Privacy Policy — How btk99 Collects, Uses & Protects Your Data

This Privacy Policy ("Policy") is published by the operator of the btk99 online gaming platform ("btk99", "we", "us", or "our"). It applies to all personal data collected from individuals ("you", "your", or "Player") who access, register with, or otherwise interact with the btk99 platform, available at btk99.io, and any associated mobile-optimised interfaces operated by btk99.

btk99 is committed to protecting the privacy and personal data of all players in Bangladesh and to processing personal information only in ways that are lawful, fair, and transparent. This Policy has been drafted to meet the standards of internationally recognised data protection principles and to provide our players with clear, accessible information about our data practices.

This Policy should be read together with the btk99 Terms & Conditions, which govern the overall contractual relationship between you and btk99. Accepting the Terms & Conditions constitutes simultaneous acceptance of this Privacy Policy.

btk99 collects personal data through several channels. The categories of information collected are described below.

2.1 Information you provide directly

• Registration data: Full legal name, date of birth, gender, nationality, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), email address, and mobile phone number.
• Identity verification (KYC) documents: National ID card, passport, or other government-issued photo identification; proof of address documentation; selfie photograph where required for enhanced verification.
• Payment information: Mobile banking account numbers (e.g., bKash, Nagad, Rocket, Upay), bank account details where applicable, and transaction references. Full payment credentials are not stored on btk99 servers.
• Communications data: Content of messages sent to the btk99 support team via live chat or email, including support ticket contents, complaint submissions, and feedback.
• Responsible gaming preferences: Deposit limits, session reminders, self-exclusion elections, and cool-off period requests submitted through the account settings panel.

2.2 Information collected automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, time spent on each page, games launched, bets placed, wager amounts, deposit and withdrawal history, login timestamps, and session duration.
• Cookie data: Session cookies, persistent preference cookies, and analytics identifiers. See Section 6 for full details of our Cookie Policy.
• Location data: Approximate geographic location derived from IP address, used for fraud prevention and compliance purposes. btk99 does not collect precise GPS location data.

btk99 uses the personal data collected from you for the following purposes. In each case, we rely on a lawful basis for processing, as detailed in Section 4.

• Account registration and administration: To create, verify, maintain, and administer your btk99 player account, including processing your registration details and verifying your identity in compliance with applicable anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Transaction processing: To process deposits to and withdrawals from your BDT wallet, including communication with your chosen payment provider (bKash, Nagad, Rocket, Upay, or other accepted methods) and the recording of all financial activity against your account.
• Platform delivery and game provision: To provide you with access to casino games, live dealer tables, and sports betting markets, and to personalise your experience based on your preferences and activity history.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns and account activity for signs of problem gambling behaviour, to administer the responsible gaming tools you have activated (including deposit limits, cool-off periods, and self-exclusion), and to contact you where our responsible gaming team has concerns about your account activity.
• Customer support: To respond to your queries, complaints, and requests, and to maintain records of all support interactions for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities, including the retention of financial transaction records and identity documentation as required by applicable regulations.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, usability, and content of the btk99 platform.
• Promotional communications: To send you information about promotions, bonuses, and platform updates that may be of interest to you, where you have not opted out of such communications. You may opt out at any time by contacting the support team.

btk99 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to perform our contract with you — specifically, to provide you with a btk99 player account, process your deposits and withdrawals, and deliver access to our gaming platform. Without this processing, we cannot fulfil our contractual obligations to you.
• Legal obligation: Processing that is necessary for btk99 to comply with applicable legal obligations, including identity verification (KYC), transaction monitoring for AML compliance, and the retention of financial records for the legally required period.
• Legitimate interests: Processing carried out in pursuit of btk99's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — provided these interests are not overridden by your data protection rights.
• Consent: Where you have given your explicit consent to a specific processing activity — in particular, the sending of promotional communications. Consent may be withdrawn at any time by contacting [email protected], without affecting the lawfulness of any processing carried out prior to withdrawal.

btk99 does not sell your personal data to any third party. We share personal data with external parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment providers: We share the minimum necessary financial and identity data with your chosen payment provider (e.g., bKash, Nagad, Rocket, Upay) to process deposit and withdrawal transactions. These providers are bound by their own privacy and security obligations.
• Identity verification services: Where enhanced KYC verification is required, we may share identity documentation with a third-party identity verification service provider for the purpose of document authentication. Such providers are contractually bound to process data solely for the verification purpose and to maintain appropriate security standards.
• Game software providers: Game session data (but not full personal profile data) may be shared with our licensed game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent technically necessary to deliver their gaming content. These partners do not receive your financial or identity data.
• Technology and infrastructure providers: btk99 uses trusted third-party cloud hosting, security, and analytics service providers to operate the platform. These providers process data strictly on our behalf and under contractual data processing agreements.
• Legal and regulatory authorities: btk99 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory demand. btk99 will notify the affected player of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the btk99 business, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to their data being transferred and will have the right to request account closure before the transfer takes effect.

In all cases where data is shared with third parties, btk99 requires those parties to maintain appropriate technical and organisational security measures, and to process data only for the purposes for which it was shared.

btk99 uses cookies and similar tracking technologies on the platform to ensure proper functionality, improve user experience, and support fraud prevention and analytics activities. The following categories of cookies are used:

Strictly necessary cookies are deployed without requiring your consent as they are essential to the operation of the platform. Functional, analytics, and fraud prevention cookies are set upon your first visit to the platform.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the btk99 platform, including the ability to maintain a logged-in session or to access certain game features. btk99 does not support third-party advertising cookies and does not allow advertising networks to track users across the platform.

btk99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law, whichever is the longer period.

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following permanent account closure, to support legal compliance and dispute resolution obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping requirements applicable to online payment processors.
• Identity verification documents: Retained for a minimum of 5 years from the date of account closure. Where a regulatory investigation is ongoing, retention may be extended until the investigation is concluded.
• Support communications: Retained for 3 years from the date of each interaction, to support quality assurance and dispute resolution. Support records relating to formal complaints are retained for 5 years.
• Responsible gaming records: Self-exclusion records and responsible gaming tool activations are retained permanently to ensure that expired self-exclusion periods are accurately administered and that re-registration requests are appropriately assessed.
• Anonymised analytics data: May be retained indefinitely in aggregated, anonymised form that cannot be linked back to any individual player.

When the applicable retention period expires, personal data is securely deleted or anonymised using industry-standard data destruction procedures. Players may request early deletion of certain categories of data — see Section 8 for details of your data subject rights.

As a btk99 player, you hold the following rights in respect of the personal data we hold about you. These rights may be exercised at any time by submitting a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of access: You have the right to request a copy of all personal data that btk99 holds about you, together with information about how it is being used. We will respond to access requests within 30 days.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Where we are unable to update data directly (e.g., where a correction requires supporting documentation), we will guide you through the verification process.
• Right to erasure: You have the right to request deletion of your personal data where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete financial transaction records or KYC documentation within the mandatory retention periods.
• Right to restriction: You have the right to request that we restrict processing of your personal data in certain circumstances, including where you have contested the accuracy of the data or where you have objected to processing pending our legitimate interests assessment.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to transmit that data to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is based on btk99's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests and rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

The btk99 platform is strictly for adults aged 21 years and above. btk99 does not knowingly collect personal data from individuals under the age of 21. We apply age verification procedures during the registration process and may require documentary proof of age at any point during the account lifecycle.

If btk99 becomes aware that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The account will be suspended pending investigation;
• All funds held in the account will be returned to the originating payment method following verification;
• All personal data associated with the account will be deleted from our systems once the return of funds has been completed and all compliance obligations have been met;
• The incident will be logged and, where required, reported to relevant authorities.

If you believe that a person under the age of 21 has registered or is using a btk99 account, please notify us immediately at [email protected]. btk99 also recommends the use of parental control software on shared devices to prevent minors from accessing online gambling platforms.

btk99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the btk99 platform is protected by 256-bit SSL/TLS encryption. This applies to all platform pages including the login screen, account settings, deposit and withdrawal flows, and support chat.
• Encryption at rest: Sensitive personal data stored in btk99's databases is encrypted at rest using industry-standard symmetric encryption algorithms.
• Access controls: Access to player personal data is restricted to btk99 staff and contractors who have a legitimate operational need to access that data. All internal access is logged and subject to periodic audit.
• Two-factor authentication: btk99 supports OTP-based two-step verification for all player accounts. Players are strongly encouraged to enable this feature from their account settings to add a secondary layer of protection to every login.
• Penetration testing and security audits: btk99's platform and infrastructure are subject to periodic security assessments, including vulnerability scanning and penetration testing by qualified security professionals.
• Incident response: btk99 maintains a documented security incident response procedure, enabling rapid identification, containment, and remediation of any security events that affect player data.

While btk99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for notifying btk99 immediately if you suspect that your account has been compromised.

The btk99 platform may contain references to third-party service providers, payment partners, and game studios. These references are for informational purposes only. btk99 does not embed clickable external links to third-party websites within its platform pages, and players are advised to independently review the privacy policies of any third-party service they interact with in connection with their use of the btk99 platform — including their mobile banking provider (e.g., bKash, Nagad, or Rocket) and any game studio whose titles they play.

btk99 is not responsible for the privacy practices, data handling, or security standards of any third party. The inclusion of a third-party service provider's name within btk99's platform or documentation does not constitute an endorsement of that party's privacy practices.

btk99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. The date of the most recent revision is indicated at the top of this Policy and in the "Last Updated" indicator above.

Where material changes are made to this Policy — particularly changes that affect the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — btk99 will provide advance notice to affected account holders via their registered mobile number or email address. The revised Policy will take effect on the date specified in the notification.

Players who do not accept the revised Policy may request account closure and withdrawal of their eligible balance prior to the effective date of the amendment. Continued use of the btk99 platform following the effective date of any revision constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about the way in which btk99 has handled your personal data, please contact the btk99 support team using the details below.

• Email: [email protected] — for all data rights requests, privacy queries, and formal data protection complaints. Please use the subject line "Privacy Query — [Your Account Username]" or "Data Rights Request — [Your Account Username]" as appropriate.
• Live Chat: Available within your btk99 account dashboard 24 hours a day, 7 days a week. Live chat is suitable for general privacy queries but formal data rights requests must be submitted in writing via email for record-keeping purposes.

btk99 will acknowledge receipt of all privacy-related queries within 48 hours and will provide a substantive response within 30 days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by up to an additional 60 days, with notice provided to the requester before the initial 30-day period expires.

If you are not satisfied with btk99's response to a privacy complaint, you have the right to escalate the matter through appropriate formal channels available in your jurisdiction.