bu999 Privacy Policy
bu999 is committed to protecting the personal data of every registered player on our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and what rights you hold over your information as a bu999 account holder.
How bu999 Protects Your Data
Before reading the full policy below, here are the six core commitments that define how bu999 handles the personal information of players across Bangladesh.
We Collect Only What We Need
bu999 collects personal data strictly to the extent required for account registration, KYC verification, payment processing, fraud prevention, and the delivery of platform services. We do not collect data speculatively or beyond what is needed to operate the bu999 platform for registered Bangladesh-market players.
SSL Encryption on Every Session
All data transmitted between your device and bu999 is protected by SSL (Secure Sockets Layer) encryption. This applies to every login session, deposit transaction, withdrawal request, and form submission on the platform. Your credentials and payment details are never transmitted in plain text.
We Do Not Sell Your Data
bu999 does not sell, rent, or trade your personal data to third-party marketers or advertising networks. Data shared with third parties is limited to service providers who directly support the operation of the bu999 platform — such as KYC verification providers, payment processors like bKash and Nagad, and fraud detection services.
Your Rights Are Clearly Defined
As a registered bu999 player, you hold specific rights over your personal data — including the right to access a copy of the data we hold, the right to request corrections, and the right to request erasure subject to our legal retention obligations. These rights are explained in full in Section 9 of this Privacy Policy.
Defined Retention Periods
bu999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and compliance obligations. Account data is retained for a minimum period following account closure to meet KYC and anti-money-laundering record-keeping requirements.
Opt-Out of Marketing Any Time
Promotional communications from bu999 — including email promotions, bonus alerts, and seasonal offers — are sent only to players who have opted in during registration or account settings. You may withdraw your marketing consent at any time by contacting [email protected] or updating your communication preferences in your account settings.
Introduction
bu999 operates an online casino and sports betting platform accessible at bu999.io, serving registered players across the Bangladesh market. This Privacy Policy sets out how bu999 collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or otherwise interact with the bu999 platform.
This Privacy Policy applies to all personal data processed in connection with the bu999 platform, including data collected through the website, the account registration process, the KYC verification workflow, payment transactions, customer support interactions, and any promotional communications where a player has provided consent to receive them.
By registering a bu999 account and confirming acceptance of this Privacy Policy during the registration process, you acknowledge that you have read and understood how your personal data will be handled as described herein. If you do not agree with any part of this Privacy Policy, you must not create or continue to use a bu999 account.
Data Controller
For the purposes of this Privacy Policy, bu999 acts as the data controller in respect of personal data collected from players and visitors to the bu999 platform. As data controller, bu999 determines the purposes and means by which your personal data is processed.
All data protection queries, subject access requests, and requests to exercise your privacy rights should be directed to the bu999 data protection contact as follows:
Email: [email protected] (plain text — not a clickable link)
bu999 will respond to all privacy-related enquiries within a reasonable timeframe, and in any event within 30 calendar days of receipt of a valid request. Where a request is complex or requires additional time to process, bu999 will notify the requesting player and provide an estimated resolution date.
Data We Collect
bu999 collects personal data in a number of ways — directly from you when you register an account or interact with our platform, automatically through technical systems as you use the platform, and from third-party service providers where necessary to verify your identity and process payments. The categories of data collected are set out below.
3.1 Registration and Identity Data
When you create a bu999 account, we collect the information you provide during the registration form, including your full legal name, date of birth, residential address, email address, and the username and password you choose. This information is required to create and administer your account and to verify that you meet the minimum age requirement of 21 years.
3.2 KYC Verification Data
As part of our Know Your Customer (KYC) process, which is applied prior to processing withdrawals, bu999 may request documentary evidence of identity and address. This may include a copy of a government-issued photo identification document (such as a National ID card or passport), proof of residential address, and proof of ownership of the payment method used for deposits. Documents submitted for KYC are processed and stored securely in accordance with this Privacy Policy.
3.3 Financial and Transaction Data
bu999 records details of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, game wagers, and bonus claims. We collect the payment method identifiers associated with your transactions — such as bKash account numbers, Nagad wallet identifiers, or Rocket mobile banking references — to facilitate payment processing and to fulfil our anti-money-laundering record-keeping obligations. bu999 does not store full payment card numbers on its own servers.
3.4 Technical and Usage Data
When you access the bu999 platform, our systems automatically collect certain technical data, including your IP address, browser type and version, device type, operating system, session duration, pages visited, game sessions accessed, and clickstream data. This data is used for platform security, fraud detection, and service improvement purposes.
3.5 Communications Data
bu999 retains records of communications between you and our customer support team, including support tickets submitted via email to [email protected]. These records are used to manage your query and to maintain an accurate history of account-related interactions.
3.6 Marketing Preference Data
Where you have opted in to receive promotional communications from bu999, we record your consent and the date on which it was given. If you subsequently opt out, we record that preference and apply it to all future communications within a reasonable processing period.
3.7 Summary of Data Categories
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, National ID | Account registration, age verification, KYC |
| Contact Data | Email address, residential address | Account administration, communications |
| Financial Data | bKash/Nagad/Rocket wallet refs, transaction history | Payment processing, AML compliance |
| Technical Data | IP address, device type, browser, session logs | Security, fraud prevention, platform analytics |
| Communications Data | Support ticket content, email correspondence | Customer support, dispute resolution |
| Marketing Data | Promotional opt-in/opt-out status and timestamps | Consent management, targeted promotions |
How We Use Your Data
bu999 uses the personal data collected from players for the following purposes:
- Account creation and management: To register your bu999 account, maintain your account profile, and administer your access to platform features.
- Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity as part of our KYC compliance obligations.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records for each account.
- Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other forms of prohibited conduct as defined in our Terms & Conditions.
- Customer support: To respond to queries, investigate complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
- Responsible gaming compliance: To monitor account activity for indicators of problem gambling behaviour and to administer self-exclusion, deposit limit, and session alert tools where requested by players.
- Promotional communications: To send bonus offers, seasonal promotions, and platform updates to players who have opted in to receive marketing communications from bu999.
- Platform improvement: To analyse aggregated usage data and improve the performance, design, and content of the bu999 platform over time.
- Legal and compliance obligations: To meet record-keeping requirements under applicable anti-money-laundering and financial crime prevention laws.
Legal Basis for Processing
bu999 processes personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing:
- Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between bu999 and you as a registered player — specifically, to provide you with access to games, accept deposits, and process withdrawals.
- Legitimate interests: Processing technical and usage data for fraud prevention, platform security, and service improvement reflects bu999's legitimate operational interests. We apply a balancing test to ensure these interests do not override your privacy rights.
- Legal obligation: Retention of KYC documents and transaction records is required to comply with applicable anti-money-laundering laws and financial record-keeping obligations.
- Consent: Marketing communications are sent only where you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time by contacting [email protected].
Data Sharing
bu999 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Personal data may be shared with the following categories of third-party service provider where such sharing is necessary to operate the bu999 platform:
- KYC and identity verification providers: Third-party services that assist bu999 in verifying player identity and age documentation submitted during the KYC process.
- Payment processors: Financial service providers including bKash, Nagad, Rocket, Upay, and banking institutions who process deposit and withdrawal transactions on behalf of bu999 account holders.
- Fraud detection and risk management services: Technology providers that analyse transactional and behavioural data to identify and flag suspicious account activity.
- Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive session-level technical data necessary to deliver their games through the bu999 platform interface. These providers do not receive your full identity profile.
- Customer support platforms: Where bu999 uses a third-party ticketing or live chat tool to manage support requests, your communications data is processed through that provider's system in accordance with their own data processing agreements with bu999.
- Legal and regulatory authorities: bu999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or pursuant to a valid legal order.
All third-party service providers engaged by bu999 are required to process personal data only on bu999's documented instructions and to maintain appropriate technical and organisational security measures.
Cookies and Tracking Technologies
The bu999 platform uses cookies and similar tracking technologies to support platform functionality, security, and analytics. Cookies are small data files stored on your device when you visit bu999.io. The following categories of cookie are used:
- Essential cookies: These cookies are strictly necessary for the bu999 platform to function. They enable session management, login state, and security token verification. Essential cookies cannot be disabled without preventing you from using the platform.
- Functional cookies: These cookies remember your preferences — such as your chosen language settings and platform display options — so that you do not need to re-enter them on each visit.
- Analytics cookies: bu999 uses analytics tools to understand how players interact with the platform. Analytics cookies collect aggregated, non-personally-identifying data about page visits, session durations, and feature usage. This data is used to improve the platform.
- Security cookies: These cookies support fraud detection by identifying unusual session patterns that may indicate unauthorised account access or automated bot activity.
You may adjust your browser settings to refuse non-essential cookies. Please note that disabling certain cookies may affect the functionality of the bu999 platform. bu999 does not use third-party advertising cookies or track players across third-party websites.
Data Retention
bu999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal / AML compliance |
| KYC documents | Duration of account + 5 years after closure | Legal / AML compliance |
| Transaction records | Duration of account + 5 years after closure | Financial record-keeping law |
| Support communications | 3 years from date of communication | Legitimate interest / dispute resolution |
| Technical / session logs | Up to 12 months | Security / fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data under applicable privacy law.
Your Privacy Rights
As a registered bu999 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact bu999 at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. bu999 will respond within 30 calendar days.
- Right of access: You have the right to request a copy of the personal data bu999 holds about you. bu999 will provide this in a structured, readable format.
- Right to rectification: If any personal data bu999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to erasure: You may request that bu999 delete your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to bu999's legal obligations to retain certain data — for example, KYC and transaction records required under anti-money-laundering law cannot be deleted on request.
- Right to restrict processing: You may request that bu999 limit the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
- Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bu999 provide your personal data in a machine-readable format so that you can transfer it to another service provider.
- Right to withdraw consent: Where bu999 processes your personal data on the basis of your consent — in particular for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
- Right to object: You may object to the processing of your personal data where bu999 relies on legitimate interests as its legal basis, if you believe that your fundamental rights and freedoms override those interests in your particular circumstances.
Data Security
bu999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption applied to all data in transit between your browser and the bu999 platform.
- Encrypted storage for sensitive data fields including passwords (stored as salted cryptographic hashes, never in plain text) and KYC document files.
- Access controls that restrict bu999 staff access to personal data on a strict need-to-know basis, with access logs maintained for audit purposes.
- Fraud detection systems that monitor platform activity in real time and flag anomalous account behaviour for review.
- Regular security assessments of the bu999 platform infrastructure to identify and remediate vulnerabilities.
While bu999 applies industry-standard security practices, no online platform can guarantee absolute security against all possible threats. Players are encouraged to protect their own account security by using a strong, unique password for their bu999 account and by not sharing their login credentials with any third party. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.
Children and Minors
The bu999 platform is strictly intended for adults aged 21 years and above. bu999 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the account registration and KYC process for all accounts.
If bu999 determines at any point that an account is held by an individual under the age of 21, the account will be suspended immediately, all personal data associated with that account will be reviewed, and the account will be closed in accordance with the bu999 Terms & Conditions. Any personal data collected from a minor will be deleted as promptly as practicable following identification, subject only to any legal obligations that require short-term retention for compliance reporting.
If you believe that a minor has registered a bu999 account, please notify us immediately at [email protected] so that we can take appropriate action without delay.
Changes to This Privacy Policy
bu999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform functionality, applicable law, or our data processing practices. The effective date displayed at the top of this page will be updated each time a new version of the Privacy Policy is published.
Where changes to this Privacy Policy are material — meaning they affect how your personal data is collected, used, or shared in a way that is meaningfully different from the prior version — bu999 will notify registered players via the email address on file with their account. Such notifications will be sent with reasonable advance notice before the updated policy takes effect.
Minor amendments — such as corrections of typographical errors, clarifications of existing provisions, or updates to the names of third-party service providers — may be made without advance notice. Continued use of the bu999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the changes.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bu999 handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, seven days a week, operating on Bangladesh Standard Time (BST, UTC+6).
Data Protection Contact: [email protected] (plain text — not a clickable link)
For questions about your account, deposits, withdrawals, bonuses, or general platform use, our FAQ page covers the most common queries in detail. For information about the tools bu999 provides to support responsible play, including deposit limits, session controls, and self-exclusion, please visit the Responsible Gaming page.
Your Data Is Safe With bu999
Have questions about your privacy rights or how your data is used? Our support team is available around the clock. Ready to explore the platform? Visit the bu999 Casino or check out our FAQ for quick answers.