bv99 Privacy Policy — How We Protect Your Data

Last Updated: January 2026

1. Introduction

bv99 ("bv99", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the bv99 platform at https://bv99.io ("the Platform"). This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we process it, the parties with whom it may be shared, the security measures we employ, and the rights available to you as a data subject.

This Policy applies to all visitors, registered players, and former account holders of the bv99 platform, including individuals accessing the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh. By accessing the Platform or creating a bv99 account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the bv99 Terms and Conditions, which govern the overall contractual relationship between you and bv99. In the event of any conflict between this Policy and the Terms and Conditions on matters of data privacy, this Policy shall prevail.

2. Data Controller

bv99 acts as the data controller in respect of the personal data collected through the Platform. As data controller, bv99 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions or concerns regarding the manner in which bv99 processes your personal data, or if you wish to exercise any of the rights described in Section 9 of this Policy, please contact us using the details provided in Section 15.

3. Data We Collect

bv99 collects personal data through a variety of means, including directly from you during account registration and use of the Platform, automatically through technical systems as you interact with the Platform, and from third-party sources where permitted by law. The principal categories of personal data we collect are as follows:

3.1 Identity and Contact Data

When you register a bv99 account or complete KYC identity verification, we collect your full legal name as it appears on your identity document, your date of birth, your email address, your Bangladeshi mobile phone number, your city or region of residence within Bangladesh, and copies or details of government-issued identity documents such as your National Identity Card, passport, or driving licence.

3.2 Financial and Transaction Data

In connection with deposits, withdrawals, and other financial transactions conducted on the Platform, we collect transaction reference numbers and timestamps, the mobile financial service account reference associated with your bKash, Nagad, Rocket, or Upay account (we do not store full account credentials), the amounts deposited and withdrawn, your account balance history, and records of any bonuses or promotional credits applied to your account.

3.3 Technical and Device Data

When you access the bv99 Platform, our servers and analytics systems automatically collect your IP address and approximate geographic location derived from it, your device type, model, and operating system, your browser type and version, your internet service provider, session start and end timestamps, and referral URLs indicating how you arrived at the Platform.

3.4 Usage and Gameplay Data

We record information about how you interact with the Platform, including the games you play (slots, live casino, cricket betting, table tennis, Fortune Bingo), your betting and wagering history, your win/loss records, the features and sections of the Platform you visit, and your responsiveness to responsible gaming interventions such as deposit limits and session reminders.

3.5 Communications Data

If you contact bv99 customer support, we retain records of that correspondence — including the content of emails, live chat transcripts, and any documents you share with our support team — for the purposes of resolving your query, training, and quality assurance.

4. How We Use Your Data

bv99 processes your personal data only where there is a lawful basis for doing so. The lawful bases we rely upon are: performance of a contract (where processing is necessary to deliver the services you have requested); compliance with a legal obligation; our legitimate interests (where processing is necessary for purposes that are not overridden by your fundamental rights and freedoms); and your consent (where you have actively opted in to a specific form of processing, such as marketing communications).

The specific purposes for which we use your personal data include:

• Creating and managing your bv99 player account and verifying your identity and age (21+).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and maintaining accurate financial records.
• Conducting KYC identity verification and anti-money laundering (AML) checks as required by applicable standards.
• Detecting, investigating, and preventing fraudulent activity, collusion, bonus abuse, and other prohibited conduct as defined in the bv99 Terms and Conditions.
• Monitoring gameplay activity for the purposes of responsible gaming — including identifying patterns indicative of problem gambling and triggering appropriate interventions.
• Providing customer support and resolving account queries, disputes, and technical issues.
• Improving, optimising, and personalising the bv99 Platform based on aggregated and individual usage data.
• Sending you transactional communications — including deposit confirmations, withdrawal notifications, and security alerts — which are necessary for the operation of your account.
• Sending you marketing communications about bv99 promotions, bonuses, and seasonal offers, where you have provided consent to receive such communications.
• Maintaining internal records and fulfilling our obligations under applicable law.

5. Sharing Your Data

bv99 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with third parties only in the following limited circumstances:

5.1 Service Providers

We engage carefully vetted third-party service providers to assist with specific operational functions, including payment processing (bKash, Nagad, Rocket, Upay), identity and KYC verification, fraud detection, cloud infrastructure hosting, email delivery, and customer support tooling. All service providers are bound by data processing agreements that require them to process your data only on our documented instructions, to implement appropriate security measures, and to refrain from using your data for their own independent purposes.

5.2 Game Technology Providers

The casino games available on bv99 are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process technical gameplay data (such as session identifiers and game results) in order to deliver their games. This processing is governed by the providers' own applicable data policies.

5.3 Legal and Regulatory Disclosure

bv99 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or other binding legal instrument. We will notify you of any such disclosure to the extent permitted by law.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bv99's assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and ensure that appropriate protections remain in place.

6. Cookies & Tracking Technologies

bv99 uses cookies and similar tracking technologies to deliver and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These collect anonymised information about how visitors use the Platform — such as which pages are visited most frequently and how users navigate between sections. This data is used solely to improve Platform performance.
• Functional Cookies: These remember your preferences (such as language settings and responsible gaming tool configurations) to provide a more personalised experience on return visits.
• Marketing Cookies: Used only where you have provided consent. These track your interactions with bv99 promotional content so that we can deliver more relevant offers and measure the effectiveness of our campaigns.

You can manage your cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the bv99 Platform. Strictly necessary cookies cannot be disabled via browser settings as they are essential to Platform operation.

7. Data Retention

bv99 retains personal data only for as long as is necessary for the purposes described in this Policy, or for as long as is required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your bv99 account plus a minimum of five (5) years after account closure, in order to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction.
• KYC identity documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer support communications: Retained for a period of three (3) years from the date of the last communication.
• Marketing consent records: Retained for the duration of your account and for three (3) years following withdrawal of consent or account closure.
• Technical logs: Retained for a rolling period of twelve (12) months, subject to extension where required for active security investigations.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

8. Security Measures

bv99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bv99 servers.
• Encryption of sensitive personal data and financial records stored in our databases.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific role.
• Regular security audits, vulnerability assessments, and penetration testing of the bv99 Platform infrastructure.
• Multi-factor authentication options for player accounts, including SMS-based verification.
• Intrusion detection and real-time monitoring systems to identify and respond to suspicious activity.
• Staff training on data protection obligations and security best practices.

While bv99 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bv99 will notify affected players promptly and take immediate remediation steps.

9. Your Data Rights

As a data subject, you hold a number of rights in relation to the personal data bv99 holds about you. These rights are as follows:

• Right of Access: You have the right to request a copy of the personal data bv99 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations — for example, we cannot delete transaction records we are required to retain for AML compliance.
• Right to Restriction: You have the right to request that bv99 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the bv99 Data Protection team using the details in Section 15. We will respond to all valid requests within thirty (30) days. We may require verification of your identity before processing your request to protect against unauthorised access to your data.

10. Marketing Communications

bv99 will send you promotional communications — including information about bonuses, seasonal promotions (Eid, BPL, IPL, Pohela Boishakh), new game launches, and exclusive offers — only where you have explicitly opted in to receive such communications during account registration or subsequently via your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences within your bv99 account settings or by contacting bv99 support directly. Withdrawal of marketing consent will take effect within 5 business days. Please note that even after withdrawing marketing consent, you will continue to receive essential transactional communications that are necessary for the operation of your account, such as deposit confirmations and security alerts. These transactional messages are not marketing communications and are not subject to opt-out.

11. Minors

The bv99 Platform is strictly for adults aged 21 years and above. bv99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have provided personal data to bv99, please contact us immediately using the details in Section 15.

12. International Data Transfers

bv99 primarily stores and processes personal data on servers located within Asia. In certain circumstances, data may be transferred to and processed by our service providers in other countries. Where such international transfers occur, bv99 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure that your personal data receives a level of protection consistent with this Policy and applicable data protection standards.

13. Third-Party Links

The bv99 Platform does not contain links to external third-party websites. However, in the event that any third-party content is made accessible through the Platform in the future, please be aware that those third parties operate their own independent privacy policies. bv99 accepts no responsibility for the privacy practices of third-party entities. We encourage you to read the privacy policy of any third-party service before providing them with your personal data.

14. Amendments to This Policy

bv99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material, we will notify registered players by email prior to the changes taking effect and update the "Last Updated" date at the top of this Policy. Your continued use of the bv99 Platform following notification of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how bv99 protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bv99 processes your personal data, please contact our Data Protection team using the details below. We are committed to addressing all data privacy enquiries promptly and transparently.

Email: [email protected]

Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

Please include "Privacy Request" in your message subject line, along with your registered email address and a clear description of your request or concern, to help us handle your enquiry as efficiently as possible. All requests will be acknowledged within 48 hours and fully responded to within 30 days.