bae999 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bae999 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("Player", "User", "you", "your") who access or use any service provided through the bae999.app website and its associated services.

bae999 is committed to handling your personal data responsibly and in full compliance with applicable data protection principles. By registering a bae999 account, making a deposit, placing a bet, or otherwise using the platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the bae999 Terms and Conditions, which govern the overall agreement between you and bae999. In the event of any conflict between these documents regarding data handling, this Privacy Policy shall take precedence.

Data We Collect

bae999 collects personal data that is necessary to provide you with a secure, functional, and compliant gaming experience. The categories of personal data we collect include:

2.1 Identity Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify the 18+ age requirement)
• Nationality and country of residence
• National Identity Card (NID) number or passport number (for KYC verification)
• Photograph or scanned copy of identity documents (where verification is required)

2.2 Contact Data

• Email address registered to your bae999 account
• Mobile phone number (used for account verification and support communications)
• Residential address in Bangladesh (city, district, and postal code)

2.3 Financial Data

• Mobile Financial Services (MFS) account identifiers associated with bKash, Nagad, Rocket, or Upay transactions
• Bank account details where bank transfer is used as a deposit or withdrawal method
• Transaction history including deposits, withdrawals, bet amounts, and bonus credits in ৳ BDT

2.4 Technical Data

• IP address and approximate geographic location at the time of login and key transactions
• Device type, operating system, and browser version
• Session timestamps and duration
• Cookies and similar tracking identifiers (see Section 8)

2.5 Behavioural Data

• Game activity records including games played, bet history, win/loss records, and session frequency
• Bonus and promotion participation history
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)
• Customer support interaction records

How We Collect Your Data

bae999 collects personal data through the following means:

• Direct submission: Information you provide during account registration, KYC verification, deposit or withdrawal requests, contact form submissions, and customer support interactions.
• Automated technical collection: Data collected automatically when you use the bae999 platform, including IP address, device identifiers, session data, and cookie-based tracking.
• Third-party payment providers: Confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, and Bangladeshi banks) relating to transaction status and account ownership verification.
• Third-party game providers: Game round data, bet settlement records, and session data received from integrated game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Identity verification services: Results of document verification checks conducted as part of the KYC process, where bae999 uses a third-party verification partner.

Why We Use Your Data

bae999 uses the personal data it collects for specific, legitimate purposes. The table below summarises the primary purposes and the categories of data used for each:

Legal Basis for Processing

bae999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contract performance: Processing is necessary to fulfill the agreement between you and bae999, including providing account services, processing transactions, and delivering game content.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, identity verification requirements, and record-keeping obligations.
• Legitimate interests: Processing is necessary for the legitimate interests of bae999, including fraud detection, platform security, responsible gaming monitoring, and product analytics, where those interests are not overridden by your data protection rights.
• Consent: Where bae999 relies on your consent as a legal basis (for example, for sending promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third Parties

bae999 does not sell or rent your personal data to any third party. bae999 may share your personal data with carefully selected third parties only in the following circumstances:

6.1 Payment Service Providers

bae999 shares transaction-related data with payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank — solely to facilitate deposit and withdrawal processing. These providers operate under their own privacy and security frameworks and are not authorised to use your data for any purpose other than transaction processing.

6.2 Game Content Providers

bae999 shares session and bet data with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver and settle game rounds on the platform. Data shared with game providers is limited to the minimum required for game operation and result verification.

6.3 Identity Verification Partners

Where bae999 uses a third-party KYC service provider, identity document data is shared with that provider solely for the purpose of completing verification checks. Verification results are returned to bae999; the underlying document data is not retained by bae999 beyond what is legally required.

6.4 Legal and Regulatory Authorities

bae999 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law, court order, or where disclosure is necessary to prevent or detect crime, including money laundering and fraud. In such cases, bae999 will disclose only the minimum information required to satisfy the legal obligation.

6.5 Professional Advisors

bae999 may share personal data with legal advisors, auditors, and other professional service providers where necessary for the operation and protection of the bae999 business. All such advisors are bound by confidentiality obligations and are prohibited from using player data for any purpose beyond the specific advisory engagement.

Payment Data & KYC

bae999 handles financial data with particular care given its sensitivity. The following specific rules apply to the handling of payment and identity verification data:

• bae999 does not store full payment credentials such as bKash PINs, Nagad MFS passwords, or bank account login details. All payment authentication is handled directly by the respective payment service provider through their own secure interfaces.
• Payment method references (such as the last four digits of a registered mobile number or bank account) are stored by bae999 solely to facilitate withdrawal routing and to verify that payments are made to accounts owned by the registered player.
• KYC documentation (scanned ID cards, proof of address documents) is stored in encrypted form and accessed only by authorised compliance personnel. KYC documents are retained for the period required by applicable anti-money laundering regulations.
• Transaction records in ৳ BDT are retained as part of your bae999 account history and are used for dispute resolution, regulatory reporting, and responsible gaming analysis.

Cookies & Tracking Technologies

bae999 uses cookies and similar tracking technologies to operate the platform, improve user experience, and support security functions. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the bae999 platform to function. They enable core features such as session management, authentication, and security verification. Strictly necessary cookies cannot be disabled without affecting platform functionality.

8.2 Functional Cookies

Functional cookies remember your platform preferences such as language settings, display preferences, and responsible gaming tool configurations. These cookies improve your experience by reducing the need to re-enter preferences on each visit.

8.3 Analytics Cookies

bae999 uses analytics tools to understand how players use the platform — which game categories are most popular, where players encounter difficulty, and how the platform can be improved. Analytics data is collected in aggregated, anonymised form where possible. Individual player behaviour data is not shared with analytics third parties in a form that could identify you personally.

8.4 Managing Cookies

You may manage cookie preferences through your web browser settings. Note that disabling certain cookie categories — particularly strictly necessary cookies — may impair the functionality of the bae999 platform, including the ability to log in and place bets. Detailed cookie management instructions are available in the help section of your browser.

Data Retention

bae999 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: Personal data associated with an active bae999 account is retained for the duration of the account's existence plus a minimum period of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: All ৳ BDT deposit, withdrawal, and betting transaction records are retained for a minimum of seven years following the date of the transaction for regulatory and audit purposes.
• KYC documents: Identity verification documents are retained for the period specified by applicable financial crime prevention regulations, typically five years from the date of verification or the date of the last transaction, whichever is later.
• Marketing data: Where consent to marketing communications has been withdrawn, your contact details are removed from active marketing lists within five business days. A suppression record may be retained to ensure no further marketing is sent.
• Support records: Customer support interaction records are retained for three years following the closure of the relevant support ticket.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

Your Data Rights

As a player using the bae999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact bae999 at [email protected] with the subject line "Data Rights Request" and include your registered username and account email address.

• Right of Access: You have the right to request a copy of the personal data bae999 holds about you, together with information about how that data is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by bae999. For certain data fields, you can update information directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bae999's legal retention obligations. Note that bae999 may be required to retain certain data (for example, financial transaction records) regardless of an erasure request.
• Right to Restrict Processing: You have the right to request that bae999 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bae999 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bae999 relies on legitimate interests as the legal basis for processing. bae999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bae999 aims to respond to all data subject requests within 30 calendar days of receipt. Complex requests may take up to 60 days; you will be informed if an extension is required.

Security Measures

bae999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and bae999 servers is encrypted using TLS 1.2 or higher, enforced across every page and API endpoint on the platform.
• Data encryption at rest: Sensitive data fields — including identity documents, financial records, and authentication credentials — are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to player data is restricted on a strict need-to-know basis. bae999 employees and contractors are granted only the minimum level of data access required to perform their role. All access is logged and audited.
• Multi-factor authentication: Administrative access to systems that process player data requires multi-factor authentication. Players are also offered account security features to protect their bae999 login.
• Regular security assessments: bae999 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses.
• Incident response: bae999 maintains a data breach response procedure. In the event of a security incident that poses a risk to your personal data, bae999 will notify affected players and take all necessary remediation steps without undue delay.

While bae999 takes all reasonable steps to protect your personal data, no system can be guaranteed to be entirely secure. You are responsible for maintaining the security of your own bae999 login credentials and for notifying bae999 immediately if you suspect unauthorised access to your account.

Children's Privacy

The bae999 platform is strictly intended for adults aged 18 years and above. bae999 does not knowingly collect, process, or store personal data belonging to individuals under the age of 18. If bae999 becomes aware that personal data has been collected from an individual under 18, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered on the bae999 platform or provided personal data without your knowledge, please contact [email protected] immediately. bae999 will investigate all such reports promptly and take appropriate action.

Updates to This Privacy Policy

bae999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. When material changes are made to this Policy, bae999 will notify registered players via email and will post a prominent notice on the bae999 platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how bae999 handles your personal data. Your continued use of the bae999 platform after any amendment takes effect constitutes your acceptance of the revised Policy.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how bae999 has handled your personal data, please contact the bae999 Data Protection team using the following details:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Response Time: bae999 aims to respond to all privacy-related enquiries within 14 business days.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

Please include your registered username and the email address associated with your bae999 account in all privacy-related correspondence. This enables bae999 to locate your records and respond accurately to your enquiry.

If you are not satisfied with bae999's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or competent court in your jurisdiction.