bg999 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy applies to all personal data collected by bg999 through the bg999.cam website and any associated mobile platform. It describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, the period for which we retain it, and the rights available to you in relation to your personal data. Please read this policy carefully before registering an account or using the bg999 platform.

For the purposes of this Privacy Policy, bg999 acts as the data controller in respect of the personal data of players registered on the bg999 platform. If you have any questions about how bg999 handles your personal data, you may contact us at [email protected] at any time.

When you register an account, use the bg999 platform, make a deposit, request a withdrawal, or contact bg999 support, bg999 may collect the following categories of personal data:

• Identity data: your full name, date of birth, and National ID card details collected during KYC verification.
• Contact data: your mobile phone number provided at registration, and any email address you choose to provide when contacting support.
• Financial data: your deposit and withdrawal history, the mobile wallet numbers or card details associated with transactions (stored in tokenised form only — bg999 does not store raw card numbers), and account balances.
• Technical data: your device type, operating system, browser type and version, IP address, and session timestamps collected automatically when you access the bg999 platform.
• Usage data: your game history, bet amounts, bonus claims, session duration, and navigation behaviour within the bg999 platform. This data is used for fraud detection, responsible gaming monitoring, and platform improvement.

bg999 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) and does not request this information from players at any stage. If you contact bg999 support and voluntarily disclose sensitive information in the context of a responsible gaming enquiry, that information will be treated with the highest level of confidentiality and used only for the purpose of assisting you.

bg999 processes your personal data for the following purposes, each of which is necessary to operate the platform and deliver the services you have requested:

• Account management: to create and maintain your bg999 account, verify your identity, and manage your account settings including deposit limits and self-exclusion preferences.
• Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain records of your transaction history as required for financial compliance.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct; and to protect the security and integrity of your account.
• Responsible gaming: to monitor your gaming patterns and account activity for indicators of problem gambling, and to action any self-exclusion, deposit limit, or cooling-off request you make.
• Customer support: to respond to your enquiries, process your complaints, and communicate with you about account-related matters including security alerts, policy updates, and payment confirmations.
• Platform improvement: to analyse aggregated usage data and technical data to identify and fix bugs, optimise platform performance, and improve the overall player experience. This analysis is performed on anonymised or aggregated data wherever possible.

bg999 is required to verify the identity of players before approving withdrawal requests. This process — commonly referred to as Know Your Customer or KYC — requires you to submit a scan or photograph of a valid Bangladeshi National ID card and a clear selfie photograph for facial comparison. These documents are reviewed by bg999's compliance team and stored securely in encrypted form. bg999 does not share your KYC documents with any party other than those directly involved in the verification process.

KYC verification is a one-time requirement per account. Once your account has been verified, you will not be required to submit the same documents again unless bg999 has reason to believe that the information previously submitted has changed or was inaccurate. bg999 may request updated documentation in the event of a name change, if a document has expired, or if a fraud investigation requires re-verification. KYC documents are retained for the period described in Section 8 of this Privacy Policy.

When you make a deposit or withdrawal, bg999 receives confirmation data from your payment provider (bKash, Nagad, Rocket, Upay, or your card network). For mobile wallet transactions, bg999 records the mobile wallet number used, the transaction reference number, the amount, and the timestamp. For card transactions, bg999 records only a tokenised representation of your card — the full 16-digit card number is never stored on bg999 servers. All payment data is transmitted over SSL-encrypted connections.

bg999 does not process card payments directly. Card transactions are routed through a PCI-DSS compliant payment gateway. bg999 has no access to your raw card data at any point in the transaction process. If you believe an unauthorised transaction has been made on your account, contact bg999 support at [email protected] immediately and your account will be suspended pending investigation.

bg999 uses cookies and similar tracking technologies to operate the platform, maintain your session, and collect technical data as described in Section 1 of this Privacy Policy. The cookies used by bg999 fall into the following categories:

• Strictly necessary cookies: These are required for the platform to function. They keep you logged in between page loads, maintain your session security token, and remember your language preference. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
• Functional cookies: These remember preferences such as your last-used game category and notification settings to improve your experience on return visits. They do not track you across third-party websites.
• Analytics cookies: bg999 uses anonymised analytics data to understand aggregate platform usage patterns — for example, which game categories are most popular among players in Dhaka versus Chittagong, or what average session duration looks like on different device types. This data does not identify you personally.

You can control cookies through your browser settings. Disabling functional or analytics cookies may reduce the quality of your experience on the bg999 platform but will not prevent you from using core features such as depositing, placing bets, or withdrawing funds. bg999 does not use third-party advertising cookies or tracking pixels.

bg999 does not sell your personal data. bg999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary to deliver the service or comply with a legal obligation:

• Payment service providers: bg999 shares transaction reference data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any payment gateway required to process your deposit or withdrawal. These providers process your payment data under their own privacy policies and are bound by their applicable regulatory obligations.
• KYC and fraud prevention partners: bg999 may use a third-party identity verification service to assist with KYC document review. Any such partner is bound by a data processing agreement that restricts their use of your data to the verification purpose only and prohibits them from using your data for any other purpose.
• Law enforcement and regulatory authorities: bg999 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal obligation, court order, or where bg999 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or imminent harm to a person.
• Game content providers: bg999 integrates games from licensed providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. These providers may receive anonymised session data (such as game round identifiers and stake amounts) as part of the technical integration required to deliver their games. They do not receive your name, mobile number, or payment details.

bg999 does not share your personal data with any other third party except as described above. In particular, bg999 does not share your data with advertising networks, data brokers, social media platforms, or any party for the purpose of direct marketing without your explicit consent.

bg999 retains your personal data for as long as your account is active and for a period following account closure as required to meet our legal and regulatory obligations. Specifically: account registration data and KYC documents are retained for a minimum of five years following account closure; financial transaction records are retained for a minimum of five years from the date of the transaction; communications with bg999 support (including chat logs and email correspondence) are retained for two years. After the applicable retention period has expired, your personal data is securely deleted or anonymised so that it can no longer be attributed to you.

Where bg999 is required by law to retain data beyond the periods described above — for example, in connection with an ongoing investigation, litigation, or regulatory audit — bg999 will retain the relevant data for the duration of that requirement and delete it promptly once the legal obligation has been discharged.

As a player on the bg999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact bg999 support at [email protected] with the subject line "Data Rights Request" and include your registered mobile number so that we can locate your account:

• Right of access: You may request a copy of the personal data that bg999 holds about you. bg999 will respond to a verified access request within 30 days.
• Right to rectification: If any personal data that bg999 holds about you is inaccurate or incomplete, you may request that it be corrected. bg999 will process a verified rectification request within 14 days.
• Right to erasure: You may request that bg999 delete your personal data where bg999 is no longer required to retain it under applicable law or for the purpose for which it was collected. bg999 will assess erasure requests against its legal retention obligations and notify you of the outcome.
• Right to restriction: You may request that bg999 restrict processing of your personal data — for example, while the accuracy of data is being contested or while a deletion request is being assessed.
• Right to object: You may object to bg999's processing of your personal data for purposes other than those strictly necessary to operate your account and fulfil legal obligations — for example, analytics. bg999 will honour a valid objection unless it has compelling legitimate grounds that override your interests.

bg999 will verify your identity before processing any data rights request. This is to protect your data from being disclosed to or deleted by an unauthorised person. Verification is typically done by confirming your registered mobile number and asking you to provide the last four digits of the National ID number used for KYC. bg999 aims to respond to all data rights requests within 30 days of receipt of a verified request.

bg999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and the bg999 platform; encrypted storage of sensitive data including KYC documents and financial records; access controls that restrict internal access to personal data on a strict need-to-know basis; and regular security reviews of the platform infrastructure.

No data transmission over the internet can be guaranteed to be 100% secure. While bg999 takes all reasonable steps to protect your personal data, bg999 cannot guarantee the absolute security of data transmitted to the platform. If you suspect that your account has been compromised, you should change your password immediately and contact bg999 support at [email protected] without delay.

The bg999 platform is strictly for adults aged 21 and above. bg999 does not knowingly collect personal data from any person under the age of 21. If bg999 discovers that personal data has been collected from a person under the age of 21, that account will be closed immediately, any net deposits will be returned, any winnings will be forfeited, and the personal data will be deleted as soon as reasonably practicable. If you are a parent or guardian and believe that a minor in your care has registered an account at bg999, please contact bg999 support at [email protected] immediately.

bg999 reserves the right to update this Privacy Policy at any time. When a material change is made, bg999 will update the "Last updated" date at the top of this page. Where the change is significant — for example, a new category of data sharing or a new processing purpose — bg999 will take reasonable steps to bring the change to your attention, which may include an in-platform notification or a message to your registered mobile number. Your continued use of the bg999 platform after the effective date of a change constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you should stop using the platform and may contact bg999 support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which bg999 processes your personal data, please contact the bg999 support team at the email address below. All data-related enquiries are treated with confidentiality and will be handled by a member of our compliance team.

Support email: [email protected] — when submitting a data rights request, please include your registered mobile number and use the subject line "Data Rights Request" so your enquiry is routed to the correct team without delay.