bo99 Privacy Policy

1. Who We Are

bo99 ("we", "us", "our") operates the online betting and casino platform available at bo99.io. bo99 is Bangladesh's leading digital betting destination, offering cricket betting, live casino games, slot titles, and a full suite of sports wagering markets to registered players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

As the operator of the bo99 platform, we act as the data controller in respect of the personal data you provide to us or that we collect when you use our services. This means we are responsible for determining how and why your personal data is processed, and for ensuring that it is handled lawfully and securely.

If you have any questions about this Privacy Policy or about how bo99 handles your personal data, please contact our support team at [email protected]. We are available 24 hours a day, 7 days a week.

2. Data We Collect

bo99 collects the following categories of personal data from players and platform visitors:

2.1 Identity Data

• Full legal name
• Date of birth
• National Identity Card (NID) number or passport number
• Scanned copies of identity documents submitted during KYC verification
• Profile photograph (where submitted as part of identity verification)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (where provided for verification purposes)

2.3 Account Data

• Username and encrypted password
• Account registration date and time
• Account status and activity history
• Preferred language and communication preferences

2.4 Financial Data

• bKash, Nagad, Rocket, Upay, or bank account numbers used for deposits and withdrawals
• Transaction history including deposit amounts, withdrawal amounts, and dates
• Payment method verification documents where requested

2.5 Betting and Gaming Data

• Bets placed, markets selected, odds accepted, and bet outcomes
• Casino game sessions including games played, wagers, and results
• Slot game sessions and bonus usage records
• Responsible gaming settings including deposit limits and self-exclusion status

2.6 Technical Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookie identifiers and analytics data

3. How We Collect Your Data

bo99 collects personal data through the following means:

• Direct provision: Data you supply when creating an account, completing KYC verification, making a deposit, submitting a withdrawal request, contacting support, or responding to a survey.
• Automated collection: Technical data collected automatically when you visit bo99.io, including IP address, device identifiers, browser information, and session logs gathered via cookies and server logs.
• Third-party verification services: Identity and age verification data provided by authorised third-party KYC service providers who confirm the authenticity of documents you submit.
• Payment processors: Transaction confirmation and payment status data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when you initiate deposits or withdrawals.
• Game providers: Session and wagering data received from our licensed game studio partners including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming when you participate in games on their platforms through bo99.

4. Why We Use Your Data

bo99 uses the personal data we collect for the following purposes:

5. Legal Basis for Processing

bo99 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the bo99 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you promotional communications about bo99 offers. You may withdraw consent at any time by contacting [email protected], and withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. Sharing Your Data

bo99 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers

Trusted third-party vendors who support the operation of the bo99 platform, including KYC verification providers, payment processing partners, cloud hosting services, and customer support software providers. All such providers are contractually required to handle your data in accordance with applicable data protection standards and may not use your data for any purpose other than providing the contracted service to bo99.

6.2 Game Studio Partners

Licensed game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming receive session and wagering data necessary to deliver their games to you through the bo99 platform. This data is processed under data sharing agreements that restrict its use to game delivery and technical support purposes.

6.3 Payment Partners

Payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction data required to process your deposits and withdrawals. These entities operate their own independent privacy policies governing their handling of financial data.

6.4 Legal and Regulatory Authorities

bo99 may disclose your personal data to competent government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or legitimate legal process. We will notify you of such disclosures where we are legally permitted to do so.

6.5 Business Transfers

In the event that bo99 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by bo99 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

7. Payment Data and Financial Information

bo99 takes the security of your financial information with particular seriousness. Payment data including mobile banking account numbers (bKash, Nagad, Rocket, Upay) and bank account details are used exclusively for processing your deposit and withdrawal transactions and for verifying the ownership of payment methods in accordance with our anti-fraud and KYC procedures.

bo99 does not store full card numbers or mobile banking PINs. Payment transactions are processed through secure, encrypted channels. Where card or bank account details must be retained for the purpose of withdrawal processing, they are stored in encrypted form with access restricted to authorised payment operations staff only.

All transactions on the bo99 platform are conducted in Bangladeshi Taka (BDT / ৳). Currency conversion, where applicable for international payment methods, is handled by the relevant payment processor and bo99 is not responsible for exchange rate discrepancies or conversion fees applied by third-party providers.

8. Cookies and Tracking Technologies

bo99 uses cookies and similar tracking technologies on the bo99.io website to ensure the platform functions correctly, to understand how players use our services, and to improve the overall user experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to operate. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and recent game history to personalise your experience on subsequent visits.
• Analytics cookies: Collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve platform performance and content.
• Marketing cookies: Used, with your consent, to understand the effectiveness of our promotional activities and to avoid showing you irrelevant communications. These cookies do not enable third parties to display advertising on external websites.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the bo99 platform. For full details on the specific cookies in use, please contact our support team.

9. Data Retention

bo99 retains your personal data for as long as your account remains active and for a defined period thereafter, in line with our legal obligations and legitimate business interests. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction to satisfy financial record-keeping requirements.
• Betting and gaming records: Retained for a minimum of 3 years to support dispute resolution and responsible gaming monitoring.
• Customer support correspondence: Retained for 2 years from the date of the most recent interaction.
• Technical and analytics data: Aggregated or anonymised after 12 months; individual session logs retained for up to 12 months for security purposes.

Where you request deletion of your personal data and no overriding legal retention obligation applies, bo99 will action your request within 30 days and confirm deletion in writing.

10. Data Security

bo99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including identity documents and payment information
• Multi-factor authentication requirements for internal staff accessing player data systems
• Role-based access controls that restrict data access to personnel with a genuine operational need
• Regular security audits and vulnerability assessments of our platform infrastructure
• Intrusion detection systems and continuous monitoring of our server environment
• Documented data breach response procedures with defined notification timelines

In the event of a personal data breach that is likely to result in a risk to your rights and interests, bo99 will notify affected players without undue delay and take prompt steps to contain and remediate the breach.

11. Your Rights

As a player on the bo99 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of the personal data bo99 holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated. For basic account details, you may also update information directly within your account settings.
• Right to erasure: You may request that bo99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has been unlawful. This right is subject to legal retention obligations that may require bo99 to retain certain data regardless.
• Right to restrict processing: You may request that bo99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is disputed.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that bo99 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests. bo99 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12. Children and Minors

The bo99 platform is strictly for adults aged 21 and above. bo99 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage registration, and accounts identified as belonging to individuals under 21 will be closed immediately with any balance returned to the deposit source.

If you believe that a person under the age of 21 has registered on bo99 or that a minor's personal data has been submitted to our platform, please contact us immediately at [email protected]. We will investigate and take prompt action to delete any such data and close the relevant account.

13. International Data Transfers

bo99 primarily stores and processes player data within secure data centre environments. Where the use of third-party service providers (including cloud infrastructure, KYC verification services, or game studio partners) involves the transfer of personal data outside of Bangladesh, bo99 ensures that appropriate safeguards are in place to protect the data during and after transfer. Such safeguards include contractual data protection clauses that require the receiving party to protect personal data to a standard equivalent to that applied within Bangladesh.

By registering on the bo99 platform and submitting your personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh as described in this section.

14. Changes to This Policy

bo99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantially affect how your personal data is used or your rights in relation to it — we will notify you by email to your registered address or via a prominent notice on the bo99 platform at least 14 days before the changes take effect.

Non-material changes such as typographical corrections, clarifications, or minor structural updates may be made without advance notice and will take effect immediately upon publication. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of how bo99 protects your data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bo99 handles your personal data, please reach out to our support team using the contact details below. All data-related enquiries are handled with full confidentiality.

• Email: [email protected]
• Subject line for data requests: Data Rights Request
• Support hours: 24/7, 365 days a year
• Response time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries

For urgent account security concerns, including suspected unauthorised access or data breaches affecting your account, please mark your email as urgent and our security team will prioritise your case.