Privacy Policy — 99bmw

This Privacy Policy describes how 99bmw ("we", "us", or "our") collects, uses, stores, and protects personal information provided by users ("you" or "player") who register for and use the 99bmw online casino and sports betting platform available at https://99bmw.ws.

By registering an account or using any service on the 99bmw platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree to this policy, please do not use the platform.

This Privacy Policy applies to all features and services offered through 99bmw, including casino games (slots, live casino tables, blackjack, roulette), sports betting markets (cricket BPL, IPL, T20, football), payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard), customer support interactions, and any promotional or bonus campaigns. This policy is reviewed and updated periodically; the current version reflects the effective date shown at the top of this page.

99bmw collects personal information in three ways: information you provide directly, information generated automatically through your use of the platform, and information received from trusted third-party partners involved in payment processing or identity verification.

Information You Provide Directly

• Registration data: full legal name, date of birth, Bangladeshi mobile number, email address, and a chosen username and password. This information is required to create and verify your account.
• KYC documents: National ID card (NID) number and image, and where required, a proof of residential address or a selfie with the NID document. These are collected to satisfy identity verification requirements before processing withdrawals.
• Payment information: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), card type and last four digits for Visa and Mastercard transactions. We do not store full card numbers on our servers.
• Support communications: any messages, complaints, disputes, or feedback you submit via email or live chat with the 99bmw support team. These records are retained to improve service quality and to maintain a record of dispute resolution.

Information Collected Automatically

• Device and connection data: IP address, device type, operating system version, browser type and version, mobile network carrier, and screen resolution. This data helps us optimise the platform for Bangladeshi players across Android and iOS devices.
• Session and behaviour data: pages visited, games played, bets placed, session duration, login timestamps, and navigation paths through the platform. This data is used for fraud detection, responsible gaming monitoring, and platform analytics.
• Cookie and tracking data: session cookies, preference cookies, and optional analytics cookies. See Section 07 of this policy for full details on our cookie practices and how to manage your preferences.

Information from Third Parties

• Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): transaction confirmation data, transaction reference numbers, and payment status updates. We do not receive your full mobile wallet PIN or card CVV — only transaction outcome data.
• Identity verification partners: confirmation of document authenticity and age verification results. These partners are bound by strict confidentiality agreements and data processing terms consistent with this Privacy Policy.
• Fraud prevention and AML monitoring services: risk scores, device fingerprint matching results, and flagged transaction indicators. This data is used solely to protect the integrity of the platform and the safety of all players.

99bmw uses personal data only for legitimate, defined purposes. We do not use your data in ways that are incompatible with the reasons for which it was originally collected. The following are the primary purposes for which your information is used:

• Account creation, management, and security: to register your account, verify your identity, maintain your account settings, and detect and prevent unauthorised access or account takeover attempts.
• Payment processing and financial record keeping: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to maintain accurate transaction records, and to investigate and resolve payment disputes.
• Regulatory compliance and anti-money laundering (AML): to fulfil our obligations under applicable AML requirements, to conduct KYC checks before processing withdrawals, and to report suspicious activity to relevant authorities where required by law.
• Platform operation and game delivery: to provide access to casino games (slots, live casino, blackjack), sports betting markets (cricket, football), and all other platform features; and to personalise the gaming experience based on your activity history.
• Responsible gaming monitoring: to track session durations, deposit patterns, and betting behaviour to identify players who may be exhibiting signs of problem gambling, and to enforce deposit limits, time-outs, and self-exclusions requested by players.
• Customer support: to respond to your enquiries, investigate complaints, process refund or dispute requests, and maintain records of all support interactions for quality assurance and regulatory audit purposes.

Where 99bmw sends you promotional communications (bonus offers, seasonal promotions tied to events such as Eid, BPL, IPL, or Pohela Boishakh), this is done only on the basis of your prior consent given during registration. You can withdraw this consent at any time by emailing [email protected], after which we will cease sending marketing messages within 5 business days.

99bmw processes personal data only where there is a valid legal basis for doing so. The legal bases applicable to our processing activities are:

• Contractual necessity: processing required to fulfil the terms of the player agreement — including account registration, game access, payment processing, and bonus administration — is performed because it is necessary to deliver the services you have requested.
• Legal obligation: KYC verification, AML transaction monitoring, age verification, and record retention are performed because they are required under applicable legal and regulatory requirements. We cannot waive these obligations.
• Legitimate interests: fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics are conducted on the basis of 99bmw's legitimate interest in operating a safe and reliable platform. We apply a balancing test to ensure these activities do not override your privacy rights.
• Consent: sending promotional and marketing communications, and deploying optional analytics cookies, is done only on the basis of your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

99bmw does not sell, rent, or share your personal information with third parties for their own marketing purposes. Personal data is disclosed to third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. Each payment provider operates under its own privacy policy and data processing agreement with 99bmw.
• KYC and identity verification partners: third-party identity verification providers receive document images and personal details solely for the purpose of confirming the authenticity of your identity. These providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention and AML service providers: risk management and compliance partners receive anonymised or pseudonymised transaction data to generate fraud risk scores and flag suspicious patterns. No more data than is strictly necessary is shared.
• Law enforcement and regulatory authorities: where 99bmw is legally compelled to disclose personal data — for example, in response to a court order, a formal law enforcement request, or a regulatory investigation — we will comply with the minimum disclosure necessary to satisfy the legal requirement.

In all cases where data is shared with third parties, 99bmw ensures that appropriate contractual data protection safeguards are in place. We require all third-party processors to handle personal data securely, to use it only for the agreed purpose, and to delete it when it is no longer needed for that purpose.

99bmw processes financial information strictly for the purpose of facilitating deposits and withdrawals and maintaining accurate account records. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is initiated through the payment provider's own secure interface. 99bmw receives only a transaction reference number and a confirmed status (success or failure) — we do not receive your mobile wallet PIN, OTP, or full account credentials.

For Visa and Mastercard transactions, card details are processed through a PCI-DSS compliant payment gateway. 99bmw does not store full card numbers, card expiry dates, or CVV codes on its servers. Only a tokenised reference is retained to facilitate future withdrawals to the same card where applicable.

Transaction records — including deposit amounts, withdrawal amounts, dates, and payment method used — are retained for a minimum period of five years following the date of the transaction, in compliance with financial record-keeping requirements. These records may be accessed by our compliance team, by payment processors in the event of a dispute, and by regulatory or law enforcement authorities where legally required.

99bmw uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and — where you have consented — to analyse platform usage patterns. Cookies are small data files stored on your device by your browser.

Types of Cookies We Use

• Essential cookies: these are necessary for the platform to function. They maintain your logged-in session, remember your language preference, and ensure that game rounds and transactions are processed correctly. These cookies cannot be disabled without affecting the functionality of the platform.
• Preference cookies: these remember your settings such as chosen game category, notification preferences, and display options. They improve your experience by saving your choices between sessions.
• Analytics cookies (consent-based): where you have given consent, we use anonymised analytics cookies to understand how players navigate the platform, which game categories are most popular, and where technical issues may arise. This data helps us improve platform performance. You may withdraw consent for analytics cookies at any time via your browser settings.

Most browsers allow you to block, delete, or control cookies through their settings. Please note that disabling essential cookies will impair the functionality of the 99bmw platform and may prevent you from logging in, placing bets, or processing payments. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

99bmw retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention periods apply:

• Active account data (registration details, KYC documents, account preferences): retained for the full duration your account is open, and for a period of five years following permanent account closure, in compliance with AML record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of five years from the date of each transaction, in compliance with financial record-keeping obligations.
• Support communications: retained for two years from the date of the last interaction in a support thread, or for five years where the communication relates to a formal dispute, regulatory enquiry, or fraud investigation.

When personal data is no longer required for any active or legally mandated purpose, it is securely deleted or anonymised in accordance with 99bmw's internal data deletion procedures. Anonymised aggregated data (with all personal identifiers removed) may be retained indefinitely for platform analytics and reporting purposes.

As a registered player on the 99bmw platform, you have the following rights with respect to your personal data. These rights are exercisable by submitting a written request to [email protected]. 99bmw will acknowledge all rights requests within 5 business days and will aim to fulfil them within 30 calendar days.

• Right of access: you may request a copy of all personal data that 99bmw holds about you, including registration details, KYC records, transaction history, and support communications.
• Right to rectification: you may request that inaccurate or incomplete personal data held about you be corrected. For data that is subject to legal verification requirements (such as KYC documents), corrections may require re-verification.
• Right to erasure (right to be forgotten): you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Note that this right does not apply where retention is required by law (for example, AML and financial record-keeping obligations).
• Right to restriction of processing: you may request that 99bmw restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to object: where 99bmw is processing your data on the basis of legitimate interests, you have the right to object. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.

To exercise any of the rights listed above, please contact the 99bmw data protection team at [email protected]. Please include your registered email address and a clear description of your request so that we can locate your records and respond efficiently. Identity verification may be required before we can fulfil certain rights requests.

99bmw takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and 99bmw's servers, ensuring that login credentials, payment data, and personal information cannot be intercepted in transit.
• Role-based access controls limiting which internal team members can access personal data, with access granted only on a need-to-know basis and subject to mandatory confidentiality obligations.
• Encryption at rest for stored personal data, KYC documents, and financial records held on 99bmw's database infrastructure, reducing the risk of data exposure in the event of a server-level security incident.
• Regular security reviews and vulnerability assessments of the platform infrastructure, conducted to identify and remediate potential weaknesses before they can be exploited.

While 99bmw applies rigorous security standards, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a risk to your rights, 99bmw will notify affected players promptly and take immediate steps to contain the breach and mitigate any harm.

The 99bmw platform is strictly intended for adults aged 21 years and above. 99bmw does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Age verification is conducted as part of the KYC process before a player's first withdrawal is permitted.

If 99bmw becomes aware that personal data has been collected from a player who is under the age of 21, we will immediately suspend that account, delete the collected data, and return any deposited real-money balance via the original payment method after verification of the refund recipient's identity.

The 99bmw platform integrates with third-party game providers (including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) and payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to deliver its full range of services. While 99bmw contracts with these providers under strict data processing terms, each provider operates its own systems and is subject to its own privacy policies for the portion of the transaction or service that occurs on their infrastructure.

99bmw is not responsible for the privacy practices of third-party providers. We recommend that players review the privacy policies of bKash, Nagad, and any other payment service they use, as those providers handle personal data independently of 99bmw once the transaction moves to their platform.

99bmw reserves the right to update or amend this Privacy Policy at any time . When material changes are made — for example, changes to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — we will notify registered players by email to their registered address at least 7 days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised effective date. Continued use of the 99bmw platform after the effective date of a policy update constitutes acceptance of the revised terms. If you do not agree to a revised Privacy Policy, you should cease using the platform and may request account closure by contacting [email protected].