bs999 Privacy Policy

1

Introduction

bs999 ("we", "us", "our") operates the online betting and casino platform accessible at bs999.io (the "Platform"). We are committed to protecting the privacy and personal data of every player who registers and plays on our Platform. This Privacy Policy sets out in clear, plain English how we handle your personal information — what we collect, the lawful basis on which we process it, who we share it with, how long we keep it, and what rights you hold over it.

This policy applies to all visitors and registered players of bs999.io, including players based in Bangladesh who access the Platform via desktop browser, mobile browser, or any future dedicated application. It covers all personal data processing activities conducted by bs999 in connection with the operation of the Platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and bs999. Terms defined in the Terms & Conditions carry the same meaning in this policy.

We review and update this policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. The effective date at the top of this page indicates when the current version was last updated. Material changes will be communicated to registered players via Platform notification or email before they take effect.

2

Data We Collect

bs999 collects the minimum personal data necessary to provide a safe, legal, and high-quality gaming experience. The categories of personal data we may collect include:

Identity and Registration Data

• Full legal name as it appears on government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Email address used to create and manage your Account.
• Username and encrypted password credentials.
• Mobile phone number, where provided for account security or verification purposes.

Identity Verification (KYC) Documents

• A copy of a government-issued photo identification document such as a National Identity Card (NID), passport, or driving licence.
• Proof of address (e.g., a recent utility bill or bank statement issued within 90 days).
• Selfie or liveness check images where required to match a submitted ID document.
• Payment method ownership verification documents where required (e.g., a screenshot confirming a registered bKash or Nagad account).

Financial and Transaction Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals.
• Bank account details where bank transfer is used as a payment method.
• USDT wallet addresses where cryptocurrency is used.
• Records of all deposits, withdrawals, bonuses, and wagers, including amounts, timestamps, and method.

Technical and Device Data

• IP address at the time of registration and each subsequent login.
• Device type, operating system, and browser version.
• Device fingerprint identifier for fraud detection purposes.
• Geolocation data (country/region level) derived from IP address.
• Session logs including login times, session duration, and pages visited within the Platform.

Communication Data

• Records of live chat conversations with the bs999 support team.
• Email correspondence with our support and compliance teams.
• Any information you voluntarily provide in support tickets, complaint submissions, or feedback forms.

Responsible Gaming Data

• Self-imposed deposit limits, session time limits, cooling-off periods, and self-exclusion requests.
• Responsible gaming assessment responses where you have completed a voluntary self-assessment.

3

How We Collect Your Data

bs999 collects personal data through the following means:

• Directly from you: When you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact the support team, submit a complaint, or complete a responsible gaming self-assessment, you provide data to us directly.
• Automatically during Platform use: When you browse the Platform, log in, place bets, or use casino features, our servers automatically record technical data such as your IP address, device identifiers, session timestamps, and activity logs. This data is collected via server logs, cookies, and similar tracking technologies.
• From third-party service providers: Our payment processors (for deposit and withdrawal confirmation), KYC and identity verification providers, and fraud detection partners may supply data about you to bs999 as part of the verification and transaction processing workflow. This data is used solely for the purposes described in Section 5.
• From publicly available sources: In limited circumstances — primarily for enhanced due diligence on high-value accounts or where fraud is suspected — bs999 may verify information against publicly available databases or sanction lists.

4

Legal Basis for Processing

bs999 processes your personal data on the following legal bases:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms, taking into account the reasonable expectations of players using an online gaming platform.

5

How We Use Your Data

bs999 uses the personal data it collects for the following specific purposes:

• Account creation and management: To create your bs999 Account, maintain your profile, manage your Balance and transaction history, and communicate with you about your Account.
• Identity and age verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years. Verification is a legal and operational requirement that cannot be waived.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and USDT, and to match incoming payment references to your Account.
• Bonus and promotion administration: To track eligibility for promotions, credit bonus funds, monitor wagering requirements, and prevent duplicate bonus claims.
• Customer support: To respond to support enquiries, resolve disputes, investigate complaints, and maintain records of interactions for quality assurance.
• Fraud and security: To detect and investigate suspicious activity, prevent money laundering, identify multi-accounting, and protect the integrity of the Platform for all players.
• Regulatory compliance: To meet our obligations under applicable AML regulations, including transaction monitoring, suspicious activity reporting, and record-keeping requirements.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, apply self-imposed limits and exclusions, and intervene where necessary in accordance with our Responsible Gaming Policy.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, improve game offerings and user interface design, and enhance overall Platform performance.
• Marketing communications: Where you have given explicit consent, to send you promotional emails about new games, bonuses, seasonal offers, and Platform news. You may unsubscribe from marketing emails at any time using the unsubscribe link in any marketing communication.

6

Data Sharing and Disclosure

bs999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes under any circumstances. We share data only in the limited situations described below:

• Payment processors: To facilitate deposits and withdrawals, we share necessary transaction data with our payment processing partners including mobile wallet operators (bKash, Nagad, Rocket, Upay), bank transfer intermediaries, and USDT network processors. These partners receive only the data required to complete your specific transaction.
• KYC and identity verification providers: To verify your identity and age during the Account verification process, we share identity document images and personal details with our certified KYC technology partner. This partner processes data solely for verification purposes and is contractually prohibited from using it for any other purpose.
• Cloud infrastructure and hosting providers: The Platform operates on third-party cloud infrastructure. Our hosting provider stores Platform data on secure, access-controlled servers. All data stored with our infrastructure provider is encrypted and governed by a data processing agreement.
• Fraud detection and analytics providers: We share device fingerprint data, IP addresses, and behavioural signals with fraud detection technology providers to identify suspicious activity and protect the Platform from abuse.
• Regulatory and law enforcement authorities: Where we are legally obliged to do so — for example, in response to a valid court order, regulatory inspection, or suspicious transaction reporting obligation under applicable AML law — we will disclose personal data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bs999's business assets, personal data held by bs999 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom bs999 shares personal data are required to process that data in accordance with their own privacy obligations and under the terms of a data processing agreement that prohibits any use of your data beyond the specified purpose.

7

Cookies and Tracking Technologies

bs999 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your preferences, and ensure that security features operate correctly. You cannot opt out of strictly necessary cookies without disabling your ability to use the Platform.
• Functional cookies: These cookies remember choices you have made — such as your preferred language or display settings — to provide a more personalised experience. They are not essential but improve usability.
• Analytics cookies: We use analytics cookies to understand how players navigate the Platform — which pages are visited most often, where sessions begin and end, and where technical issues occur. Analytics data is aggregated and anonymised before being used for Platform improvement decisions.
• Fraud detection cookies: These cookies support our fraud detection systems by assigning a persistent identifier to your device session. They help us detect anomalous behaviour such as multiple account creation from a single device.

Most browsers allow you to control cookies through their settings. You may block or delete cookies at any time. However, disabling certain categories of cookie may impair your ability to use the Platform — for example, blocking session cookies will prevent you from staying logged in.

bs999 does not use advertising or retargeting cookies. We do not share cookie-derived data with advertising networks or social media platforms.

8

Data Security

bs999 takes the security of your personal data seriously and implements a layered set of technical and organisational controls designed to protect your data against unauthorised access, loss, destruction, alteration, or disclosure.

• Encryption in transit: All data exchanged between your browser and the bs999 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). The Platform's HTTPS certificate is maintained and renewed on a strict schedule.
• Encryption at rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised bs999 personnel and systems on a strictly need-to-know basis. All internal access is logged and subject to periodic review.
• Penetration testing: The Platform undergoes regular third-party security assessments including penetration testing and vulnerability scanning to identify and remediate weaknesses before they can be exploited.
• Incident response: bs999 maintains a documented data breach response plan. In the event of a confirmed data breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.
• Employee training: All bs999 staff who handle personal data receive mandatory data protection and security awareness training as part of their onboarding and on a recurring annual basis.

While we apply robust security measures, no internet-based service can guarantee absolute security. You also play a role in protecting your data — please refer to Section 4 of our Terms & Conditions for your responsibilities regarding Account credential security.

9

Data Retention

bs999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. Our general data retention principles are as follows:

• Active Account data: Personal data associated with an active Account is retained for the full duration of the Account's existence. Closing your Account does not result in immediate deletion — see the post-closure retention period below.
• Post-closure retention: Following the closure of your Account — whether by your own request, by bs999 for breach, or for any other reason — we retain your identity, transaction, and Account history records for a minimum of five (5) years from the date of closure. This retention period is mandated by AML compliance and financial record-keeping obligations.
• KYC documents: Identity verification documents (ID copies, proof of address, selfies) are retained for the duration of your Account plus five years, in line with AML record-keeping requirements.
• Support communications: Live chat transcripts and email correspondence with the support team are retained for three years from the date of the interaction, to enable dispute resolution and quality review.
• Marketing consent records: Records of your marketing consent (opt-in and opt-out events) are retained for five years from the date of the event to demonstrate compliance with consent obligations.
• Technical and access logs: Server access logs and session data are retained for up to 12 months for security monitoring and fraud investigation purposes, after which they are deleted or anonymised.

When personal data reaches the end of its applicable retention period and no legal hold or ongoing investigation requires its preservation, bs999 will securely delete or irreversibly anonymise that data in accordance with our internal data destruction procedures.

10

Your Rights Over Your Data

As a registered player on bs999, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected]. We will respond to all valid requests within 30 days of receipt.

To exercise any of the above rights, please email [email protected] with the subject line "Data Rights Request", including your registered username and the specific right you wish to exercise. We may ask you to verify your identity before processing your request. There is no charge for exercising any of your data rights.

11

Children and Minors

The bs999 Platform is strictly intended for adults aged 21 years and above. bs999 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and Accounts that cannot be verified as belonging to a player aged 21 or over will be suspended and closed.

If bs999 becomes aware, at any point, that personal data of a person under the age of 21 has been collected, we will immediately take steps to delete that data, close the associated Account, and return any Balance to the payment method used for deposits, subject to standard verification and processing requirements.

If you are a parent or guardian and believe that a minor has created an Account on bs999.io, please contact us immediately at [email protected]. We will investigate and act promptly on all such reports.

12

International Data Transfers

bs999 is a platform that operates with the assistance of internationally based technology service providers. As a result, your personal data may be transferred to, stored in, or processed in countries other than Bangladesh. Where such transfers occur, bs999 takes steps to ensure that your data continues to receive an adequate level of protection.

Specifically, bs999 ensures that international transfers of personal data are conducted under one or more of the following safeguards:

• Transfer to a country or territory that is recognised as providing an adequate level of data protection for the type of data being transferred.
• Transfer subject to a binding data processing agreement incorporating standard contractual clauses or equivalent data transfer mechanisms that impose enforceable data protection obligations on the recipient.
• Transfer to a recipient that has implemented binding corporate rules or equivalent internal data protection standards certified by a recognised authority.

Our cloud infrastructure and certain technical service providers operate data centres in regions including South and Southeast Asia. We select providers that operate under documented, independently audited data security standards. For more information about the safeguards applicable to a specific transfer, contact us at [email protected].

13

Third-Party Links

The bs999 Platform may contain references or links to third-party payment providers (such as bKash, Nagad, and Rocket) whose websites or applications operate independently of bs999. If you access a third-party site or application via a link from the Platform, your use of that third-party service is governed by that party's own privacy policy and terms of service.

bs999 is not responsible for the privacy practices, data security measures, or content of any third-party website or service. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform, including your chosen payment method provider, before sharing your personal data with them.

This Privacy Policy applies solely to data collected and processed by bs999 in connection with the operation of bs999.io. It does not apply to any data collected by third parties, even where you have accessed that third party via the Platform.

14

Policy Updates

bs999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal and regulatory requirements. We will always post the most current version of this policy on this page, and the "Effective Date" displayed at the top will reflect the date of the most recent revision.

Where a proposed change is material — meaning it significantly affects your rights or how we use your data — we will notify registered players in advance of the change taking effect, via one or more of the following channels:

• A prominent notice on the Platform homepage or your Account dashboard.
• An email notification to your registered email address.
• An in-Platform notification via the messaging centre.

Your continued use of the Platform after an updated Privacy Policy takes effect constitutes your acknowledgement of and agreement to the revised policy. If you do not agree to the updated policy, you should stop using the Platform and contact support to close your Account.

Non-material updates — such as typographical corrections, clarifications that do not change the substance of any provision, or updates to contact details — may be made without prior notice. We recommend bookmarking this page and reviewing it periodically to stay informed of how your data is being handled.

15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bs999 handles your personal data, please get in touch with our support and compliance team using the contact details below:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the Platform (English and Bengali)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Average Response Time: 2–5 minutes via live chat; within 24 hours via email

When contacting us about a data rights request or a privacy concern, please include your registered username, the email address associated with your Account, and a clear description of your request or concern. This allows us to locate your Account and respond as quickly as possible.