bm999 Privacy Policy

bm999 (referred to in this document as "bm999", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://bm999.io (the "Platform"). bm999 is the data controller responsible for the personal information collected through the Platform.

This Privacy Policy applies to all individuals who visit, register on, or otherwise interact with the bm999 Platform, including account holders, prospective players, and visitors who browse without registering. It covers personal data collected through the website, any associated mobile-browser interface, customer support channels, and any other touchpoint through which bm999 interacts with you.

By using the bm999 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

bm999 collects personal data that you provide directly, data generated automatically through your use of the Platform, and in some cases data obtained from third-party verification services. The categories of personal data we collect are set out in the table below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless this is directly relevant to a responsible gaming assessment or legal obligation, in which case we will seek your explicit consent.

bm999 uses the personal data it collects for the following purposes:

• Account creation and management: To register your bm999 account, verify your identity (KYC), and maintain accurate account records throughout the lifetime of your account.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment channels available to Bangladesh-based players.
• Service delivery: To provide you with access to all bm999 gaming products, including slots, live casino, sports betting (cricket, football, kabaddi), crash games, and fishing games.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited activities outlined in the bm999 Terms & Conditions.
• Regulatory compliance: To meet applicable anti-money laundering (AML) and know-your-customer (KYC) obligations, and to respond to lawful requests from competent authorities.
• Responsible gaming: To monitor account activity for signs of problem gambling, to enforce responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and to uphold our 21+ age policy.
• Customer support: To respond to your queries, complaints, and account-related requests via email, live chat, and WhatsApp in a timely and effective manner.
• Platform improvement: To analyse aggregated usage patterns, troubleshoot technical issues, and develop new features that improve the bm999 player experience.
• Marketing communications: Where you have opted in, to send you relevant promotional offers, seasonal bonus notifications (e.g., Eid offers, BPL promotions), and platform updates by email or SMS. You may opt out at any time through your account settings.

bm999 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on you without human review. Where automated tools are used for fraud screening, any flag that may result in account restriction is reviewed by a member of the bm999 compliance team before action is taken.

bm999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing is necessary to perform the contract between you and bm999 — specifically, to operate your account, process your transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing is required for bm999 to comply with applicable legal and regulatory obligations, including anti-money laundering checks, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing is necessary for bm999's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring, provided these interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bm999 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances and only to the extent necessary for the relevant purpose:

• Payment service providers: Your financial data is shared with bKash, Nagad, Rocket, Upay, and bank partners solely to process your deposit and withdrawal transactions. These providers process your data under their own privacy policies and are contractually bound to handle your data securely.
• Identity verification (KYC) partners: Your identity documents and personal details may be shared with third-party KYC verification services to confirm your age and identity as required by our account opening procedures.
• Game providers: Usage data relating to games you play (bets placed, game outcomes, session data) is shared with our game provider partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — solely for the purpose of delivering those games and resolving any game-related disputes.
• IT and hosting providers: Our infrastructure and data hosting partners may have incidental access to personal data stored on the servers they operate on our behalf. All such partners are bound by strict data processing agreements.
• Fraud prevention and AML services: Data may be shared with fraud detection and anti-money laundering service providers for the purpose of protecting the security and integrity of the bm999 Platform.
• Legal and regulatory authorities: bm999 will disclose personal data to competent authorities when required to do so by law, court order, or other binding legal process. We will notify affected users of such disclosure where we are legally permitted to do so.

All third parties with whom bm999 shares personal data are required to implement appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared.

bm999 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to remember your preferences, and to understand how players interact with our services. The types of cookies we use are described below:

• Strictly necessary cookies: These cookies are essential for the Platform to operate. They enable core functions such as session management, login authentication, and security features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: These cookies remember your preferences — such as your language settings, preferred payment method, and account interface options — so you do not need to re-enter them on each visit.
• Analytics cookies: bm999 uses aggregated analytics data to understand player behaviour patterns, identify technical issues, and improve the platform experience. This data is processed in anonymised or pseudonymised form where possible.
• Marketing cookies: Where you have consented, marketing cookies may be used to present you with relevant promotional content based on your activity on the Platform. You may withdraw this consent at any time through your account settings.

Most web browsers allow you to control cookie settings through the browser preferences menu. However, disabling strictly necessary cookies may affect the functionality of your bm999 account. Please refer to your browser's help documentation for instructions on managing cookie preferences.

bm999 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with bm999, plus a post-closure period as set out below.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in accordance with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Account activity and gaming history: Retained for a minimum of three (3) years following account closure, to support the resolution of any disputes that may arise after closure.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an open dispute or legal matter.
• Marketing preferences: Retained until you withdraw your consent or close your account, whichever occurs first.
• Post-closure deletion: Following account closure, bm999 will delete or anonymise personal data that is no longer required for legal or regulatory purposes within 90 days, except where longer retention is mandated by law.

Where personal data is retained beyond the active account period solely to meet legal obligations, it will be stored in a restricted-access archive and will not be used for any other purpose.

bm999 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the bm999 Platform is encrypted using 256-bit TLS SSL technology, the same standard used by major international financial institutions.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes. bm999 staff cannot view your password in plain text, and bm999 will never ask you to share your password via any channel.
• Two-factor authentication (2FA): bm999 strongly recommends that all account holders enable 2FA through the account security settings page to add an additional layer of protection.
• Access controls: Access to personal data within bm999's internal systems is restricted on a need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Intrusion detection: bm999 operates real-time monitoring systems designed to detect and respond to suspicious access patterns and potential data security incidents.
• Segregated player funds: Player account balances are held in accounts that are segregated from bm999's operational funds, providing an additional layer of financial security.

While bm999 takes all reasonable steps to protect your personal data, no data transmission over the internet or method of electronic storage is completely secure. In the event of a data security incident that may affect your personal data, bm999 will notify you in accordance with applicable notification obligations.

As a bm999 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13.

• Right of access: You have the right to request a copy of the personal data bm999 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Some data — such as your registered name and date of birth — may require documentary evidence before it can be amended.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bm999's legal retention obligations described in Section 7.
• Right to restriction: You have the right to request that bm999 restricts the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of bm999's legitimate interests, including profiling for fraud prevention purposes. bm999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

bm999 will respond to all verifiable rights requests within 30 days of receipt. We may need to verify your identity before processing a request. There is no charge for exercising your rights in most circumstances; however, if a request is manifestly unfounded or excessive, bm999 reserves the right to charge a reasonable administrative fee or decline to act on the request.

The bm999 Platform is strictly intended for adults aged 21 years and above. bm999 does not knowingly collect personal data from any person under the age of 21. If you are under 21, you are not permitted to register for or use a bm999 account under any circumstances.

bm999 employs age verification procedures during the registration process and during KYC checks to identify and prevent underage access. If bm999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be securely deleted, and any balances held on the account will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered a bm999 account, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.

The bm999 Platform may contain references to third-party services, such as payment providers (bKash, Nagad, Rocket, Upay) and game providers (Pragmatic Play, Evolution Gaming, NetEnt, and others). This Privacy Policy applies solely to data collected and processed by bm999. It does not apply to any data collected by third-party websites, applications, or services that you may access through or in connection with the bm999 Platform.

bm999 has no control over the privacy practices of third-party providers and accepts no responsibility for the content, privacy policies, or data-handling practices of any external service. We encourage you to read the privacy policies of any third-party service you use in connection with your bm999 account.

bm999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify active account holders by email or via an in-platform notification prior to the changes taking effect. The updated Policy will be published on this page with a revised effective date.

Your continued use of the bm999 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically to stay informed about how bm999 protects and uses your personal data. The current version of this Policy is always available at https://bm999.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bm999 has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data compliance team and will be acknowledged within two (2) business days.

• Email: [email protected]
• WhatsApp: +880 1700 000 999
• Live Chat: Available inside your bm999 account dashboard, 24/7
• Response time: We aim to respond to all privacy requests within 30 days of receipt. Complex requests may take longer, in which case we will notify you of the expected timeline.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bm999 is committed to working constructively with both account holders and regulatory bodies to resolve any privacy-related concerns promptly and fairly.