Privacy Policy — How ball99 Collects, Uses, and Protects Your Data

1. Introduction

ball99 ("the Platform", "we", "us", "our") operates the online casino and sports betting platform accessible at ball99.club. This Privacy Policy describes how ball99 collects, processes, stores, shares, and protects personal data belonging to players and visitors ("you", "your") who access or use our services.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated herein by reference. Where there is any conflict between this Privacy Policy and the Terms & Conditions on the subject of data, this Privacy Policy shall prevail.

ball99 is committed to handling your personal data with care, transparency, and integrity. We collect only what is necessary, use it only for the purposes described in this document, and maintain robust security measures to prevent unauthorised access or disclosure.

2. Data We Collect

ball99 collects the following categories of personal data from players and site visitors:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth;
• Residential address in Bangladesh (street, district, division, postal code);
• Email address;
• Mobile phone number (including the number registered to your bKash, Nagad, or Rocket account);
• National Identity Card (NID) number or passport number, as submitted during KYC verification.

2.2 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals;
• Bank account information where bank transfer is used as a payment method;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment reference numbers;
• Bonus and promotional credit history associated with your account.

2.3 Account and Gaming Data

• Your ball99 username and account ID;
• Account balance and wallet activity;
• Betting history, game session logs, and wagering records;
• Responsible gaming settings, including deposit limits, cooling-off periods, and self-exclusion status;
• Customer support correspondence, including chat transcripts and email exchanges with our support team.

2.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Pages visited, session duration, referral source, and clickstream data;
• Cookie identifiers and similar tracking technology data (see Section 7 for details);
• Login timestamps and session activity logs.

2.5 Verification Documents

• Scanned or photographed copies of government-issued photo ID (National Identity Card, passport, or driving licence);
• Proof of address documents (utility bills, bank statements, or official correspondence dated within the past three months);
• Selfie photographs submitted as part of liveness verification during KYC;
• Payment method verification screenshots demonstrating account ownership.

3. How We Collect Your Data

ball99 collects personal data through the following means:

• Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact support, respond to a survey, or participate in a promotion;
• Automatically: When you browse or use the ball99 platform, our servers and analytics tools automatically collect technical and usage data as described in Section 2.4;
• From payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank, those providers may share transaction confirmation data with us to enable processing and reconciliation;
• From identity verification partners: Where ball99 uses a third-party KYC or identity verification service to validate documents you submit, that service may return verification results and flags to us;
• From fraud prevention and analytics services: Technical data may be received from third-party tools used to detect suspicious activity, prevent fraud, and monitor platform security.

4. How We Use Your Data

ball99 uses the personal data it collects for the following clearly defined purposes:

4.1 Account Management and Service Delivery

To create and manage your player account, authenticate your identity at login, process deposits and withdrawals, record betting and gaming activity, and deliver the full range of ball99 casino and sports betting services to you.

4.2 Identity Verification and KYC Compliance

To verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that your payment methods are registered in your own name. This is a mandatory process that all players must complete before withdrawals are permitted.

4.3 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and any other activity that violates ball99's Terms & Conditions or applicable law. This includes monitoring login patterns, transaction behaviour, and game activity for anomalies.

4.4 Customer Support

To respond to your queries, complaints, and requests via email, live chat, and other support channels. Support correspondence is logged and retained to maintain a record of our interactions and to improve service quality.

4.5 Responsible Gaming

To administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion at your request, and to monitor gaming behaviour for indicators that may suggest a player is experiencing gambling-related harm.

4.6 Personalisation and Marketing

Where you have consented to receive marketing communications, ball99 may use your data to send you personalised promotional offers, bonus notifications, and information about new games or events relevant to your interests — such as BPL cricket season promotions, Eid bonus offers, or new slot releases. You may withdraw this consent at any time.

4.7 Legal and Regulatory Compliance

To comply with applicable laws and regulations, respond to lawful requests from governmental or regulatory authorities, enforce our Terms & Conditions, and exercise or defend legal claims.

4.8 Platform Improvement

To analyse usage patterns, diagnose technical issues, test new features, and improve the overall performance, usability, and security of the ball99 platform.

5. Legal Basis for Processing

ball99 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, KYC, and service delivery — is carried out because it is necessary to fulfil our obligations to you as a player;
• Legal obligation: Certain processing activities are required to comply with applicable laws, including identity verification, anti-money-laundering checks, and record-keeping obligations;
• Legitimate interests: ball99 processes technical and usage data, and conducts fraud prevention and security monitoring, on the basis of its legitimate interest in operating a safe, secure, and compliant platform. We balance this against your privacy interests and fundamental rights;
• Consent: Where ball99 sends you marketing communications or uses non-essential cookies, we do so only on the basis of your freely given consent, which you may withdraw at any time without detriment.

6. Data Sharing and Disclosure

ball99 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below:

6.1 Payment Processing Partners

When you make a deposit or request a withdrawal, ball99 shares the minimum necessary transaction data with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard — to process the transaction. These providers are bound by their own privacy and security standards.

6.2 Identity Verification Services

To complete the KYC process, ball99 may share identity documents and related data with a contracted third-party verification service. Such services are engaged under data processing agreements that require them to handle your data securely and use it only for verification purposes.

6.3 Game Providers

Some technical data — such as session tokens and account identifiers — may be shared with our game technology partners, including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, to facilitate game delivery, resolve game-related disputes, and maintain fair play integrity. These providers do not receive personally identifiable data beyond what is technically necessary.

6.4 Legal and Regulatory Disclosure

ball99 may disclose personal data to law enforcement agencies, regulators, courts, or other government authorities where required by law, court order, or where we believe in good faith that disclosure is necessary to prevent fraud, protect national security, or protect the rights, property, or safety of ball99, its players, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ball99's business, personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7. Cookies and Tracking Technologies

ball99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and deliver relevant communications. The categories of cookies we use are as follows:

7.1 Strictly Necessary Cookies

These cookies are essential for the ball99 platform to function. They maintain your login session, remember your language and currency preferences, and enable core security features. You cannot opt out of strictly necessary cookies while using the platform.

7.2 Analytics Cookies

With your consent, ball99 uses analytics cookies to collect aggregated, anonymised information about how players interact with the platform — including pages visited, session duration, and navigation paths. This data helps us identify usability issues and improve the player experience.

7.3 Marketing and Preference Cookies

Where you have consented to marketing communications, preference cookies allow ball99 to remember your interests and deliver more relevant promotional content. You may withdraw consent for these cookies at any time through your account notification settings.

Most web browsers allow you to manage cookie preferences directly through browser settings. Disabling non-essential cookies will not prevent you from using the ball99 platform, but some personalisation features may be affected.

8. Data Retention

ball99 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by law and legitimate operational needs. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five years following account closure, in order to satisfy anti-money-laundering record-keeping requirements;
• KYC verification documents: Retained for five years after the end of the player relationship, or longer where required by a regulatory authority;
• Customer support correspondence: Retained for three years from the date of the last interaction;
• Technical and usage data: Retained for up to 24 months in identifiable form; thereafter, it may be retained in anonymised, aggregated form indefinitely for platform analytics;
• Marketing consent records: Retained for the duration of your account and for three years following account closure as evidence of consent history.

When data is no longer required for its original purpose and no legal obligation compels its retention, ball99 will securely delete or anonymise it.

9. Data Security

ball99 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ball99's servers;
• Encryption at rest for sensitive data fields including payment details and identity document copies stored in our database;
• Role-based access control ensuring that only authorised personnel with a defined business need can access player data;
• Multi-factor authentication for all staff accessing internal systems that contain personal data;
• Regular security audits and penetration testing conducted by qualified information security professionals;
• Incident response procedures designed to detect, contain, and notify affected parties of any data breach in a timely manner.

While ball99 employs industry-standard security practices, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

10. Your Rights

As a player on the ball99 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to resolve it within 14 business days.

• Right of Access: You may request a copy of the personal data ball99 holds about you, along with information about how it is being used;
• Right to Rectification: If any data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated;
• Right to Erasure: Subject to legal retention obligations, you may request that ball99 delete your personal data. Note that we are required to retain certain data (such as transaction records) for a minimum period by law, and erasure requests that conflict with these obligations may be partially declined with an explanation;
• Right to Restrict Processing: In certain circumstances, you may request that ball99 restrict the processing of your data — for example, while a dispute about data accuracy is being resolved;
• Right to Data Portability: You may request a copy of the data you have provided to ball99 in a structured, machine-readable format, which you may then transfer to another service provider;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing immediately;
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

11. Children's Privacy

The ball99 platform is strictly intended for adults aged 18 years and above. ball99 does not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18, you must not use the ball99 platform or submit any personal data to us.

If ball99 becomes aware that personal data has been collected from an individual under the minimum age, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that your child may have registered on ball99, please contact us at [email protected] without delay so that we can investigate and take appropriate action.

12. Third-Party Links

The ball99 platform may occasionally reference third-party services such as payment providers or game studios by name. ball99 is not responsible for the privacy practices of any third-party website, application, or service. This Privacy Policy applies solely to data collected and processed by ball99 in connection with the ball99.club platform. We encourage you to review the privacy policies of any third-party services you use in connection with your ball99 account, such as your bKash or Nagad mobile banking application.

13. Changes to This Privacy Policy

ball99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they substantially affect how your data is collected, used, or shared — ball99 will notify you by email to your registered address at least 14 days before the changes take effect.

Minor clarifications or administrative updates may take effect upon publication. The effective date at the top of this page will always reflect the most recent revision. We recommend that you review this Privacy Policy periodically. Your continued use of the ball99 platform following any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ball99 holds about you, please contact our data team using the following details:

• Email: [email protected] — mark your subject line as "Privacy Enquiry" or "Data Rights Request" for priority handling
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the ball99 platform
• Response Time: We aim to acknowledge all privacy-related emails within 5 business hours and to provide a full resolution within 14 business days
• Operating Hours: ball99 support operates around the clock, including all public holidays observed in Bangladesh (Bangladesh Standard Time, UTC+6)