Privacy Policy — How bgc99 Collects, Uses, and Protects Your Personal Data
At bgc99, protecting the personal data of our players is a foundational responsibility. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold as a bgc99 account holder in Bangladesh.
Six Principles That Guide Our Approach
Minimal Data Collection
bgc99 collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable obligations. We do not collect data speculatively or beyond what is needed for a stated purpose.
No Data Selling
bgc99 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks under any circumstances. Your information is used solely to operate and improve the bgc99 platform for your benefit.
Encrypted Storage
All sensitive personal data stored by bgc99 — including identity documents, payment details, and account credentials — is encrypted at rest using industry-standard AES-256 encryption. Data in transit is protected by TLS 1.3 across all platform connections.
Full Transparency
This Privacy Policy is written in plain English and is designed to be genuinely readable, not a document that obscures its intent in legal complexity. Every data category we collect is listed, every purpose is stated, and every third-party category is identified.
Player Control
You retain meaningful rights over your personal data, including the right to access, correct, restrict processing of, and in certain circumstances request deletion of your data. These rights can be exercised by contacting [email protected] at any time.
Bangladesh-Focused Compliance
bgc99 operates for and directs its services to players in Bangladesh. All data handling practices described in this policy are designed with the privacy expectations and regulatory context of the Bangladesh market in mind. All account data is denominated and processed in BDT.
1 Data We Collect
bgc99 collects personal data from players through several channels: directly via the account registration form, through ongoing account activity, through payment processors, through automated technical means during platform use, and — where applicable — through identity verification partners. The categories of personal data we collect are described below.
Identity and Contact Data
When you register a bgc99 account, we collect your full legal name, date of birth, email address, and mobile phone number. This data is used to create your account, verify your identity, and communicate with you about your account. Where identity verification is required — for example, prior to processing your first withdrawal — we may also collect a copy of your Bangladesh National Identity Card (NID), passport, or other government-issued identification document.
Financial and Transaction Data
When you make deposits or withdrawals through the bgc99 platform, we collect data about the transaction, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in BDT, the transaction reference number, and the registered name and account number associated with the payment method. bgc99 does not store full payment card numbers. Where bank card details are processed, they are handled directly by our payment processor and are not retained on bgc99 servers.
Account Activity Data
We collect a record of your activity on the bgc99 platform, including bets placed, games played, session durations, deposit and withdrawal history, bonus claims, and communications with the support team. This data is used to administer your account, resolve disputes, detect fraud, and — where you have opted in — to personalise the promotional offers you receive.
Technical and Device Data
When you access bgc99 through a browser or mobile device, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, referring URL, and pages visited during your session. This data is used for platform security, fraud detection, technical troubleshooting, and anonymous aggregate analytics.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID/passport copy | Registration form, KYC upload |
| Contact Data | Email address, mobile number | Registration form |
| Financial Data | bKash/Nagad number, bank account name, transaction amounts in BDT | Deposit/withdrawal requests |
| Activity Data | Bets placed, games played, session history, support conversations | Platform interaction, automated logging |
| Technical Data | IP address, device type, browser version, OS | Automated collection on site visit |
| Cookie Data | Session tokens, preference cookies, analytics identifiers | Browser cookies and local storage |
2 How We Use Your Data
bgc99 uses your personal data only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your personal data are as follows:
- Account administration: Creating and maintaining your bgc99 account, verifying your identity, and enabling you to log in and use all platform features.
- Transaction processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining accurate transaction records.
- Customer support: Responding to your queries, complaints, and support requests submitted via email or the platform's messaging system.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
- Legal and regulatory compliance: Meeting our obligations under applicable laws, including identity verification, record-keeping, and responding to lawful requests from competent authorities.
- Responsible gaming: Monitoring account activity for patterns that may indicate problem gambling, applying self-exclusion restrictions at your request, and enforcing deposit and wagering limits you have set.
- Platform improvement: Analysing anonymous aggregate usage data to identify areas where the platform can be improved for Bangladeshi players.
- Marketing communications: Sending you information about bonuses, promotions, and offers where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting [email protected].
3 Data Sharing & Disclosure
bgc99 does not sell, rent, or trade your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processors
To process your deposits and withdrawals, bgc99 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and relevant Bangladeshi banks such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These partners process your financial data under their own privacy policies and are required to maintain appropriate data security standards.
Identity Verification Providers
Where bgc99 uses a third-party identity verification service to confirm your age and identity, your NID, passport, or other submitted documents may be shared with that provider for the sole purpose of verification. Verification providers are contractually prohibited from using your data for any other purpose.
Game Software Providers
Games on the bgc99 platform are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and session data to the extent necessary to load and operate their games within the bgc99 platform. They do not receive your full identity or payment data.
Legal and Regulatory Disclosure
bgc99 may disclose your personal data to competent authorities, courts, or law enforcement agencies where required to do so by applicable law, a valid court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. In such cases, bgc99 will disclose only the data specifically requested and will, where legally permissible, notify you of the disclosure.
Business Transfers
In the event that bgc99 undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data following the transaction.
5 Data Retention
bgc99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations, whichever is longer. The following retention periods apply to the main categories of data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal compliance, dispute resolution |
| Identity verification documents | Duration of account + 5 years after closure | Anti-money laundering obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Betting and gaming history | Duration of account + 3 years after closure | Dispute resolution, responsible gaming review |
| Support correspondence | 3 years from last interaction | Quality assurance, complaint management |
| Technical and device logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing consent records | Until consent is withdrawn + 2 years | Evidence of lawful marketing basis |
When the applicable retention period expires, bgc99 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes.
6 Your Privacy Rights
As a bgc99 player, you hold the following rights in relation to the personal data we hold about you. These rights may be exercised by submitting a written request to [email protected]. bgc99 will respond to all privacy rights requests within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data that bgc99 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. bgc99 will provide this information in a clear, structured format via email.
Right to Correction
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account data such as your email address or phone number, you may be able to update these directly from within your bgc99 account settings. For identity data, a formal correction request with supporting documentation may be required.
Right to Restriction of Processing
In certain circumstances — for example, where you contest the accuracy of your data or object to its processing — you have the right to request that bgc99 restrict processing of your data while the matter is resolved. During a restriction period, bgc99 will store your data but will not actively process it beyond what is required to maintain your account in a suspended state.
Right to Erasure
You may request that bgc99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (and no other legal basis applies), or where you object to processing and bgc99 has no overriding legitimate grounds to continue. Please note that this right is not absolute: where bgc99 is required to retain your data by law — for example, transaction records under financial record-keeping obligations — we will not be able to delete that data until the mandatory retention period has expired.
Right to Object to Marketing
You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications from bgc99, send a request to [email protected] with the subject line "Marketing Opt-Out" and your registered email address or account username. Your request will be actioned within 5 business days.
7 Data Security
bgc99 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. Our security practices include the following:
- Transport security: All data transmitted between your device and bgc99.net is encrypted using TLS 1.3. Our SSL certificate is issued by a trusted certificate authority and is maintained and renewed without interruption.
- At-rest encryption: Sensitive personal data stored in bgc99's database infrastructure is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
- Access controls: Access to systems holding personal data is restricted to bgc99 staff who require access to perform their specific role. All access is authenticated, logged, and subject to periodic review. Privileged access is subject to additional controls.
- Password security: Account passwords are stored as salted cryptographic hashes. bgc99 staff cannot view your password in plain text. If you forget your password, a reset link will be issued to your registered email address.
- Fraud and anomaly detection: bgc99 operates automated systems that monitor account activity in real time for patterns indicative of account takeover, credential stuffing, or unusual transaction behaviour. Suspicious activity triggers account review and, where appropriate, temporary suspension pending investigation.
- Third-party security assessments: bgc99 periodically reviews the security practices of third-party partners who process player data on our behalf to ensure they maintain standards consistent with our own.
Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and interests, bgc99 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
8 Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how bgc99 has handled your personal data, please contact our support team using the details below.
How to Contact Us
All privacy-related enquiries should be submitted in writing to: [email protected]. Please include your registered account username or email address, a clear description of your query or request, and — for rights requests — any information that will help us verify your identity as the account holder.
bgc99 aims to acknowledge all privacy enquiries within 48 hours of receipt and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, bgc99 may extend the response period by a further 60 days, in which case you will be notified of the extension and the reason for it.
Complaints
If you are not satisfied with bgc99's response to a privacy concern, you have the right to escalate your complaint. bgc99 takes all privacy complaints seriously and will conduct a formal internal review of any escalated complaint within 14 days. Where you remain unsatisfied following the internal review, you may wish to seek guidance from a consumer rights organisation or legal advisor in Bangladesh regarding further options available to you.
Policy Updates
bgc99 reviews this Privacy Policy at least annually and whenever there is a material change to our data processing activities. The effective date at the top of this page reflects the date of the most recent revision. Where changes are material — for example, a new category of data being collected or a new third-party data processor being engaged — bgc99 will notify active players by email prior to the change taking effect, giving them the opportunity to review the updated policy before it applies to their data.
Your Data Is Safe at bgc99
Have questions about your privacy rights or account security? Our support team is ready to help. Explore the FAQ for quick answers, or visit the bgc99 platform to get started.