Privacy Policy
99rbajee Data Commitment

1. Information We Collect

99rbajee collects personal data from players through several channels: directly from you when you register or interact with the platform, automatically as you navigate the site, and from trusted third-party partners involved in identity verification and payment processing. The categories of data we collect are set out below.

1.1 Registration Data

When you create a 99rbajee account, we collect the following information:

• Full legal name (as shown on your government-issued identity document)
• Date of birth (to verify you are aged 18 or above)
• Email address (used for account communications and security alerts)
• Mobile phone number (used for account verification via OTP and security notifications)
• Residential address (city and district, used for fraud prevention and responsible gaming profiling)
• Preferred currency (Bangladeshi Taka — BDT)
• Username and hashed password

1.2 Identity Verification Data

Before any withdrawal is processed, 99rbajee is required to carry out identity verification in line with responsible gaming and anti-money-laundering (AML) practices. At this stage, we may collect:

• Scanned copy or photograph of your National Identity Card (NID), passport, or birth certificate
• A recent proof of address document (e.g., utility bill, bank statement issued within 90 days)
• A selfie photograph or short video for liveness verification, where required

1.3 Financial Transaction Data

To process deposits and withdrawals, 99rbajee records the following financial information:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Mobile wallet number or bank account number associated with your registered payment method
• Transaction amounts in BDT, transaction timestamps, and transaction reference numbers
• Deposit and withdrawal history across the lifetime of your account

99rbajee does not store full card numbers or CVV codes. Card payment data is handled directly by our PCI-DSS-compliant payment processing partners.

1.4 Technical and Usage Data

Automatically collected when you access 99rbajee:

Data Type	Examples	Purpose
Device information	Device type, OS version, browser type and version	Platform optimisation, fraud detection
IP address	IPv4 / IPv6 address at time of login	Geolocation, security monitoring
Session data	Login times, session duration, pages visited	Responsible gaming profiling, UX improvement
Betting activity	Games played, wager amounts, outcomes, bonus usage	Account management, dispute resolution
Communication logs	Support email threads, chat transcripts	Customer service quality, dispute evidence

2. How We Use Your Data

Every category of personal data collected by 99rbajee is used for a defined purpose. We do not process your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which your data is used are:

• Account creation and management: To register your account, authenticate your identity at login, manage your profile settings, and maintain your account history.
• Service delivery: To allow you to access games, place wagers, participate in promotions, and use all features of the 99rbajee platform.
• Payment processing: To verify, execute, and record your deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels.
• Identity and age verification: To confirm that you meet the 18+ age requirement and that your account details match the identity documents you have provided.
• Fraud prevention and security: To detect unusual account activity, prevent unauthorised access, identify multi-account abuse, and investigate suspected fraudulent transactions.
• Anti-money-laundering (AML) compliance: To monitor transaction patterns in line with AML best practices and to flag or report suspicious activity where required.
• Responsible gaming: To identify behavioural patterns that may indicate problem gambling — such as rapid deposit escalation, unusually long session durations, or repeated self-exclusion requests — and to intervene appropriately.
• Customer support: To respond to your enquiries, resolve disputes, and communicate account-related information to you via your registered email address.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and content of the 99rbajee platform.
• Marketing communications: Where you have given explicit consent, to send you promotional emails regarding relevant offers, bonuses, and new game launches on 99rbajee. You may withdraw consent at any time by contacting support@99rbajee.

3. Legal Basis for Processing

99rbajee processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 99rbajee — including account registration, payment processing, and game access.
• Legitimate interests: Processing conducted in pursuit of 99rbajee's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your rights and freedoms.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML monitoring, age verification, and record-keeping requirements.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing & Disclosure

99rbajee does not sell your personal data. We share your data with third parties only where strictly necessary to deliver our service, meet our legal obligations, or protect the interests of the platform and its players. Categories of third parties with whom data may be shared include:

4.1 Payment Processing Partners

To execute deposit and withdrawal transactions, we share the minimum necessary financial and identity data with our payment processing partners — including but not limited to bKash, Nagad, Rocket, Upay, and card processing networks. These partners are contractually bound to process your data solely for payment execution purposes and to maintain appropriate data security standards.

4.2 Identity Verification Providers

Where identity verification is required, we may engage a specialist identity verification service provider to cross-reference the documents you supply against authoritative data sources. These providers act as data processors on our behalf and are subject to strict contractual data protection obligations.

4.3 Game Content Providers

Game studios whose content is hosted on 99rbajee — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data (such as player ID and wager amounts) as required to administer game outcomes and resolve disputes. These providers do not receive your full name, contact details, or payment information.

4.4 Legal and Regulatory Authorities

99rbajee may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety of players, the public, or the integrity of the platform. We will notify you of any such disclosure where we are legally permitted to do so.

5. Cookies & Tracking

99rbajee uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse how the site is used. The categories of cookies used are as follows:

Cookie Type	Purpose	Duration
Strictly Necessary	Essential for the platform to function — session management, login state, security tokens	Session / up to 24 hours
Functional	Remember your preferences — language, display settings, recently played games	Up to 90 days
Analytical	Aggregate, anonymised data on page visits, navigation paths, and feature usage to improve the platform	Up to 12 months
Security	Device fingerprinting and login anomaly detection to protect your account from unauthorised access	Up to 30 days

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the core functionality of the 99rbajee platform, including the ability to log in and maintain a session.

6. Data Retention

Personal data held by 99rbajee is retained for the periods set out below. Where data is no longer required within the applicable retention period, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

• Account registration data: Retained for the full lifetime of your active account, and for a period of 5 years following account closure, in line with AML record-keeping best practices.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification, and for as long as may be required by any ongoing legal or regulatory process.
• Financial transaction records: Retained for 5 years from the date of each transaction. This includes deposit confirmations, withdrawal records, and any refund or chargeback documentation.
• Customer support communications: Retained for 2 years from the date of the most recent interaction in each support thread.
• Technical and session data (logs): Retained for 12 months, after which logs are aggregated and anonymised for analytical purposes.
• Marketing consent records: Retained for the duration of your account and for 2 years after consent is withdrawn, to demonstrate compliance with consent requirements.

Where a legal investigation, dispute, or regulatory enquiry is ongoing at the time a standard retention period would otherwise expire, 99rbajee will retain the relevant data for the duration of that process and for a reasonable period thereafter.

7. Your Data Rights

As a player registered on 99rbajee, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to support@99rbajee. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that 99rbajee holds about you, together with a plain-English explanation of the purposes for which each category of data is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request that 99rbajee delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate grounds exist. This right is subject to our legal obligation to retain certain data for AML and regulatory purposes.
• Right to Restrict Processing: In certain circumstances — such as where you contest the accuracy of data, or where processing is unlawful but you prefer restriction over deletion — you may request that we limit how your data is processed.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to 99rbajee, and to request that we transmit that data to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, where you have grounds relating to your particular situation. You may also object unconditionally to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8. Data Security

99rbajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• SSL/TLS encryption: All data in transit between your device and the 99rbajee platform is encrypted using industry-standard SSL/TLS protocols. The platform operates exclusively over HTTPS.
• Password hashing: Account passwords are never stored in plain text. They are stored as salted cryptographic hashes using a robust hashing algorithm, ensuring that passwords cannot be recovered from our systems even in the event of a data breach.
• Access controls: Access to personal data within 99rbajee's internal systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Session security: Player sessions are protected by secure, time-limited tokens. Inactive sessions are automatically expired to reduce the risk of unauthorised account access.
• Fraud monitoring: Automated systems continuously monitor account activity for patterns consistent with account takeover, multi-accounting, payment fraud, and other security threats. Suspicious activity triggers immediate review by our security team.
• Infrastructure security: The 99rbajee platform is hosted on secure infrastructure maintained to current industry security standards, including regular vulnerability assessments and patch management.

While 99rbajee takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you promptly at your registered email address and take all reasonable steps to mitigate the impact of the breach.

9. Updates to This Policy

99rbajee reserves the right to update this Privacy Policy at any time. Where a material change is made to our data practices, we will publish an updated version of this Policy with a revised effective date. We will notify registered players of significant changes via email to the address held on file. Continued use of 99rbajee following the publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically. The current version will always be accessible at /privacy-policy and is the authoritative version of our data practices.

This Privacy Policy is written in English. In the event of any inconsistency arising from a translation or interpretation, the English-language version shall prevail. If you have any questions about this Policy or about how 99rbajee handles your personal data, please contact us at support@99rbajee. Our support team is available 24 hours a day, 7 days a week, and will respond within 2 hours during Bangladesh Standard Time (BST, UTC+6) business hours.