bha999 Privacy Policy — Your Data, Protected

1. Data We Collect

bha999 collects personal data from players in Bangladesh through multiple touchpoints: account registration, identity verification, payment processing, gameplay activity, customer support interactions, and automatic technical collection through cookies and server logs. This section sets out each category of data collected and the context in which it arises.

1.1 Registration Data

When you create a bha999 account, we collect the information you provide during the registration process. This includes your chosen username, mobile phone number (used for account verification and two-factor authentication), email address (if provided), date of birth (to verify you meet the 18+ age requirement), and the country from which you are registering. This data is necessary to establish and administer your account and to comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) standards and to verify that all players are aged 18 or above, bha999 may request the following documents at any stage of the account lifecycle:

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of address (utility bill, bank statement, or official correspondence dated within 3 months);
• Proof of payment method ownership (screenshot or confirmation from bKash, Nagad, Rocket, or relevant bank);
• Source of funds documentation where a compliance review is triggered by transaction patterns.

KYC documents are processed and stored securely. They are accessed only by authorised members of bha999's compliance team and by third-party KYC verification service providers operating under strict data processing agreements.

1.3 Payment & Transaction Data

bha999 records all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and outcomes, bonus credits and wagering progress, and the payment methods used (e.g., bKash number, Nagad number, bank account last digits). Full payment credentials (e.g., complete bKash PINs, full card numbers) are never stored on bha999 servers — they are handled exclusively by our payment processing partners under their own PCI-DSS compliant environments.

1.4 Gameplay & Betting Data

For every session you play on bha999 — whether live casino, cricket betting, slots, or fishing games — we record gameplay session start and end times, game titles and providers accessed, bet amounts, win/loss outcomes, and responsible gaming metrics such as total session duration and cumulative monthly spend. This data is used to operate the platform, to detect unusual patterns that may indicate problem gambling, and to fulfil our reporting obligations to payment partners and compliance monitors.

1.5 Technical & Device Data

When you access bha999 via a browser or mobile device, our servers automatically log the following information: IP address, browser type and version, operating system, device type (desktop/mobile/tablet), screen resolution, referring URL, pages visited and time spent on each, and session identifiers. This data is used for security monitoring, fraud detection, platform performance optimisation, and aggregate analytics. It is not used to build individual marketing profiles.

1.6 Customer Support Data

When you contact bha999's support team via email ([email protected]) or any other supported channel, we retain records of your correspondence, including the content of messages, timestamps, the nature of the issue reported, and the resolution provided. Support records are kept for quality assurance, dispute resolution, and compliance audit purposes.

2. How We Use Your Data

bha999 uses the personal data it collects solely for legitimate, defined purposes. We do not use personal data for purposes that are incompatible with the reason it was originally collected. The table below summarises our primary data uses and the legal basis for each.

bha999 will send you promotional communications (such as bonus offers, tournament announcements, or seasonal promotions tied to events like Eid or Pohela Boishakh) only if you have explicitly opted in during registration or via your account notification settings. You may withdraw consent for promotional communications at any time by updating your account preferences or by contacting [email protected].

3. Cookies & Tracking Technologies

bha999 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, maintain login sessions, remember user preferences, and collect aggregated analytics about how players navigate the site. Cookies are small text files stored on your device by your browser at the instruction of the website you visit.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, store your currency and language preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These remember your preferences (such as preferred game lobby view or responsible gaming limits you have set) to improve your experience across sessions. They are not strictly essential but enhance usability.
• Analytics Cookies: bha999 uses privacy-respecting analytics tools to understand aggregate player behaviour — such as which game categories are most popular, how long sessions last on average, and where players experience friction in the registration process. These cookies do not identify individual players by name.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and multi-account registrations. These are treated as strictly necessary due to our AML and platform integrity obligations.

3.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block all third-party cookies, delete existing cookies, or receive a notification before a new cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging into your bha999 account. Disabling functional cookies may cause your preferences to reset on each visit. Instructions for managing cookies in common browsers are available in each browser's help documentation.

4. Data Sharing & Third Parties

bha999 does not sell or rent your personal data to any third party. We share data with external parties only in the following limited and controlled circumstances:

4.1 Game Providers

To deliver live casino games, slots, and fishing game content, bha999 integrates with third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and Microgaming, among others. These providers may receive anonymised session tokens and gameplay metadata necessary to render and record game outcomes. They do not receive your full name, phone number, or financial account details unless you initiate a support request directly with them through the game interface.

4.2 Payment Processors

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, bha999 shares the minimum transaction data required by each payment provider to complete the transaction (such as your registered mobile number for MFS transactions, or masked card details for card payments). All payment processors used by bha999 operate under data processing agreements that restrict their use of your data to the specific purpose of processing your transaction.

4.3 KYC & Compliance Partners

bha999 may use third-party identity verification and AML screening services to assist with KYC checks. These partners process your submitted identification documents and provide bha999 with a verification result. They are contractually prohibited from retaining your documents beyond the period required to complete the verification or from using your data for any purpose unrelated to the verification service.

4.4 Legal Disclosure

bha999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or where such disclosure is necessary to protect the legal rights or safety of bha999, its players, or the public. In such cases, bha999 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permitted, notify the affected player of the disclosure.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bha999's business assets, player data may be transferred to the acquiring entity as part of the transaction. In such an event, bha999 will notify affected players via the platform dashboard or by email prior to their data being transferred and subject to a materially different privacy policy.

5. Data Retention & Storage

bha999 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your active account plus 5 years following account closure, to satisfy AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, in accordance with AML and fraud prevention obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay and betting history: Retained for the duration of the active account plus 2 years following closure, for dispute resolution and responsible gaming monitoring purposes.
• Customer support correspondence: Retained for 3 years from the date of the last interaction in a given support thread.
• Technical and server log data: Retained for up to 12 months, after which it is aggregated and anonymised or deleted.

Where data is no longer required and no legal obligation requires its continued retention, bha999 will securely delete or anonymise it. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate platform analytics.

bha999's servers and primary data storage infrastructure are located in jurisdictions outside Bangladesh. By using the bha999 platform, you acknowledge and consent to your personal data being stored and processed in these offshore jurisdictions. bha999 takes all reasonable steps to ensure that international data transfers are conducted securely and subject to appropriate contractual protections.

6. Data Security Measures

bha999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS Encryption: All data in transit between your device and bha999's servers is encrypted using TLS 1.2 or higher.
• Password Hashing: Player passwords are stored using strong one-way cryptographic hashing algorithms. bha999 staff cannot view your password in plain text.
• Access Controls: Access to personal data within bha999's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role.
• Two-Factor Authentication (2FA): bha999 supports 2FA for player accounts via SMS OTP to the registered mobile number, adding an additional layer of security beyond the password alone.
• Intrusion Detection: bha999's infrastructure is monitored 24/7 for unusual access patterns, brute-force login attempts, and other indicators of a security incident.
• Regular Security Reviews: bha999 conducts periodic reviews of its data security practices and infrastructure to identify and remediate vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to affected players, bha999 will notify affected individuals as promptly as practicable, providing details of what data was affected and the steps being taken to address the incident.

Players are also responsible for maintaining the security of their own accounts. You should use a strong, unique password for your bha999 account, enable 2FA where available, and never share your login credentials with any other person. If you believe your account has been compromised, contact [email protected] immediately.

7. Your Privacy Rights

As a player on bha999, you have the following rights regarding your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address or mobile number registered on your bha999 account. bha999 will respond to all valid rights requests within 10 business days.

• Right of Access: You may request a copy of the personal data bha999 holds about you, including the categories of data held, the purpose of processing, and any third parties with whom your data has been shared.
• Right to Rectification: If you believe that any personal data bha999 holds about you is inaccurate or incomplete, you may request that it be corrected. Some data fields (such as your registered phone number) can be updated directly from within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where the processing is unlawful. Please note that bha999 may be required to retain certain data for legal reasons (such as AML record-keeping) even following a valid erasure request, in which case we will inform you of the specific legal basis for continued retention.
• Right to Restrict Processing: You may request that bha999 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that bha999 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You may object to bha999 processing your data on the basis of legitimate interests (such as analytics). Where an objection is upheld, bha999 will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bha999 processes your data on the basis of your consent (such as for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

bha999 will not discriminate against any player for exercising their privacy rights. Exercising your rights will not affect the availability of your account or any services you receive, except in cases where the exercise of a right (such as erasure) necessarily requires account closure.

8. Policy Updates & Contact

bha999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the platform dashboard notification system or by email to the registered contact address, at least 7 days before the changes take effect. The revised Policy will always be accessible at bha999.app/privacy-policy, with the effective date clearly stated at the top of the document.

We encourage you to review this Privacy Policy periodically. Your continued use of the bha999 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

8.1 Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact bha999's support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 10 business days for formal data rights requests; within 24 hours for general privacy queries
• Support hours: 24/7 in English, Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. By continuing to use the bha999 platform after this date, you confirm your acceptance of the practices described herein. If you do not agree with any part of this Policy, you must cease using the platform and may request account closure by contacting [email protected].