be99 Privacy Policy

be99 is an online casino and sports betting platform operating at be99.vu, designed and built specifically to serve the Bangladesh market. be99 provides a wide range of gaming and betting services including live casino games, slot games, crash games, and sports betting markets covering cricket (BPL, IPL, T20 World Cup, ICC tournaments), football, kabaddi, and other sports.

For the purposes of this Privacy Policy, "be99", "we", "us", and "our" refer to the operator of the be99 platform. "You" and "your" refer to any individual who accesses the be99 platform, whether as a registered player or as an anonymous visitor.

be99 acts as the data controller in respect of all personal data collected through the be99 platform. As data controller, be99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently. Any questions regarding this Privacy Policy or your personal data should be directed to our support team at [email protected].

be99 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party sources where permitted by law. The categories of data we collect are as follows:

Registration and identity data:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify the 21+ age requirement)
• Residential address (including division, district, upazila, and postal code within Bangladesh)
• Mobile phone number (registered in Bangladesh)
• Email address
• Username and encrypted password
• National Identity Card (NID) number or passport number, collected during KYC verification

Financial and transaction data:

• bKash, Nagad, Rocket, or Upay mobile wallet account number associated with your deposits and withdrawals
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Visa or Mastercard details (card number is tokenised; be99 does not store raw card numbers)
• Deposit history, withdrawal history, and current account balance
• Details of any bonuses claimed, including wagering progress

Gaming and betting activity data:

• Game session records including titles played, bet amounts, outcomes, and session duration
• Sports bets placed, markets selected, stake amounts, and settlement outcomes
• Win/loss history and responsible gaming metrics (session time, net position)

Technical and device data:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Device fingerprint (a non-personally-identifying composite of device attributes used for fraud detection)
• Login timestamps, session durations, and page interaction logs
• Cookie identifiers and similar tracking technology identifiers (see Section 6)

Communications data:

• Content of support messages, live chat transcripts, and email correspondence with the be99 team
• Complaint records and dispute resolution correspondence
• Promotional communication preferences (opted-in or opted-out status)

be99 uses the personal data described in Section 2 for the following purposes:

be99 does not use your personal data to make fully automated decisions that have significant legal or similarly significant effects on you, without a human review stage being available upon request.

be99 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and be99 — specifically, to create and manage your account, process your deposits and withdrawals, and provide you with access to games and betting markets.
• Legal obligation: be99 is required to collect and process certain data in order to comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) obligations, and age verification requirements. This processing is mandatory and cannot be waived by you as a player.
• Legitimate interests: be99 processes technical and device data on the basis of its legitimate interests in preventing fraud, protecting the security of the platform and its players, and maintaining the integrity of games and betting markets. These interests have been balanced against your privacy rights and are not overridden by them in the context of online gaming operations.
• Consent: Where be99 sends you marketing and promotional communications, this is done on the basis of your explicit opt-in consent, given at registration or subsequently through your account settings. You may withdraw this consent at any time by updating your communication preferences or by contacting [email protected].

be99 does not sell your personal data to any third party. be99 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to process your deposit or withdrawal transactions. These providers operate under their own privacy policies and regulatory frameworks.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe may receive your account session identifiers and stake data in order to deliver their games to you. Game providers do not receive your full identity information.
• KYC and identity verification services: Specialised third-party KYC providers may process your identity documents on be99's behalf for the purposes of age verification and anti-money laundering checks. These providers are bound by strict confidentiality and data security obligations.
• Fraud prevention and security providers: Device fingerprint data and IP address data may be shared with specialist security vendors to identify and prevent fraudulent account activity, collusion, and bonus abuse.
• Legal and regulatory authorities: be99 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law or by a valid legal order. be99 will notify you of such disclosures where legally permitted to do so.

All third-party recipients of personal data are required to process that data in accordance with applicable data protection law and under contractual terms that impose data security and confidentiality obligations no less protective than those applied by be99 itself.

be99 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, detect fraud, and — where you have given consent — to understand how you use the platform so we can improve it. The categories of cookies used on be99 are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without preventing you from using core platform features.
• Security cookies: Used to support device fingerprinting for fraud prevention and to flag suspicious login activity. These are operational and cannot be disabled.
• Analytics cookies (consent-based): Where you have consented, be99 uses first-party analytics cookies to measure aggregate page traffic, session duration, and feature usage patterns. This data is processed in anonymised or pseudonymised form and is used solely to improve the platform experience.
• Preference cookies: These cookies remember your non-essential platform settings such as display preferences and notification settings. They are set only after account login.

You can manage your cookie preferences through your browser settings. Blocking strictly necessary and security cookies will impair or prevent your use of the be99 platform. Blocking analytics cookies will not affect your ability to play games or place bets.

be99 retains personal data for no longer than is necessary for the purpose for which it was collected, taking into account applicable legal, regulatory, and operational retention requirements. The following retention periods apply:

After the applicable retention period has elapsed, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

be99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational measures are in place:

• Transport encryption: All data transmitted between your device and the be99 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages of the platform, not just login and payment pages.
• Password security: Account passwords are hashed using a strong, salted cryptographic algorithm. Plain-text passwords are never stored or logged anywhere in the be99 infrastructure.
• Payment data tokenisation: Card payment details processed via Visa and Mastercard are tokenised at the point of entry. be99's servers do not receive or store raw card numbers at any point in the transaction flow.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. be99 staff accounts are protected by multi-factor authentication, and all internal data access is logged and audited.
• Infrastructure security: The be99 platform is hosted on secured server infrastructure with regular vulnerability scanning, intrusion detection monitoring, and network-level access controls.
• Incident response: be99 maintains a data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights, be99 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

While be99 takes all reasonable steps to protect your data, no digital system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for using a secure, up-to-date device and network connection when accessing the platform.

You have the following rights in relation to the personal data that be99 holds about you. To exercise any of these rights, please submit a written request to [email protected]. be99 will respond within 30 calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data that be99 holds about you, along with information about how that data is being used. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: If any personal data that be99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that corrections to identity data may require supporting documentation.
• Right to erasure: You may request that be99 delete your personal data. This right is not absolute — be99 may be required to retain certain data for legal, regulatory, or fraud prevention purposes even after an erasure request. Where erasure is not possible in full, be99 will explain the reasons and delete as much data as is permissible.
• Right to restrict processing: You may request that be99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being disputed or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that be99 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for fraud prevention purposes. be99 will consider your objection and cease processing unless it has compelling legitimate grounds that override your interests.

The be99 platform is strictly intended for adults aged 21 years and above. be99 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the registration process and is reinforced through KYC document checks.

If be99 discovers that a registered account belongs to an individual under the age of 21, the account will be suspended immediately, all funds in the account will be frozen pending review, and the personal data associated with the account will be handled in accordance with applicable law. If you have reason to believe that a minor has registered an account on be99, please contact [email protected] immediately.

be99 supports national responsible gaming initiatives in Bangladesh and takes under-age gambling extremely seriously. Our age verification process is designed to be robust and is reviewed regularly.

be99 primarily processes player data within secure infrastructure serving the Bangladesh market. However, some of the third-party service providers described in Section 5 — particularly game providers and KYC verification services — may be based in or operate infrastructure in jurisdictions outside Bangladesh. Where personal data is transferred internationally, be99 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those applied by be99
• Transfers only to jurisdictions or organisations with demonstrated data security credentials
• Data minimisation — only the minimum data necessary for the specific service is transferred to international recipients

By using the be99 platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh as described above. If you have concerns about specific international transfers, you may contact [email protected] for further information.

be99 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the services we offer. When material changes are made to this policy, be99 will notify registered players via email to the address associated with their account and will update the version number and effective date shown at the top of this document.

The updated Privacy Policy will take effect from the date stated in the notification. Your continued use of the be99 platform after the effective date constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically. Previous versions of this document are available on request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data be99 holds about you, please contact us using the details below. All privacy-related enquiries are handled by our dedicated support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Privacy and data requests acknowledged within 48 hours; fully actioned within 30 calendar days
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Language: All privacy correspondence is handled in English

When submitting a Subject Access Request or any other data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. be99 may request additional identity verification before processing a data rights request to ensure the security of your account.