bdy99 Privacy Policy

Introduction

📅 Effective Date: 1 January 2026

bdy99 ("the Operator", "we", "us") is committed to protecting the personal data of all players who use the bdy99 Platform ("the Platform"). This Privacy Policy explains what personal information we collect when you register or use the Platform, how we use and store that information, who we share it with, how long we retain it, and what rights you have in relation to your data. This policy applies to the bdy99 website and mobile platform accessible at bdy99.app and any associated subdomains.

By registering an account on the bdy99 Platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not register an account or continue to use the Platform. This Privacy Policy should be read together with bdy99's Terms and Conditions.

What Data We Collect

bdy99 collects personal data from you directly when you register or interact with the Platform, and automatically as you use the Platform. The categories of data we collect are described below.

How We Use Your Data

bdy99 uses the personal data we collect for the following purposes. In each case, the purpose is tied to either the performance of our contract with you, a legal obligation we are required to fulfil, or our legitimate interest in operating a secure and responsible betting and casino platform for Bangladesh players.

• To create and manage your bdy99 account, including registration, login authentication, and account recovery.
• To process deposits and withdrawals, verify payment method ownership, and maintain accurate financial records of your account activity.
• To verify your identity and age in compliance with our KYC obligations, and to prevent the use of the Platform by underage persons or individuals on self-exclusion lists.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other conduct prohibited by the bdy99 Terms and Conditions.
• To provide customer support, respond to your queries, and notify you of important account-related changes such as security alerts, policy updates, or withdrawal status.
• To provide personalised game recommendations, relevant promotional offers, and responsible gaming prompts based on your activity patterns on the Platform.

bdy99 does not use automated decision-making processes that produce legal or similarly significant effects on players based solely on automated processing of personal data, without human review.

Legal Basis for Processing

bdy99 processes your personal data under the following legal bases, which determine why we are entitled to use the data for each stated purpose:

• Contractual necessity: processing required to fulfil our obligations under the bdy99 Terms and Conditions you agreed to when registering your account (account management, deposit and withdrawal processing, game provision).
• Legal obligation: processing required by applicable law, including anti-money-laundering obligations, age verification requirements, and response to valid legal orders from competent authorities.
• Legitimate interests: processing required for fraud prevention, security, responsible gaming monitoring, and the internal analytics necessary to maintain and improve Platform performance and safety — where those interests are not overridden by your data protection rights.
• Consent: where you have provided explicit consent for a specific processing activity, such as receiving promotional communications beyond transactional notifications. You may withdraw this consent at any time by contacting support.

Data Sharing and Disclosure

bdy99 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose in each case:

• Game and platform technology providers: bdy99 uses third-party technology providers to deliver casino games (including Evolution Gaming and Pragmatic Play), process payments, and operate security and fraud-detection systems. These providers receive only the data strictly necessary for their specific service function and are contractually bound to process it in accordance with this Privacy Policy.
• Payment processors: when you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, relevant transaction data is shared with the applicable payment processor to execute the transaction. Payment processors handle this data under their own privacy policies.
• Law enforcement and regulatory authorities: bdy99 will disclose personal data to competent authorities where required by a valid legal order, warrant, or regulatory requirement. We will, where permitted, notify affected players of such disclosure.
• Business successors: in the event of a merger, acquisition, or transfer of all or part of bdy99's operations, player data may be transferred to the successor entity. Players will be notified of any material change to the data controller's identity in advance.

Payment Data and Financial Security

bdy99 does not store full credit or debit card numbers on its own servers. For Visa and Mastercard transactions, card data is handled directly by our PCI-DSS compliant payment processing partners and is tokenised before being passed to our systems. What bdy99 stores is a transaction reference and masked identifier (for example, the last four digits of a card or the registered bKash number), which is sufficient to link transactions to your account without storing sensitive payment credentials.

All financial transactions on the bdy99 Platform — including bKash and Nagad deposits, Rocket and Upay transfers, and card transactions — are transmitted over SSL-encrypted connections. Transaction records are retained in accordance with our data retention policy described below and are used only for account management, dispute resolution, fraud investigation, and regulatory compliance purposes.

Cookies and Technical Tracking

bdy99 uses a limited set of technical cookies and local storage mechanisms to make the Platform function correctly and securely. We do not use third-party advertising cookies or tracking pixels. The types of technical tracking we use are:

• Session cookies: temporary cookies that maintain your login state during a Platform session. These are deleted automatically when you close your browser or the session expires.
• Security cookies: cookies used to detect suspicious login behaviour, manage rate-limiting on authentication requests, and protect against cross-site request forgery. These are strictly necessary for the secure operation of the Platform.
• Preference storage: local storage entries that remember your language preference, display settings, and responsible gaming tool configurations across sessions on the same device.

Because we use only strictly necessary and functional cookies — and no advertising or analytics cookies from third-party networks — we do not display a cookie consent banner. If you wish to manage or delete cookies, you can do so through your mobile browser settings. Note that disabling session cookies will prevent you from logging in to your bdy99 account.

Data Retention

bdy99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal retention requirements that mandate a longer period. The following retention periods apply: account registration and identity data is retained for the duration of your active account plus a minimum of five years following account closure; transaction and financial records are retained for a minimum of five years from the date of the transaction; KYC documentation is retained for the period required under applicable anti-money-laundering regulations.

When data is no longer required for any legal or operational purpose, bdy99 securely deletes or anonymises it. If you close your bdy99 account and request deletion of your data, we will delete or anonymise all data that we are not legally required to retain within a reasonable timeframe. Data subject to a legal hold — for example, data relevant to an ongoing fraud investigation or regulatory inquiry — will be retained until the relevant matter is resolved.

Your Data Rights

As a bdy99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the bdy99 support team through the in-platform support channel or by email at [email protected]. We will respond to verified requests within a reasonable timeframe.

• 👁️

  Right of Access

  You may request a copy of the personal data bdy99 holds about you, including what categories of data we hold, the purposes for which it is processed, and who it has been shared with.

• ✏️

  Right to Rectification

  If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For account details such as your registered name or mobile number, please contact support directly.

• 🗑️

  Right to Erasure

  You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent was the legal basis), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.

• 🚫

  Right to Object

  You have the right to object to processing based on our legitimate interests, including profiling for personalised recommendations. Where you object, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

• 📦

  Right to Data Portability

  Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

Data Security

bdy99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption of all data in transit between your device and our servers, encrypted storage of passwords using industry-standard hashing algorithms, role-based access controls that limit staff access to personal data to those with a legitimate operational need, regular security reviews of our platform infrastructure, and monitoring for unusual account activity patterns that may indicate fraud or unauthorised access.

While bdy99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a material risk to your rights and interests, bdy99 will notify affected players promptly and take immediate remedial action. You are also responsible for keeping your own account credentials secure — do not share your password with anyone, and use a strong, unique password for your bdy99 account.

Children and Minors

The bdy99 Platform is strictly restricted to persons aged 21 and above. bdy99 does not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe that a minor has registered an account on the Platform or that we have inadvertently collected personal data relating to a minor, please contact us immediately at [email protected]. We will take immediate steps to verify the claim and, if confirmed, delete all personal data relating to that minor and close the associated account. Age verification is a core part of our KYC process for this reason.

Changes to This Privacy Policy

bdy99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes, we will update the effective date shown at the top of this page and, where practicable, notify registered players via the Platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the bdy99 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes to this Privacy Policy, you should stop using the Platform and may request deletion of your personal data in accordance with the data rights described above.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how bdy99 handles your personal data, please contact our support team at [email protected]. Include your registered mobile number and a brief description of your query in your message. Our team handles privacy-related requests during Bangladesh Standard Time business hours and aims to provide an initial response within 3 business days.