bcc99 Privacy Policy — How We Handle Your Personal Data

1 Introduction

bcc99 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the bcc99.io website and its associated products and services. This Privacy Policy ("Policy") sets out in clear, formal terms how bcc99 collects, processes, stores, shares, and protects your personal data.

This Policy applies to all current and former registered players, prospective users who browse the bcc99 platform without registering, and any individual who contacts bcc99 through customer support channels. It covers personal data collected through the bcc99.io website, any mobile-optimised version of the site, and any direct communications between you and bcc99.

bcc99 operates in the Bangladesh market and serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and other locations throughout Bangladesh. This Policy is written in English and constitutes the authoritative version for all purposes.

This Privacy Policy should be read alongside bcc99's Terms and Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with bcc99. By accessing or using the bcc99 platform, you confirm that you accept the practices described in this Policy.

2 Data Controller

For the purposes of this Privacy Policy, bcc99 acts as the data controller in respect of all personal data collected from players and site visitors through the bcc99.io platform. As data controller, bcc99 determines the purposes for which personal data is processed and the means by which that processing takes place.

All enquiries regarding the processing of personal data, including requests to exercise your data rights, should be directed to:

• Email: [email protected]
• Subject line: Privacy / Data Request
• Response time: Within 30 calendar days of receipt

Where bcc99 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by contractual obligations that restrict their use of your data to the purposes specified by bcc99.

3 Data We Collect

bcc99 collects only the personal data that is necessary to operate the platform, verify player identity, process transactions, and comply with applicable legal obligations. The categories of personal data we collect are set out in the table below.

bcc99 does not collect or process special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming request, in which case it is handled with heightened confidentiality.

4 How We Collect Your Data

bcc99 collects personal data through the following channels:

• Direct provision by you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account settings.
• Automated technical collection: When you visit or use the bcc99 platform, our servers automatically log technical data including your IP address, browser type, device information, and session activity through cookies and similar tracking technologies.
• Third-party service providers: bcc99 may receive identity verification data from KYC partners and fraud-screening providers who process your identification documents on our behalf. Payment processors may share transaction status information with bcc99 to facilitate deposit and withdrawal operations.
• Publicly available sources: In limited circumstances related to fraud investigation or responsible gaming compliance, bcc99 may reference publicly available information to corroborate identity or address details.

5 Legal Basis for Processing

bcc99 processes personal data only where there is a lawful basis for doing so. The following legal bases apply to bcc99's data processing activities:

• Contractual necessity: Processing required to fulfil the agreement between you and bcc99, including account registration, identity verification, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, record-keeping mandates, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out to pursue bcc99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

bcc99 uses personal data collected from players for the following purposes:

• Creating and managing your bcc99 account, including verifying your identity and age as part of our KYC process;
• Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer;
• Delivering the casino, sports betting, and other gaming products available on the bcc99 platform;
• Administering bonuses, promotions, and loyalty rewards to eligible players;
• Detecting and preventing fraud, money laundering, and other prohibited conduct as described in our Terms and Conditions;
• Monitoring responsible gaming indicators and applying protective measures such as deposit limits, cool-off periods, and self-exclusion where appropriate;
• Providing customer support via live chat and email;
• Complying with legal and regulatory obligations applicable to bcc99's operations;
• Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience;
• Sending marketing communications where you have provided explicit consent to receive them.

bcc99 does not use automated decision-making processes that produce legal or similarly significant effects on players, except where such processes are necessary for fraud detection or age verification. In those cases, you have the right to request human review of any decision that affects you.

7 Data Sharing and Third Parties

bcc99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data required to process your transactions. These providers operate under their own privacy policies and are independently responsible for their data processing activities.
• KYC and identity verification providers: Third-party verification services may process your identity documents and biometric data on bcc99's behalf to confirm your identity and age.
• Fraud prevention and security services: Specialist providers that help bcc99 detect and prevent fraudulent activity, account takeovers, and money laundering.
• Game content providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as a anonymised player ID and session token) necessary to deliver their games within the bcc99 platform. These providers do not receive your full personal profile.
• Legal and regulatory authorities: bcc99 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law or in response to a lawfully issued request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bcc99's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8 Cookies and Tracking Technologies

bcc99 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytical data. The following categories of cookies are used on bcc99.io:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting your ability to use the site.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits, and notification preferences across sessions.
• Analytical cookies: Collect anonymised data about how visitors use the bcc99 platform, including pages visited, time on site, and navigation patterns. This data helps bcc99 improve the platform experience for all players.
• Performance cookies: Monitor site speed and identify technical issues to support platform stability and reliability.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect core platform functionality. bcc99 does not use third-party advertising cookies or cross-site tracking cookies for behavioural advertising purposes.

9 Data Retention

bcc99 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply:

• Account data and KYC records: Retained for a minimum of 5 years following the date of account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years from the date of the last interaction, unless a longer period is required for the resolution of an ongoing dispute.
• Marketing consent records: Retained for the duration of your account plus 3 years to demonstrate compliance with consent requirements.
• Technical and usage data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Personally identifiable technical data is retained for 12 months.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where you request early deletion of your personal data, bcc99 will assess the request against its legal retention obligations and notify you of the outcome within 30 days.

10 Security Measures

bcc99 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bcc99's servers;
• Encryption of sensitive personal and financial data stored at rest on bcc99's servers;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data;
• Multi-factor authentication requirements for staff accessing systems that contain personal data;
• Regular internal security audits and vulnerability assessments;
• Incident response procedures to detect, contain, and report data security incidents within required timeframes;
• Staff training on data protection obligations and secure handling of personal information.

While bcc99 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that affects your personal data, bcc99 will notify affected players promptly and take all steps necessary to contain and remediate the incident.

11 Your Data Rights

As a registered player or site visitor, you have the following rights in respect of your personal data held by bcc99. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy / Data Request".

• Right of access: You may request a copy of the personal data bcc99 holds about you. bcc99 will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data bcc99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings.
• Right to erasure: You may request that bcc99 delete your personal data. This right is subject to bcc99's legal retention obligations — data required to be retained by law cannot be deleted on request during the applicable retention period.
• Right to restrict processing: In certain circumstances, you may request that bcc99 limit the processing of your personal data while a dispute or complaint is being resolved.
• Right to data portability: You may request that bcc99 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on bcc99's legitimate interests. bcc99 will assess your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your rights.

bcc99 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, bcc99 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

12 Marketing Communications

bcc99 may send you promotional emails and notifications about new games, bonuses, seasonal offers (such as Eid promotions, BPL tournament specials, or Pohela Boishakh campaigns), and other bcc99 news where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from bcc99; or
• Updating your notification preferences in your bcc99 account settings; or
• Contacting our support team at [email protected] with the subject line "Unsubscribe".

Unsubscribe requests are processed within 5 business days. Please note that withdrawal of marketing consent does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent as part of the core service and cannot be opted out of while your account is active.

13 Children and Minors

bcc99 operates a strict 21+ age policy. The bcc99 platform is not directed at, and must not be accessed by, individuals under the age of 21. bcc99 does not knowingly collect personal data from individuals under 21 years of age.

Where bcc99 discovers or is notified that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all associated personal data will be flagged for deletion following the conclusion of any required investigation, and any winnings accrued will be forfeited.

14 Changes to This Privacy Policy

bcc99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform operations, or data processing practices. When material changes are made, bcc99 will notify registered players by email and by displaying a prominent notice on the bcc99.io platform prior to the changes taking effect.

The effective date at the top of this Policy indicates when the current version came into force. Continued use of the bcc99 platform after the effective date of any amended Privacy Policy constitutes acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how bcc99 protects your personal data. Previous versions of this Policy are available on request by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bcc99 handles your personal data, please contact our dedicated privacy team:

• Email: [email protected]
• Subject line: Privacy / Data Request
• Support hours: 24/7, 365 days a year (Bangladesh Standard Time, BST UTC+6)
• Languages: English and Bengali
• Response time: Acknowledgement within 5 business days; full response within 30 calendar days

For general customer support enquiries unrelated to data privacy, you may also contact our team via live chat on the bcc99 platform. All privacy-specific requests should be submitted by email with the subject line indicated above to ensure they are routed to the appropriate team.