99cbaji Privacy Policy

1. Data We Collect

99cbaji collects personal data through several distinct channels. Understanding what we collect — and why — is the foundation of a transparent data relationship with our players. We collect only the minimum data necessary to deliver our services safely and in compliance with industry standards.

1.1 Registration Data

When you create a 99cbaji account, we collect the following information:

• Full legal name — used for identity verification and KYC purposes;
• Date of birth — used to confirm you meet the 18+ age requirement;
• Mobile number — used for account communication and two-factor authentication;
• Email address — used for account notifications, password recovery, and promotional communications (where consent is given);
• Residential address — collected during enhanced KYC verification where required.

1.2 Identity Verification (KYC) Data

To comply with responsible gaming obligations and to prevent fraud and money laundering, 99cbaji may request documentary evidence of your identity before processing withdrawals or upon account review. Acceptable documents include:

• Bangladesh National Identity Card (NID);
• Valid passport;
• Birth registration certificate (for supplementary age verification only).

Images of these documents are transmitted securely, stored in encrypted form, and used exclusively for verification purposes. They are not shared with third parties except where required by law or by our contracted KYC verification service provider.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, 99cbaji records transactional information including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), the transaction amount in Bangladeshi Taka (BDT), the date and time of the transaction, and a reference number. We do not store full mobile banking PINs, bKash wallet passwords, or full card numbers. Sensitive payment credentials are handled exclusively by our third-party payment processing partners.

1.4 Technical and Usage Data

When you access the 99cbaji platform, our servers automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, features used, and session duration;
• Referral source (how you arrived at the 99cbaji website).

This technical data is used to maintain platform security, prevent fraud, improve the user experience, and generate aggregate analytics. It is not used to identify you individually unless a security investigation requires it.

1.5 Communications Data

When you contact 99cbaji customer support via email or live chat, we retain records of those communications including the content of messages and the dates and times of correspondence. This data is used to resolve your enquiry, maintain a support history, and improve the quality of our service.

2. How We Use Your Data

99cbaji uses the personal data we collect for the following specific, legitimate purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, KYC documents	Contractual necessity
Identity verification and age checking	Name, date of birth, NID / passport	Legal obligation
Processing deposits and withdrawals	Financial transaction data	Contractual necessity
Fraud detection and prevention	Technical data, transaction history	Legitimate interest
Responsible gaming monitoring	Betting patterns, session data	Legal obligation
Customer support	Communications data, account data	Contractual necessity
Platform analytics and improvement	Technical and usage data (aggregated)	Legitimate interest
Marketing communications	Email address, mobile number	Consent (opt-in)

99cbaji will not use your personal data for any purpose not listed above without first providing notice and, where required, obtaining your consent.

3. Data Sharing & Third Parties

99cbaji does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. However, we do share limited personal data with carefully selected third-party service providers who assist us in operating the platform. All such providers are contractually bound to process your data only as instructed by 99cbaji and to maintain appropriate security standards.

3.1 Categories of Third-Party Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive transactional data necessary to process your deposits and withdrawals;
• KYC verification providers: identity document images and personal details may be shared with contracted identity verification services for age and fraud checks;
• Game software providers: providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming receive session and bet data necessary to operate their games on our platform;
• IT infrastructure providers: hosting, cloud storage, and cybersecurity vendors may have access to encrypted data as part of their infrastructure management role;
• Analytics providers: aggregate, anonymised usage data may be shared with analytics platforms to help us understand platform performance.

3.2 Legal Disclosures

99cbaji may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent criminal activity, protect the safety of any person, or defend the legal rights of 99cbaji.

3.3 Business Transfers

In the event that 99cbaji undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the privacy terms that may result.

4. Cookies & Tracking

The 99cbaji platform uses cookies and similar technologies, including local storage and session storage, to deliver and improve our services. A cookie is a small text file stored on your device by your browser when you visit a website.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without disrupting core functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players interact with the platform, including pages visited and features used. This data helps us improve the platform over time.
• Marketing cookies: Used to deliver relevant promotional messages and to measure the effectiveness of marketing campaigns. These are only activated with your consent.

4.2 Managing Your Cookie Preferences

You can manage or disable cookies at any time through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary or functional cookies may prevent certain features of the 99cbaji platform from working correctly. Instructions for managing cookies are available in your browser's help documentation.

5. Data Security

99cbaji takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure.

5.1 Technical Controls

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers;
• Password hashing using industry-standard cryptographic algorithms — plain-text passwords are never stored;
• Two-factor authentication (2FA) available for player accounts;
• Regular vulnerability scanning and penetration testing of platform infrastructure;
• Firewall protection and intrusion detection systems on all servers.

5.2 Organisational Controls

• Access to player personal data is restricted to staff members who require it to perform their job functions;
• All staff with access to personal data are trained in data handling best practices;
• Data processing agreements are in place with all third-party service providers who handle player data on our behalf.

5.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your personal data, 99cbaji will take immediate steps to contain and investigate the incident. Affected players will be notified promptly with details of what data was involved and what steps they should take to protect themselves. We will take all necessary remedial action to prevent recurrence.

6. Data Retention

99cbaji retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our data retention obligations and legitimate business interests.

6.1 Active Account Data

While your 99cbaji account is active, we retain all registration data, KYC documents, transaction records, and communications history necessary to provide our services, comply with our legal obligations, and handle any disputes that may arise.

6.2 Post-Closure Retention

Following account closure, 99cbaji retains certain categories of data for the following periods:

• Transaction records: retained for a minimum of five years following account closure for financial record-keeping and regulatory compliance purposes;
• KYC identity documents: retained for a minimum of five years following account closure in accordance with anti-money laundering requirements;
• Communications records: retained for a period of two years following account closure;
• Technical and usage logs: retained for a rolling 12-month period and then permanently deleted.

6.3 Deletion Requests

Where you request deletion of your personal data, 99cbaji will honour that request to the fullest extent permitted by law. In certain circumstances, we are legally required to retain specific data categories (particularly financial transaction records and identity documents) even after a deletion request is submitted. In such cases, we will inform you of which data must be retained and the legal basis for its retention, and we will delete all other data that does not fall under a mandatory retention obligation.

7. Your Privacy Rights

As a player on the 99cbaji platform, you hold a number of rights with respect to your personal data. We are committed to upholding these rights and will respond to all valid requests within 30 calendar days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that 99cbaji holds about you. Upon receipt of a verified request, we will provide a summary of your data in a commonly used format.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact number) can typically be made directly from within your account settings. For changes to core identity data, additional verification may be required.

7.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis for processing exists, or where you object to processing and there are no overriding legitimate grounds. As noted in Section 6.3, certain data categories must be retained to meet legal obligations even following an erasure request.

7.4 Right to Withdraw Marketing Consent

Where you have previously given consent to receive marketing communications from 99cbaji via email or SMS, you may withdraw that consent at any time by contacting our support team at [email protected] or by following the unsubscribe instructions in any marketing message. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

7.5 Right to Object to Processing

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

7.6 Submitting a Privacy Request

All privacy requests should be submitted in writing to [email protected] with the subject line "Privacy Request — [Your Request Type]". We may ask you to verify your identity before processing your request. Responses will be provided within 30 calendar days. For complex requests, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

99cbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify registered players via email or an on-screen notification upon next login, with a minimum of seven days' notice before the revised policy takes effect where practicable. The date at the top of this document reflects the most recent revision. We encourage you to review this policy periodically to stay informed of how we protect your data.

8.2 Contact for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 99cbaji handles your personal data, please contact our support team:

• Email: [email protected]
• Response time: Within 48 hours for general enquiries; within 30 calendar days for formal privacy rights requests
• Hours: Available 24 hours a day, Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy forms an integral part of the 99cbaji Terms & Conditions. By using the 99cbaji platform, you agree to both documents in their entirety.