Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ber99 ("we", "us", "our", "Platform") collects, uses, stores, shares and protects the personal data of users ("you", "Player") who access or use the ber99 website and associated services. This Policy forms part of the agreement between you and ber99, alongside our Terms and Conditions and Responsible Gaming policy.

By registering an account or using the Platform in any way, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform. We encourage you to read this Policy in full so that you understand your rights and our practices.

ber99 is committed to handling your personal data responsibly, transparently and in compliance with applicable data protection laws. We collect only the data we genuinely need, retain it only for as long as necessary, and apply rigorous technical and organisational safeguards to keep it secure at all times.

2. Information We Collect

We collect personal data from you in the following categories, for the purposes described in Section 3 of this Policy:

3. How We Use Your Information

ber99 uses your personal data only for legitimate purposes directly connected to the operation of the Platform, the fulfilment of our legal obligations, and the improvement of your experience as a player. Specifically, we use your data for the following purposes:

• Account creation and management: to register your account, verify your identity (KYC), maintain account records, and administer your account during its lifetime on the Platform.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay and other supported payment methods, and to maintain a complete and accurate record of all financial transactions on your account.
• Legal compliance and fraud prevention: to comply with applicable anti-money-laundering (AML) laws, to fulfil our KYC obligations, to detect and prevent fraudulent activity, to respond to lawful requests from regulatory or law enforcement authorities, and to enforce our Terms and Conditions.
• Customer support: to respond to your queries, complaints and support requests, to verify your identity when handling sensitive account requests, and to maintain a record of communications for quality assurance purposes.
• Responsible gaming: to monitor gambling activity for signs of problem gambling, to administer responsible gaming tools such as deposit limits, session timers and self-exclusion requests, and to fulfil our duty of care obligations to players who may be at risk.
• Platform improvement and analytics: to analyse aggregate usage patterns, identify technical issues, improve game performance and user experience, and develop new features — always using anonymised or pseudonymised data where possible.

4. Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely on are:

• Contract performance: processing that is necessary to fulfil the contract between you and ber99, including account management, game provision, and payment processing.
• Legal obligation: processing that is required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responses to lawful authority requests.
• Legitimate interests: processing for purposes such as fraud prevention, Platform security, analytics, and responsible gaming monitoring — where our legitimate interests are not overridden by your rights and freedoms.
• Consent: for marketing communications and non-essential cookies, where we rely on your freely given, specific and informed consent. You may withdraw this consent at any time without detriment to your account.

5. Sharing Your Information

ber99 does not sell, rent or trade your personal data. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment service providers: we share transaction data with bKash, Nagad, Rocket, Upay and other payment partners solely to process deposits and withdrawals. These providers act as data processors and are contractually bound to use your data only for payment purposes.
• Game providers: technical game-session data (not your identity documents) is shared with licensed game studios including Pragmatic Play, Evolution Gaming and Spribe to facilitate game delivery and RNG certification. These providers receive only the minimum data necessary.
• Regulatory and law enforcement authorities: we will disclose your personal data to competent authorities when required by law, court order, or regulatory direction. We will notify you of such disclosure where we are legally permitted to do so.
• Business successors: in the event of a merger, acquisition or sale of all or part of ber99's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the successor's privacy commitments before any transfer takes effect.

6. Cookies & Tracking Technologies

ber99 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences and analyse usage patterns. The types of cookies we use are:

• Strictly necessary cookies: these are essential for the Platform to function. They enable core features such as login sessions, security tokens, and page navigation. These cookies cannot be disabled without breaking Platform functionality.
• Functional cookies: these remember your settings and preferences such as language preferences and display settings, so you do not have to reconfigure them on each visit.
• Analytics cookies: these collect anonymised data about how visitors use the Platform — such as pages visited, session duration and click paths — to help us improve performance and user experience. No personally identifiable information is included in analytics reports.
• Session security cookies: short-lived cookies that protect against cross-site request forgery (CSRF) attacks and maintain the integrity of your login session. These expire automatically when you close your browser.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the performance or availability of some Platform features. ber99 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

7. Data Retention

ber99 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows: account data and KYC records are retained for the lifetime of your account plus a minimum of 5 years following account closure, in accordance with AML regulatory requirements. Financial transaction records are retained for a minimum of 5 years from the date of the transaction. Technical and usage data is retained for up to 24 months in identifiable form, after which it is anonymised or deleted.

When your data is no longer required, ber99 will securely delete or anonymise it using industry-standard data destruction methods. Where data has been shared with third-party processors, we instruct those processors to delete the data in accordance with the same retention schedule.

8. Data Security

ber99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include: SSL/TLS encryption for all data in transit between your device and our servers; encryption at rest for sensitive personal data including identity documents and financial records; role-based access controls ensuring that only authorised personnel can access personal data, limited to what each role genuinely requires; regular security audits and penetration testing of Platform infrastructure; and mandatory security training for all staff who handle personal data.

Despite our best efforts, no system is completely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ber99 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. We will also report notifiable breaches to the relevant authorities as required by law.

9. Your Data Rights

As a data subject, you hold the following rights in relation to your personal data held by ber99. To exercise any of these rights, contact our support team via live chat or at [email protected] with your registered username and a description of your request. We will respond within 5 business days:

• Right of access: you may request a copy of all personal data we hold about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful — subject to our legal retention obligations.
• Right to restriction: you may request that we restrict processing of your data — for example while a correction request is being verified — so that we hold it but do not actively use it.
• Right to data portability: you may request a copy of the personal data you have provided to ber99 in a structured, commonly used and machine-readable format, for the purpose of transferring it to another service provider.
• Right to object: you may object to processing of your data based on legitimate interests — including profiling for responsible gaming purposes — and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Please note that some rights are subject to conditions and exceptions under applicable law, particularly where processing is required by legal obligation or where restriction would conflict with anti-money-laundering regulatory requirements. We will explain any such limitation clearly when responding to your request.

10. Children's Privacy

ber99 is strictly an adults-only platform. We do not knowingly collect, process or retain personal data from any person under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will delete that data immediately and close the associated account. If you believe a person under 21 has registered on ber99, please contact us immediately at [email protected]. Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms.

11. Marketing Communications

ber99 may send you promotional communications — including information about bonuses, new games, seasonal offers such as Eid or BPL-season promotions, and Platform updates — where you have given your explicit consent to receive such communications during registration or at a later point via your account settings.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings, or by contacting our support team. Opting out of marketing will not affect service communications such as account security alerts, KYC notifications, transaction confirmations or important policy updates, which are sent regardless of marketing preference.

12. Third-Party Links

The ber99 Platform may contain references to third-party services such as payment providers. When you interact with a third-party service — for example by initiating a bKash or Nagad transaction — you will be subject to that third party's own privacy policy and terms of use. ber99 is not responsible for the privacy practices of third-party services and we encourage you to review their policies before sharing any personal data with them. ber99 does not link to external websites for promotional or affiliate purposes.

13. Changes to This Policy

ber99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where a change is material — for example where we introduce a new category of data processing or a new type of sharing — we will notify active account holders by email or via an on-Platform notification at least 7 days before the change takes effect.

The date of the most recent update to this Policy is displayed at the top of this page. Continued use of the Platform after a revised Policy has been published constitutes your acceptance of the revised terms. If you do not accept a revised Policy, you must cease using the Platform and may request account closure.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how ber99 handles your personal data, our support team is available 24/7 via live chat inside your ber99 account. Live chat is the fastest channel for urgent data queries.

For formal written data requests or complaints, you may contact us by email at [email protected]. Please include your registered username, a clear description of your request and, where relevant, the specific data right you wish to exercise. ber99 aims to acknowledge all formal data requests within 2 business days and to provide a substantive response within 5 business days.