bh99 Privacy Policy

This Privacy Policy is issued by bh99, the operator of the online betting and casino platform accessible at bh99.io (referred to in this document as "bh99", "we", "us", or "our"). bh99 operates as a safe and reliable entertainment platform targeting adult players in Bangladesh and other supported regions.

For the purposes of data privacy, bh99 acts as the data controller — meaning we determine the purposes and means of processing your personal data. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are contractually bound to process your data only on our documented instructions.

This Privacy Policy applies to all personal data collected through the bh99 website at bh99.io, any associated mobile-optimised interfaces, and any correspondence between you and bh99 conducted via email, live chat, or other communication channels.

bh99 collects several categories of personal data depending on how you interact with the platform. The categories currently collected are set out below.

We do not collect or store payment card numbers (Visa, Mastercard) directly. Card transactions, where supported, are processed entirely by our PCI-DSS compliant payment partner and bh99 receives only a tokenised reference.

bh99 collects personal data through the following means:

• Direct submission: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support, or respond to a survey, you provide personal data directly to bh99.
• Automated collection: When you browse or use the bh99 platform, our servers automatically record technical data such as your IP address, device type, browser version, and session activity. This occurs through server logs and cookies.
• Payment processors: When you initiate a deposit via bKash, Nagad, Rocket, or Upay, those payment service providers transmit transaction confirmation data to bh99 to credit your Account. bh99 receives only the data necessary to confirm and record the transaction.
• Identity verification partners: Where third-party KYC verification services are used to confirm your identity and age, those providers share the outcome of the verification check with bh99, along with any data required to support that outcome.
• Fraud prevention services: bh99 may receive risk signals or flagged data from fraud detection services where there is a legitimate interest in protecting the platform and its players from fraudulent activity.

bh99 processes personal data for the following clearly defined purposes:

bh99 does not use automated decision-making (including profiling) that produces legal effects or similarly significant outcomes for any player, except in the limited context of fraud detection where automated risk scoring may temporarily restrict account activity pending human review.

Every instance of personal data processing by bh99 is grounded in one of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between bh99 and the player — including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money-laundering checks, and record-keeping requirements.
• Legitimate interests: Processing carried out for bh99's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by updating your notification preferences in Account Settings or contacting support.

bh99 does not sell personal data. We share personal data only in the following controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive the minimum data necessary to process your deposit or withdrawal instruction.
• KYC and identity verification providers: Third-party verification services receive identity documents and personal data solely to perform age and identity checks on bh99's behalf.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and bet data to operate their games. They do not receive your full name, payment details, or contact information.
• Fraud prevention and security services: Risk management partners may receive technical and transaction data for the purpose of detecting and preventing fraudulent activity.
• Legal and regulatory authorities: Where required by law or a valid court order, bh99 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of bh99's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Some of bh99's third-party service providers operate from or store data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, bh99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.

Such safeguards include data processing agreements incorporating standard contractual clauses, binding corporate rules where applicable, and a requirement that recipient countries or organisations provide an adequate level of data protection. If you would like further information about international transfer safeguards applicable to your data, please contact our support team.

bh99 uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, notification preferences, and last-used payment method to personalise your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how features are used. This data helps bh99 improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats to your account and the platform as a whole.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bh99 Account or placing bets. Analytics cookies may be disabled without affecting core platform functionality.

bh99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period expires, personal data is either securely and permanently deleted from bh99 systems, or anonymised such that it can no longer be linked to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a bh99 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of access: You may request a copy of all personal data bh99 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data bh99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to erasure: You may request that bh99 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, you have withdrawn consent, or you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations.
• Right to restriction: You may request that bh99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. bh99 will cease such processing unless compelling legitimate grounds are demonstrated that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that bh99 provide your personal data in a structured, commonly used, machine-readable format.

The bh99 platform is strictly intended for adults aged 21 years and above. bh99 does not knowingly collect personal data from any individual under the age of 21. The platform's registration process includes age-verification steps designed to prevent underage access, and all accounts are subject to KYC verification before withdrawals are processed.

If bh99 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all associated bets voided, and all personal data relating to that individual securely deleted in accordance with our data retention procedures.

If you believe that a minor has registered an account on bh99, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports seriously and will investigate promptly.

bh99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and bh99 servers
• Encryption of stored sensitive personal data including KYC documents and payment identifiers
• Role-based access controls limiting internal data access to staff members who require it to perform their job function
• Regular security audits and penetration testing of the bh99 platform and supporting infrastructure
• Two-factor authentication (2FA) available to all players and required for bh99 staff accessing internal systems
• Intrusion detection systems and real-time monitoring for anomalous access patterns
• Incident response procedures requiring prompt notification to affected players in the event of a data breach involving their personal data

While bh99 takes all reasonable precautions to protect personal data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. Players are strongly encouraged to use a strong, unique password for their bh99 Account and to enable two-factor authentication in their Account security settings.

bh99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or the way we handle your personal data — bh99 will notify registered players by email to the address on file at least 14 days before the revised policy takes effect. Your continued use of the bh99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage all players to review this Privacy Policy periodically to stay informed about how bh99 is protecting their information.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the bh99 privacy team using the details below. All privacy-related enquiries are handled by a dedicated team with expertise in data protection matters.

• Privacy & data requests email: [email protected] — subject line "Privacy Request" or "Data Rights Request"
• General support email: [email protected]
• Support availability: 24 hours a day, 7 days a week (BST, UTC+6)
• Languages: English and Bengali
• Target response time for privacy requests: acknowledgement within 5 business days, full response within 30 calendar days

bh99 is committed to resolving all privacy concerns fairly and promptly. If you feel your concern has not been adequately addressed, you retain the right to escalate the matter through appropriate legal channels in your jurisdiction.