bgc99 Privacy Policy

1 Introduction

bgc99 ("bgc99", "we", "us", "our") operates the online casino and sports betting platform accessible at bgc99.io (the "Platform"). This Privacy Policy explains how bgc99 collects, uses, stores, shares, and protects the personal data of individuals who register accounts, visit the Platform, or otherwise interact with our services ("you", "your", "Player").

bgc99 takes data privacy seriously. We are committed to maintaining the confidentiality, integrity, and security of all personal information entrusted to us by our players and site visitors. This Policy is designed to be clear and accessible, and we encourage all players to read it in full before using the Platform.

This Privacy Policy should be read alongside the bgc99 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this Policy. In the event of any conflict between this Policy and the Terms & Conditions with respect to privacy matters, this Privacy Policy shall prevail.

2 Data We Collect

bgc99 collects personal data through multiple touchpoints during your use of the Platform. The categories of data we collect are described below.

2.1 Registration Data

When you create a bgc99 account, we collect the following information:

• Full legal name;
• Date of birth (for age verification — players must be 21 or older);
• Email address;
• Mobile phone number;
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and process withdrawal requests, we may collect:

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of address (utility bill, bank statement, or equivalent document);
• Proof of payment method ownership (for example, a screenshot or statement confirming ownership of the bKash, Nagad, or Rocket account used for deposits);
• Selfie photograph for identity confirmation where requested.

2.3 Transaction Data

When you make deposits or withdrawal requests, we record:

• Transaction amounts in BDT (৳);
• Transaction timestamps;
• Payment method type (e.g., bKash, Nagad, Rocket, Upay);
• Transaction reference numbers provided by the payment processor;
• Account balance history.

2.4 Gameplay & Betting Data

We record details of your activity on the Platform, including:

• Games played, bet amounts, and outcomes;
• Sports betting markets accessed, odds accepted, and settlement results;
• Session durations and responsible gaming tool usage;
• Bonus and promotional offer claims and wagering activity.

2.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Referring URL and session navigation data;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data

If you contact our support team via email or live chat, we retain records of those communications, including the content of messages, timestamps, and resolution notes. This data is used solely for quality assurance and dispute resolution purposes.

3 How We Use Your Data

bgc99 uses the personal data it collects for the following purposes:

bgc99 does not use your personal data for unsolicited marketing to third parties, nor does it profile you for the purpose of selling advertising. Any promotional communications from bgc99 will relate exclusively to bgc99 products and services, and you may opt out at any time via your account settings or by contacting support.

4 Legal Basis for Processing

bgc99 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial record-keeping obligations;
• Legitimate interests: Processing carried out to prevent fraud, ensure platform security, improve our services, and conduct responsible gaming monitoring — provided such interests do not override your fundamental rights;
• Consent: Where we rely on your consent (for example, for optional promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing already carried out.

5 Data Sharing & Disclosure

5.1 Service Partners

bgc99 may share your personal data with carefully selected third-party service providers who assist in delivering the Platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment service operators, for the purpose of processing deposit and withdrawal transactions;
• Game providers: Certified game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive anonymised session identifiers to deliver game content;
• KYC verification providers: Third-party identity verification services used to authenticate documents submitted during the KYC process;
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers who host Platform data under strict data processing agreements.

All third-party service partners are contractually bound to use your data only for the specific purpose for which it was shared and to maintain appropriate security measures.

5.2 Legal and Regulatory Disclosure

bgc99 may disclose your personal data to competent authorities, law enforcement agencies, or courts where required by applicable law or where disclosure is necessary to protect the rights, property, or safety of bgc99, its players, or the public. Such disclosures will be limited to the minimum data necessary and will be made in accordance with applicable legal procedures.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bgc99's business, your personal data may be transferred to the relevant successor entity. bgc99 will notify affected players of any such transfer and the new entity will be bound by the privacy commitments set out in this Policy.

6 Payment Data & KYC

bgc99 treats financial and identity data with the highest level of care. The following specific safeguards apply to payment and KYC data:

• Full payment account credentials (e.g., bKash PINs, Nagad passwords) are never collected or stored by bgc99 under any circumstances. All payment authentication takes place directly within the respective payment provider's secure environment;
• KYC documents (ID cards, passports, proof of address) are stored in an encrypted document vault with access restricted to trained compliance personnel on a strict need-to-know basis;
• Transaction records are retained for a minimum period of five years from the date of the transaction to satisfy AML and financial record-keeping obligations, after which they are securely deleted;
• bgc99 does not use KYC documents for any purpose other than identity verification and regulatory compliance.

All players must complete KYC verification before their first withdrawal can be processed. Providing false or fraudulent KYC documents is a material breach of the bgc99 Terms & Conditions and may be reported to appropriate authorities.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function correctly, operate more efficiently, and provide basic analytical information to site operators.

7.2 Cookies Used by bgc99

bgc99 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. You cannot opt out of these cookies without ceasing to use the Platform;
• Functional cookies: Used to remember your preferences, language settings, and last-visited game categories to improve your experience on return visits;
• Analytics cookies: Used to collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve Platform performance and user experience;
• Responsible gaming cookies: Used to track session duration and trigger time-reminder notifications where a player has enabled this feature in their account settings.

7.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account. bgc99 does not use cookies to deliver third-party advertising or to track your activity on other websites.

8 Data Retention

bgc99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status and for a minimum of five years following account closure;
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction in accordance with AML obligations;
• KYC documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later;
• Support communications: Retained for a maximum of two years from the date of each communication, unless the communication is relevant to an open dispute or regulatory matter;
• Technical and device data (logs): Retained for a maximum of 12 months, after which logs are anonymised or deleted;
• Self-exclusion records: Retained permanently to ensure that self-excluded players cannot inadvertently reopen accounts during their exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

bgc99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bgc99 servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Multi-factor authentication for internal staff access to systems containing personal data;
• Firewall and intrusion detection systems monitoring for suspicious activity around the clock;
• Regular penetration testing conducted by independent security professionals;
• Role-based access controls ensuring that staff members can only access the data necessary for their specific job function;
• Incident response procedures that include mandatory player notification in the event of a data breach affecting your personal information.

While bgc99 takes all reasonable precautions to protect your data, no internet transmission is entirely risk-free. You also have a responsibility to protect your account by keeping your login credentials confidential and not sharing them with anyone. If you believe your account has been compromised, contact our support team immediately at [email protected].

10 Your Rights

As a bgc99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. bgc99 will respond to all valid requests within 14 business days (Bangladesh Standard Time).