Privacy Policy — bi999

1. Introduction

bi999 ("we", "us", "our") is committed to protecting the personal data of all users who access and use the bi999 online betting and casino platform ("Platform"). This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the parties with whom we may share it, the measures we take to keep it secure, and the rights available to you as a data subject.

This policy applies to all users of the bi999 Platform, including registered players, visitors who browse the Platform without registering, and any other individuals whose personal data bi999 processes in connection with the operation of its services. It applies to data collected through the bi999 website, any mobile-optimised version of the Platform, and all associated communication channels including email and support messaging.

This Privacy Policy should be read alongside the bi999 Terms & Conditions, which govern your use of the Platform as a whole. In the event of any inconsistency between this policy and the Terms & Conditions with respect to the handling of personal data, this Privacy Policy will take precedence.

2. Data Controller

For the purposes of this Privacy Policy, bi999 acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, bi999 determines the purposes and means by which personal data is processed.

Where bi999 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification services), those providers act as data processors under the instruction of bi999. bi999 requires all data processors to operate under contractual obligations that ensure equivalent standards of data protection.

3. Personal Data We Collect

bi999 collects the following categories of personal data from users of the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including city and country.
• Email address used to create your bi999 account.
• Mobile phone number associated with your account or payment method.
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documentation (utility bill, bank statement, or official government correspondence).
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing your registered mobile number).

3.3 Financial and Transaction Data

• Payment method details (mobile wallet numbers for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank transfers; masked card numbers for Visa and Mastercard).
• Transaction history including deposit amounts, withdrawal requests, and bonus redemptions.
• Account balance history.

3.4 Gaming Activity Data

• Betting history including sports bets, casino game sessions, and RNG game activity.
• Game preferences and navigation patterns within the Platform.
• Responsible gaming settings including deposit limits, session reminders, and self-exclusion records.

3.5 Technical and Device Data

• IP address and approximate geographical location derived from IP data.
• Device type, operating system, and browser version.
• Session duration, pages visited, and referral source.
• Cookie identifiers and similar tracking technologies (see Section 10).

3.6 Communications Data

• Content of support messages, complaints, and feedback submitted to bi999.
• Email correspondence with the bi999 support team.
• Records of promotional communications sent and whether they were opened or acted upon.

bi999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is directly relevant to a responsible gaming assessment requested by the player themselves.

4. How We Collect Your Data

bi999 collects personal data through the following means:

• Direct provision: Data you provide when creating your account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and device data collected automatically when you access the Platform, via cookies and server logs.
• Third-party sources: Identity and fraud risk data received from KYC verification providers and payment processors when you initiate a transaction or verification request.
• Public sources: In limited circumstances, publicly available information may be used to supplement identity verification or fraud investigations.

5. How We Use Your Personal Data

bi999 uses the personal data we collect for the following purposes:

bi999 will not use your personal data for any purpose not listed in this policy without first obtaining your explicit consent, except where required to do so by applicable law.

6. Legal Basis for Processing

bi999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between bi999 and you as a registered player — including account management, transaction processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering checks, age verification, and fraud prevention obligations.
• Legitimate interests: Processing for fraud detection, platform security, and internal analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided clear, informed consent that can be withdrawn at any time.

7. Sharing Your Personal Data

bi999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third party, strictly for the purposes described in this policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Visa/Mastercard processing partners — to facilitate deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist bi999 in verifying player identity and age as required by responsible gaming obligations.
• Fraud prevention and security services: Providers that analyse transaction and behavioural data to detect and prevent fraudulent activity on the Platform.
• Game providers: Third-party game studios (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Habanero, Spribe, Ezugi) may receive session data necessary to deliver their games on the bi999 Platform.
• Legal and regulatory authorities: Where bi999 is required by law, court order, or regulatory instruction to disclose personal data.
• Professional advisors: Legal counsel, auditors, and compliance consultants, under strict confidentiality obligations.

All third-party service providers engaged by bi999 are required to maintain appropriate data security standards and may only process your personal data for the specific, limited purpose for which they have been engaged.

8. Data Retention

bi999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account and for a minimum of five years following account closure, to meet anti-money laundering and fraud prevention requirements.
• KYC documents: Retained for a minimum of five years from the date of the last transaction, in accordance with financial compliance obligations.
• Transaction records: Retained for a minimum of five years following the date of the transaction.
• Support communications: Retained for a minimum of two years from the date of the last communication.
• Marketing consent records: Retained for the duration of active consent and for one year following withdrawal of consent.
• Technical and device logs: Typically retained for 90 days unless required for an active fraud or security investigation.

Once the applicable retention period has expired and there is no further legal basis to retain your data, bi999 will securely delete or anonymise it.

9. Data Security

bi999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the bi999 Platform.
• Encrypted storage of passwords and sensitive authentication credentials. bi999 does not store plain-text passwords.
• PCI-compliant payment processing. Full payment card numbers are never stored on bi999 servers.
• Role-based access controls ensuring that personal data is accessible only to bi999 staff who require it to perform their specific duties.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Two-factor authentication available for player accounts to provide an additional layer of login security.

Despite these measures, no data transmission over the internet or method of electronic storage can be guaranteed to be 100% secure. bi999 will notify affected users and take appropriate remedial action in the event of a data breach that is likely to result in a risk to their rights and freedoms.

10. Cookies and Tracking Technologies

bi999 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and understand how players interact with our services. A cookie is a small text file stored on your device by your browser when you visit a website.

10.1 Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly. These include session cookies that maintain your logged-in state, security tokens, and preference settings. The Platform cannot operate without essential cookies.
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling bi999 to identify areas for improvement. These do not identify you personally.
• Functional cookies: Store optional preferences such as your chosen language, display settings, and previously entered username (not password) for convenience on return visits.

10.2 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Most browsers allow you to block or delete cookies via the Privacy or Security settings menu. Please note that disabling essential cookies will impair the functionality of the bi999 Platform and may prevent you from logging in or completing transactions. Disabling analytical or functional cookies will not affect your ability to use the core Platform features.

bi999 does not use third-party advertising cookies or behavioural advertising tracking technologies that profile you for targeted advertising on external websites.

11. Your Data Rights

As a user of the bi999 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact bi999 at [email protected] with the subject line "Data Rights Request — [Your Right]":

• Right of access: You may request a copy of the personal data bi999 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by bi999.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bi999's legal retention obligations. Some data may be retained as required by law even following an erasure request.
• Right to restriction: You may request that bi999 restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where bi999 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on bi999's legitimate interests where you believe your rights and freedoms override those interests.

bi999 will acknowledge all data rights requests within 5 business days and aim to resolve them within 30 days. For complex or multiple requests, bi999 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

12. Marketing Communications

With your consent at the time of registration, bi999 may send you promotional emails, platform notifications, and seasonal offers related to bi999 products and services. These may include welcome bonuses, reload offers, Eid promotions, BPL cricket specials, and other time-limited campaigns relevant to Bangladesh-market players.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by bi999.
• Updating your communication preferences in your bi999 account settings.
• Sending a written opt-out request to [email protected].

Opting out of marketing communications does not affect the delivery of essential transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or responses to support queries.

13. Minors and Age Restriction

The bi999 Platform is strictly intended for adults aged 21 and above. bi999 does not knowingly collect personal data from individuals under the age of 21. If bi999 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all data will be deleted, and any deposits will be returned to the source payment method subject to verification.

If you are a parent or guardian and believe that a minor in your care has registered with bi999 or provided their personal data to the Platform, please contact [email protected] immediately. Include as much detail as possible to allow bi999 to identify and remove the relevant account promptly.

14. Changes to This Privacy Policy

bi999 reserves the right to update this Privacy Policy at any time. The most current version will always be available at bi999.io/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Where changes to this policy are material — for example, a change to the categories of data we collect, the parties with whom we share data, or the purposes for which data is used — bi999 will notify registered players via email at least 14 days before the changes take effect. Continued use of the bi999 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

15. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how bi999 has handled your personal data, please contact us using the details below:

bi999 aims to acknowledge all privacy-related complaints within 5 business days and to provide a substantive response within 30 days. If you are not satisfied with bi999's response to a privacy complaint, you may seek further recourse through the applicable data protection authority or legal channels in your jurisdiction.