bn999 Privacy Policy

This Privacy Policy ("Policy") describes how bn999 ("we", "us", "the Platform") collects, uses, stores, and protects the personal data of individuals ("you", "the Player", "the User") who visit or register an account on the bn999 online betting and casino platform at https://bn999.io.

This Policy applies to all personal data collected through the bn999 website, mobile-optimised platform, live chat support system, email communications, and any other channel through which you interact with us. It covers both registered account holders and unregistered visitors to the site.

This Policy should be read alongside the bn999 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or continuing to use the bn999 platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, bn999 acts as the data controller responsible for the personal data of its registered players and site visitors. As data controller, bn999 determines the purposes and means by which personal data is processed.

All data protection enquiries, subject access requests, and complaints should be directed to our dedicated support channel:

• Platform Name: bn999
• Website: https://bn999.io
• Data Protection Contact Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

Where bn999 engages third-party service providers who process personal data on our behalf (for example, KYC verification providers or payment processors), those parties act as data processors under contractual data processing agreements that require them to handle data securely and only for the specific purpose instructed.

The categories of personal data that bn999 collects vary depending on how you interact with the platform. The table below summarises the main categories and specific data types we process:

bn999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by law or directly relevant to a responsible gaming intervention. Where such data is collected in a responsible gaming context (for example, a self-declared problem gambling disclosure), it is handled with the highest level of care and restricted access.

bn999 collects personal data through the following methods:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, initiating a deposit or withdrawal, contacting support via live chat or email, or updating your account profile.
• Automated Technologies: Data collected automatically during your visit to the bn999 platform via server access logs, session cookies, analytics scripts, and browser fingerprinting tools. This includes Technical Data as described in Section 3.
• Payment Partners: Confirmation data returned from payment processors (bKash, Nagad, Rocket, Upay, and banking partners) when a deposit or withdrawal transaction is completed or declined. We receive transaction status and reference data, not your full payment credentials.
• KYC and Fraud Prevention Providers: Verification results, fraud risk scores, and identity match data returned from third-party KYC and anti-money laundering (AML) screening services we engage to fulfil our verification obligations.
• Game Providers: Game session metadata (game name, wager amounts, outcomes, session duration) returned from third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose games are integrated into the bn999 casino platform.

bn999 processes personal data only where a lawful basis exists for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time by updating your communication preferences in the account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

bn999 does not sell your personal data. We share personal data only in the circumstances described below and only to the extent necessary for the specified purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the minimum data required to execute or verify a financial transaction.
• KYC and AML Providers: Identity verification and anti-money laundering screening service providers receive identity and document data for the purpose of fulfilling our verification obligations. These providers operate under binding data processing agreements.
• Game Technology Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game studios receive a session token and anonymised player identifier to deliver game content. They do not receive your full identity data.
• Fraud Prevention and Security Services: Third-party fraud detection and cybersecurity providers may receive Technical Data (IP address, device fingerprint, session metadata) to assist in identifying and blocking fraudulent activity.
• Legal and Regulatory Authorities: bn999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, a valid legal order, or to protect the safety of players or third parties.
• Business Successors: In the event of a merger, acquisition, or sale of the bn999 platform, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the applicable privacy terms of the successor entity before the transfer takes effect.

bn999 uses cookies and similar tracking technologies to operate the platform, maintain session state, detect fraud, and understand how players interact with the site. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that store your responsible gaming preferences. These cookies cannot be disabled without preventing platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised information about how visitors navigate the site — such as pages visited, time on page, and error events. This data helps bn999 identify and fix technical issues and improve the user experience.
• Functional Cookies: Store your platform preferences such as preferred payment method display, notification settings, and UI customisation choices so that these are remembered across sessions.
• Fraud Prevention Cookies: Used to detect suspicious or automated activity, including bot traffic and multi-account behaviour. These cookies are necessary for the security of the platform and cannot be opted out of.

bn999 does not use third-party advertising cookies or behavioural targeting cookies. You may manage cookie preferences for non-essential categories via your browser settings. Please note that disabling certain cookies may affect platform functionality — for example, disabling functional cookies may mean your payment preferences are not remembered between sessions.

bn999 is a platform designed for the Bangladesh market. The majority of personal data is processed and stored on servers located within or near the South Asia region. However, certain third-party service providers — particularly game technology providers such as Pragmatic Play, Evolution Gaming, and NetEnt — operate infrastructure in multiple international jurisdictions including Malta, Gibraltar, Estonia, and Isle of Man.

Where personal data is transferred outside of Bangladesh to a third-party service provider, bn999 ensures that appropriate safeguards are in place to protect that data, including:

• Contractual data processing agreements that require the recipient to handle data to a standard equivalent to or exceeding that described in this Policy.
• Transfers only to service providers who operate under recognised data protection frameworks or who are subject to national data protection laws providing an adequate level of protection.
• Limitation of transferred data to the minimum necessary for the service provider to fulfil its contracted purpose.

The anonymised session token data shared with game providers does not constitute a transfer of identity data and does not enable game providers to identify individual bn999 players by name or contact details.

bn999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve any outstanding disputes. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a period of 5 years following permanent account closure, to comply with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for 7 years from the date of the transaction, in accordance with standard financial record-keeping requirements applicable to BDT-denominated transactions.
• KYC Verification Documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction to support dispute resolution and quality assurance.
• Technical and Analytics Data: IP address logs and session metadata are retained for 12 months for fraud detection and security monitoring purposes, after which they are anonymised or deleted.
• Marketing Consent Records: Records of your consent to receive promotional communications are retained for the duration of your account and for 3 years following account closure or withdrawal of consent.

As a bn999 player whose personal data is processed under this Policy, you hold the following rights with respect to your data. All requests are processed at no charge and within 30 days of receipt:

• Right of Access: You may request a copy of all personal data that bn999 holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by bn999 be corrected or supplemented. Minor corrections (such as updating a phone number or email address) can be made directly via the account dashboard.
• Right to Erasure: You may request that bn999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that erasure requests may be declined where retention is required by law — for example, AML record-keeping obligations described in Section 9.
• Right to Restriction: You may request that bn999 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that bn999 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests at any time. You may also withdraw consent for marketing communications at any time via your account notification preferences.
• Right Not to be Subject to Automated Decision-Making: bn999 does not make solely automated decisions that produce significant legal or similarly significant effects on individual players. Human review is involved in all account suspension, bonus forfeit, and AML escalation decisions.

To exercise any of the rights above, contact us by email at [email protected] with the subject line "Data Rights Request", clearly stating which right you are exercising and providing sufficient information to verify your identity. We may request a copy of your NID or other identity document before processing the request to protect against fraudulent access to another player's data.

bn999 is a strictly 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account, access the platform, or provide any personal data to bn999 under any circumstances.

Age verification is a mandatory step in the bn999 account registration and KYC process. Where bn999 identifies or has reasonable grounds to believe that an account is held by a person under the age of 21, that account will be immediately suspended, all pending withdrawals will be placed on hold pending identity review, and any balance may be returned to the originating payment method subject to verification.

bn999 implements a layered approach to data security designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the bn999 platform is encrypted using 256-bit TLS encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• At-Rest Encryption: Sensitive personal data fields — including identity document copies, financial account references, and password hashes — are encrypted at rest in our database infrastructure.
• Access Controls: Access to personal data within the bn999 organisation is restricted on a need-to-know basis. Staff who require access to player data for support or compliance purposes are subject to role-based access controls and activity logging.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA via SMS on their bn999 accounts. Internal staff access to administrative systems requires mandatory 2FA.
• Regular Security Audits: The bn999 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bn999 maintains a documented data breach incident response procedure. In the event of a breach, the incident response team is activated immediately, affected systems are isolated, and impacted players are notified without undue delay where their rights are likely to be affected.

While bn999 employs robust technical and organisational security measures, no internet-based platform can guarantee absolute security. Players are also responsible for maintaining the security of their own devices and account credentials, as described in the bn999 Terms and Conditions.

bn999 reviews this Privacy Policy periodically and will update it to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email or in-platform notification at least 7 days before the revised Policy takes effect.

The most current version of this Policy is always accessible at https://bn999.io/privacy-policy. The effective date displayed at the top of this document reflects the date of the most recent revision. Your continued use of the bn999 platform following the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not agree with a revised Policy, you have the right to close your account before the revised Policy takes effect. Outstanding verified balances will be processed for withdrawal as normal subject to standard KYC requirements.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how bn999 handles your personal data, please contact us using the details below. All contacts are handled by dedicated support staff in Bangladesh Standard Time (BST, UTC+6):

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Live Chat:Available 24/7 via the bn999 platform after completing your bn999 login
• Response Time: Live chat within 2 minutes; email within 24 hours on business days

We take all privacy complaints seriously. Upon receipt of a complaint, bn999 will acknowledge it within 2 business days and aim to provide a full written response within 14 days. Where a complaint is complex and requires additional investigation, we will keep you informed of progress at regular intervals.