Your Privacy Matters at bh999s — Our Full Data Policy

When you interact with bh999s — whether registering an account, making a deposit via bKash or Nagad, placing a cricket bet, or contacting our support team — certain categories of personal information are generated or provided. We group this information into four primary categories: information you provide directly, information generated automatically by your use of the platform, information received from payment processors, and information obtained through identity verification processes.

Information You Provide Directly

During account registration, you provide your full legal name, date of birth, email address, and Bangladesh mobile number. You may also choose to provide a profile display name. When submitting identity documents for KYC verification, you provide scanned copies of documents such as your National Identity Card (NID), passport, or Bangladesh driving licence. When contacting support, you provide the content of your enquiry and any attachments you choose to include.

Information Generated by Platform Use

When you access and use bh999s, our systems automatically record certain technical and behavioural information. This includes your IP address, device type, operating system, browser type and version, screen resolution, time zone setting, the pages and game lobbies you visit, the duration of your sessions, your betting and wagering history, deposit and withdrawal transaction records, and any in-platform support chat interactions.

Information from Payment Processors

When you complete a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor shares a transaction confirmation reference, the transaction amount in BDT, and the name or identifier associated with the payment account. bh999s does not receive or store full card numbers, CVV codes, or mobile banking PINs — these credentials are handled exclusively by the respective payment processors under their own security and data protection standards.

Information from Identity Verification

As part of Know Your Customer (KYC) compliance, bh999s may use a third-party identity verification service to confirm the authenticity of submitted identity documents. In this process, a limited data set — including your name, date of birth, and document number — may be shared with the verification service provider for cross-reference purposes only. The verification service does not receive your payment credentials or wagering history.

bh999s uses personal data collected from registered players for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The following table summarises the primary purposes for which each category of data is used.

Marketing Communications

bh999s may use your registered email address and mobile number to send you information about promotions, bonuses, new game releases, and platform updates that are relevant to your account. You may opt out of marketing communications at any time by updating your notification preferences within the account dashboard settings. Opting out of marketing communications does not affect transactional messages such as deposit confirmations, withdrawal notifications, or security alerts — these are sent regardless of marketing preferences as they are necessary for account operation.

Responsible Gaming Monitoring

bh999s uses your wagering history, session duration data, and deposit frequency information to monitor for patterns that may indicate problem gambling behaviour. Where our responsible gaming systems flag a concern, a member of the bh999s support team may reach out proactively to offer information about responsible gaming tools including deposit limits, session time reminders, and self-exclusion options. This monitoring activity is conducted in the interest of player welfare and forms part of bh999s's commitment to safe gaming practices.

Fraud and Security Monitoring

IP address data, device fingerprint information, and login pattern data are used to detect and prevent fraudulent activity including unauthorised account access, multi-accounting, and payment fraud. Where suspicious activity is detected, bh999s may temporarily suspend the affected account pending investigation. bh999s does not use automated decision-making systems that produce final account closure decisions without human review — all closure decisions are made by a member of the bh999s compliance team.

In the course of operating the bh999s platform, your personal data may be shared with the following categories of third-party service providers. In each case, data sharing is governed by data processing agreements that bind the third party to handle your information securely and only for the stated purpose.

Game Providers

To deliver casino games and live dealer experiences on the bh999s platform, your account identifier and session token are shared with the relevant game provider — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — for the duration of each game session. This sharing is technically necessary to render the game and record the session outcome. Game providers do not receive your full identity documents, payment method details, or contact information.

Payment Processors

To process deposits and withdrawals in BDT, bh999s shares transaction instructions with the relevant payment processor — bKash, Nagad, Rocket, Upay, or the relevant card network where Visa or Mastercard is used. Each processor operates under its own published privacy policy and data protection framework. The information shared is limited to what is necessary to complete the specific transaction.

Identity Verification Partners

Where KYC document verification is required, a limited set of identity data — name, date of birth, and document number — may be shared with a certified third-party identity verification service provider. This provider is contractually prohibited from using the data for any purpose other than confirming document authenticity on behalf of bh999s.

Legal and Regulatory Disclosure

bh999s may disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bh999s, its registered players, or the public. In such cases, bh999s will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, notify the affected account holder of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of bh999s, registered player data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, bh999s will provide advance notice to registered players via the account dashboard and registered email, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy with respect to data collected prior to the transfer.

bh999s uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and collect anonymous usage statistics that help us improve the platform experience for Bangladesh players. This section explains the types of cookies used, their purpose, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your session or preferences. Cookies cannot execute code, carry viruses, or access other files stored on your device.

Types of Cookies Used by bh999s

Managing Your Cookie Preferences

You can manage non-essential cookie preferences through the Privacy Settings section of your bh999s account dashboard. Additionally, most modern browsers provide controls to view, block, or delete cookies at the browser level. Please note that disabling strictly necessary or security cookies will impair your ability to log in to and use the bh999s platform. If you clear all cookies from your browser, your session will be terminated and you will need to log in again on your next visit.

bh999s does not use third-party advertising cookies or behavioural tracking cookies that profile you across websites other than bh999s. All analytical cookies used on the platform are configured to anonymise IP addresses before any data is processed.

bh999s retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each category of data held by bh999s are outlined below.

Active Account Data

While your bh999s account remains active, all associated personal data — including identity information, contact details, transactional records, and wagering history — is retained in full. This data is necessary to operate your account, process transactions, resolve disputes, and comply with responsible gaming monitoring obligations.

Closed Account Data

Following the closure of a bh999s account — whether initiated by the player or by bh999s — personal data is retained for a period of five years from the date of closure. This retention period reflects standard financial record-keeping obligations applicable to payment processing activities and allows bh999s to respond to any post-closure dispute, regulatory enquiry, or legal proceeding that may arise within that window. After the five-year retention period has elapsed, personal data is securely deleted or irreversibly anonymised.

KYC Document Retention

Identity documents submitted for KYC verification are retained for a minimum of five years from the date of submission, in line with applicable anti-money laundering record-keeping requirements. Physical copies are not retained; scanned document images are stored in encrypted form within bh999s's secure document management infrastructure.

Data Storage Location

All bh999s player data is stored on servers that implement industry-standard encryption at rest and in transit. bh999s does not store primary personal data on servers located in jurisdictions that do not provide adequate data protection standards comparable to those applied by bh999s under this Privacy Policy.

Data Minimisation

Where personal data is no longer needed for its primary purpose but must be retained for legal compliance reasons, bh999s applies data minimisation controls — restricting access to retained data to the compliance team only, and ensuring it is not used for any operational or marketing purpose during the retention-only period.

As a registered player on bh999s, you hold a set of rights with respect to the personal data that bh999s holds about you. bh999s is committed to honouring these rights promptly and without unnecessary complexity. The following rights are available to all Bangladesh-based registered players.

• Right of Access: You have the right to request a copy of the personal data that bh999s holds about you. Upon a valid access request, bh999s will provide a structured summary of your data within 30 days, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data held by bh999s is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as email address updates — can be made directly through the account settings dashboard. Corrections to identity data require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (in cases where consent was the legal basis), or where the data has been processed unlawfully. Please note that erasure requests cannot be fulfilled where retention is required by applicable legal obligation — in such cases, bh999s will apply data minimisation controls as described in Section 5.
• Right to Restrict Processing: You may request that bh999s restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where data has been provided directly by you and processed on the basis of consent or contractual necessity, you may request that bh999s provide that data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, in which case bh999s will assess whether its interests are overridden by your particular circumstances.
• Right to Withdraw Consent: Where bh999s processes data on the basis of your consent — such as for non-essential analytical cookies or marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bh999s takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your information against unauthorised access, alteration, disclosure, or destruction. No platform can guarantee absolute security, but bh999s applies security practices that meet or exceed industry standards for online gaming and financial services platforms.

Encryption

All data transmitted between your device and the bh999s platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. This applies to all platform pages, account transactions, support communications, and game sessions. Data stored on bh999s servers — including KYC documents, transaction records, and account information — is encrypted at rest using AES-256 encryption standards.

Access Controls

Access to personal data held by bh999s is restricted on a strict need-to-know basis. Internal access permissions are granted by role and reviewed quarterly. Access to KYC documents and full identity records is limited to the compliance team. Customer support staff have access only to the account information necessary to resolve specific support interactions. All internal access to personal data is logged and subject to audit.

Two-Factor Authentication

bh999s strongly recommends that all registered players enable two-factor authentication (2FA) on their accounts. When 2FA is active, any login from an unrecognised device requires a verification code sent to the registered mobile number. This significantly reduces the risk of unauthorised account access even in the event that your password is compromised. 2FA can be activated through the security settings section of the account dashboard.

Security Incident Response

In the event of a data security incident that poses a risk to the rights and freedoms of registered players, bh999s will notify affected players via their registered email address within 72 hours of becoming aware of the incident. The notification will describe the nature of the incident, the categories of data affected, the likely consequences, and the measures taken or proposed to address it. bh999s will also notify the relevant competent authority where required by applicable law.

bh999s reviews this Privacy Policy periodically to ensure it accurately reflects our data practices and any changes in applicable law or platform functionality. When material changes are made to this policy, registered players will be notified via the account dashboard notification system and by email to the registered address at least 14 days before the updated policy takes effect.

The current version of this Privacy Policy is always accessible via the footer link on every page of the bh999s platform. The version number and effective date at the top of this document confirm which version you are reading. Continued use of the bh999s platform after the effective date of a revised policy constitutes acceptance of the updated terms.

Minor Updates

Where changes are non-material — such as correcting typographic errors, clarifying existing language without changing its meaning, or updating contact information — bh999s may update the policy without proactive player notification. The version number will be incremented and the effective date updated to reflect the change. We encourage players to review this policy periodically to remain informed.

Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights described in Section 6, or wish to raise a concern about how bh999s handles your personal data, please contact the bh999s data protection team. The contact email for privacy enquiries is [email protected]. This address is displayed as plain text only and is not a clickable link. Please include "Privacy Enquiry" in the subject line of your message so that your enquiry is routed to the correct team. bh999s aims to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 calendar days.

Complaints

If you believe that bh999s has failed to handle your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to raise a formal complaint. We ask that you first contact our data protection team directly, as many concerns can be resolved promptly at this stage. If you remain unsatisfied after our response, you may escalate your complaint to the competent data protection authority in your jurisdiction.