Privacy Policy — How b8999 Protects Your Personal Data

b8999 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and in some cases from trusted third-party identity verification and payment processing partners. The categories of data we collect are set out below.

1.1 Registration and Account Data
When you create a b8999 account, we collect the personal information necessary to establish and maintain your account in compliance with our Know Your Customer (KYC) obligations. This includes:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 18+ eligibility requirement).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Email address used as your primary account communication channel.
• Mobile phone number, used for account security notifications and, where applicable, two-factor authentication.
• Username and encrypted password credentials.

1.2 Identity Verification Documents
As part of our KYC compliance process, b8999 may request copies of the following documents at account creation or at any point during the account lifecycle:

• Government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of residential address dated within the last three months (utility bill, bank statement, or official government correspondence).
• Proof of ownership of the payment method used for deposits (e.g., a screenshot of the bKash or Nagad account registered in your name).

1.3 Financial Transaction Data
b8999 records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, transaction dates, payment methods used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction reference identifiers. This data is retained for compliance, fraud prevention, and dispute resolution purposes.

1.4 Gameplay and Betting Activity Data
We record your gameplay history across all b8999 products, including live casino game sessions, cricket and sports betting activity, slots play, and any other wagering events. This data includes bet amounts, game outcomes, session durations, and responsible gaming indicators such as session frequency and loss patterns.

1.5 Technical and Device Data
When you access the b8999 platform, our servers and analytics systems automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, referring URL, pages viewed, time spent on each page, and approximate geographic location derived from your IP address. This data is used for platform security, fraud detection, and service improvement purposes.

b8999 processes your personal data for the following clearly defined purposes. In each case, we have identified the legal basis on which the processing is carried out.

Marketing Communications: If you have opted in to receive promotional communications from b8999, we may use your email address and gameplay preferences to send you relevant offers, bonus notifications, and platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of your data for other purposes listed above.

Automated Decision-Making: b8999 uses automated systems to flag potentially fraudulent account activity, identify responsible gaming risk indicators, and assess bonus eligibility. Where an automated decision results in a material action against your account — such as a temporary suspension pending investigation — you have the right to request human review of that decision by contacting our support team.

b8999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Processing Partners
To process your deposits and withdrawals, b8999 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and the banking institutions listed in our accepted payment methods. These partners process your data solely to execute the requested financial transaction and are contractually prohibited from using it for any other purpose.

3.2 Game Software Providers
b8999 delivers its casino and gaming content through certified third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process certain gameplay data (such as session identifiers and bet records) within their systems to deliver game functionality, generate outcomes, and maintain game integrity records. They do not receive your personally identifiable registration data.

3.3 Identity Verification Services
Where b8999 uses a third-party KYC verification service to assist with identity document checking, your identification documents and associated personal data may be shared with that service provider for the sole purpose of completing the verification process. All such providers are subject to strict data processing agreements.

3.4 Legal and Regulatory Disclosure
b8999 may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where it is required to do so by applicable law, court order, or regulatory instruction. In such cases, b8999 will disclose only the minimum data required to satisfy the legal obligation and will not be in a position to notify you of such disclosure where prohibited from doing so by the relevant legal process.

3.5 Corporate Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the b8999 business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data will be processed as a result, prior to the transfer taking effect wherever practicable.

b8999 uses cookies and similar tracking technologies to support the operation of the platform, improve user experience, and maintain account security. A cookie is a small text file placed on your device by a web server when you visit the b8999 website. The following types of cookies are used:

4.1 Strictly Necessary Cookies
These cookies are essential for the platform to function correctly. They maintain your login session, remember your account preferences, and prevent session hijacking. Strictly necessary cookies cannot be disabled without significantly impairing your ability to use the b8999 platform.

4.2 Functional Cookies
Functional cookies remember your preferences — such as your preferred language setting, currency display, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit. These cookies do not track your activity for advertising purposes.

4.3 Analytics Cookies
b8999 uses first-party analytics tools to understand how users navigate the platform, which games are most popular, and where technical issues may be occurring. Analytics data is aggregated and anonymised where possible and is not linked to your personal account without a documented operational justification.

4.4 Security Cookies
Security cookies help b8999 detect and prevent fraudulent login attempts, account takeover attacks, and other malicious activity by identifying anomalous session patterns. These cookies are an integral component of our account protection infrastructure.

You may configure your browser to block or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the b8999 platform and may prevent you from logging in or accessing your account. Instructions for managing cookies are available in your browser's help documentation.

b8999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• SSL/TLS Encryption in Transit: All data transmitted between your device and the b8999 platform is encrypted using TLS protocols, ensuring that your personal and financial data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, payment details, and password hashes — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems holding personal data is restricted to authorised b8999 personnel on a strict need-to-know basis. All internal access to personal data is logged and subject to periodic audit review.
• Password Security: User passwords are never stored in plain text. They are processed through a strong one-way cryptographic hashing function with per-user salting to prevent bulk credential exposure in the event of a data breach.
• Intrusion Detection: b8999's platform is monitored around the clock for signs of unauthorised access attempts, unusual traffic patterns, and known attack signatures.
• Incident Response: b8999 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that is likely to result in risk to your rights and freedoms, we will notify affected users without undue delay via the email address registered to your account.

While b8999 takes all reasonable and proportionate steps to protect your personal data, no information system can be guaranteed to be entirely free from risk. You are responsible for maintaining the security of your own account credentials and for notifying us promptly at [email protected] if you suspect unauthorised access to your account.

b8999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

• Active Account Data: Personal registration data, KYC documentation, and financial transaction records are retained for the full duration of your account's active status plus a minimum period of five years following account closure, in order to satisfy anti-money-laundering record-keeping obligations.
• Gameplay and Betting Records: Gameplay history and betting activity records are retained for a minimum of three years from the date of each transaction, or longer where required for dispute resolution or regulatory compliance purposes.
• Support and Communication Records: Records of communications with the b8999 support team, including email correspondence and live chat transcripts, are retained for a period of two years from the date of the last interaction in the relevant support thread.
• Marketing Preference Data: Where you have consented to receive marketing communications, your marketing preferences are retained until you withdraw consent. Upon withdrawal of consent, your data will be removed from our active marketing lists within 30 days, though aggregate anonymised data derived from your interactions may be retained for analytical purposes.
• Technical Log Data: Server logs, IP address records, and other technical data collected for security and fraud prevention purposes are typically retained for 12 months, after which they are deleted or anonymised unless required for an active investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregated statistical analysis.

As a user of the b8999 platform, you hold the following rights with respect to the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of all personal data that b8999 holds about you, together with information about how that data is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. We will action verified rectification requests promptly.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that this right is subject to our legal retention obligations — we are not able to delete data that we are required to retain under applicable law, such as KYC and financial records.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data to storage only, pending resolution of a dispute about accuracy or the legitimate basis for processing.
• Right to Object: You may object to the processing of your personal data where b8999 relies on legitimate interest as the legal basis for that processing. We will cease processing unless we can demonstrate a compelling legitimate reason that overrides your interests.
• Right to Withdraw Consent: Where we process your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which b8999 processes your personal data, please contact us in the first instance via our support team:

Data Enquiries: [email protected]
Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours Bangladesh Standard Time (UTC+6) and to provide a substantive response within 30 calendar days.

Complaints Process: If you are not satisfied with our response to a privacy concern or data rights request, you may escalate your complaint through the following process:

1. Submit your complaint in writing to [email protected], clearly marking the subject line as "Privacy Complaint – Formal Escalation".
2. b8999's data compliance team will conduct a full review of your complaint and issue a written response within 30 days of receiving the escalation.
3. If you remain dissatisfied following our formal response, you retain the right to seek redress through any applicable regulatory or legal mechanism available to you under the laws of Bangladesh.

Policy Updates: b8999 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. Where material changes are made, we will notify registered users via their registered email address at least 14 days before the changes take effect. Your continued use of the b8999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.