bo99 Privacy Policy — How We Handle Your Data

1. Introduction & Scope

This Privacy Policy is issued by bo99 (referred to in this document as "bo99", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://bo99.bio. It describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, the measures we take to keep it secure, and the rights available to you as a data subject.

This Policy applies to all individuals who interact with the bo99 platform, including visitors who browse without registering, registered players who hold a bo99 account, individuals who contact our customer support team, and any person who uses any feature available on the platform or any communication channel maintained by bo99.

This Policy should be read alongside the bo99 Terms & Conditions and the Responsible Gaming Policy, both of which contain additional provisions relevant to how your data and account are managed. Where there is any conflict between this Privacy Policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall take precedence.

We reserve the right to update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when the most recent revision was published. Continued use of the bo99 platform after any such revision constitutes your acceptance of the updated Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register a bo99 account, interact with our support team, or complete Know Your Customer (KYC) verification, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and a copy of your government-issued photo identity document (National Identity Card, passport, or driving licence)
• Contact Data: Email address, Bangladeshi mobile phone number, and residential address
• Financial Data: Payment method details (bKash account number, Nagad account number, Rocket number, Upay number, Visa or Mastercard card number, bank account details for Dutch-Bangla Bank or BRAC Bank transfers), deposit and withdrawal transaction history, and account balance information
• Verification Documents: Utility bills, bank statements, or other proof-of-address documents submitted during KYC
• Communications Data: Any messages, emails, or chat transcripts exchanged between you and the bo99 customer support team

2.2 Information Collected Automatically

When you access the bo99 platform through any device or browser, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and time zone setting
• Usage Data: Pages visited, features accessed, games played, bets placed (including bet amounts, game selections, and outcomes), session duration, click patterns, and navigation paths within the platform
• Transaction Logs: A full audit trail of every deposit, withdrawal, bonus claim, wager, and account change, including the date, time (in Bangladesh Standard Time, UTC+6), and amount in BDT
• Location Data: Approximate geographic location derived from your IP address, used to apply regional rules and detect access from prohibited jurisdictions

2.3 Information From Third Parties

In certain circumstances, bo99 may receive personal data about you from third-party sources, including:

• Payment service providers (such as bKash, Nagad, Rocket, and Upay) who confirm transaction details and account ownership
• Identity verification and KYC service providers who assist in validating the documents you submit
• Fraud detection and anti-money-laundering (AML) screening services that cross-reference your information against sanctions lists and watchlists
• Responsible gaming databases where a player has registered a self-exclusion agreement with an external organisation

3. How We Use Your Information

bo99 processes your personal data only for legitimate, clearly defined purposes. The following table summarises the primary purposes for which we use the data we collect, together with the legal basis that justifies each use:

bo99 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review, except where required by AML or fraud detection obligations. In those limited cases, you have the right to request human review of any automated decision that affects your account.

4. Data Sharing & Third Parties

bo99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum necessary financial data with payment service providers — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank — solely to process transactions you have authorised.
• KYC & Identity Verification Providers: We work with specialist third-party identity verification services to validate the documents you submit during KYC. These providers process your identity documents strictly on our behalf and under contractual data protection obligations.
• Game Studio Partners: Games hosted on the bo99 platform are supplied by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive anonymised session data for game integrity auditing. They do not receive your full personal profile.
• Fraud & AML Screening Services: We use trusted third-party services to screen transactions and account activity against sanctions lists and fraud databases. These services process data on our behalf under strict contractual terms.
• Legal & Regulatory Disclosure: We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so. bo99 will inform you of any such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of bo99's assets, your personal data may be transferred to the acquiring entity. We will notify registered players via email prior to any such transfer and explain the implications for their data.

All third parties with whom bo99 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes specified in our data processing agreements with them.

5. Cookies & Tracking Technologies

bo99 uses cookies and similar tracking technologies (including local storage and session storage) on its platform. Cookies are small text files placed on your device that help the platform function correctly, remember your preferences, and collect analytical data to improve performance.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the bo99 platform to function. They enable you to navigate the site, maintain your logged-in session after using the bo99 Login portal, and use features such as the cashier and game launcher. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players use the platform — which pages are visited most, how long sessions last, and which features are used. This information helps us improve the bo99 experience. We use first-party analytics only; we do not use Google Analytics or similar third-party analytics tools that share your data with external platforms.
• Functional Cookies: These cookies remember your preferences, such as your preferred language setting, game lobby filter selections, and display preferences, so you do not have to reset them on every visit.
• Security Cookies: These cookies help us detect and prevent fraudulent login attempts, bot activity, and cross-site request forgery (CSRF) attacks. They form part of our platform security infrastructure.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the bo99 platform. Disabling functional cookies may mean that certain preferences are not remembered between sessions.

6. Data Retention

bo99 retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with our legal and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for a minimum of five years following account closure, as required by anti-money-laundering regulations applicable to financial services platforms operating in the Bangladesh market.
• Transaction Records: All deposit, withdrawal, and betting transaction logs are retained for a minimum of five years from the date of each transaction.
• KYC Documents: Identity and address verification documents are retained for five years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Records: Communications with the support team are retained for three years from the date of the last interaction.
• Cookies and Session Data: Session cookies are deleted when you close your browser. Persistent cookies expire according to their individual expiry settings, typically between 30 days and 12 months.

Once the applicable retention period has expired and there is no ongoing legal requirement to retain your data, bo99 will securely delete or anonymise it in accordance with our internal data destruction procedures.

7. Data Security Measures

bo99 applies a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bo99 platform is encrypted using 256-bit SSL/TLS encryption. The padlock icon in your browser's address bar confirms that your connection is secure at all times.
• Data Encryption at Rest: Sensitive data stored in our systems — including identity documents and payment details — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within bo99's internal systems is restricted on a need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific role.
• Two-Factor Authentication (2FA): bo99 offers 2FA for player accounts and requires it for all staff accessing internal administrative systems.
• Regular Security Audits: The bo99 platform undergoes periodic security reviews and penetration testing by qualified information security professionals to identify and remediate vulnerabilities.
• Incident Response: bo99 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players without undue delay and take all necessary steps to contain the incident.

While bo99 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your bo99 Login credentials confidential and for using a strong, unique password. If you believe your account has been compromised, contact us immediately at [email protected].

8. Your Rights Over Your Data

As a data subject, you hold meaningful rights over the personal information bo99 holds about you. You may exercise any of the following rights at any time by submitting a written request to [email protected]:

• Right of Access: You have the right to request a copy of all personal data bo99 holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered email address or mobile number, you may be able to update these directly within your account settings panel.
• Right to Erasure: You may request that bo99 delete your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain (such as transaction records required for AML compliance). Where the right to erasure applies, we will action your request within 30 days.
• Right to Restrict Processing: You may request that bo99 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being resolved.
• Right to Data Portability: You may request that bo99 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to Object: Where bo99 processes your data on the basis of legitimate interest (such as for marketing personalisation), you have the right to object to that processing. We will cease processing for that purpose unless we can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where bo99 relies on your consent to process your data (such as for promotional email communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. To unsubscribe from promotional communications, use the unsubscribe link included in any marketing email from bo99.

bo99 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

9. Minors & Age Restriction

Parents and guardians who believe that a minor has registered on the bo99 platform should contact us immediately at [email protected] with details of the account. We take such reports seriously and will investigate and act on them as a matter of priority. bo99 strongly encourages parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms.

10. Updates to This Policy

bo99 reviews this Privacy Policy periodically and will publish an updated version on this page whenever material changes are made. Material changes — such as the introduction of a new category of data processing, a new third-party sharing arrangement, or a change to our retention periods — will be communicated to registered players via the email address on file at least 14 days before the change takes effect.

Non-material changes (such as formatting corrections, clarifications of existing practices, or updates to contact information) may be made without advance notice, with only the "Last Updated" date being revised. We encourage you to check this page periodically to stay informed about how bo99 protects your privacy.

11. Contact & Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the bo99 data team using the details below. All privacy-related communications should be submitted in writing to ensure they are handled by the appropriate team member and responded to within the required timeframe.

Email: [email protected]

Response Time: bo99 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days.

Subject Line: Please use the subject line "Privacy Query — [Your Registered Email]" when contacting us about a data rights matter, to ensure your message is routed to the correct team promptly.