bah999 Privacy Policy
Your privacy matters at bah999. This policy explains exactly what personal data we collect, how we use it, who we share it with, and the rights you have over your own information.
Introduction
bah999 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses the bah999 platform at bah999.app. This Privacy Policy sets out the basis on which we collect, process, store, share, and protect personal data relating to our players and website visitors.
This Privacy Policy applies to all users of the bah999 website, mobile platform, support channels, and any other services operated under the bah999 brand. By registering a bah999 account or by continuing to use the bah999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
bah999 processes personal data in a manner consistent with principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity. We do not sell your personal data to third parties, and we never share it with organisations outside the bah999 operational structure except where expressly required by law or where it is strictly necessary to deliver our services.
Our Data Practices at a Glance
Six principles that guide how bah999 handles your personal information.
Minimal Collection
We collect only the data we genuinely need to operate your account and verify your identity.
SSL Encryption
All data transmitted between your device and bah999 servers is protected by industry-standard SSL encryption.
No Data Selling
bah999 never sells, rents, or trades your personal data to third-party marketers or advertisers.
KYC Compliance
Identity documents submitted for KYC verification are stored securely and used only for verification purposes.
Limited Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy.
Your Rights
You have the right to access, correct, delete, and restrict the processing of your personal data at any time.
Full Privacy Policy
Expand each section below to read the complete policy.
For the purposes of this Privacy Policy, the data controller responsible for your personal data is bah999, operating the platform at bah999.app. Any questions, requests, or complaints relating to the processing of your personal data should be directed to our support team in the first instance. Contact details are provided at the end of this document.
bah999 determines the purposes and means by which your personal data is processed. Where bah999 engages third-party service providers to process data on its behalf (for example, payment processors or game software providers), those providers act as data processors and are contractually bound to handle your data only in accordance with bah999's instructions and applicable data protection principles.
bah999 collects personal data through several channels, including account registration, KYC verification, deposits and withdrawals, gameplay, customer support interactions, and general use of the bah999 platform. The categories of personal data we may collect include:
- Identity data: Full legal name, date of birth, nationality, and copies of government-issued identity documents (National Identity Card, passport, or driving licence).
- Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
- Financial data: Payment method details (such as bKash wallet number, Nagad account, Rocket account, Upay account, or bank card details), deposit and withdrawal history, and transaction records.
- Account data: Username, hashed password, account settings, bonus history, responsible gaming preferences, and communication preferences.
- Gameplay data: Game participation history, bet amounts, win/loss records, game session durations, and favourite games.
- Technical data: IP address, device type, operating system, browser type, device identifiers, cookie data, and approximate geolocation derived from IP address.
- Communications data: Records of your interactions with bah999 customer support, including chat transcripts, emails, and any feedback or complaints submitted.
bah999 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data. If any such data is incidentally included in a document submitted for KYC, it will not be processed for any purpose other than identity verification.
bah999 processes your personal data for the following specific purposes, each of which is supported by a lawful basis:
- Account registration and management: To create, maintain, and administer your bah999 player account, including verifying your eligibility (21+ age requirement) and authenticating your identity at login.
- KYC and fraud prevention: To verify your identity in accordance with our responsible gaming obligations, to detect and prevent fraud, money laundering, and other prohibited activities, and to comply with applicable legal obligations.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and other accepted payment methods. Payment data is transmitted securely and is never stored in plain text.
- Gameplay and platform delivery: To provide access to casino games, sports betting markets (including BPL, IPL, T20, and other cricket markets), crash games, slots, and all other bah999 services.
- Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to apply deposit limits or self-exclusion measures requested by players, and to contact players where bah999 has a responsible gaming obligation to do so.
- Customer support: To respond to your enquiries, resolve complaints, and provide assistance with your account.
- Platform improvement: To analyse aggregated usage data and improve the performance, usability, and security of the bah999 platform. This analysis uses anonymised or pseudonymised data wherever possible.
- Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about bah999 products. You may withdraw this consent at any time through your account settings or by contacting support.
bah999 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human oversight, except where strictly necessary for fraud prevention purposes.
The bah999 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, and gather aggregate analytics data about how players use the platform. The types of cookies we use include:
- Essential cookies: Required for the core functionality of the bah999 platform, including maintaining your login session and enabling secure transactions. These cookies cannot be disabled without disrupting your use of the platform.
- Analytics cookies: Used to collect anonymised data about page visits, session durations, and navigation patterns. This data is used in aggregate form to improve the platform and is not linked to individual player identities.
- Preference cookies: Used to remember your settings and preferences, such as language and notification choices, to personalise your bah999 experience.
You may control cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from using bah999, but some platform features may function differently. By continuing to use the bah999 platform after being informed about our cookie use, you consent to the use of cookies as described above.
bah999 does not sell, rent, or trade your personal data. We may share your personal data with trusted third parties only in the following circumstances:
- Payment service providers: To process deposits and withdrawals, your payment data is shared with the relevant payment processor (e.g., bKash, Nagad, Rocket, Upay, Visa/Mastercard networks, Dutch-Bangla Bank, City Bank). These providers process your data solely to complete the transaction.
- Game software providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive your player ID and session token to deliver game content. They do not receive your full identity or payment data.
- KYC and identity verification services: Where bah999 uses a third-party identity verification partner, your identity documents may be shared with that partner solely for verification purposes under strict confidentiality agreements.
- Legal and regulatory authorities: bah999 may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, to prevent fraud, or to protect the rights and safety of bah999, its players, or the public.
- Business operations: Where bah999 undergoes a business restructure, merger, or acquisition, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.
All third parties with whom bah999 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process the data only for the specific purposes agreed with bah999.
bah999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:
- SSL (Secure Sockets Layer) encryption for all data transmitted between your device and bah999 servers.
- Encrypted storage of passwords — bah999 never stores your password in plain text.
- Restricted internal access to personal data on a strict need-to-know basis, with access logs maintained.
- Regular security assessments and vulnerability testing of the bah999 platform infrastructure.
- Secure document storage protocols for KYC identity documents.
While bah999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your bah999 account has been accessed without your authorisation, please contact our support team immediately.
bah999 retains your personal data for as long as your player account remains active and for a defined period after account closure, to comply with legal obligations and to resolve any outstanding disputes or claims. The key retention periods applied are:
- Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, in accordance with anti-money laundering and responsible gaming record-keeping requirements.
- Transaction and financial records: Retained for a minimum of five years from the date of the transaction to satisfy financial record-keeping obligations.
- Customer support communications: Retained for up to three years from the date of the communication, or longer if the communication relates to an ongoing dispute or regulatory matter.
- Technical and usage data (cookies, logs): Typically retained for up to 13 months from the date of collection, after which it is deleted or anonymised.
- Marketing consent records: Retained until consent is withdrawn, plus a reasonable additional period to demonstrate compliance.
When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, bah999 securely deletes or anonymises it.
The bah999 platform is strictly intended for adults aged 21 years and above. bah999 does not knowingly collect or process personal data belonging to individuals under the age of 21. If bah999 discovers that personal data has been collected from a person under 21, all such data will be deleted immediately and the associated account will be closed.
If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered a bah999 account or submitted personal data to bah999, please contact our support team immediately at [email protected] so that the relevant data and account can be removed without delay.
bah999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The date at the top of this page will always indicate when the policy was most recently revised.
Where any amendment is material — meaning it significantly affects how we process your personal data or the rights you have over it — bah999 will notify registered players by email or by a prominent notice on the bah999 platform at least 14 days before the change takes effect. Continued use of the bah999 platform after a revised Privacy Policy takes effect constitutes acceptance of the revised policy.
We encourage you to review this Privacy Policy periodically to stay informed about how bah999 is protecting your information.
If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to make a complaint about how bah999 has handled your personal data, please contact us using the details below. bah999 aims to respond to all data-related requests within 30 days of receipt.
- Email (plain text — not a link): [email protected]
- Response time: Up to 30 days for formal data requests; faster for general enquiries via live chat.
- Language: Requests may be submitted in English. Responses will be provided in English.
Before processing a data access or deletion request, bah999 may need to verify your identity to ensure we are releasing or deleting data belonging to the correct person. You may be asked to provide the same type of documentation required for KYC verification.
For further information about your rights as a bah999 player, please refer to the FAQ page or the Terms & Conditions.
Your Data Rights
As a bah999 player, you have the following rights over your personal data.
Right of Access
You have the right to request a copy of the personal data bah999 holds about you, along with information about how it is being processed.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request that bah999 corrects or completes it without undue delay.
Right to Erasure
In certain circumstances, you may request that bah999 deletes your personal data. This right may be limited where bah999 has a legal obligation to retain the data.
Right to Restrict Processing
You may request that bah999 restricts the processing of your personal data in specific circumstances — for example, while the accuracy of data is under dispute.
Right to Data Portability
Where technically feasible, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
Where bah999 processes your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Have a Privacy Question?
Our support team is available around the clock to answer questions about your data, account security, or any aspect of bah999's privacy practices.
Read Our FAQ Explore bah999 Casino21+ only · SSL Secured · Fair Play Certified