Privacy Policy — b1999 Data Protection Commitment

01 Data We Collect

b1999 collects personal data that is necessary to provide you with a safe, functional, and compliant online gaming experience. We collect data in three primary ways: information you provide directly, information generated automatically by your use of the platform, and information we receive from third-party partners where applicable.

1.1 Information You Provide Directly

When you register a b1999 account, update your profile, contact our support team, or respond to a promotion, you may provide the following categories of personal data:

Identity documents that may be requested for verification purposes include a National Identity Card (NID), passport, or birth certificate issued by a recognised Bangladeshi authority. b1999 does not retain full copies of these documents beyond the period required for compliance verification.

1.2 Information Collected Automatically

When you access and interact with the b1999 platform, our systems automatically collect certain technical and behavioural data. This data does not directly identify you but may be combined with other information to create a profile of your activity on the platform.

• Device and browser data: Operating system, browser type and version, device type (mobile, desktop, tablet), screen resolution, and installed language preferences.
• Network data: IP address, approximate geographic location derived from IP, internet service provider (ISP), and connection type.
• Session data: Pages visited, time spent on each page, click patterns, game sessions initiated, bets placed, search queries made within the platform, and features accessed.
• Transaction logs: Deposit and withdrawal timestamps, amounts, payment methods used, and reference numbers. These logs are retained for financial compliance purposes.
• Cookie and tracking data: See Section 4 (Cookies & Tracking) for full details of the cookies used on the b1999 platform.

1.3 Information from Third Parties

In certain circumstances, b1999 may receive information about you from third-party sources. These include:

• Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank may share transaction confirmation data with b1999 for the purpose of crediting deposits and processing withdrawals.
• Identity verification services: Where b1999 uses a third-party identity verification partner to assist with KYC (Know Your Customer) checks, that partner may share verification outcome data with b1999.
• Game providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game-session outcome data with b1999 for the purpose of settling bets and calculating bonuses.
• Fraud prevention partners: b1999 may receive risk signals or flagged-activity alerts from fraud-prevention partners to help protect the integrity of the platform and its players.

02 How We Use Your Data

b1999 uses the personal data it collects only for the purposes described in this policy. We do not use your data for purposes that are incompatible with those listed below without first obtaining your explicit consent or as otherwise required by law.

2.1 Marketing Communications

b1999 may send you promotional communications about new games, daily bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket betting events), and platform updates. You will only receive marketing communications if you have opted in to receive them during registration or through your account preferences. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting live support.

2.2 Automated Decision-Making

b1999 uses automated processing to make certain decisions that affect your account, including fraud detection, bonus eligibility checks, and responsible gaming intervention triggers. Where an automated decision has a significant effect on your account — such as a temporary suspension triggered by a fraud-detection algorithm — you have the right to request human review of that decision by contacting the b1999 support team within 14 days of being notified of the decision.

03 Data Sharing & Disclosure

b1999 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

b1999 works with a small number of carefully selected third-party service providers who process personal data on our behalf. These providers are bound by data processing agreements that restrict their use of your data to the specific service they provide to b1999. Categories of service providers include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC services used to verify player identity as required by our compliance obligations.
• Game technology providers: Certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which operate game infrastructure on behalf of b1999.
• Cloud and hosting infrastructure: Secure server infrastructure providers used to host the b1999 platform and store encrypted player data.
• Analytics providers: Platform analytics tools used to understand aggregate user behaviour and improve the b1999 experience. These tools are configured to anonymise or pseudonymise individual-level data where possible.

3.2 Legal and Regulatory Disclosure

b1999 may be required to disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, b1999 will disclose only the minimum information necessary to satisfy the legal requirement and will, where legally permitted to do so, notify the affected player of the disclosure.

3.3 Business Transfers

In the event that b1999 undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, b1999 will provide reasonable notice to affected players and will ensure that the receiving entity commits to handling player data in accordance with a privacy standard no less protective than this policy.

04 Cookies & Tracking

b1999 uses cookies and similar tracking technologies to provide a functional, personalised, and secure platform experience. A cookie is a small text file stored on your device by your browser when you visit a website. The following table describes each category of cookie used on the b1999 platform.

4.1 Managing Cookies

You may disable non-essential cookies at any time by adjusting the cookie preferences in your b1999 account settings, or by configuring your browser to reject cookies from b1999.app. Please note that disabling essential or security cookies will prevent you from logging in or using core platform features. Disabling analytical or functional cookies will not affect your ability to place bets, make deposits, or access any game content.

4.2 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal that can be sent to websites you visit. At present, there is no universally accepted standard for how websites should respond to DNT signals. b1999 does not currently alter its data collection practices in response to DNT signals, but we do limit our tracking to the categories described in the table above regardless of browser settings.

05 Data Security

b1999 implements a layered security approach to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include both technical controls and operational procedures maintained by our infrastructure and compliance teams.

• Transport encryption: All data transmitted between your device and the b1999 platform is encrypted using TLS 1.2 or higher. Connections using outdated protocols are rejected automatically.
• Data storage encryption: Sensitive personal data stored on b1999 servers — including identity document references, payment method identifiers, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within the b1999 organisation is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role and are bound by confidentiality obligations.
• Two-factor authentication: b1999 offers SMS-based two-factor authentication to all registered players at no charge. Enabling 2FA significantly reduces the risk of unauthorised account access.
• Penetration testing: The b1999 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: b1999 maintains a documented incident response plan. In the event of a data breach that is likely to result in a risk to player rights or interests, b1999 will notify affected players as promptly as practicable given the circumstances of the incident.

06 Data Retention

b1999 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law and regulatory obligations. The following retention schedule applies to the principal categories of data we hold.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis as it can no longer be associated with any identifiable individual.

07 Your Privacy Rights

As a b1999 player, you hold a number of rights in relation to the personal data we hold about you. b1999 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction.

• Right of access: You may request a copy of the personal data b1999 holds about you at any time. We will provide this information within a reasonable period of receiving a verified request.
• Right to rectification: If any personal data b1999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (contact number, email address), you may update your details directly in your account profile. For core identity changes, please contact support.
• Right to erasure: Subject to our legal retention obligations, you may request the deletion of your personal data. Where we are required by law to retain certain data (such as transaction records), we will delete all other data and inform you of the categories we are legally required to retain.
• Right to restrict processing: You may request that b1999 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request that b1999 provide a structured, machine-readable copy of the personal data you have provided to us. This right applies to data processed on the basis of consent or contract.
• Right to object: You may object to b1999 processing your personal data on the basis of legitimate interest. b1999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

7.1 Exercising Your Rights

To exercise any of the rights described above, please contact the b1999 privacy team through the live support channel available on the platform. To protect against fraudulent requests, b1999 may ask you to verify your identity before processing a data rights request. We aim to respond to all verified requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

08 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how b1999 has handled your personal data, please contact our privacy team using the details below.

8.1 Policy Updates

b1999 reserves the right to update this Privacy Policy at any time. The effective date displayed at the top of this page reflects the most recent revision. Where a material change is made to the way b1999 processes personal data, registered players will be notified via in-platform notification or email where an address is on file. Your continued use of the b1999 platform following any update to this policy constitutes acceptance of the revised terms.