bcc999 Privacy Policy

For the purposes of this Privacy Policy, bcc999 is the data controller responsible for the personal data of players who use the Services. As data controller, bcc999 determines the purposes and means of processing your personal data. All data protection queries, access requests, and erasure requests should be directed to the bcc999 support team via the contact details provided at the end of this Policy.

bcc999 collects the following categories of personal data in connection with the provision of the Services:

• Identity data: Full name, date of birth, nationality, and copies of government-issued identification documents submitted during KYC verification (e.g., National ID Card, passport).
• Contact data: Mobile phone number, email address, and, where provided, a residential address in Bangladesh or elsewhere.
• Account data: Username, account registration date, login history, session timestamps, and account status information.
• Transaction data: Deposit amounts, withdrawal requests, transaction timestamps, payment method details (e.g., the bKash or Nagad mobile number associated with your account), and BDT balance history.
• Gameplay data: Wagers placed, game types accessed, bet amounts, win/loss records, active bonus information, and session duration records.
• Device and technical data: IP address, device type, operating system, browser type, and approximate geographic location derived from IP.
• Communications data: Records of support tickets, live chat transcripts, and any correspondence you submit to bcc999 through any channel.

The following data categories are examples of what bcc999 may hold:

• Full Name
• Date of Birth
• Mobile Number
• Email Address
• IP Address
• bKash / Nagad Number
• Transaction History
• Gameplay Records
• KYC Documents
• Device Type

bcc999 collects personal data through the following means:

• Direct collection: Information you actively provide when registering an account, completing KYC verification, making a deposit, submitting a withdrawal request, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, browser information, and session activity logs generated as you navigate the site.
• Payment provider data: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal. bcc999 does not store your full payment card number or mobile banking PIN.
• Third-party game providers: Aggregate gameplay outcome data received from licensed game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi, used to settle wagers and maintain accurate account balance records.

bcc999 processes your personal data for the following purposes, each of which rests on a defined legal basis:

• Account management and service delivery: Processing is necessary to perform the contract between you and bcc999 — specifically, to operate your account, credit deposits, settle wagers, and process withdrawal requests.
• Identity and age verification (KYC): Processing is necessary to comply with legal obligations relating to the verification that players are aged 21 or above, and to meet anti-money laundering (AML) requirements.
• Fraud prevention and security: Processing is in bcc999's legitimate interest to detect and prevent fraudulent account activity, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Customer support: Processing is necessary to respond to your support queries and to maintain records of communications for quality and training purposes.
• Responsible gaming monitoring: Processing is in the legitimate interest of bcc999 and its players to identify patterns of play that may indicate problem gambling behaviour and to act on voluntary self-exclusion or limit-setting requests.
• Platform analytics and improvement: Aggregate, anonymised usage data is processed in bcc999's legitimate interest to understand how the platform is used and to make improvements to its features and user experience.
• Marketing communications: Where you have given explicit consent to receive promotional communications, bcc999 may send you information about bonuses, promotions, and new features. You may withdraw this consent at any time by contacting support.

bcc999 does not sell personal data. We share personal data only in the following limited circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to the extent necessary to process deposit and withdrawal requests.
• Game technology providers: Gameplay session data is shared with licensed third-party game providers (e.g., Pragmatic Play, Spribe, Evolution Gaming, Ezugi) to facilitate game delivery and wager settlement.
• Identity verification services: Where bcc999 uses a third-party KYC verification tool, identity documents may be processed by that service provider, which is contractually bound to handle such data securely and exclusively for verification purposes.
• Legal and regulatory disclosure: bcc999 may disclose personal data where required by law, by a court order, or by a competent regulatory or law enforcement authority. In such cases, only the minimum data required to satisfy the legal obligation will be disclosed.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the bcc999 business, player data may be transferred to the acquiring entity, which will be bound by the obligations of this Privacy Policy with respect to such data.

bcc999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the full duration of your account relationship with bcc999, plus a minimum of five years following account closure.
• KYC and identity documents: Retained for a minimum of five years from the date of submission to comply with anti-money laundering obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for two years from the date of the last communication in each support thread.
• Technical and device data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified or identifiable individual.

bcc999 uses the following categories of cookies and similar technologies on the platform:

• Essential cookies: Required for core platform functionality, including maintaining your login session, remembering your language preference, and ensuring secure navigation. These cannot be disabled without impairing your use of the Services.
• Functional cookies: Used to remember your preferences across visits, such as your preferred game category or display settings.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate the platform, which pages are most visited, and where users encounter difficulties. This information is used exclusively to improve the platform experience. bcc999 does not use third-party advertising or cross-site tracking cookies.

You can manage or disable cookies through your browser settings at any time. Please be aware that disabling essential cookies will prevent certain features of the bcc999 platform from functioning correctly.

As a bcc999 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data bcc999 holds about you at any time.
• Right to rectification: You may request that any inaccurate or incomplete personal data held by bcc999 be corrected or updated.
• Right to erasure: You may request that bcc999 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to bcc999's legal retention obligations.
• Right to restrict processing: You may request that bcc999 temporarily stop processing your personal data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to object: You may object to processing of your personal data where bcc999 relies on legitimate interests as its legal basis, including for direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact the bcc999 support team. We will respond to all valid requests within 30 days. There is no charge for submitting a data rights request.

bcc999 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and bcc999 servers.
• Encryption of sensitive data at rest, including stored identity documents and payment reference data.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular internal security reviews and vulnerability assessments of the platform infrastructure.
• Two-factor authentication options available to players to further secure their individual accounts.

While bcc999 takes all reasonable precautions to protect personal data, no system is entirely immune to security threats. In the event of a data breach that is likely to result in a risk to player rights, bcc999 will notify affected players and take all reasonable steps to contain and remediate the breach promptly.

The bcc999 platform is strictly intended for individuals aged 21 and above. bcc999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by an individual under 21, we will immediately close that account, forfeit any associated balances in accordance with the Terms & Conditions, and permanently delete the personal data collected in connection with that account. If you believe that a minor has registered on the platform, please notify us immediately via the support contact details below.

bcc999 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated effective date. Where a change is particularly significant — for example, a change to the categories of data we collect or a new purpose for which we use existing data — bcc999 may also notify registered players by email or in-platform notification. Your continued use of the Services after a revised Policy has been posted constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how bcc999 protects your data.

For all privacy-related enquiries, including requests to access, correct, or delete your personal data, or to withdraw consent to marketing communications, please contact the bcc999 support team. Our support team is available to assist you and will acknowledge all data-related requests promptly.

Support contact email: [email protected] (plain text — not a clickable link). Please include your registered account username and a brief description of your request so that we can assist you efficiently.

bcc999 aims to respond to all privacy-related requests within 30 calendar days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeframe.