Your Privacy Matters at 99bmw

99bmw operates the online casino and sports betting platform accessible at https://99bmw.io (the "Platform"). For the purposes of this Privacy Policy, 99bmw is the data controller responsible for the personal information collected from players and visitors across Bangladesh and other jurisdictions where the Platform is accessible.

Our Platform is designed to serve English-speaking players in Bangladesh, offering cricket betting, live casino games, slot machines, and a range of instant-play games. All transactions on the Platform are conducted in Bangladeshi Taka (BDT), and we support local payment methods including bKash, Nagad, Rocket, and Upay.

If you have any questions about this Privacy Policy or about how 99bmw handles your personal data, you may contact our dedicated privacy team at [email protected]. This address is provided as plain text and is not a clickable link.

99bmw collects the following categories of personal data from players and visitors to the Platform:

Identity and Contact Data:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used solely for age verification purposes — players must be 21 or older)
• Residential address, including city, district, and postal code
• Email address used to register your Account
• Mobile phone number (used for account security and, where consented, marketing communications)

Identity Verification (KYC) Data:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or official government correspondence)
• Proof of payment method ownership where required for withdrawal processing

Financial and Transaction Data:

• Deposit and withdrawal amounts and dates
• Payment method identifiers (mobile wallet account numbers, partial card numbers) — full card numbers are never stored by 99bmw
• Transaction history and account balance records
• Bonus credit and wagering activity records

Technical and Usage Data:

• IP address and approximate geolocation at time of login and registration
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session duration, pages visited, and game play logs
• Cookie identifiers and session tokens (see Section 7)

Communications Data:

• Records of live chat conversations and email correspondence with our support team
• Records of formal dispute submissions and their resolutions
• Records of responsible gaming tool activations (deposit limits, self-exclusion requests)

99bmw collects personal data through the following channels and mechanisms:

• Account Registration: When you create a Player Account on the Platform, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• KYC Submission: When you submit identity verification documents in connection with a withdrawal request or at the Company's request, those documents are transmitted via our secure document upload portal.
• Deposits and Withdrawals: When you initiate a deposit or withdrawal, your payment method details and transaction amounts are collected through our payment processing integrations with bKash, Nagad, Rocket, Upay, and card payment networks.
• Platform Activity: When you use the Platform, our servers automatically collect technical data including your IP address, browser fingerprint, session duration, game play history, and betting records.
• Customer Support Interactions: When you contact our support team via live chat or email, records of those conversations are retained for quality assurance, dispute resolution, and fraud prevention purposes.
• Cookies and Tracking Technologies: The Platform uses cookies, local storage, and similar technologies to maintain session integrity, remember your preferences, and collect anonymised analytics data. See Section 7 for full details.

99bmw processes your personal data for the following specific and documented purposes:

• Account Operation: To create, maintain, and manage your Player Account, including processing deposits, withdrawals, and bonus credits.
• Age and Identity Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in accordance with our KYC obligations.
• Payment Processing: To execute deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and card payment networks, and to maintain accurate financial records.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct on the Platform.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) requirements, responsible gaming obligations, and any lawful orders or requests from competent authorities.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email.
• Responsible Gaming: To administer deposit limits, session reminders, cooling-off periods, and self-exclusion requests that you activate through your account settings or via support.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and game offering of the 99bmw Platform.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus announcements, seasonal promotions (e.g., Eid, Pohela Boishakh, BPL, IPL season offers), and account-related updates by email or SMS.

Each category of personal data processing carried out by 99bmw rests on one of the following recognised legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and 99bmw — namely, operating your Account, processing transactions, and delivering the gaming and betting services you have signed up for.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, KYC checks, AML record-keeping, and responding to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of 99bmw's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and anonymised analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out solely on the basis of your freely given, specific, and informed consent — in particular, the sending of marketing and promotional communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

99bmw does not sell your personal data to any third party. We may share limited personal data with carefully selected third-party service providers strictly as necessary to deliver Platform services. All third-party recipients are bound by contractual data protection obligations consistent with this Privacy Policy.

Categories of third parties with whom data may be shared:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard — solely to process deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to authenticate government-issued identity documents submitted during the verification process.
• Fraud Prevention and AML Services: Specialist providers that screen transactions and player behaviour against fraud, money laundering, and sanctions databases.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, Ezugi, Habanero, NetEnt, Microgaming, and Spribe may receive anonymised session data necessary to deliver their game content through the Platform. These providers are not provided with your full identity or financial records.
• Customer Support Infrastructure: Providers of our live chat and email support software may process communication records solely for the purpose of delivering support services.
• Legal and Regulatory Authorities: In limited circumstances, 99bmw may be required by law to disclose personal data to regulatory bodies, law enforcement agencies, or courts. We will notify you of such disclosures where we are legally permitted to do so.

All data sharing is conducted under contractual safeguards. No personal data is transferred to parties outside those listed above, and no data is shared for third-party advertising, profiling, or commercial purposes unrelated to the operation of the 99bmw Platform.

The 99bmw Platform uses cookies and similar tracking technologies to ensure the correct functioning of the site, maintain your session, and collect anonymised analytics data. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, store your authentication token, and ensure that your account balance and game state are preserved during your visit. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences such as language selection, display settings, and notification choices. They improve your experience by reducing the need to re-enter preferences on each visit.
• Analytics Cookies: These cookies collect anonymised data about how visitors interact with the Platform — including which pages are visited most frequently, how long sessions last, and which games are played. This data is used in aggregate form only and cannot be traced back to any individual player.
• Security Cookies: These cookies support our fraud detection systems by flagging anomalous login patterns, unusual IP addresses, and suspicious device fingerprints that may indicate unauthorised access attempts.

Cookies are stored on your device only for as long as necessary to fulfil their purpose. Session cookies are deleted when you close your browser. Persistent cookies expire within periods ranging from 30 days to 12 months depending on their function. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

99bmw retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable regulatory obligations.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• Customer Support Records: Retained for three years from the date of the final interaction in each support case, unless the matter relates to a formal dispute or legal proceeding, in which case records are retained for the duration of that proceeding plus two years.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus two years following unsubscription, as evidence of consent history.
• Technical and Session Logs: Retained for 90 days in raw form, then purged or aggregated into anonymised analytics datasets with no retention limit.

At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your personal data under the terms set out in Section 9, subject to our legal retention obligations overriding such requests where applicable.

As a player on the 99bmw Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Registered Email]". We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

Please note that certain rights are subject to limitations where 99bmw is required to retain data under applicable legal or regulatory obligations. In such cases, we will explain clearly which data cannot be deleted and why.

99bmw takes the security of your personal data seriously and employs the following technical and organisational measures to protect it against unauthorised access, loss, or disclosure:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols, preventing interception during transmission.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment method details, and account credentials — is stored in encrypted databases with access restricted to authorised personnel on a strict need-to-know basis.
• Real-Time Fraud Monitoring: Our systems continuously monitor for anomalous login patterns, unusual transaction volumes, and suspicious device activity that may indicate fraud or account compromise.
• Access Controls: Access to personal data systems is governed by role-based access control (RBAC). Only staff with a documented operational need to access player data are granted that access, and all access is logged and audited.
• Breach Response Protocol: In the event of a data breach that poses a risk to your rights and freedoms, 99bmw will notify affected players within 72 hours of becoming aware of the breach, and will take immediate remedial action to contain it.

While 99bmw employs rigorous security measures, no electronic system is entirely immune to risk. You also play an important role in protecting your data by using a strong, unique password for your Account and never sharing your login credentials with third parties. If you suspect your Account has been compromised, contact us immediately at [email protected].

The 99bmw Platform is strictly prohibited to individuals under the age of 21 years. We do not knowingly collect personal data from individuals below this age threshold. Age verification is a mandatory step in our account registration and KYC process, and accounts found to belong to underage players will be closed immediately with all associated data deleted.

If you believe that a minor has created an account on the Platform or that personal data belonging to a minor has been submitted, please notify us immediately at [email protected]. We will investigate and take appropriate action, including deletion of any such data, within 48 hours of receiving your report.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. The Platform is designed for adults aged 21 and above who are capable of making informed decisions about recreational gambling activity.

99bmw may send you promotional communications — including bonus offers, seasonal promotions tied to Eid, Pohela Boishakh, BPL, IPL, the T20 World Cup, and Victory Day — only where you have provided explicit consent to receive such communications during account registration or subsequently through your account settings.

You may opt out of marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in any promotional email sent by 99bmw.
• Updating your notification preferences within your Account Settings panel.
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out — [Your Registered Email]".

Opting out of marketing communications does not affect the delivery of essential account communications such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates. These transactional communications are sent regardless of your marketing preferences as they are necessary for the operation of your Account.

Please allow up to five business days for your opt-out preference to take full effect across all communication channels. If you continue to receive marketing communications after this period, please contact [email protected] and we will investigate promptly.

99bmw reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and services offered on the Platform. When material changes are made, we will provide reasonable advance notice by displaying a prominent notice on the Platform and, where appropriate, by sending an email notification to your registered address.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed of how your data is handled. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you disagree with any changes to this Privacy Policy, you should cease using the Platform and may request the closure of your Account by contacting [email protected]. Upon account closure, your personal data will be handled in accordance with the retention schedule set out in Section 8.

For all privacy-related enquiries, data rights requests, or concerns about how 99bmw handles your personal information, please use the contact details below. All addresses are provided as plain text and are not clickable links.

• Privacy Enquiries: [email protected]
• General Support: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Registered Email]"
• Subject Line for Marketing Opt-Out: "Marketing Opt-Out — [Your Registered Email]"
• Live Chat: Available 24 hours a day, 7 days a week, including all Bangladesh public holidays
• WhatsApp: +880 1XXX-XXXXXX (available 08:00–24:00 BST)
• Acknowledgement Time: All privacy requests are acknowledged within 48 hours and resolved within 30 calendar days.

We are committed to resolving all privacy concerns transparently and efficiently. If you feel your concern has not been adequately addressed after contacting our privacy team, you may escalate the matter through formal legal channels available in your jurisdiction.