bak99 Privacy Policy

1. Information We Collect

bak99 collects personal information in three broad ways: information you provide directly when registering or using the platform, information generated automatically by your use of the site, and information received from trusted third parties such as payment processors and identity verification services. The specific categories of data collected are described below.

Information You Provide Directly

When you register a bak99 account, make a deposit, request a withdrawal, or contact our support team, you may provide the following types of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality as recorded on your government-issued identity document.
• Contact data: Residential address (including city, district, and postcode), email address, and mobile phone number.
• Account credentials: Username and encrypted password. bak99 never stores passwords in plain text.
• Payment data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details, and card metadata (card type, last four digits, expiry date) where applicable. Full card numbers are processed exclusively by our PCI-DSS compliant payment partners and are never stored on bak99 servers.
• Verification documents: Copies of identity documents (National ID card, passport, driving licence), proof of address (utility bill, bank statement), and proof of payment method ownership submitted as part of our KYC process.
• Communications data: Records of your correspondence with bak99's support team via email, live chat, or any other channel.
• Responsible gaming data: Information you provide when setting deposit limits, loss limits, cooling-off periods, or when requesting self-exclusion.

Information Collected Automatically

When you access the bak99 website or mobile platform, certain technical information is collected automatically by our systems and third-party analytics tools:

• Device and browser data: IP address, device type and model, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, navigation paths, search queries entered on the platform, and features used.
• Transaction data: A complete record of all deposits, withdrawals, bonus activations, and wagers associated with your account, including timestamps and amounts in Bangladeshi Taka (৳).
• Cookie and tracking data: Information collected via cookies, pixel tags, and similar technologies as described in the Cookies section of this policy.
• Location data: General geographic location derived from your IP address. bak99 does not access precise GPS-level location data from your device.

Information from Third Parties

bak99 may receive personal information about you from the following categories of third parties:

• Payment processors: Transaction status, payment method verification results, and fraud signals from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank.
• Identity verification providers: Results of automated document verification and age confirmation checks.
• Fraud prevention services: Risk scores, device fingerprint data, and flagged indicators from third-party fraud detection systems used to protect the integrity of the platform.
• Affiliates and referral partners: If you arrived at bak99 via a referral link, we may receive a referral identifier. We do not receive your personal data from the referring party beyond what is needed to credit the referral.

2. How We Use Your Data

bak99 uses the personal information it collects for the following defined purposes. We do not use your data in ways that are incompatible with these stated purposes without first obtaining your consent or establishing a new lawful basis.

3. Legal Basis for Processing

bak99 processes your personal information on the basis of one or more of the following lawful grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to perform the contract we have with you as a registered bak99 member — including account creation, game play, and transaction processing — is carried out on the basis of contractual necessity.
• Legal obligation: Certain processing activities — particularly KYC identity verification, age verification, responsible gaming monitoring, anti-money-laundering checks, and the retention of transaction records — are required by law. We process data for these purposes on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and the improvement of our products and services is based on our legitimate interest in operating a safe, fair, and well-functioning platform. We balance our legitimate interests against your rights and interests before relying on this basis.
• Consent: Marketing communications — including promotional emails and SMS messages — are sent only where you have given explicit consent. You may withdraw this consent at any time by updating your marketing preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing and Disclosure

bak99 may share your personal information with the following categories of recipient, strictly for the purposes described in this policy:

Service Providers and Technology Partners

We engage carefully selected third-party service providers who process personal data on our behalf under written data processing agreements that require them to maintain standards equivalent to those in this policy. These include:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank) — for transaction processing and fraud screening.
• Identity verification providers — for automated KYC document checks and age verification.
• Cloud infrastructure and hosting providers — for secure data storage and platform operation.
• Customer support platforms — for managing support tickets and live chat interactions.
• Analytics providers — for anonymised or pseudonymised platform usage analysis.
• Fraud prevention and cybersecurity services — for real-time risk scoring and threat detection.
• Game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) — who may receive limited session data necessary to deliver their game content within the bak99 platform.

Legal and Regulatory Disclosure

bak99 may disclose your personal information to competent governmental, regulatory, or law enforcement authorities when required to do so by applicable law, court order, or lawful regulatory instruction. In such cases, we will disclose only the minimum information necessary to satisfy the specific legal requirement and, where permissible, will notify you of the disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of bak99's business or assets, personal data held by bak99 may be transferred to the acquiring entity as part of that transaction. We will notify affected members before their personal data becomes subject to a different privacy policy as a result of such a transfer, and you will retain the right to request deletion of your data prior to the transfer taking effect.

Aggregate and Anonymised Data

bak99 may share aggregated, anonymised, or pseudonymised data — from which individual members cannot be identified — with business partners, academic researchers, or industry bodies for statistical, analytical, or reporting purposes. This sharing does not constitute disclosure of personal data.

5. Cookies and Tracking Technologies

bak99 uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage — to operate the platform, analyse usage patterns, personalise your experience, and, where you have consented, deliver relevant promotional content.

Categories of Cookies We Use

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is set. Please note that disabling strictly necessary cookies will prevent the bak99 platform from functioning correctly, including logging in to your account. Analytics, functional, and marketing cookies can be disabled without affecting core platform access. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

6. Data Retention

bak99 retains personal data for only as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, and responsible gaming obligations. The following retention schedule applies to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the anonymised data may be retained indefinitely for statistical purposes as it no longer constitutes personal data.

7. Your Privacy Rights

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing the request and respond within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you promptly of the extension and the reason for it.

We will never charge a fee for handling a legitimate privacy rights request unless the request is manifestly unfounded or excessive in nature, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

8. Data Security Measures

bak99 takes the security of your personal information seriously and has implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration.

Technical Safeguards

• All data in transit is encrypted using TLS 1.3 / 256-bit SSL protocols. All data at rest is encrypted using AES-256 encryption.
• Passwords are stored as salted cryptographic hashes using bcrypt. Plain-text passwords are never stored or logged.
• Access to personal data within bak99's internal systems is governed by role-based access controls (RBAC). Only staff with a legitimate operational need can access member data, and all access is logged and audited.
• The bak99 platform undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Payment card data is handled exclusively by PCI-DSS Level 1 compliant payment processors. Card numbers are never stored on bak99 servers.
• Two-factor authentication (2FA) is available to all bak99 members and is enforced for all internal staff accounts with access to personal data systems.

Organisational Safeguards

• All bak99 staff and contractors who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers who process data on bak99's behalf are subject to due diligence assessments and are required to maintain adequate security standards under contractual data processing agreements.
• bak99 maintains a documented incident response plan. In the event of a personal data breach that poses a risk to affected individuals, we will notify impacted members and relevant authorities promptly, in accordance with applicable legal requirements.

While bak99 takes all reasonable steps to protect your personal data, no security system is entirely impenetrable. You can contribute to the security of your own account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party. Report any suspected security incidents immediately to [email protected].

9. Third-Party Services

The bak99 platform integrates with a number of carefully selected third-party services to deliver a complete gaming and betting experience. Each integration is governed by a data processing agreement, and bak99 takes responsibility for ensuring that third-party partners meet acceptable data protection standards. The main categories of third-party service are described below.

Game Software Providers

Casino and slot games on the bak99 platform are powered by leading international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate the game engines that deliver results to your screen. In the course of game play, limited technical session data — such as session token, stake amount, and game outcome — is transmitted to the relevant game server. This data is processed by the provider under their own privacy frameworks and is used solely to deliver the game and maintain RNG integrity.

Payment Partners

Deposits and withdrawals on bak99 are processed by local and international payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These partners process your payment credentials under their own privacy policies and applicable financial services regulations. bak99 receives transaction confirmation data (amount, currency, status, reference number) but does not receive or store full payment credentials directly.

Analytics and Performance Tools

bak99 uses web analytics tools to measure platform performance and improve the user experience. Analytics data is collected in aggregated or pseudonymised form wherever technically feasible. These tools do not receive information that directly identifies you by name or account number.

Links to External Sites

The bak99 website does not contain links to external third-party websites beyond the technical integrations described above. This Privacy Policy applies only to the bak99 platform at bak99.vip. bak99 is not responsible for the privacy practices of any third-party websites that may be referenced in game content or game studio promotional materials delivered within game iframes.

10. Policy Updates and Contact

bak99 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the features and services offered on the platform. The "Last Updated" date at the top of this page indicates when the most recent revision was published.

For material changes that significantly affect how we use your personal data or that reduce your privacy rights, bak99 will provide advance notice by email to the address registered on your account, with a minimum notice period of 14 days before the change takes effect. For minor or clarificatory changes, we will update the policy on this page without separate individual notice.

Your continued use of the bak99 platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of the updated policy. If you do not agree with the revised terms, you should stop using the platform and contact our support team to arrange closure of your account.

Contact Our Data Protection Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how bak99 handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related enquiries fairly and promptly.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 30 calendar days.
• Language: Enquiries may be submitted in English. All responses will be provided in English.
• Hours: Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

bak99 is committed to working with you directly to resolve any privacy concern. If you feel that your concern has not been adequately addressed after contacting us, you retain the right to escalate the matter to the relevant competent authority in your jurisdiction.