bge99 Privacy Policy —
Your Data, Your Rights

When you interact with bge99 — whether by creating an account, making a deposit, placing a bet, or simply browsing the platform — we may collect the following categories of personal data:

1.1 Identity & Contact Data

• Full legal name (as it appears on your national identity card, passport, or driving licence)
• Date of birth (for mandatory age verification)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Mobile phone number
• Email address
• Copies of identity documents submitted during KYC verification

1.2 Account & Transaction Data

• Username and encrypted password hash
• Account registration date and login history (timestamps and IP addresses)
• Deposit records: amount in BDT, payment method (bKash, Nagad, Rocket, Upay, bank transfer), transaction reference, and date
• Withdrawal records: amount, destination account identifier (mobile wallet number or bank account, stored in masked format), and settlement date
• Betting and gaming history: game titles, wager amounts, outcomes, and session durations
• Bonus and promotional participation records

1.3 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Session duration, pages visited, and navigation paths within the platform
• Referring URL (the page you visited immediately before arriving at bge99.app)

1.4 Communications Data

• Content of live chat conversations with bge99 support agents
• Email correspondence sent to or received from [email protected]
• Records of marketing communications sent to you and your response to them (opened, clicked, unsubscribed)

bge99 does not collect or store full payment card numbers. Where Visa or Mastercard transactions are processed, card data is handled exclusively by our PCI-DSS compliant payment processor and is never transmitted to or stored on bge99 servers.

bge99 uses your personal data exclusively for the purposes described in the table below. We do not sell personal data to third parties for their own marketing purposes, and we do not use your data to make fully automated decisions that produce significant legal effects without human oversight.

Where bge99 relies on your consent to process data — for example, to send you promotional emails about upcoming BPL betting offers or Eid bonus campaigns — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bge99 processes personal data under one or more of the following legal bases. Where more than one basis applies to a given processing activity, all applicable bases are applied concurrently.

• Contract performance: The majority of data processing at bge99 is necessary to provide the services you have contracted us to deliver — maintaining your account, executing deposits and withdrawals, settling bets, and providing customer support. Without this processing, bge99 cannot deliver its core services.
• Legal obligation: bge99 is required by applicable law to carry out certain processing activities regardless of your preferences. These include KYC identity verification, age verification, anti-money-laundering transaction monitoring, record-keeping for a minimum period of five (5) years, and reporting obligations to relevant financial intelligence authorities.
• Legitimate interests: bge99 may process data where it has a legitimate business interest that is not overridden by your interests or fundamental rights. Examples include: fraud prevention, network and information security monitoring, internal business analytics, and quality assurance of customer support interactions.
• Consent: Where bge99 relies on consent — such as for sending you marketing messages about promotions, new game releases, or seasonal offers — you will be presented with a clear, affirmative opt-in at the time of registration or subsequently through account settings. Consent records are logged with timestamps.

bge99 does not sell, rent, or trade your personal data to any third party for that party's own commercial or marketing purposes. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Service Providers (Data Processors)

bge99 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These providers may not use your data for any purpose other than delivering the contracted service to bge99. Current categories of processor include:

• Payment processors: Entities that facilitate bKash, Nagad, Rocket, Upay, and card-based transactions. These processors receive only the minimum data required to execute the specific transaction.
• KYC and identity verification providers: Third-party services that assist in verifying identity documents and performing database checks required for age and AML compliance.
• Game content providers: Platforms such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe operate their own game servers. Game session data (wager amounts, outcomes, timestamps) is shared with the relevant provider to resolve disputes and ensure fair play.
• Cloud hosting and infrastructure: bge99 uses reputable cloud infrastructure providers to host platform data. All data remains encrypted and access-controlled.
• Customer support tools: Live chat platform providers receive conversation content solely for the purpose of delivering and improving support services.

4.2 Legal and Regulatory Disclosures

bge99 may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, regulation, legal process, or enforceable governmental request. bge99 will, to the extent permitted by law, notify you of such a disclosure if it relates specifically to your account.

4.3 Business Transfers

In the event that bge99 undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of its assets, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered on your account prior to any such transfer becoming effective, and the acquiring entity will be bound by the terms of this Privacy Policy with respect to your data.

bge99 uses cookies and similar tracking technologies (collectively "cookies") to operate the platform, remember your preferences, analyse traffic patterns, and support fraud detection systems. A cookie is a small text file placed on your device when you visit a website.

The cookies used on bge99.app fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be switched off. They include session authentication tokens that keep you logged in during your visit, security cookies that prevent cross-site request forgery, and load-balancing cookies that ensure your requests are directed to a consistent server. No personal data is stored in these cookies beyond an anonymous session identifier.
• Functional Cookies: These cookies remember choices you make — such as your preferred language or display settings — so the platform can provide an enhanced, personalised experience. Disabling these cookies may affect the quality of your experience on the platform.
• Analytics Cookies: bge99 uses aggregated, anonymised analytics data to understand how players navigate the platform, which features are used most frequently, and where technical errors occur. This data is used solely for platform improvement purposes and does not identify individual players.
• Fraud Detection Cookies: These cookies support bge99's real-time fraud prevention and responsible gaming monitoring systems by recording behavioural patterns within a session. They form part of our legal obligation to operate a safe and compliant platform.

bge99 does not use third-party advertising or retargeting cookies. We do not place cookies that track your activity across other websites for advertising profiling purposes. The bge99 cookie set is confined to the bge99.app domain.

bge99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory retention obligations. The following retention periods apply as a general guide:

When a retention period expires, personal data is either securely deleted from bge99 systems or anonymised such that it can no longer be attributed to any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

If your account is closed — whether at your request or by bge99 — your data is not immediately deleted. It is retained for the applicable periods listed above in order to meet our legal obligations. During this post-closure retention period, your data will not be used for any active marketing or service provision purposes.

As a bge99 player, you hold the following rights with respect to your personal data. bge99 is committed to honouring these rights promptly and without unnecessary friction.

• Right of Access: You may request a copy of all personal data bge99 holds about you at any time. We will provide this within 30 days of receiving a verified request. The response will include a description of the data categories held, the purposes for which each category is processed, and the retention period applied.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor account details (such as your contact phone number) may be updated directly through your account profile. Changes to identity data (name, date of birth) require supporting documentation and will be processed by our compliance team.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. Note that bge99 cannot delete data that we are legally required to retain — such as transaction records subject to five-year AML retention obligations. In such cases we will explain what data must be retained and for how long.
• Right to Restriction of Processing: You may request that bge99 restrict processing of your data while a rectification request is being assessed, or while you object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service.
• Right to Object: You may object at any time to processing of your personal data where bge99 relies on legitimate interests as the legal basis. You have an absolute right to object to processing for direct marketing purposes, and bge99 will cease such processing immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, contact the bge99 support team via 24/7 live chat on the platform or by email at [email protected]. We will acknowledge all privacy requests within 48 hours and provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days but will notify you of the extension and its reason within the initial 30-day window.

bge99 implements a layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational measures include, but are not limited to, the following:

• Encryption in transit: All data transmitted between your browser or device and bge99 servers is encrypted using TLS 1.3. The bge99.app domain enforces HTTPS-only access; HTTP connections are automatically redirected.
• Encryption at rest: Personal data and transaction records stored in bge99 databases are encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management service and rotated on a scheduled basis.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis using role-based access control (RBAC). All internal access is logged and audited. Privileged access requires multi-factor authentication.
• Password security: Player account passwords are never stored in plain text. bge99 stores only a salted cryptographic hash of each password using a recognised slow-hashing algorithm designed to resist brute-force attacks.
• Penetration testing: bge99 commissions regular security assessments and penetration tests of the platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident response: bge99 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to the rights and freedoms of players, affected individuals will be notified without undue delay and in accordance with applicable notification requirements.
• Staff training: All bge99 staff with access to personal data undergo mandatory data protection and security awareness training upon joining and on an annual basis thereafter.

While bge99 takes all reasonable and technically appropriate steps to protect your personal data, no system is completely immune to all possible security threats. Players are encouraged to use strong, unique passwords for their bge99 account, enable any available two-factor authentication features, and report any suspicious account activity to our support team immediately via live chat.

This Privacy Policy was last reviewed and updated on 1 January 2026. bge99 reserves the right to update this policy at any time. Material changes will be communicated to registered players via the email address on their account at least 14 days before the changes take effect. Continued use of the bge99 platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

For all privacy-related enquiries, contact our support team via 24/7 live chat on the bge99 platform, or by email at [email protected]. We aim to respond to all privacy queries within 48 hours.