b1999 Privacy Policy — How We Handle Your Data

1Information We Collect

b1999 collects personal data from you in the following categories. We only collect data that is necessary for the purposes described in this Privacy Policy — we do not collect personal data speculatively or beyond what is needed to provide you with a safe, functioning, and compliant betting and casino platform.

• 🪪
  Identity DataYour full name, date of birth, and a copy of your government-issued photo ID (collected as part of KYC verification when required).
• 📱
  Contact DataYour mobile phone number (used as your primary account identifier and for account security communications). An email address if voluntarily provided.
• 💳
  Financial DataTransaction records including deposit amounts, withdrawal amounts, dates, and the payment method used (e.g. bKash account number, Nagad account number). b1999 does not store full card numbers — card transactions are processed by PCI-compliant payment processors.
• 🎮
  Gaming Activity DataYour betting history, game session data, wager amounts, win/loss records, bonus usage, and responsible gaming tool usage. This data is required for account management, regulatory compliance, and responsible gaming monitoring.
• 📊
  Technical DataIP address, device type, operating system, browser type, and platform access logs. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

b1999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. Where age verification requires review of identity documents, those documents are used solely for age and identity confirmation and are not retained beyond the period necessary for that purpose.

3Legal Basis for Processing

b1999 processes your personal data on the following legal bases, depending on the specific purpose of the processing.

• Contractual necessity: processing your account data, transaction data, and gaming activity data is necessary for b1999 to fulfil its contractual obligations to you as a registered player.
• Legitimate interests: processing technical data for security monitoring, fraud prevention, and platform performance improvement is in b1999's legitimate business interest and does not override your rights and freedoms.
• Legal obligation: processing identity data and transaction records for KYC compliance and anti-money-laundering purposes is required by applicable law and regulation.
• Consent: where b1999 sends you optional marketing communications, this is done on the basis of your prior consent. You may withdraw this consent at any time.

5Payment Data and Financial Information

b1999 takes the security of payment data seriously. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through those mobile financial service providers. b1999 records the transaction reference, the amount, the date, and the payment method used — but does not store the full credentials of your mobile banking account.

For card transactions (Visa and Mastercard), b1999 uses PCI DSS-compliant payment processing infrastructure. Full card numbers are never stored on b1999 servers. Card tokenisation is used where applicable so that b1999 can process repeat transactions without needing to store sensitive card data. All card transaction processing is handled by our certified payment processing partner.

7Data Security

b1999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the b1999 platform, access controls ensuring that personal data is accessible only to employees and contractors who need it to perform their job functions, regular security assessments and vulnerability testing of our platform infrastructure, and secure server environments with restricted physical and network access.

While b1999 takes data security seriously and implements industry-standard protections, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, b1999 will take prompt action to contain the breach and will notify affected users as required by applicable law.

9Your Privacy Rights

You have the following rights in relation to the personal data b1999 holds about you. To exercise any of these rights, please contact b1999 support using the contact details in Section 14 of this policy. b1999 will respond to all valid rights requests within a reasonable timeframe.

• Right of access: you have the right to request a copy of the personal data b1999 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data b1999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: in certain circumstances, you have the right to request that b1999 delete the personal data it holds about you. This right is subject to b1999's legal obligations to retain certain data (e.g. transaction records for anti-money-laundering compliance).
• Right to restriction of processing: in certain circumstances, you have the right to request that b1999 restrict its processing of your personal data — for example, while an accuracy dispute is being resolved.
• Right to object to marketing: you have the right to object to b1999 processing your personal data for direct marketing purposes at any time. Upon receiving such an objection, b1999 will cease processing your data for marketing purposes.

To exercise any of the above rights, please contact b1999 support at [email protected] (plain text — not a clickable link). Please include your registered mobile number and a description of your request. b1999 may need to verify your identity before processing your request to protect against unauthorised access to your data.

11Children's Privacy

The b1999 platform is strictly intended for adults aged 21 and above. b1999 does not knowingly collect personal data from individuals under the age of 21. If b1999 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that a minor in your care has provided personal data to b1999, please contact us immediately at [email protected] so that we can take appropriate action.

13Changes to This Privacy Policy

b1999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change to this policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via their registered mobile number.

The most current version of this Privacy Policy will always be accessible on the b1999 website. Your continued use of the b1999 platform following any update to this policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically so that you remain informed about how b1999 handles your personal data.