bbb99 Privacy Policy — Your Data, Protected

bbb99 ("we", "us", "our", "the Platform") is committed to protecting the personal information of all individuals ("you", "your", "the Player") who interact with our platform at bbb99.io. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bbb99.

We recognise that privacy is a fundamental right. Our approach to data handling is built on three principles: transparency (we tell you clearly what we collect and why), minimisation (we collect only what is necessary for legitimate platform operations), and security (we employ industry-standard technical and organisational measures to protect all data we hold).

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and bbb99. Capitalised terms used but not defined in this policy have the meanings given to them in the Terms & Conditions.

If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the bbb99 platform and, if registered, request account closure by emailing [email protected].

For the purposes of applicable data protection legislation, bbb99 is the data controller in respect of personal data collected through bbb99.io. As data controller, bbb99 determines the purposes for which and the manner in which personal data is processed.

All data protection enquiries, subject access requests, and complaints should be directed to our dedicated data protection contact:

• Email: [email protected] (subject line: "Data Protection Request")
• Platform: bbb99.io
• Response Time: We aim to respond to all data protection requests within 30 calendar days of receipt.

We collect and process the following categories of personal data in connection with your use of the bbb99 platform:

We do not collect or store full payment card numbers. Card data entered during Visa or Mastercard transactions is processed directly by our certified payment service providers and is never stored on bbb99 servers in unencrypted form.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning health (beyond responsible gaming disclosures you voluntarily provide), unless required by law or expressly consented to by you.

bbb99 collects personal data through the following channels:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey, you directly provide us with personal data.
• Automated technical collection: As you navigate and interact with bbb99.io, our platform automatically collects Technical Data (IP address, device identifiers, browser data) through server logs and cookies. See Section 10 for full details on cookies.
• Third-party identity verification providers: When we conduct identity and age verification (required before processing any withdrawal), we may receive confirmation data from third-party KYC (Know Your Customer) service providers who verify documents against official databases. We receive only a verification result — we do not receive raw copies of national identity databases.
• Payment service providers: When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment partners share transaction reference data with us to enable us to credit your account and maintain accurate financial records.
• Game providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may share aggregated game-round data with bbb99 to support dispute resolution and responsible gaming monitoring. This data relates to game outcomes and wagering activity, not to additional personal identifiers.

bbb99 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+), maintain accurate account records, and provide you with access to the bbb99 platform.
• Transaction processing: To process your deposits and withdrawals securely and accurately, maintain complete financial records, and comply with anti-money laundering (AML) obligations.
• Platform delivery: To provide you with access to casino games, cricket betting, slots, live dealer tables, and all other features of the bbb99 platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor for signs of problem gambling, enforce self-exclusion and deposit limits, and contact you with responsible gaming information where appropriate.
• Fraud and abuse prevention: To detect and prevent fraudulent activity, money laundering, underage gambling, account takeover, bonus abuse, and other forms of prohibited conduct described in our Terms & Conditions.
• Legal compliance: To meet our obligations under applicable law, including responding to lawful requests from regulatory and law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage patterns that help us improve game selection, site performance, and user experience. Individual player data is not used for this purpose without anonymisation.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, subject to your marketing preferences. See Section 12 for full details and opt-out instructions.

bbb99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account management, transaction processing, game access, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and bbb99.
• Legal obligation: Processing required to comply with applicable law — including identity verification, AML checks, fraud reporting, and responses to regulatory or law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of bbb99's legitimate interests in operating a safe and compliant platform, where those interests are not overridden by your interests or fundamental rights.
• Consent: Processing for marketing communications is carried out on the basis of your consent, freely given at registration and withdrawable at any time. See Section 12 for opt-out instructions.

bbb99 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data with third parties only in the following circumstances and only to the extent necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, and the card processing networks for Visa and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own strict data protection and financial compliance obligations.
• Identity verification (KYC) providers: To verify your identity and age in accordance with our responsible gaming and AML obligations, we may share your identity documents and personal details with certified third-party KYC providers. These providers process data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Game providers: To enable game play and resolve game-related disputes, game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) receive the minimum data necessary to operate their games on our platform, including a player session token and betting data. Full personal identifiers are not shared with game providers.
• IT infrastructure and security providers: Cloud hosting, cybersecurity, server monitoring, and analytics infrastructure providers may process Technical Data on behalf of bbb99. All such providers are bound by data processing agreements that restrict the use of data to the specific services they provide.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or legitimate request from a competent regulatory or law enforcement authority, bbb99 will disclose personal data. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bbb99's business, player data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom we share personal data are required to maintain appropriate security standards and to process data only in accordance with our instructions and applicable law.

bbb99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised, the resulting aggregated datasets may be retained indefinitely for statistical and platform improvement purposes.

Where you request erasure of your data (see Section 11), we will action that request promptly subject to any overriding legal obligation to retain certain categories of data (such as financial records and AML documentation) for the periods specified above.

bbb99 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and bbb99.io is protected by 256-bit Secure Sockets Layer (SSL) encryption. Look for the padlock icon in your browser address bar as confirmation that your connection is encrypted.
• Encrypted data storage: Sensitive personal data (including identity documents, financial references, and password credentials) is stored in encrypted form on secure servers. Password credentials are stored as one-way cryptographic hashes — bbb99 staff cannot view your actual password.
• Access controls: Access to systems holding personal data is restricted on a strict need-to-know basis. All bbb99 staff with access to player data are subject to confidentiality obligations and undergo regular data protection training.
• Two-step verification (2SV): bbb99 strongly recommends that all players enable two-step verification in their Account Settings, adding an additional layer of protection against unauthorised account access.
• Penetration testing and security audits: The bbb99 platform undergoes regular third-party security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Fraud detection systems: Automated systems continuously monitor account activity for indicators of fraud, account takeover, and suspicious behaviour patterns. Alerts trigger manual review by our security team.
• Data breach response: In the unlikely event of a personal data breach that presents a risk to player rights and freedoms, bbb99 has established incident response procedures to investigate, contain, and notify affected players and relevant authorities within the required timeframes under applicable law.

bbb99 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players use the site. A cookie is a small text file placed on your device by a website. The following categories of cookies are used on bbb99.io:

• Essential cookies: Required for the platform to function. These cookies maintain your login session, remember your account preferences, protect against cross-site request forgery, and ensure the platform loads correctly. Essential cookies cannot be disabled without rendering the platform inoperable.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming configurations (e.g., session reminder settings). These cookies improve your experience but are not essential to basic platform operation.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate bbb99.io — including which pages are visited most frequently, how long sessions last, and where players encounter errors. This data helps us improve the platform. Analytics cookies do not identify individual players.
• Security cookies: Support our fraud detection and platform security systems by tracking unusual access patterns and flagging potential account compromise attempts.

bbb99 does not use third-party advertising or retargeting cookies that track your browsing activity across other websites. Your on-site activity is not shared with external advertising networks.

Most browsers allow you to control cookies through their settings. However, disabling essential cookies will prevent you from logging in and using the bbb99 platform. For guidance on managing cookie settings in your specific browser, please refer to your browser's help documentation.

As a data subject, you have the following rights in relation to your personal data held by bbb99. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You may update some information directly through your Account Settings.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there is no overriding legitimate interest. Note that we are legally required to retain certain data (financial records, AML documentation) regardless of erasure requests — see Section 08.
• Right to restriction of processing: You have the right to request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you do not want erasure.
• Right to data portability: You have the right to receive your personal data in a portable format and to transmit it to another controller, where technically feasible and where processing is based on consent or contractual necessity.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

We will not charge a fee for processing data rights requests, unless the request is manifestly unfounded or excessive. In such cases we may charge a reasonable administrative fee or refuse the request. We will notify you if either applies.

With your consent, bbb99 may send you promotional communications by email or SMS, including information about new games, deposit bonuses, tournament announcements, seasonal promotions (such as Eid, Pohela Boishakh, and Victory Day offers), and platform updates.

You can manage your marketing preferences at any time in the following ways:

• Log in to your bbb99 account and update your communication preferences in Account Settings > Notifications.
• Click the "Unsubscribe" link included at the bottom of any marketing email we send you.
• Email us directly at [email protected] with the subject line "Marketing Opt-Out" and we will update your preferences within 5 business days.

Please note that opting out of marketing communications does not affect transactional or account-related communications. We will continue to send you emails relating to your account security, deposit and withdrawal confirmations, identity verification requests, responsible gaming notifications, and updates to our Terms & Conditions or Privacy Policy. These communications are essential to the operation of your account and cannot be disabled.

The bbb99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process, and bbb99 employs automated and manual checks to enforce this requirement.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on bbb99 or has provided us with personal data without your consent, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate the matter promptly and, where confirmed, will close the account, reverse any transactions where possible, and permanently delete all personal data associated with the underage individual from our systems.

bbb99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or applicable regulation. When we make material changes to this policy, we will notify registered players by email to the address associated with their account, and by displaying a prominent notice on bbb99.io for a minimum of 14 days before the changes take effect.

Minor changes — such as typographical corrections, clarifications of existing language, or updates to contact details — may be made without prior notice and will take effect immediately upon publication. The version number and effective date displayed at the top of this document will be updated to reflect any revision.

Your continued use of the bbb99 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any changes, you must cease using the platform and may request account closure by contacting [email protected]. The most current version of this Privacy Policy is always available at bbb99.io/privacy-policy.

We recommend that all players review this Privacy Policy periodically, particularly following any notification of updates, to remain informed of how bbb99 collects, uses, and protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bbb99 handles your personal data, please contact us using the details below. All communications must be in English.

• Email: [email protected]
• Subject Line Guidance:
  • Data access, correction, or deletion requests: "Data Rights Request"
  • Marketing opt-out: "Marketing Opt-Out"
  • Underage account reports: "Underage Account Report"
  • General privacy enquiries: "Privacy Enquiry"
  • Data breach concerns: "Data Security Concern"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: General enquiries within 24 hours; formal data rights requests within 30 calendar days

bbb99 is an online entertainment platform. All support and data protection communications are handled via email only. bbb99 does not operate a telephone helpline. Please include your registered account username in all correspondence to help us locate your records and respond promptly.