b899 Privacy Policy
At b899, protecting the personal data of every Bangladesh player is a core commitment, not an afterthought. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, how long we keep it, and what rights you have over your own data at every stage of your b899 journey.
How b899 Protects Your Privacy
Six core pillars that define how we handle personal data for all Bangladesh players registered on the b899 platform.
Every data transmission between your device and the b899 servers is protected by 256-bit SSL/TLS encryption — the same standard used by international banks. Whether you are making a bKash deposit, logging in from Dhaka, or browsing cricket betting odds, your data travels in a fully encrypted channel at all times.
b899 does not sell, rent, or trade your personal information to third-party commercial entities for marketing or advertising purposes. Your data is used exclusively to operate, improve, and secure the b899 platform for your benefit — never to generate revenue through data brokering. This is an unconditional commitment, not subject to change based on commercial circumstances.
Every b899 player in Bangladesh holds seven enforceable rights over their personal data: the right to access, correct, delete, restrict processing, object to processing, receive a portable copy, and withdraw consent. You can exercise any of these rights at any time by contacting [email protected] — no bureaucratic barriers, no unexplained delays.
b899 applies a data minimisation principle — we collect only what is strictly necessary to deliver the service, verify your identity, process your BDT transactions, and keep the platform secure. We do not collect unnecessary data, and we do not retain data for longer than the purposes for which it was collected require.
Where b899 shares data with third parties — such as payment processors (bKash, Nagad, Visa), game providers (Evolution Gaming, Pragmatic Play), or fraud prevention services — those parties are contractually bound to use your data solely for the specified purpose and to maintain security standards equivalent to those applied by b899 itself.
b899 sends promotional communications only to players who have explicitly opted in to receive them. You can withdraw marketing consent at any time via your account notification settings or by emailing [email protected]. Withdrawal of marketing consent does not affect your ability to use any b899 service or receive transactional and security notifications.
Table of Contents
Use the links below to navigate directly to any section of this Privacy Policy.
- Introduction and Scope
- Data Controller Identity
- What Personal Data We Collect
- How We Collect Your Data
- How We Use Your Personal Data
- Legal Bases for Processing
- Who We Share Your Data With
- Data Retention Periods
- Security Measures
- Cookies and Tracking Technologies
- Your Data Rights
- Children and Minors
- Changes to This Policy
- Contact and Data Requests
This Privacy Policy ("Policy") describes how b899 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who register, access, or use the b899 platform at b899.io. This Policy forms part of the b899 Terms and Conditions by reference. By creating a b899 account or using any b899 service, you acknowledge that you have read and understood this Policy. The English language version is the sole authoritative version for all interpretations.
1 Introduction and Scope
b899 is an international online betting and casino platform serving players in Bangladesh and other eligible markets. We are committed to protecting the privacy and personal data of every user. This Policy applies to:
- All visitors to the b899.io website, whether or not they are registered players.
- All registered b899 account holders, regardless of whether they are currently active.
- All individuals who contact b899 support via live chat, email, or any other channel.
- All individuals whose data b899 receives from third-party sources such as payment processors, game providers, and fraud prevention agencies in connection with the operation of the b899 service.
This Policy does not apply to third-party websites or services that may be linked from b899.io. b899 has no control over those third parties' privacy practices and encourages you to review their own privacy policies separately.
2 Data Controller Identity
For the purposes of data protection law, b899 acts as the data controller in respect of personal data collected and processed through the b899 platform. This means b899 determines the purposes and means of processing your personal data.
Platform Name: b899
Website: b899.io
Primary Market: Bangladesh
Data Protection Contact: [email protected]
Operating Timezone: Bangladesh Standard Time (BST, UTC+6)
Governing Language: English
All data protection queries, access requests, correction requests, deletion requests, and formal complaints relating to data processing must be directed to [email protected]. b899 will respond to all data-related requests within 30 calendar days of receipt.
3 What Personal Data We Collect
b899 collects the following categories of personal data, depending on how you interact with our platform:
3.1 Registration and Identity Data
- Full legal name as it appears on your government-issued ID.
- Date of birth (used to verify that you are 21 years of age or older).
- Residential address, city, and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
- Mobile phone number (used for account verification and two-factor authentication).
- Email address (used for account communications, security alerts, and, where consented, promotional messages).
- Username and encrypted password (the plaintext password is never stored).
3.2 Identity Verification (KYC) Data
- National Identity Card (NID) number and scanned copy.
- Passport or driving licence where NID is unavailable.
- Proof of address documents (utility bill, bank statement) issued within the last 3 months.
- Selfie photograph taken during live KYC verification (where applicable).
3.3 Financial and Transaction Data
- bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals.
- Visa and Mastercard last four digits, card expiry date, and issuing bank name (full card numbers are never stored by b899).
- Deposit amounts, dates, and transaction reference numbers.
- Withdrawal requests, amounts, dates, processing status, and destination payment method.
- Account wallet balance history and bonus credit records.
3.4 Betting and Gaming Activity Data
- All bets placed on sports markets (cricket, football, kabaddi, and other sports), including stake amounts, odds accepted, and settlement outcomes.
- Casino game sessions — game title, provider, stake, win/loss outcome, and session duration.
- Crash game participation records (Aviator, etc.) including round history and provably fair seed data.
- Bonus usage records — which bonuses were claimed, wagering progress, and expiry status.
3.5 Technical and Device Data
- IP address at the time of each login and each transaction.
- Device type, operating system, and browser version.
- Unique device fingerprint (used for fraud prevention and duplicate account detection).
- Geolocation data at the approximate city level (used to confirm eligibility and detect prohibited jurisdiction access).
- Session timestamps, page navigation logs, and feature usage logs.
3.6 Communications Data
- Live chat transcripts between you and b899 support agents.
- Email correspondence with the b899 support team.
- Complaint records and the resolution outcomes associated with them.
- Responsible gaming self-exclusion requests, cooling-off period requests, and deposit limit change requests.
4 How We Collect Your Data
b899 collects personal data through the following channels:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account profile.
- Automatically through the platform: When you visit b899.io, our servers automatically log your IP address, device information, browser type, and navigation behaviour. Cookies and similar tracking technologies also collect data as described in Section 10.
- From payment processors: bKash, Nagad, Rocket, Upay, and card payment processors confirm transaction completion and provide transaction reference numbers to b899 for reconciliation purposes.
- From game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers supply game session outcome data to b899 for wallet crediting, dispute resolution, and audit purposes.
- From fraud and risk management partners: Third-party fraud detection services may supply risk scores, device reputation signals, and known-fraud indicators in connection with account registrations and high-value transactions.
5 How We Use Your Personal Data
b899 uses your personal data for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, contact data | Contract performance |
| Age and identity verification (KYC) | Identity data, KYC documents | Legal obligation |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Fraud prevention and account security | Technical data, financial data, identity data | Legitimate interest |
| Settling bets and game outcomes | Gaming activity data, financial data | Contract performance |
| Responsible gaming compliance | Gaming activity data, registration data | Legal obligation / legitimate interest |
| Customer support and complaint handling | Communications data, account data | Contract performance / legitimate interest |
| Platform analytics and improvement | Technical data, gaming activity data (anonymised) | Legitimate interest |
| Promotional communications | Contact data, gaming preferences | Consent |
| Legal and regulatory compliance | All categories as required | Legal obligation |
6 Legal Bases for Processing
b899 processes personal data only when a lawful legal basis exists. The four bases applicable to b899's processing activities are:
- Contract Performance: Processing is necessary to perform the contract between you and b899 — that is, to provide the betting and gaming services you have registered to use, including account management, payment processing, and bet settlement.
- Legal Obligation: Processing is required by law, including age verification obligations, anti-money laundering record-keeping, and responsible gaming compliance requirements.
- Legitimate Interest: Processing is necessary for b899's legitimate business interests, provided those interests are not outweighed by your privacy rights. This applies to fraud prevention, platform security, analytics, and abuse detection.
- Consent: Where no other legal basis applies, b899 will seek your explicit consent before processing your data — most notably for sending promotional communications. You may withdraw consent at any time without affecting any other aspect of your account.
8 Data Retention Periods
b899 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| KYC identity documents | 5 years after account closure | Anti-money laundering legal obligation |
| Financial transaction records | 7 years after transaction date | Financial record-keeping obligation |
| Betting and gaming activity logs | 5 years after account closure | Regulatory compliance, dispute resolution |
| Customer support communications | 3 years after last interaction | Complaint history, service improvement |
| Technical and device logs | 12 months on a rolling basis | Security monitoring, fraud detection |
| Marketing preferences and consent records | Until consent is withdrawn + 1 year | Proof of consent |
| Self-exclusion and responsible gaming records | Permanent (cannot be deleted) | Player protection obligation |
When the applicable retention period expires, b899 securely deletes or anonymises the personal data in question. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
9 Security Measures
b899 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure:
- Transport Security: All data in transit is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES encryption. HTTP connections are automatically redirected to HTTPS.
- Storage Security: Personal data at rest is stored on encrypted servers located in secure data centres with physical access controls, CCTV monitoring, and biometric entry restrictions.
- Password Security: Account passwords are hashed using bcrypt with a per-user salt. Plaintext passwords are never stored or logged anywhere in b899's systems.
- Access Controls: Access to player personal data by b899 staff is granted on a strict need-to-know basis, governed by role-based access control (RBAC). Access logs are audited regularly.
- Two-Factor Authentication (2FA): b899 offers and strongly encourages players to enable 2FA on their accounts using a mobile OTP sent to their registered number.
- Fraud and Anomaly Detection: Automated systems monitor account activity for unusual patterns, including unexpected login locations, rapid succession of login attempts, and abnormal withdrawal requests. Suspicious activity triggers automatic security holds pending review.
- Penetration Testing: b899 engages independent security firms to conduct regular penetration tests of the platform's infrastructure. Identified vulnerabilities are remediated under a strict timeline.
- Data Breach Response: In the event of a confirmed personal data breach, b899 will notify affected players within 72 hours of becoming aware of the breach, detailing the nature of the data affected, likely consequences, and measures taken to address it.
Your Role in Security: While b899 takes comprehensive measures to protect your data, account security also depends on you. Use a strong, unique password for your b899 account, enable 2FA, and never share your login credentials with any third party. If you suspect your account has been compromised, contact [email protected] immediately.
10 Cookies and Tracking Technologies
b899 uses cookies and similar technologies to deliver, maintain, and improve the platform experience for Bangladesh players. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your language preference, enable security tokens. Cannot be disabled — required for the platform to function. | Session / up to 30 days |
| Performance and Analytics | Collect anonymised data on page load times, most-visited pages, error rates, and navigation flow. Used to identify and fix platform issues. | Up to 12 months |
| Functional | Remember your preferred sports markets, display language, bet slip settings, and odds format (decimal / fractional). | Up to 12 months |
| Fraud Detection | Generate a device fingerprint to detect duplicate account creation and identify bots or automated betting tools. | Up to 24 months |
10.1 Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is set. Please note that disabling strictly necessary cookies will impair your ability to use the b899 platform — for example, you will not be able to remain logged in across pages.
To manage cookies in your browser, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, or Opera). Cookie preference controls are also available within your b899 account settings panel under Privacy Preferences.
10.2 Do Not Track
Some browsers transmit a "Do Not Track" (DNT) signal to websites. b899 currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for interpreting them. If a recognised standard is adopted, b899 will update this Policy accordingly.
11 Your Data Rights
As a b899 player, you hold the following seven rights in respect of your personal data. These rights can be exercised at any time by contacting [email protected] with the subject line "Data Rights Request" and your registered username.
You have the right to request a copy of all personal data b899 holds about you, the purposes for which it is processed, and the categories of third parties it has been shared with. b899 will provide this information within 30 days of a verified request.
If any personal data b899 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data, you can update this directly within your b899 profile settings. For KYC data, submit a correction request to [email protected].
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data (transaction records, KYC documents) must be retained to comply with legal obligations and cannot be deleted on request.
You may request that b899 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is contested, or while an objection to processing is being considered. Restricted data is stored but not actively used.
You have the right to object to b899 processing your personal data on the basis of legitimate interest, including for direct marketing purposes. Where you object to marketing, b899 will cease all promotional communications immediately. Where you object to other legitimate interest processing, b899 will assess whether compelling grounds exist to continue.
Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to transmit that data to another controller. Contact [email protected] to request a portable data export.
Where b899 processes your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal, and does not affect your ability to use b899 services that are governed by contract performance or legal obligation.
To exercise any of the rights above, email [email protected] with the subject line "Data Rights Request". Include your registered username, the specific right you wish to exercise, and sufficient detail to allow b899 to identify your account and process your request efficiently. b899 will acknowledge receipt within 5 business days and resolve your request within 30 calendar days. In complex cases, this period may be extended by up to a further 30 days, with notification.
12 Children and Minors
b899 is an adult-only platform. Registration, use, and access to all b899 services is strictly restricted to individuals who are 21 years of age or older. b899 does not knowingly collect, process, or store personal data relating to any person under the age of 21.
All account registrations are subject to age verification as part of the KYC process. Where b899 has reasonable grounds to believe that a registered account belongs to a person under the age of 21, that account will be immediately suspended pending identity and age verification, and any balance held in the account will be frozen during the investigation period.
If b899 confirms that personal data has been collected from an individual under the age of 21, that data will be permanently deleted from b899 systems within 72 hours of confirmation, and any deposits made will be refunded to the originating payment method to the extent technically possible.
If you are a parent or guardian and believe that a minor in your care has registered a b899 account, please contact [email protected] immediately with your contact details. b899 will treat all such reports as a priority and investigate within 24 hours of receipt.
13 Changes to This Policy
b899 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform features. All updates will be published on this page with a revised "Last Updated" date at the top of the document.
For material changes — that is, changes that significantly affect your rights or the way b899 processes your data — b899 will provide advance notice via the email address registered to your account at least 14 calendar days before the change takes effect. For minor or non-material changes (such as corrections of typographical errors or clarifications that do not alter the substantive meaning), b899 may update this Policy without advance notice.
Your continued use of the b899 platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the b899 platform and contact [email protected] to request account closure and the exercise of any applicable data rights.
b899 recommends that all players review this Privacy Policy periodically to stay informed about how their personal data is being handled. The current version will always be accessible at b899.io/privacy-policy.
14 Contact and Data Requests
For all privacy-related queries, data rights requests, consent withdrawals, or complaints about b899's data handling practices, please use one of the following contact methods:
Send all data rights requests, privacy complaints, and consent withdrawal instructions to [email protected] with the subject line "Data Rights Request". Include your registered username and a clear description of your request. b899 will acknowledge receipt within 5 business days.
For general questions about this Privacy Policy or about how b899 uses your data, our 24/7 live chat support team is available directly on the platform. For formal data rights requests that require written confirmation, email is the recommended channel.
b899 support operates on Bangladesh Standard Time (BST, UTC+6) and responds to all privacy-related emails within 2 business hours during BST business hours, and within 24 hours at all other times. All formal data rights requests are processed within the 30-calendar-day maximum period described in Section 11.
By registering a b899 account, depositing funds, or using any b899 service, you confirm that you have read this Privacy Policy in full and understand how your personal data is collected, used, and protected. This Privacy Policy was last updated on 1 January 2026. If you have any questions before registering, please contact b899 support before creating your account. b899 is committed to protecting the privacy of all players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond.
Questions About Your b899 Data?
Our support team is available 24/7 in Bangladesh Standard Time. Visit our FAQ for quick answers, explore our games, or log in to your b899 account to manage your privacy preferences directly.
Visit the FAQ Login to b899 Responsible Gaming