Privacy Policy — ba991 Platform

ba991 is Bangladesh's trusted online casino and sports betting platform, providing access to 500+ casino games, live dealer tables, crash games including Mines, and sports betting on cricket events such as the BPL and IPL, as well as international football and other markets. As part of delivering these services, ba991 processes personal data about the individuals who use our platform.

ba991 is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy sets out a clear and complete account of our data practices so that you can make informed decisions about your use of the ba991 platform. We encourage you to read it in full.

This Privacy Policy applies to all personal data collected through the ba991 website, any ba991 mobile-optimised interface, ba991 customer support channels, and any other ba991 service touchpoint. It does not apply to the websites or services of third-party game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, or Spribe, which operate under their own privacy policies.

The English-language version of this Privacy Policy is the sole governing version. If there is any inconsistency between this policy and any translated summary, the English version shall prevail.

ba991 collects personal data from you in several ways: directly when you register and use your account, automatically when you interact with the ba991 platform, and from third-party sources such as identity verification providers and payment processors. The categories of personal data we collect include:

ba991 uses the personal data it collects for the following purposes. Each use is tied to a specific lawful basis as described in Section 4 below.

• Account creation and management: To register your ba991 account, enable ba991 Login access, maintain your account balance, and administer your account settings and preferences.
• Identity and age verification (KYC): To verify that you are who you say you are, that you are aged 21 or above, and that you are not subject to any applicable restriction that would prevent you from using ba991.
• Payment processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your verified payment method. ba991 does not store full payment card credentials on its own systems.
• Platform operation and game delivery: To provide access to ba991's casino games catalogue, sports betting markets, and crash game titles such as Mines, and to record and settle wagers placed by you on the ba991 platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover, bonus abuse, and other prohibited conduct as described in the ba991 Terms and Conditions.
• Responsible gaming: To monitor your account activity for behavioural patterns consistent with problem gambling, to administer responsible gaming tools including deposit limits, loss limits, cool-off periods, and self-exclusion at your request or where ba991 determines it is in your best interest.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of your support interactions for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering obligations, to respond to lawful requests from competent authorities, and to enforce ba991's Terms and Conditions.
• Marketing and promotions: To send you information about ba991 promotions, bonuses, seasonal offers (such as Eid and Pohela Boishakh promotions), and cricket betting news — where you have provided consent or where ba991 has a legitimate interest in doing so, and subject always to your right to opt out.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the ba991 platform, optimise the user experience, and inform product development decisions.

ba991 processes your personal data only where a lawful basis exists for doing so. The lawful bases on which ba991 relies are as follows:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary for ba991 to perform the contract it has entered into with you — namely, operating your ba991 account and providing you with access to the ba991 platform. Without this processing, ba991 cannot deliver its services to you.
• Legal obligation: ba991 is required by applicable law to collect and retain certain personal data, including KYC identity documents and transaction records, for the purposes of anti-money laundering compliance and other regulatory requirements. This processing is mandatory and cannot be opted out of.
• Legitimate interests: ba991 processes certain data — including technical and activity data — on the basis of its legitimate interest in operating a safe, secure, and fair platform, preventing fraud and abuse, and improving its services. ba991 has assessed that this interest is not overridden by your fundamental rights and freedoms.
• Consent: Where ba991 sends you marketing communications, it does so on the basis of your consent, which you provide at registration or subsequently through your account communication preferences. You may withdraw consent at any time by contacting support or updating your preferences.

ba991 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. ba991 shares personal data only in the following limited circumstances:

• Identity verification providers: ba991 shares identity and document data with accredited third-party KYC and age verification services in order to complete the mandatory verification required before withdrawal access is granted.
• Payment processors: ba991 shares financial data with payment service providers including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card processing networks (Visa, Mastercard) as necessary to process deposits and withdrawals on your behalf. These providers process data under their own privacy policies and under contractual obligations to ba991.
• Game providers: When you play a game powered by a third-party provider such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, or Spribe, limited session data (such as a tokenised player identifier and stake amounts) is shared with that provider for the purpose of delivering the game and settling results. This data is shared under the terms of ba991's licensing agreements with those providers.
• Fraud prevention and security partners: ba991 works with specialist fraud screening and security services to protect the integrity of the platform. These partners receive only the data necessary to perform their specific function and are bound by strict confidentiality obligations.
• Legal authorities: ba991 will disclose personal data to law enforcement agencies, regulators, courts, or other public authorities where required to do so by applicable law, or where ba991 believes in good faith that such disclosure is necessary to protect the safety of any person, to prevent financial crime, or to defend against legal proceedings.
• Business transfers: In the event of a merger, acquisition, or sale of ba991 assets, personal data held by ba991 may be transferred to a successor entity. In such circumstances, ba991 will provide notice to affected Players and ensure that the successor entity honours the commitments set out in this Privacy Policy.

ba991 uses cookies and similar tracking technologies to operate the platform, remember your session and preferences, detect fraudulent activity, and analyse aggregate usage patterns. A cookie is a small text file placed on your device by a website. ba991 uses the following categories of cookies:

• Essential cookies: These cookies are strictly necessary for the ba991 platform to function. They manage your ba991 Login session, maintain your account state during a gaming session, and enable core security features. These cookies cannot be disabled without rendering the platform unusable.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting (English) and responsible gaming session timer settings — so that you do not need to reconfigure them each time you visit ba991.
• Analytics cookies: ba991 uses anonymised analytics data to understand how players interact with the platform — for example, which games are most popular among players in Dhaka, Chittagong, and Sylhet — and to guide platform improvements. This data is aggregated and does not identify individual players.
• Security and fraud-detection cookies: ba991 uses certain cookies and device fingerprinting techniques to detect and prevent fraudulent account access, multi-accounting, and bonus abuse. These are essential to the integrity of the ba991 platform.

You may configure your browser to refuse or delete cookies. However, disabling essential cookies will prevent you from logging in to ba991 and using the platform's core features. ba991 does not use cookies to serve third-party advertising.

ba991 applies industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ba991 platform;
• Encryption at rest for sensitive personal data stored on ba991 servers;
• Role-based access controls, ensuring that only authorised ba991 personnel with a legitimate operational need can access personal data;
• Regular security assessments and penetration testing of the ba991 platform infrastructure;
• Automated monitoring of account activity to detect and respond to suspicious login attempts, unauthorised access events, and anomalous transaction patterns;
• Two-factor authentication availability for all ba991 account holders, which ba991 strongly recommends enabling.

While ba991 takes all reasonable steps to protect your data, no system is completely immune to security threats. You play an important role in protecting your own account: use a strong, unique password for ba991 Login, enable two-factor authentication, and contact ba991 support immediately if you suspect your account has been compromised.

ba991 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, ba991 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for aggregate statistical purposes.

As a ba991 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ba991 support as described in Section 14. ba991 will respond to all rights requests within 30 days of receipt, or within such other period as may be required by applicable law.

• Right of access: You have the right to request a copy of the personal data ba991 holds about you, together with information about how it is being used. ba991 will provide this information in a clear and structured format.
• Right to rectification: If any personal data ba991 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain contact details directly through your ba991 account settings. For identity data, please contact support.
• Right to erasure: You may request that ba991 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to ba991's legal obligations to retain certain data for regulatory compliance purposes, as described in Section 8.
• Right to restriction of processing: In certain circumstances, you may request that ba991 restrict the processing of your personal data — for example, while the accuracy of data is contested, or while an objection to processing is being considered.
• Right to data portability: Where ba991 processes your personal data on the basis of contract or consent, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to ba991 processing your personal data on the basis of legitimate interests, including for profiling or direct marketing purposes. ba991 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

ba991 may send you promotional communications about bonuses, new game releases from providers such as Pragmatic Play and Evolution Gaming, cricket betting promotions during the BPL and T20 World Cup seasons, Eid and Pohela Boishakh seasonal offers, and other ba991 news. Such communications will be sent to your registered email address or mobile number.

ba991 will only send you marketing communications where you have provided your consent at registration, or where ba991 has a legitimate interest in doing so in relation to services similar to those you have already used. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any ba991 marketing email;
• Updating your communication preferences within your ba991 account settings after ba991 Login; or
• Contacting ba991 support at [email protected] (plain text — not a clickable link) and requesting removal from marketing lists.

Opting out of marketing communications will not affect transactional messages relating to your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and responsible gaming alerts — which ba991 is required to send to you as part of operating your account.

The ba991 platform may contain references to third-party game providers and payment services. ba991 is not responsible for the privacy practices of these third parties. Game content provided by Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other licensed providers is delivered through ba991's platform interface, but the underlying game software is operated by the respective provider under their own data practices.

Similarly, when you use bKash, Nagad, Rocket, Upay, Visa, or Mastercard to make a deposit or withdrawal, your financial transaction data is subject to the privacy policy of the relevant payment service provider in addition to this ba991 Privacy Policy. ba991 encourages you to review the privacy policies of any third-party services you use in connection with your ba991 account.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered a ba991 account, please contact ba991 support immediately at [email protected] (plain text — not a clickable link). ba991 will investigate and take appropriate action without delay.

ba991 employs mandatory age verification as part of its KYC process and implements technical controls designed to detect attempts by underage individuals to register accounts. ba991 also provides parental control resources on its Responsible Gaming page.

ba991 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the ba991 platform's services. The most current version of this Privacy Policy will always be available at this page on ba991.io. The "Last updated" date at the top of this document reflects the date of the most recent revision.

Where ba991 makes a material change to this Privacy Policy — for example, a significant change to the categories of data collected or the purposes for which it is used — ba991 will notify affected Players by email to their registered address or via a notice displayed upon ba991 Login, with at least 14 days' notice before the change takes effect. For non-material changes such as clarifications of existing practices or corrections of typographical errors, ba991 may update the policy without advance notice.

Your continued use of the ba991 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you must cease using ba991 and contact support to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about ba991's handling of your personal data, please contact ba991 support through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your logged-in ba991 account after ba991 Login
• Response Time: ba991 aims to respond to all privacy-related enquiries within 5 business days BST

If you submit a complaint and are not satisfied with ba991's response, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. ba991 will cooperate fully with any such process.

ba991's support team operates entirely in English and is available around the clock, including during peak periods such as the BPL season and T20 World Cup. All privacy-related communications should reference your ba991 account username and registered email address to facilitate a prompt response.