising Cookies

ba99ap does not use advertising cookies, retargeting pixels, or any cross-site tracking technology. You will not be tracked across other websites after visiting ba99ap.org. ba99ap does not participate in any behavioural advertising network.

4.5 Managing Cookies

You can control and delete cookies via your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete cookies on browser close. Please note that blocking essential cookies will prevent you from logging into your ba99ap account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation. Commonly used browsers in Bangladesh — Chrome, Firefox, Samsung Internet, and Opera Mini — all provide cookie management options in their privacy settings menus.

5 Data Retention

ba99ap retains your personal data for as long as your account is active and for a defined period after account closure, as required by our legal and regulatory obligations. The retention periods applicable to each category of data are as follows:

Upon expiry of the applicable retention period, ba99ap will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. If you request account closure for responsible gaming reasons, ba99ap may retain a minimal record (name, email address, and self-exclusion status) for longer than the standard post-closure period to prevent re-registration during an active self-exclusion period.

6 Data Security

The security measures implemented by ba99ap include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and ba99ap servers
• Encrypted storage of passwords using industry-standard one-way hashing algorithms (passwords are never stored in plain text)
• Encrypted storage of sensitive personal data and payment identifiers at rest
• Role-based access controls limiting which ba99ap staff members can access player data, on a strict need-to-know basis
• Regular security audits and penetration testing of ba99ap platform infrastructure
• Two-factor authentication (2FA) available for player accounts and mandatory for all ba99ap staff accounts
• Automated monitoring for suspicious login activity, unusual transaction patterns, and potential account compromise
• Regular staff training on data protection and privacy best practices

6.1 Data Breach Response

In the unlikely event of a data breach that affects your personal data, ba99ap will take immediate steps to contain the breach and assess its impact. We will notify affected players via email within 72 hours of becoming aware of a breach, providing details of the data affected, the likely consequences, and the steps ba99ap has taken to address the situation. We will also notify the relevant regulatory authorities as required by applicable law.

6.2 Your Responsibility

While ba99ap takes all reasonable technical measures to protect your data, account security also depends on you. We strongly recommend that you use a strong, unique password for your ba99ap account, enable two-factor authentication, and never share your login credentials with any other person. ba99ap accepts no liability for data loss or unauthorised account access resulting from your failure to maintain appropriate account security on your end.

7 Your Privacy Rights

ba99ap respects your rights over your personal data. As a ba99ap player, you have the following privacy rights, which you may exercise at any time by contacting our support team at support@ba99ap.org:

7.1 Right of Access

You have the right to request a copy of all personal data that ba99ap holds about you. Upon receiving a verified access request, ba99ap will provide you with a comprehensive summary of your data in a readable format within 30 days. This includes your registration data, identity verification records (excluding third-party verification reports), transaction history, game history, and support communication records.

7.2 Right of Rectification

If any personal data ba99ap holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details (such as email address, phone number, or residential address), you can update this information directly within your ba99ap account settings. For legal name corrections or date-of-birth corrections, you will need to submit supporting documentation to support@ba99ap.org.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent for data processing based solely on consent. Please note that ba99ap may be legally required to retain certain data (such as AML records and financial transaction history) even after an account closure request. In such cases, ba99ap will delete all data that is not subject to a legal retention obligation and will inform you of which data must be retained and for how long.

7.4 Right to Restrict Processing

You have the right to request that ba99ap restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved. During the restriction period, ba99ap will store your data but will not actively process it beyond what is required by law.

7.5 Right to Withdraw Consent

Where ba99ap processes your data on the basis of your consent (for example, for sending promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to the withdrawal. You can withdraw marketing consent via your ba99ap account settings or by emailing support@ba99ap.org.

7.6 Exercising Your Rights

To exercise any of the above rights, contact the ba99ap data team at support@ba99ap.org with the subject line "Privacy Rights Request" and a description of your request. For security purposes, ba99ap will verify your identity before processing any data access, rectification, or deletion request. We aim to respond to all verified privacy rights requests within 30 days. If your request is complex or if we receive a high volume of requests, we may extend this period by a further 30 days, and will notify you accordingly.

8 Policy Updates & Contact

ba99ap reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When we make material changes to this policy, we will publish the updated version on this page with a revised effective date and, where the changes significantly affect your rights, notify you directly via email.

We encourage you to review this Privacy Policy periodically to remain informed about how ba99ap collects, uses, and protects your personal data. Your continued use of the ba99ap platform after the publication of an updated Privacy Policy constitutes your acceptance of the changes.

8.1 Contact the ba99ap Data Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ba99ap holds about you, please contact us using the details below. All privacy-related enquiries are handled by ba99ap's dedicated data team, who aim to respond within 5 business days.

This Privacy Policy was last reviewed and updated on January 1, 2026. It applies to all personal data collected by ba99ap from players registered in Bangladesh from that date onwards, as well as to data collected from existing players prior to that date and still held by ba99ap as of the effective date.