Your Privacy at 99baji

1 Introduction and Scope

This Privacy Policy ("Policy") describes how 99baji ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "the Player", "the User") who access or use the website at https://99baji.im and any related services, features, or content offered through it.

This Policy applies to all personal data provided by you during account registration, identity verification, payment processing, customer support interactions, and ordinary use of the Platform. It also covers data we collect automatically when you visit the site, such as device identifiers, browser type, and session activity.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and 99baji. Together, these documents form the basis of the agreement under which we process your data.

2 Data We Collect

We collect personal data in two principal ways: information you provide to us directly, and information collected automatically through your use of the Platform.

Information you provide directly:

• Registration data: Full name, date of birth, gender, residential address, email address, and mobile phone number submitted when creating your account.
• Identity verification (KYC) data: Copies of government-issued photo ID (National ID card, passport, or driving licence), proof of address documents, and selfie photographs where requested as part of our Know Your Customer process.
• Payment data: bKash or Nagad mobile wallet numbers, Rocket account details, Upay credentials, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or others), and card details (Visa, Mastercard). Full payment card numbers are handled by our PCI-compliant payment processors and are not stored on 99baji servers.
• Communication data: Messages, emails, live chat transcripts, and any other correspondence you send to our support team.
• Responsible gaming data: Deposit limit preferences, self-exclusion requests, and any information you voluntarily share when seeking support for gambling-related concerns.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, bet history, session duration, clickstream data, and navigation patterns within the Platform.
• Cookies and similar technologies: Session cookies, persistent cookies, and similar tracking technologies as described in Section 8 of this Policy.
• Geolocation data: Approximate location derived from your IP address, used to assess eligibility and detect access from restricted jurisdictions.

3 How We Use Your Data

We process personal data only for lawful purposes. The following table summarises our primary processing activities and the legal basis for each.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4 Data Sharing and Disclosure

99baji does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with trusted third parties only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and card scheme processors (Visa, Mastercard) receive the payment data necessary to process your transactions. Each provider is subject to their own privacy policy and applicable financial regulations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and bet data necessary to deliver game content and settle round outcomes. No full identity data is shared with game studios.
• Identity verification services: Third-party KYC and AML compliance services may process your identity documents and verification data on our behalf under strict data processing agreements.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who access data solely to deliver technical services on 99baji's behalf and under contractual confidentiality obligations.
• Legal and regulatory bodies: Courts, law enforcement agencies, financial intelligence units, and other public authorities where we are compelled to disclose data by law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 99baji business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

5 Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, in accordance with financial crime prevention requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support correspondence: Retained for two (2) years from the date of last contact, unless the matter relates to an unresolved dispute in which case records are kept until final resolution.
• Marketing opt-in records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate that we honoured your opt-out.
• Technical and usage logs: Typically retained for ninety (90) days, unless required for longer in connection with a security investigation or legal obligation.

Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to an individual.

6 Your Rights

Subject to applicable law and certain limitations, you have the following rights regarding your personal data held by 99baji:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent is the basis for processing). This right is subject to our legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that we limit how we use your data while a dispute or verification request is being resolved.
• Right to data portability: Where we process your data on the basis of your consent or to perform a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. We will honour such requests without requiring justification.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days, subject to identity verification and any applicable legal exemptions.

7 Data Security

99baji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser or device and the Platform.
• Encryption of sensitive data at rest, including identity documents and payment credentials.
• Access controls ensuring that only authorised personnel with a genuine business need can access personal data.
• Regular security assessments and vulnerability testing of the Platform's infrastructure.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable obligations.

8 Cookies and Tracking Technologies

99baji uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyse usage patterns. The main categories of cookies we use are as follows:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and interface customisations. These persist across sessions to improve your experience.
• Analytics cookies: Used to collect aggregated information about how Players use the Platform, including pages visited, session duration, and error events. This data helps us improve site performance and game offerings.
• Marketing cookies: Used only where you have consented to receive personalised promotional communications. These cookies help us ensure that offers shown to you are relevant to your gaming preferences.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For details on specific cookies in use, please contact [email protected].

9 Children and Minors

The 99baji Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to any person under the age of 21. If we become aware that personal data has been submitted by a person under 21 — whether through misrepresentation during registration or otherwise — we will promptly delete that data and close the associated account.

If you have reason to believe that a minor has registered on or is using the 99baji Platform, please notify us immediately at [email protected]. We take this matter seriously and will investigate and act on all credible reports.

10 Changes to This Policy

99baji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. When material changes are made, we will notify registered Players via the email address associated with their account or by posting a prominent notice on the Platform. The revised Policy will display an updated "Last Updated" date at the top of this page.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of those changes. If you disagree with any changes, you should cease using the Platform and contact [email protected] to request account closure and, where applicable, erasure of your personal data.

11 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way 99baji handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy-related correspondence within two (2) business days and provide a substantive response within thirty (30) days.

We take all privacy complaints seriously and will work in good faith to resolve any concerns raised. If you remain unsatisfied with our response, you may have the right to escalate your complaint to a relevant data protection or privacy authority in your jurisdiction.