bx99 Privacy Policy —
Your Data, Handled with Care

This Privacy Policy ("Policy") describes how bx99 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of all users ("User", "Player", "you", "your") who access or register on the bx99 platform at bx99.im. This Policy applies to all services offered on the bx99 platform, including the sports betting sportsbook, live cricket markets, BPL and IPL betting, live casino, slot games, virtual sports, and all account management functions.

By creating a bx99 account or using any part of the bx99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on the bx99 website.

1. Introduction

bx99 is committed to safeguarding the privacy of every player across Bangladesh. Whether you are placing a bet on a Bangladesh Tigers T20 match, spinning the reels in our slots section, or managing your bKash deposit from Dhaka or Chittagong, your personal data deserves the highest standard of care and protection.

This Privacy Policy has been drafted in plain English so that it is straightforward to understand. We have structured it in clearly labelled sections so you can navigate directly to the information most relevant to you. If you have any questions about this Policy at any time, our support team is available 24 hours a day at [email protected].

2. Data Controller

For the purposes of this Privacy Policy, bx99 acts as the data controller responsible for determining how and why personal data is processed on the bx99 platform. As data controller, bx99 is accountable for ensuring that personal data is handled in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our dedicated data protection contact at [email protected]. We aim to respond to all data-related requests within 30 days of receipt.

3. Data We Collect

bx99 collects personal data across several categories depending on your interaction with the platform. The following table sets out the main categories of data we collect and examples of the specific data points within each category.

3.1 Special Categories of Data

bx99 does not intentionally collect or process special categories of sensitive personal data, such as health information, religious beliefs, political opinions, or biometric data (beyond photographic identity verification required for KYC compliance). If you voluntarily disclose sensitive personal information to our support team — for example, in the context of a responsible gaming request — that information will be handled with heightened confidentiality and used solely for the purpose of providing appropriate support.

4. How We Collect Your Data

bx99 collects personal data through the following channels:

• Direct Provision: Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically through our platform systems, server logs, and analytics tools each time you access bx99.im from any device.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and local storage as described in Section 7 of this Policy.
• Third-Party Sources: Data received from identity verification providers, KYC service partners, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and fraud detection services in connection with your account and transactions.
• Publicly Available Sources: In limited circumstances and only for fraud prevention and AML compliance purposes, bx99 may cross-reference data against publicly available sources such as sanctions lists and PEP (Politically Exposed Persons) databases.

5. How We Use Your Data

bx99 uses the personal data we collect for the following purposes:

5.1 Account Management

To create, operate, and maintain your bx99 account, including processing your registration, managing your login credentials, applying your account preferences, and communicating important account-related updates to you.

5.2 Transaction Processing

To process deposits, withdrawals, and all financial transactions on your account — including verifying the ownership and validity of your bKash, Nagad, Rocket, Upay, bank transfer, or card payment method — and to maintain accurate financial records of all account activity.

5.3 Identity Verification and KYC Compliance

To verify your identity, age, and residential address in accordance with our KYC obligations. bx99 is required to verify the identity of all members before processing withdrawal requests and for accounts that meet certain transaction volume thresholds. This process helps protect our platform against fraud, money laundering, and underage gambling.

5.4 Legal and Regulatory Compliance

To comply with applicable anti-money laundering (AML) laws, counter-terrorism financing obligations, fraud prevention requirements, and any lawful request from law enforcement or regulatory authorities. bx99 may be legally required to retain certain data for defined periods regardless of account closure.

5.5 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, duplicate account registrations, bonus abuse, unauthorised account access, money laundering, and any other prohibited activities as defined in our Terms & Conditions. Technical and behavioural data is analysed by our security systems to identify patterns that may indicate suspicious activity.

5.6 Customer Support

To provide effective customer support, respond to your enquiries, resolve disputes, investigate complaints, and improve the overall quality of our support service. Communications with our support team are recorded and retained for training, quality assurance, and dispute resolution purposes.

5.7 Platform Improvement and Analytics

To analyse aggregated usage data in order to improve the bx99 platform, optimise user experience, identify technical issues, prioritise new features, and understand how players across Bangladesh interact with our cricket betting, casino, and slot services.

5.8 Responsible Gaming

To monitor player behaviour in connection with our responsible gaming obligations, identify players who may be at risk of gambling-related harm, and proactively offer responsible gaming tools such as deposit limits, session time controls, cooling-off periods, and self-exclusion where warranted. The use of your data for this purpose is a core component of bx99's commitment to player welfare.

5.9 Marketing and Promotions

To send you promotional communications about bx99 bonuses, cricket betting offers, IPL and BPL season promotions, and other platform updates — but only where you have provided explicit consent or where we have a legitimate interest that is not overridden by your privacy rights. You may opt out of marketing communications at any time through your account settings or by contacting support.

6. Legal Basis for Processing

bx99 processes personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you — including account creation, transaction processing, KYC verification, and customer support — is conducted on the basis that it is required to deliver the services you have requested.
• Legal Obligation: Processing required to comply with our AML, fraud prevention, and regulatory compliance obligations is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics is conducted on the basis of our legitimate interests, where those interests are not outweighed by your privacy rights.
• Consent: Processing for optional marketing communications and non-essential cookies is conducted on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Cookies and Tracking Technologies

bx99 uses cookies and similar tracking technologies on the bx99.im platform to enable core platform functionality, remember your preferences, analyse usage patterns, and support security measures. The following categories of cookies are used on bx99.im:

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable core features such as user authentication, session management, security token verification, and shopping cart-equivalent bet slip functionality. These cookies cannot be disabled without preventing you from using key platform features.

7.2 Performance and Analytics Cookies

These cookies collect anonymised information about how visitors use bx99.im — including which pages are visited most frequently, how long sessions last, and which features are used most often. This data is used in aggregate form to improve the platform and is not linked to individual user profiles.

7.3 Functionality Cookies

These cookies remember choices you make on the platform — such as your preferred language, default stake amount, and display settings — to provide a more personalised experience on return visits.

7.4 Security Cookies

These cookies support our fraud detection and account security systems by helping to identify unusual or suspicious login patterns, device fingerprinting for account protection, and CSRF (Cross-Site Request Forgery) prevention tokens.

8. Data Sharing and Disclosure

bx99 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients under strict data protection conditions:

8.1 Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or any supported bank transfer service, we share necessary financial and identity data with the relevant payment processor to complete the transaction. All payment partners are contractually bound to handle your data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond transaction processing.

8.2 KYC and Identity Verification Partners

We share identity documents and personal data with our contracted KYC verification service providers to verify your identity, age, and residential address. These providers operate under strict contractual data processing agreements and are certified to handle sensitive identity documents securely.

8.3 Fraud Prevention and AML Services

We may share data with fraud detection and anti-money laundering service providers to screen transactions and account activity against sanctions lists, PEP databases, and fraud risk indicators. This sharing is necessary for legal compliance and platform security purposes.

8.4 Game Providers

When you play games provided by third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, SA Gaming, Spribe, or Vivo Gaming, a session identifier and minimum necessary data are shared with the relevant provider to initialise and record your game session. Game providers are not permitted to use this data for independent marketing purposes.

8.5 Legal and Regulatory Authorities

bx99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or lawful authority. We will notify you of any such disclosure where we are legally permitted to do so.

8.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of bx99 assets, personal data held by bx99 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

9. Data Retention

bx99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account Data (active accounts): Retained for the full duration of your account relationship with bx99 plus a minimum of 5 years following account closure, to satisfy AML record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following account closure or the conclusion of any regulatory investigation, whichever is later.
• Customer Support Records: Retained for 3 years from the date of each interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your marketing consent plus 3 years, to demonstrate compliance with consent obligations.
• Technical and Log Data: Retained for up to 12 months from the date of collection, unless required for longer retention for security investigation purposes.
• Responsible Gaming Records: Self-exclusion and responsible gaming tool records are retained for a minimum of 7 years to prevent re-registration during exclusion periods.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

10. Data Security

bx99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols, indicated by the padlock icon in your browser address bar.
• Encryption at Rest: Sensitive personal and financial data stored on bx99 servers is encrypted at rest using AES-256 encryption to protect against unauthorised access in the event of a security breach.
• Access Controls: Access to personal data within bx99 systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business reason may access identifiable personal data, and all access is logged and auditable.
• Two-Factor Authentication: bx99 supports two-factor authentication (2FA) for player accounts, providing an additional layer of protection against unauthorised access.
• Regular Security Audits: Our platform and data systems undergo regular security assessments, penetration testing, and vulnerability scanning by qualified security professionals.
• Incident Response: bx99 maintains a documented data breach response plan. In the event of a breach that poses a significant risk to your rights and freedoms, we will notify you and any relevant authorities within the timeframes required by applicable law.

While bx99 takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own bx99 account credentials. If you suspect that your account has been compromised, please contact our support team immediately at [email protected].

11. Your Data Rights

As a bx99 member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your registered account username and a description of your request. We will respond within 30 days of receiving a valid request.

11.1 Right of Access

You have the right to request a copy of the personal data bx99 holds about you (commonly known as a Subject Access Request). We will provide this information in a structured, commonly used, machine-readable format wherever possible.

11.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account information directly through your bx99 account settings dashboard.

11.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where retention is required for legal compliance, AML obligations, or the establishment or defence of legal claims. We will inform you of any applicable limitations when responding to an erasure request.

11.4 Right to Restriction of Processing

You have the right to request that bx99 restricts the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests, while that objection is being evaluated.

11.5 Right to Data Portability

Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another controller where technically feasible.

11.6 Right to Object

You have the right to object to the processing of your personal data where such processing is based on legitimate interests, including profiling for direct marketing purposes. If you object to direct marketing, we will cease that processing immediately upon receipt of your objection.

11.7 Rights Related to Automated Decision-Making

Where bx99 makes automated decisions that have a significant effect on you — such as account suspension triggered by automated fraud detection — you have the right to request human review of that decision. Please contact our support team to request a manual review of any automated decision you believe was made in error.

12. Children's Privacy and Underage Protection

The bx99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to bx99, we will immediately close the account, void all associated transactions, and securely delete all personal data associated with that account.

bx99 employs mandatory KYC age verification for all members. All accounts are required to submit valid proof of age documentation before withdrawal privileges are activated. Our systems are designed to detect and prevent underage access at every stage of the registration and account lifecycle.

If you believe that a minor may have accessed the bx99 platform or provided personal data to bx99, please notify us immediately at [email protected] so that we can take prompt action. We take underage gambling prevention extremely seriously and will cooperate with families and guardians to address any such concern.

13. International Data Transfers

bx99 may transfer your personal data to recipients located in countries outside your country of residence in connection with payment processing, KYC verification, fraud detection, and cloud infrastructure services. Where such transfers occur, bx99 ensures that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection standards.

Safeguards for international data transfers may include contractual data processing agreements incorporating standard contractual clauses, transfers to recipients in jurisdictions recognised as providing an adequate level of data protection, or other legally recognised transfer mechanisms. Details of the specific safeguards applicable to any international transfer of your data are available upon written request to [email protected].

14. Third-Party Links and Platforms

The bx99 platform may contain links to the websites or applications of third-party game providers, payment processors, or other partners. This Privacy Policy applies only to data collected by bx99 directly on the bx99.im platform. We are not responsible for the privacy practices or content of any third-party website, application, or service. We encourage you to review the privacy policies of any third-party platform you access through or alongside bx99 before providing any personal data to them.

Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe operate their own data environments for the purposes of delivering game content and maintaining game integrity. Any data processed by these providers in connection with your game sessions is governed by their respective privacy policies, which are accessible on their official websites.

15. Marketing Communications

bx99 may send you promotional communications about platform bonuses, cricket betting offers, IPL and BPL season specials, Eid promotions, Pohela Boishakh offers, and other seasonal campaigns — but only where you have given explicit consent to receive such communications at the time of registration or subsequently via your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your bx99 account settings dashboard;
• Clicking the "unsubscribe" link included at the bottom of any promotional email we send you; or
• Contacting our support team at [email protected] with a written opt-out request.

Please allow up to 5 business days for your opt-out request to take full effect across all communication channels. Please note that withdrawing consent to marketing communications does not affect your receipt of essential transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates — these are sent as part of our service delivery and are not subject to marketing opt-out.

16. Changes to This Privacy Policy

bx99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable legal requirements. When we make material changes to this Policy, we will:

• Update the "Effective Date" and version number at the top of this page;
• Send a notification email to all registered bx99 members at the email address associated with their account;
• Display a prominent notice on the bx99.im platform for a minimum of 30 days following the update; and
• Where the changes involve a new or different basis for processing your personal data, request fresh consent where required.

Your continued use of the bx99 platform following notification of a Privacy Policy update constitutes acceptance of the revised Policy. If you do not agree to the updated Privacy Policy, you should cease using the platform and contact [email protected] to request account closure and data deletion where applicable.

We recommend that you review this Privacy Policy periodically to stay informed about how bx99 is protecting your personal data. Previous versions of this Policy are available upon written request to our support team.

17. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or your data rights, please contact the bx99 data protection team using the details below:

• Email: [email protected] (responses within 30 days for data rights requests; within 24 hours for general support)
• Subject Line: Use "Privacy Policy Query" or "Data Rights Request" as appropriate
• Response Language: English
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

When submitting a data rights request, please include your registered bx99 account username, a clear description of your request, and any relevant reference numbers (such as transaction IDs for financial data queries). This helps us locate your records accurately and respond as efficiently as possible.