bcd99 Privacy Policy

1. Introduction

bcd99 ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at https://bcd99.io. This Privacy Policy describes how bcd99 collects, processes, stores, transfers, and protects the personal data of individuals ("you", "the Player", "the User") who access or use any part of the bcd99 platform, including the website, mobile interface, live chat support system, and any associated communications channels.

bcd99 is committed to handling personal data with transparency, integrity, and respect for the privacy of every player. Our approach to data protection is built on four principles: collect only what is necessary, use it only for stated purposes, protect it with appropriate technical and organisational safeguards, and make it easy for players to understand and exercise their rights.

This policy should be read in conjunction with the bcd99 Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions that are relevant to how we process your personal data.

2. Data Controller

bcd99 acts as the data controller in respect of all personal data collected through the bcd99 platform. As data controller, bcd99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data-related enquiries, requests, or complaints, you may contact us using the details provided in Section 16 of this policy.

3. Data We Collect

bcd99 collects and processes the following categories of personal data:

3.1 Identity Data

• Full legal name
• Date of birth
• Gender (where provided)
• Government-issued photo identification (National ID, passport, or driving licence number)

3.2 Contact Data

• Mobile telephone number (primary account identifier)
• Email address
• Residential address (where provided during KYC)
• City and district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

3.3 Financial Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers
• Visa or Mastercard details (last four digits and expiry, not full card numbers)
• Deposit and withdrawal transaction records
• Account balance history

3.4 Technical Data

• IP address at time of login and transaction
• Device type, model, and operating system
• Browser type and version
• Time zone and locale settings
• Session identifiers and authentication tokens

3.5 Usage Data

• Games played, bet amounts, wagering history, and results
• Session start and end times, duration, and frequency
• Pages visited and navigation paths within the platform
• Bonus claims, promotional activity, and self-exclusion or limit-setting actions

3.6 Communications Data

• Live chat transcripts with bcd99 support agents
• Email correspondence
• WhatsApp messages sent to the bcd99 support number
• Complaint and dispute records

4. How We Collect Your Data

bcd99 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or submitting any form on the platform.
• Automated technologies: Cookies, server logs, and session-tracking technologies that record technical and usage data when you interact with the bcd99 website or app.
• Third-party sources: Identity verification and fraud-prevention partners who provide data checks against external databases to confirm the accuracy of information you have provided.
• Payment providers: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and card payment processors following deposit or withdrawal instructions.

5. How We Use Your Data

bcd99 uses your personal data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Processing deposits and withdrawals	Identity, Contact, Financial
KYC and age verification	Identity, Contact, Financial
Fraud detection and prevention	Identity, Technical, Financial, Usage
Responsible gaming monitoring	Usage, Identity
Customer support	Identity, Contact, Communications
Personalising platform experience	Usage, Technical
Sending promotional communications (with consent)	Contact, Usage
Platform analytics and improvement	Technical, Usage
Legal and regulatory compliance	All categories as required

6. Legal Basis for Processing

bcd99 processes personal data on one or more of the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing that is required to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws, including KYC obligations, anti-money-laundering requirements, and financial record-keeping rules.
• Legitimate interests: Processing carried out in pursuit of bcd99's legitimate business interests, including fraud prevention, platform security, and analytics, provided that these interests are not overridden by your rights and interests.
• Consent: Processing for purposes such as sending marketing communications, where we have obtained your explicit, freely given, and withdrawable consent prior to processing.

7. Sharing Your Personal Data

bcd99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum financial data required to process your transactions.
• Identity verification services: Third-party KYC and age-verification platforms receive identity data solely for the purpose of completing verification checks.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive pseudonymised session data required to deliver their games correctly within the bcd99 platform.
• Customer support tools: Live chat and helpdesk platform providers may process support interaction data to facilitate our customer service operations.
• Fraud prevention and security: Specialist third-party services may receive technical and transaction data to assist in identifying and preventing fraudulent activity.
• Legal and regulatory authorities: bcd99 will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction, and will do so to the minimum extent necessary to comply.

All third-party service providers engaged by bcd99 are subject to contractual obligations requiring them to process personal data only on our documented instructions, to apply appropriate security measures, and not to use player data for any purpose other than the specific service they provide to bcd99.

8. International Data Transfers

Some of the third-party service providers used by bcd99 operate servers or personnel outside Bangladesh. Where personal data is transferred internationally, bcd99 ensures that appropriate contractual, technical, and organisational safeguards are in place to protect that data to a standard equivalent to the protections described in this policy.

If you would like further information about the safeguards applied to any specific international transfer, please contact us using the details in Section 16.

9. Data Retention

bcd99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction in accordance with standard financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five years following account closure.
• Support communications: Retained for three years from the date of each interaction, or longer if the communication is relevant to an ongoing dispute or investigation.
• Marketing consent records: Retained until you withdraw consent, plus a period of two years as evidence of the consent having been given.
• Technical and session logs: Retained for up to 24 months on a rolling basis.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any individual.

10. Security Measures

bcd99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption on all data transmissions between your device and the bcd99 platform.
• Tokenisation of sensitive payment credentials so that raw financial data is not stored on bcd99 servers.
• Password hashing using industry-standard algorithms — bcd99 does not store plain-text passwords.
• Role-based access controls ensuring that employees can only access personal data relevant to their specific job function.
• Regular internal security reviews and vulnerability assessments of the bcd99 platform infrastructure.
• Mandatory data protection training for all personnel with access to personal data.

While bcd99 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is entirely free of risk. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised use of your account.

11. Cookies and Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. bcd99 uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the platform, remember your preferences, maintain your login session, and collect analytics data about how the platform is used.

11.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, stake defaults, and game display options.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and interact with the bcd99 platform, used solely to improve the user experience.
• Session cookies: Temporary cookies that expire when you close your browser, used to track your activity within a single visit.

11.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling functional cookies may result in some preferences not being saved between sessions.

12. Your Data Protection Rights

As a player using the bcd99 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 16.

• Right of access: You may request a copy of all personal data bcd99 holds about you. We will respond to verified access requests within 30 calendar days.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. Where possible, update your details directly through your account profile.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and no overriding legitimate grounds exist. This right is subject to legal retention obligations that may require us to retain certain records.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, for example while a correction request is under review.
• Right to object: You may object to processing based on legitimate interests, including profiling for personalisation purposes. You may also object to direct marketing at any time.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

13. Marketing Communications

bcd99 may send you promotional communications about bonuses, new games, seasonal offers (such as Eid, Pohela Boishakh, or BPL cricket promotions), and other platform updates, but only where you have explicitly consented to receive such communications during registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your bcd99 account settings, or
• Contacting our support team via live chat or at [email protected] and requesting removal from our marketing list.

Withdrawing marketing consent does not affect your ability to continue using your bcd99 account or to receive essential service communications (such as deposit confirmations, withdrawal notifications, security alerts, or KYC requests), which are sent on the basis of contractual necessity rather than consent.

14. Minors and Data Protection

The bcd99 platform is strictly intended for adults aged 21 years and over. bcd99 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Any account found to have been opened by a person under 21 will be closed immediately and all associated data will be deleted, subject to any legal obligations that may require limited retention of records relating to the underage registration event itself.

If you have reason to believe that a minor has registered an account on the bcd99 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

15. Changes to This Privacy Policy

bcd99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Effective" date at the top of this document and, where appropriate, notify active account holders via email or an in-platform notification. The most current version of this policy will always be available at https://bcd99.io/privacy-policy.

Continued use of the bcd99 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the platform and may request account closure.

16. Contact Us

For all privacy-related requests, questions, or complaints — including requests to access, correct, delete, or port your personal data — please contact the bcd99 data protection team using the following details:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week through the bcd99 platform.
• WhatsApp: +880 1700 000000 — available 08:00 to 24:00 Bangladesh Standard Time (BST, UTC+6).

We will acknowledge all data rights requests within 5 business days and will aim to provide a full response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

Last updated: January 2026. This Privacy Policy is effective from the date stated above and supersedes all previous versions. bcd99 is committed to reviewing and updating this document on at least an annual basis to reflect changes in our data practices, applicable laws, and the services we provide.