bf99 Privacy Policy
At bf99, protecting the personal data of every player is a responsibility we take seriously. This Privacy Policy explains in clear, plain English exactly what information we collect when you use the bf99 platform, how we use it, who we share it with, and what rights you have over your own data. We are committed to handling all personal information with integrity, discretion, and security.
How bf99 Safeguards Your Privacy
These six principles underpin every decision bf99 makes about your personal data. They are not aspirations — they are operational standards applied to every data process across the platform.
All data transmitted between your device and the bf99 platform is protected by SSL/TLS encryption. Financial transactions and personal details are never sent over unencrypted channels.
bf99 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your information is used exclusively for operating and improving the bf99 platform.
We collect only the information we genuinely need to operate your account, process payments, verify your identity, and comply with applicable standards. No superfluous data is gathered.
Access to your personal data within bf99 is restricted to staff and systems that require it to perform a defined function. All internal access is logged and audited on a regular basis.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Data is securely deleted thereafter.
You have clear rights over your personal data, including the right to access, correct, and request deletion of your information. bf99 provides straightforward mechanisms to exercise each of these rights.
1. Overview
This Privacy Policy applies to all personal data collected and processed by bf99 in connection with your use of the bf99 online betting and casino platform, accessible at bf99.io and any related subdomains or mobile interfaces (collectively, the "Platform"). It covers data collected during account registration, identity verification, deposits and withdrawals, sports betting, casino gameplay, customer support interactions, and any other activity you undertake on the Platform.
bf99 is the data controller responsible for your personal data. As data controller, bf99 determines the purposes and means of processing personal data collected through the Platform and is accountable for ensuring that processing activities are carried out lawfully, fairly, and transparently.
This Privacy Policy is intended to be read alongside the bf99 Terms and Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the Platform.
If you have questions about anything in this policy, please contact us at [email protected] before using the Platform.
2. Data We Collect
bf99 collects the following categories of personal data, depending on how you interact with the Platform:
2.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identification.
- Date of birth (used to verify you are aged 21 or above).
- Residential address in Bangladesh.
- Mobile phone number (used for account security and support communications).
- Email address (used for account communications and transaction confirmations).
2.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification (National ID card or passport).
- Proof of residential address (utility bill or bank statement dated within 3 months).
- Proof of payment method ownership (screenshot or statement confirming mobile banking registration).
- Selfie or live photo (where required for enhanced identity verification).
2.3 Financial Data
- Mobile banking account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals.
- Bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank) where applicable.
- Partial card numbers (last four digits) for Visa and Mastercard transactions.
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references.
2.4 Betting and Gaming Activity Data
- Sports betting history: markets selected, odds accepted, stake amounts, and settlement outcomes.
- Casino gameplay data: games played, session durations, wager amounts, win/loss records.
- Bonus and promotion usage: bonuses claimed, wagering progress, and bonus settlement records.
2.5 Technical and Device Data
- IP address and geolocation data (country and region level).
- Device type, operating system, and browser type and version.
- Session login and logout timestamps.
- Platform pages visited, features used, and navigation paths.
2.6 Communications Data
- Records of all communications between you and the bf99 support team, including live chat transcripts, email correspondence, and support ticket logs.
- Feedback and survey responses where voluntarily submitted.
3. How We Collect Your Data
bf99 collects personal data through the following channels:
- Direct collection: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal request, placing a bet, contacting support, or completing any form on the Platform.
- Automated collection: Technical and device data collected automatically via cookies, server logs, and similar tracking technologies when you access and navigate the Platform.
- Third-party providers: Identity verification data received from KYC service providers engaged by bf99 to assist with document authentication. Payment confirmation data received from mobile banking providers (bKash, Nagad, Rocket, Upay) and banking partners.
- Inferred data: Risk and behavioural profiles developed by bf99's responsible gaming and fraud detection systems based on your activity patterns on the Platform.
4. How We Use Your Data
bf99 uses your personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your player account | Identity, contact, KYC data |
| Processing deposits and withdrawals | Financial, identity, KYC data |
| Verifying your age (21+) and eligibility | Identity, KYC data |
| Providing betting and casino services | Gaming activity, financial data |
| Detecting and preventing fraud and AML compliance | All categories |
| Responsible gaming monitoring and intervention | Gaming activity, communications data |
| Customer support and dispute resolution | Identity, communications, gaming activity |
| Platform security and technical maintenance | Technical and device data |
| Sending transactional and account notifications | Identity, contact data |
| Improving Platform performance and user experience | Technical, gaming activity data |
bf99 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated tools are used in fraud detection or responsible gaming monitoring, any action taken against your account based on automated signals is reviewed by a qualified member of the bf99 team before implementation.
5. Legal Basis for Processing
bf99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing required to perform the contract between you and bf99 — including operating your account, processing transactions, and providing betting and casino services.
- Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering checks, age verification, and fraud reporting.
- Legitimate interests: Processing carried out in pursuit of bf99's legitimate business interests, including platform security, fraud prevention, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights.
- Consent: Where you have provided explicit consent for a specific processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting support at [email protected].
6. Data Sharing
bf99 does not sell, rent, or transfer your personal data to third parties for marketing purposes. We share personal data only in the following limited circumstances:
- Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to process deposit and withdrawal transactions. These providers act as independent data controllers for their own payment processing activities.
- Identity verification providers: Third-party KYC service providers engaged by bf99 to assist with document authentication and identity confirmation. These providers process data solely on bf99's instructions.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — who may receive session and gameplay data necessary to deliver their games within the bf99 platform.
- Legal and regulatory authorities: Where required by law, court order, or regulatory instruction, bf99 may disclose personal data to competent authorities, including for AML investigations or fraud enquiries.
- Professional advisers: Lawyers, auditors, and accountants acting in their professional capacity, bound by applicable confidentiality obligations.
7. International Data Transfers
Some of the third-party providers engaged by bf99 — particularly game studios and technology infrastructure providers — may process data on servers located outside Bangladesh. Where personal data is transferred internationally, bf99 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.
Safeguards used for international transfers include: contractual data protection clauses incorporated into agreements with third-party processors; technical security controls including encryption in transit and at rest; and due diligence assessments of the data protection practices of all third-party recipients prior to engagement.
If you would like more information about the specific safeguards applied to any international transfer of your data, please contact us at [email protected].
8. Data Retention
bf99 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following guidelines:
- Active account data: Retained for the duration of your active account relationship with bf99 plus a period of 5 years following account closure, to support potential legal claims, audit obligations, and regulatory enquiries.
- KYC and identity verification documents: Retained for a minimum of 5 years following account closure in accordance with anti-money laundering standards.
- Financial transaction records: Retained for a minimum of 5 years following the date of the transaction.
- Customer support communications: Retained for 3 years following the resolution of the support interaction.
- Technical and device logs: Retained for up to 12 months, after which they are aggregated or deleted.
- Responsible gaming records: Self-exclusion records and responsible gaming intervention records are retained for the duration of any active exclusion period plus 5 years thereafter.
At the end of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with any individual.
9. Security Measures
bf99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Key measures include:
- SSL/TLS encryption: All data transmitted between your device and bf99 servers is encrypted using current-generation SSL/TLS protocols.
- Encryption at rest: Sensitive personal data — including KYC documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
- Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All access is authenticated, logged, and subject to regular review.
- Two-factor authentication: Two-factor authentication is available on all player accounts and is mandatory for all bf99 staff with access to personal data systems.
- Regular security assessments: bf99 conducts periodic security reviews and vulnerability assessments of its platform infrastructure.
- Incident response: bf99 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you without undue delay in accordance with applicable obligations.
10. Cookies and Tracking Technologies
bf99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device that allow the Platform to recognise your browser across sessions and to store certain preferences and session state information.
10.1 Types of Cookies Used
- Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without rendering core Platform functionality unavailable.
- Functional cookies: Enable personalisation features such as remembering your preferred language, odds format, and responsible gaming settings between sessions.
- Analytics cookies: Used by bf99's internal analytics tools to understand how players navigate the Platform, which features are most used, and where technical issues arise. This data is aggregated and does not identify individual users.
- Security cookies: Used by bf99's fraud detection and responsible gaming monitoring systems to identify unusual access patterns and protect account integrity.
10.2 Managing Cookies
You can control the placement of non-essential cookies through your browser settings. Instructions for managing cookies are available in the help documentation of all major browsers. Please note that disabling certain cookies may affect the functionality and performance of the bf99 Platform. Strictly necessary cookies cannot be disabled via browser settings without preventing Platform access.
bf99 does not use third-party advertising cookies or permit third-party advertisers to place tracking cookies on the Platform.
11. Your Data Rights
You have the following rights in relation to the personal data bf99 holds about you. To exercise any of these rights, please contact us at [email protected]. bf99 will respond to all verified rights requests within 30 days.
Request a copy of all personal data bf99 holds about you, along with information about how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete personal data we hold about you. Please notify us promptly if your contact details change.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal or regulatory obligations that require retention.
Request that processing of your data be restricted in certain circumstances, such as where accuracy is contested or processing is unlawful but you prefer restriction to deletion.
Request a machine-readable copy of personal data you have provided to bf99, for the purpose of transferring it to another service provider.
Object to processing of your personal data where bf99 relies on legitimate interests as its legal basis, including profiling for responsible gaming or marketing purposes.
bf99 will not charge a fee for exercising any of these rights in standard circumstances. We may request identity verification before processing a rights request to ensure we are responding to the correct individual. Where a request is manifestly unfounded or excessive, bf99 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.
12. Minors and Age Restriction
bf99 performs age verification checks on all accounts as part of the mandatory KYC process. Where bf99 identifies or suspects that an account has been registered by a person under the age of 21, the account will be suspended immediately pending investigation. Any funds deposited by an underage user will be returned to the payment source and the account will be permanently closed. No betting or gaming activity conducted by an underage user will be honoured.
If you believe that a person under the age of 21 has registered a bf99 account, please contact us immediately at [email protected]. Any personal data inadvertently collected from a minor will be permanently deleted as soon as the matter is identified and confirmed.
Parents and guardians in Bangladesh are encouraged to use parental control software to prevent underage access to online gambling platforms. For further guidance on protecting young people from gambling harm, please visit our Responsible Gaming page.
13. Changes to This Privacy Policy
bf99 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made that affect how your personal data is used, bf99 will notify registered players via email or prominent in-platform notification at least 7 days before the revised policy takes effect.
Your continued use of the bf99 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any change, you must stop using the Platform and contact support to request account closure before the revised policy comes into effect.
The "Last Reviewed" date displayed at the top of this document and in the hero section above always reflects the most recent revision date. We encourage you to review this policy periodically to stay informed about how bf99 protects your information.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bf99 handles your personal data, please contact the bf99 Data Protection team using the details below. All privacy-related enquiries are handled by our dedicated support team and responded to within 5 business days.
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week, 365 days a year — Bangladesh Standard Time (UTC+6).
Response Time: Standard enquiries within 2 business days. Rights requests within 30 calendar days. Urgent security matters addressed within 24 hours.
Your Privacy at a Glance
A plain-English summary of the most important data protection commitments bf99 makes to every player on the platform.
Your personal information is never sold or rented to third-party advertisers or data brokers under any circumstances.
Every connection to bf99.io is protected by SSL/TLS encryption, keeping your data safe in transit across all devices.
Access, correct, or request deletion of your personal data at any time by contacting the bf99 support team.
Our support team is available around the clock to answer privacy questions and process data rights requests promptly.
Ready to Experience bf99?
Now that you understand how bf99 protects your data, explore everything the platform has to offer — from live cricket betting to premium casino games and exciting slots.