bl999 Privacy Policy — How We Protect Your Data

1. Introduction

This Privacy Policy ("Policy") describes how bl999 ("bl999", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your") who access or use the bl999 online casino and sports betting platform available at bl999.onl and all associated subdomains, mobile interfaces, and applications (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your registration, use of games and betting markets, financial transactions, customer support interactions, and any other activity carried out through the bl999 Platform. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein.

This Policy should be read alongside the bl999 Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with bl999.

2. Who We Are

bl999 operates as an online entertainment platform offering casino games and sports betting services to players in Bangladesh. For all data protection matters, bl999 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

If you have any questions about how bl999 processes your personal data, or if you wish to exercise any of your rights described in Section 10 of this Policy, please contact our Data Support Team at [email protected]. All data-related enquiries are handled in English and are typically acknowledged within two (2) business days.

3. Categories of Personal Data We Collect

3.1 Identity and Contact Data

When you register a bl999 account, we collect the following identity and contact information:

This information is necessary to create your account, verify your identity in accordance with our Know Your Customer (KYC) obligations, and communicate with you about your account.

3.2 Financial Data

To facilitate deposits and withdrawals, bl999 processes the following financial information:

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts registered in your name.
• Bank card details (card type, last four digits, expiry date) for Visa and Mastercard transactions. Full card numbers are never stored by bl999 — they are handled directly by our PCI-DSS-compliant payment processors.
• Transaction history, including deposit amounts, withdrawal requests, wagering activity, and bonus redemptions — all denominated in Bangladeshi Taka (৳ BDT).

3.3 Technical and Usage Data

When you use the bl999 Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Session timestamps, pages visited, games played, and time spent on the Platform.
• Referring URLs and navigation paths within the Platform.
• Error logs and crash reports used to diagnose and fix technical issues.

3.4 Communications Data

When you contact bl999 customer support or participate in promotions, we retain records of those communications, including email correspondence, live chat transcripts, and any documentation you submit as part of a KYC or dispute resolution process.

3.5 Responsible Gaming Data

If you voluntarily use bl999's responsible gaming tools — such as deposit limits, session reminders, cooling-off periods, or self-exclusion — we retain records of those preferences and any associated supporting communications. This data is used exclusively to honour and enforce your responsible gaming choices and is never used for marketing purposes.

4. How We Collect Your Data

bl999 collects personal data through the following channels:

• Direct submission: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools as you browse and use the Platform.
• Third-party verification providers: Identity verification data returned by our KYC partners in response to document checks we initiate on your behalf with your consent.
• Payment processors: Transaction confirmations and status updates from bKash, Nagad, Rocket, Upay, and card payment gateways following deposits or withdrawals.
• Fraud prevention services: Risk signals and flag data from third-party fraud detection tools used to protect the integrity of the Platform.

5. Purposes for Which We Process Your Data

The table below sets out the primary purposes for which bl999 processes your personal data and the categories of data used for each purpose.

Purpose	Data Categories Used
Account registration and authentication	Identity, Contact, Technical
KYC identity and age verification	Identity, Communications
Processing deposits and withdrawals	Financial, Identity
Delivering casino games and sports betting services	Identity, Technical, Usage
Anti-money-laundering (AML) compliance monitoring	Financial, Identity, Technical
Fraud detection and platform security	Technical, Financial, Communications
Customer support and dispute resolution	Identity, Communications, Financial
Responsible gaming tool management	Responsible Gaming, Identity
Promotional and bonus administration	Identity, Financial, Usage
Service improvement and analytics	Technical, Usage (aggregated/anonymised)
Marketing communications (with consent)	Identity, Contact, Usage

6. Legal Bases for Processing

bl999 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and bl999 — for example, creating your account, processing transactions, and delivering the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering rules, age verification obligations, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for bl999's legitimate business interests where those interests are not overridden by your rights — for example, fraud prevention, platform security, and service analytics. We conduct a balancing assessment before relying on this basis.
• Consent: Processing carried out only where you have given us clear, informed, and freely given consent — for example, sending marketing emails or SMS messages about new promotions. You may withdraw consent at any time.

7. How We Share Your Data

bl999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only with the following categories of recipients, and only to the extent necessary for each stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card gateway providers receive only the financial data necessary to execute your requested transaction.
• KYC and identity verification providers: Specialist third-party services that verify identity documents and age on our behalf. These providers act as data processors under contract with bl999 and may not use your data for any other purpose.
• Game software providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe may receive anonymised session and gameplay data necessary to deliver their games. They do not receive your personally identifiable information beyond what is technically required for game delivery.
• Fraud prevention and security services: Third-party tools that help bl999 detect and prevent fraudulent activity, account takeovers, and money laundering.
• Legal and regulatory authorities: bl999 may disclose personal data to law enforcement agencies, regulators, or courts when required to do so by applicable law or a valid legal order.
• Professional advisors: Lawyers, auditors, and accountants acting under confidentiality obligations, where disclosure is necessary for the operation of our business.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. bl999 uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate the Platform, remember your preferences, and analyse how our services are used.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function correctly — for example, keeping you logged in during a session and remembering your account preferences. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Help us understand how players interact with the Platform so we can identify areas for improvement. Data collected is aggregated and does not identify individual users.
• Functional cookies: Remember optional settings you have chosen, such as language preference or responsible gaming tool configurations.
• Marketing cookies (with consent): Used to deliver relevant promotional content about bl999 on other websites or channels, where you have explicitly consented to receive such communications.

8.3 Managing Cookies

You can control and manage cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use certain features of the bl999 Platform, including remaining logged in between pages. Disabling performance or marketing cookies will not affect your core gaming experience.

9. Data Retention

bl999 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in order to comply with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless the matter involves an ongoing dispute or regulatory inquiry.
• Responsible gaming records: Retained for the duration of any active exclusion or limit, plus three (3) years thereafter, to prevent circumvention of self-exclusion requests.
• Marketing consent records: Retained until you withdraw consent, at which point they are archived for a further one (1) year as evidence of prior consent history.

When data is no longer required for any of the above purposes and no legal obligation requires its continued retention, bl999 will securely delete or anonymise it.

10. Your Privacy Rights

As a bl999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please send a written request to [email protected] with the subject line "Data Rights Request", including your registered email address and a description of your request. We will respond within a reasonable timeframe and in any event within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data bl999 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to bl999.
• Right to object: You have the right to object to processing based on legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where bl999 relies on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

11. Security Measures

bl999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bl999 servers.
• Encrypted data storage for sensitive personal and financial information held on bl999 servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Regular security audits and penetration testing conducted by qualified security professionals.
• Two-factor authentication (2FA) available to all players as an optional but strongly recommended account security measure.
• Intrusion detection systems monitoring for suspicious activity on the Platform at all times.
• Staff training on data protection best practices, conducted regularly for all personnel with access to personal data.

Despite these measures, no method of electronic transmission or data storage can be guaranteed to be 100% secure. bl999 will notify affected players and relevant authorities without undue delay in the event of a personal data breach that poses a risk to your rights and freedoms.

12. Children's Privacy

The bl999 Platform is strictly intended for persons who are 21 years of age or older. bl999 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, we will immediately close the associated account, delete all related personal data, and void any associated balances or winnings.

If you believe that a person under the age of 21 may have registered or be using a bl999 account, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.

13. Third-Party Links

The bl999 Platform may contain references to third-party service providers, game studios, or payment partners. Any external websites or services operated by those third parties are governed by their own privacy policies, for which bl999 accepts no responsibility. We encourage you to review the privacy policies of any third-party service you interact with in connection with your bl999 account.

14. Updates to This Privacy Policy

bl999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address held on their account and update the "Last Updated" date at the top of this document.

Your continued use of the bl999 Platform after any updated Policy has been communicated to you constitutes your acceptance of the revised terms. If you do not agree to any change, you must cease using the Platform and may request account closure by contacting [email protected].

We recommend bookmarking this page and reviewing it periodically. The version of the Policy applicable at the time of any dispute will be the version in effect on the date the relevant event occurred.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bl999 handles your personal data, please contact our Data Support Team using the details below. All communications must be submitted in English.

Email: [email protected]

Subject line for data rights requests: "Data Rights Request — [Your Registered Email]"

Response time: Acknowledgement within 2 business days; full response within 30 days for data rights requests. General privacy enquiries are typically resolved within 5 business days.

Support hours: 24 hours a day, 7 days a week, including public holidays observed in Bangladesh (Bangladesh Standard Time, UTC+6).