bz99 Privacy Policy

When you register for and use the bz99 platform, we collect certain categories of personal data that are necessary to provide our services, comply with our legal obligations, and maintain the security and integrity of the platform. The categories of data we collect are described below.

Registration and Identity Data

When you open a bz99 account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. Where identity verification is required — either as part of the standard registration process or in response to a specific compliance check — we may also collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, together with supporting proof-of-address documentation.

Financial Data

To process deposits and withdrawals, bz99 collects details of the payment instruments you use, including mobile money account references for bKash, Nagad, Rocket, and Upay, and masked card details for Visa and Mastercard transactions. We do not store full card numbers on our servers. Payment data is handled in accordance with applicable payment security standards and processed via our payment service partners.

Transaction and Activity Data

We maintain records of all deposit and withdrawal transactions, wagers placed, games played, bonuses claimed, and promotional activity associated with your account. This data is retained for regulatory compliance purposes and to enable accurate account management and dispute resolution.

Technical and Device Data

When you access bz99, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for fraud prevention, platform security, and service analytics. It is not used to identify you personally beyond what is necessary for those purposes.

Communications Data

If you contact bz99 customer support via email, live chat, or any other channel, we retain records of those communications — including their content and timestamps — to enable follow-up, quality assurance, and dispute resolution. These records are stored securely and accessed only by authorised support and compliance personnel.

bz99 uses personal data only for purposes that are consistent with the reasons for which it was originally collected. We do not repurpose your data for unrelated activities without first providing you with appropriate notice and, where required, obtaining your consent. The primary purposes for which we use your data are set out below.

bz99 does not use automated decision-making processes that produce legally significant or similarly impactful outcomes for members without human oversight. Where automated systems are used — for example, in fraud scoring or responsible gaming alerts — the outputs are reviewed by qualified personnel before any account action is taken.

bz99 does not sell or rent your personal data to any third party. We may share your data with carefully selected third parties only to the extent necessary to operate the platform and fulfil our legal obligations. All third parties who receive personal data from bz99 are contractually required to handle that data securely and to use it solely for the purposes for which it was disclosed.

Payment Service Providers

To process deposits and withdrawals, bz99 shares necessary financial data with our authorised payment partners, including mobile money operators (bKash, Nagad, Rocket, Upay) and card scheme processors (Visa, Mastercard). These partners receive only the data required to complete the specific transaction and are bound by their own regulatory obligations regarding data security.

Game Studios and Content Providers

When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, or Habanero — certain session data (including your account identifier and wager amounts) is shared with that studio to facilitate gameplay and record results. Game studios do not receive your full identity or financial data and are prohibited from using session data for any purpose other than game provision.

Identity Verification Services

Where bz99 uses third-party KYC (Know Your Customer) service providers to verify identity documents, your identity data is transmitted to those providers under strict data processing agreements. Verification results are returned to bz99 and the original documents are not retained by the verification provider beyond the period required to complete the check.

Legal and Regulatory Disclosure

bz99 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the safety of members or the public, prevent fraud, or enforce our Terms & Conditions. Such disclosures are made only to the extent required and are documented internally.

bz99 uses cookies and similar browser-based technologies to operate the platform effectively, maintain your session, remember your preferences, and collect anonymous analytics data that helps us understand how members use the site. This section explains the types of cookies we use and how you can manage them.

Essential Cookies

Essential cookies are required for the platform to function. They enable core features such as logging in, maintaining your authenticated session, retaining items in your wallet during navigation, and ensuring platform security. These cookies cannot be disabled without impairing your ability to use bz99. They do not collect personal data beyond what is strictly necessary for session management.

Functional Cookies

Functional cookies remember your preferences — such as your chosen language, display settings, and recently viewed games — so that you do not need to reconfigure them each time you visit. These cookies improve your experience but are not essential to core platform operation. You may disable them without losing access to bz99, though some personalisation features will not be available.

Analytics Cookies

bz99 uses anonymised analytics cookies to collect aggregate data about how pages are visited, which features are used most frequently, and where members encounter difficulties. This data is used exclusively to improve the platform and is never linked back to individual identities. Analytics data is processed in aggregated, anonymised form only.

Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Instructions for doing so vary by browser and are available in your browser's help documentation. Please note that deleting essential cookies will log you out of your bz99 account and may affect platform functionality until a new session is established.

bz99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods we apply to different categories of data are summarised below.

• Account and identity data: Retained for the duration of your active account membership and for a minimum of five years following account closure, in order to satisfy anti-money laundering (AML) record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC and verification documents: Retained for the period required by applicable KYC regulations, typically five years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for three years from the date of the most recent communication in a given support thread, or longer where a communication is relevant to an ongoing dispute or legal matter.
• Technical and device logs: Retained for up to 12 months for security and fraud analysis purposes, after which they are anonymised or deleted.
• Marketing preferences and consent records: Retained for the duration of your account membership and for one year following account closure, to demonstrate compliance with consent obligations.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical purposes.

bz99 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework is reviewed and updated on a regular basis to address evolving threats and best practices in the industry.

Technical Safeguards

• 256-bit SSL/TLS encryption for all data in transit between member devices and bz99 servers.
• Encryption at rest for sensitive personal and financial data stored on bz99 infrastructure.
• Two-factor authentication (2FA) available for all member accounts via SMS OTP, strongly recommended for all members.
• Firewall and intrusion detection systems monitoring network traffic for anomalous activity around the clock.
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Staff are granted access only to the data required to perform their specific role.
• All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Data security incidents are assessed promptly. Where a breach poses a risk to members, affected individuals are notified without undue delay.

As a bz99 member, you have a number of rights in relation to the personal data we hold about you. bz99 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please submit a written request to [email protected] from the email address registered to your account. We will respond to all verified requests within a reasonable timeframe.

Right of Access

You have the right to request a copy of the personal data that bz99 holds about you, together with information about how it is used and with whom it is shared. This is commonly referred to as a Subject Access Request (SAR). bz99 will provide this information free of charge in a structured, commonly used format.

Right to Rectification

If any personal data that bz99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where bz99 has shared the incorrect data with third parties, we will take reasonable steps to inform those parties of the correction.

Right to Erasure

You may request that bz99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing is based, or where processing is otherwise unlawful. Please note that erasure requests cannot always be fulfilled in full where bz99 has a legal obligation to retain certain data — for example, AML record-keeping requirements. In such cases, we will explain the applicable retention obligation clearly.

Right to Restrict Processing

You have the right to request that bz99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.

Right to Withdraw Consent

Where bz99 processes your data on the basis of consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bz99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. When changes are made, the revised policy will be published on this page with an updated effective date. Where changes are material — meaning they significantly affect how we use your data or the rights available to you — bz99 will notify registered members via their registered email address prior to the changes taking effect.

We encourage all members to review this Privacy Policy periodically to stay informed about how bz99 handles personal data. Your continued use of the bz99 platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should stop using the platform and contact us to close your account.

Contact the bz99 Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how bz99 handles your personal data, please contact us. We are committed to resolving privacy-related concerns promptly and fairly.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy queries: "Privacy Enquiry — [Your Full Name]"
• Response time: Within 5 Bangladesh Standard Time (BST, UTC+6) business days for standard queries; within 30 days for formal Subject Access Requests.