Privacy Policy — How ba996 Collects, Uses, and Protects Your Data

1. Introduction

ba996 ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at ba996.io and its associated mobile interfaces. In providing this service to account holders and visitors across Bangladesh, ba996 processes personal data as described in this Privacy Policy.

This Policy applies to all personal data collected from individuals who visit the ba996 website, register a ba996 account, make deposits or withdrawals, participate in promotions, contact ba996 support, or interact with the ba996 platform in any other way. It covers data collected through the website, through mobile interfaces, and through communications with the ba996 support team.

ba996 acts as the data controller in respect of all personal data described in this Policy. As data controller, ba996 determines the purposes for which and the manner in which your personal data is processed. ba996 takes its data controller responsibilities seriously and has implemented appropriate technical, organisational, and contractual measures to protect the personal data it holds.

This Privacy Policy should be read alongside ba996's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. Where a conflict arises between this Policy and those documents in respect of data protection matters, this Privacy Policy shall prevail.

2. Personal Data We Collect

ba996 collects the following categories of personal data, depending on the nature of your interaction with the platform:

3. How We Collect Your Data

ba996 collects personal data through the following channels:

• Direct submission: Data you provide when registering a ba996 account, completing the KYC verification process, making a deposit or withdrawal request, contacting ba996 customer support, or responding to a ba996 survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access the ba996 platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for full details on cookies.
• Payment providers: Confirmation data received from payment service providers such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when processing your transactions. This is limited to transaction confirmation references and does not include full payment account credentials.
• KYC verification partners: Results and flags received from third-party identity verification services engaged by ba996 to confirm the authenticity of documents submitted during the KYC process.
• Fraud and AML screening tools: Risk scores and screening results generated by ba996's anti-money-laundering and fraud detection systems based on transaction patterns and account behaviour.

4. Legal Basis for Processing

ba996 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which ba996 relies are as follows:

• Performance of a contract: Processing necessary to open and manage your ba996 account, process deposits and withdrawals, verify your identity, and deliver the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money-laundering regulations, age verification requirements, and any other legal obligations imposed on ba996 as an operator of online gaming services in the jurisdictions it serves.
• Legitimate interests: Processing carried out to prevent fraud and abuse, to secure the ba996 platform, to improve service quality, and to conduct internal analytics — where ba996's legitimate interest in doing so is not overridden by your data protection rights.
• Consent: Processing for marketing communications, personalised promotional offers, and non-essential cookies, where you have given clear and specific consent. You may withdraw consent for these activities at any time by contacting [email protected] or by adjusting your account notification preferences.

5. How We Use Your Personal Data

ba996 uses the personal data it collects for the following specific purposes:

• To create, verify, and manage your ba996 account, including processing your registration, confirming your identity, and maintaining your account settings and preferences;
• To process deposits, withdrawals, and other financial transactions through your chosen payment method, including bKash, Nagad, Rocket, Upay, and bank transfers;
• To verify your age and identity in compliance with ba996's KYC requirements, ensuring that the platform is not accessed by individuals under 21 years of age;
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and any other form of prohibited conduct on the ba996 platform;
• To personalise your ba996 experience, including presenting game recommendations and promotional offers that are relevant to your playing history and preferences — where you have consented to receive such personalisation;
• To communicate with you about your account, including sending transaction confirmations, security alerts, and important service notifications;
• To send you marketing communications about ba996 promotions, including cricket betting offers tied to BPL and IPL seasons, slot bonuses, and seasonal events such as Eid and Pohela Boishakh — where you have consented to receive marketing communications;
• To operate ba996's responsible gaming programme, including monitoring usage patterns for indicators of problem gambling behaviour and applying responsible gaming tools where appropriate;
• To improve the ba996 platform through aggregated analytics, A/B testing, and performance monitoring — using data that is anonymised or pseudonymised wherever practicable;
• To respond to your customer support enquiries, complaints, and data subject access requests.

6. Data Sharing & Third-Party Disclosure

ba996 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Data sharing is limited strictly to the following categories of recipient, and only where sharing is necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data processed within their own systems.
• KYC and identity verification providers: Third-party verification services receive copies of identity documents submitted during your KYC process for the sole purpose of confirming document authenticity and cross-referencing against sanction and PEP lists.
• Fraud detection and AML services: Specialist service providers receive transactional and behavioural data to help ba996 identify and prevent fraud, money laundering, and other financial crimes. These providers act as data processors under contract with ba996.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and game-play data necessary to deliver the games you play. This data does not include your full identity details unless required for live dealer account management.
• Legal and regulatory authorities: ba996 will disclose personal data to competent governmental, law enforcement, or regulatory authorities where required to do so by applicable law, court order, or regulatory directive. ba996 will notify affected account holders of such disclosure where legally permitted to do so.
• Professional advisers: ba996's legal counsel, auditors, and compliance consultants may access personal data where strictly necessary for the provision of professional advice. All such parties are bound by confidentiality obligations.

All third-party data processors engaged by ba996 are required to enter into data processing agreements that mandate appropriate technical and organisational data security measures, restrict processing to the purposes specified by ba996, and prohibit onward transfer to unauthorised parties.

7. Cookies & Tracking Technologies

ba996 uses cookies and similar tracking technologies on its website and mobile interfaces to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device when you access the ba996 platform.

ba996 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the ba996 platform to function correctly. They enable core features such as secure login sessions, account authentication, and the shopping cart functionality in the cashier. These cookies cannot be disabled without rendering the platform non-functional.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-visited game category — to provide a more convenient experience on return visits. Disabling functional cookies will cause these preferences to reset each session.
• Analytics cookies: These cookies collect anonymised or pseudonymised data about how visitors use the ba996 platform, including which pages are visited, how long sessions last, and which features are used most frequently. This data is used solely to improve the platform experience and is not linked to individually identifiable user profiles without consent.
• Marketing cookies: Where you have consented, these cookies track your interactions with ba996 promotional content to allow ba996 to present more relevant offers. Marketing cookies are only activated following your explicit opt-in consent.

8. Data Security

ba996 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ba996 servers;
• Encryption of sensitive data at rest, including stored identity documents and financial records;
• Role-based access controls that restrict access to personal data to authorised personnel only, on a strict need-to-know basis;
• Multi-factor authentication requirements for all ba996 staff accessing internal systems that contain personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of ba996 systems for suspicious access patterns and potential security incidents;
• A documented incident response plan that ensures prompt containment, investigation, and notification in the event of a data breach.

While ba996 takes every reasonable precaution to safeguard your data, no system is entirely immune to security risks. You also have a role to play in keeping your data safe — please refer to the account security guidance in ba996's Terms & Conditions for steps you should take to protect your ba996 login credentials.

9. Data Retention

ba996 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The principal retention periods applied by ba996 are as follows:

• Account and identity data: Retained for the duration of your active ba996 account, and for a period of five years following permanent account closure. This retention period is required to satisfy anti-money-laundering record-keeping obligations.
• Transaction and financial records: Retained for five years from the date of the transaction, in line with financial record-keeping requirements.
• Gaming and betting history: Retained for three years from the date of each session or transaction, for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for two years from the date of the last interaction, to allow ba996 to reference prior contact history when handling subsequent enquiries.
• Self-exclusion and responsible gaming records: Retained for the full duration of the exclusion period plus five years, to prevent the accidental reinstatement of an excluded account.
• Marketing consent records: Retained for as long as you hold an active ba996 account, or until you withdraw consent, whichever is earlier.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for analytical and reporting purposes.

10. Your Data Rights

As a ba996 account holder or platform visitor, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data ba996 holds about you, along with information about how it is being used. ba996 will respond to data access requests within 30 days.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data ba996 holds about you be corrected. Minor account details such as contact information can be updated directly within your ba996 account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to ba996's legal retention obligations — data that must be retained for AML compliance cannot be deleted on request during the mandatory retention period.
• Right to restrict processing: You have the right to request that ba996 restricts the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to object: You have the right to object to processing carried out on the basis of ba996's legitimate interests, and to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where ba996 processes your data on the basis of your consent — such as for marketing communications or non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

11. Children's Privacy

The ba996 platform is strictly intended for adults aged 21 and above. ba996 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If ba996 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all data associated with the account will be deleted as soon as practicable, and any deposited funds will be returned to the payment source.

If you have reason to believe that a person under 21 has registered a ba996 account using false information, please contact ba996 immediately at [email protected] so that appropriate action can be taken without delay.

12. Third-Party Links

The ba996 platform may contain references to or integrations with third-party services — such as game software providers, payment gateway interfaces, and responsible gaming resource organisations. Where the ba996 platform links to or embeds content from a third-party service, ba996 is not responsible for the privacy practices of that third party.

ba996 recommends that you review the privacy policy of any third-party service you interact with in connection with your use of the ba996 platform. The ba996 Privacy Policy governs only the data processing activities carried out directly by ba996 and its contracted data processors.

13. Updates to This Privacy Policy

ba996 reserves the right to update this Privacy Policy at any time to reflect changes in the services ba996 provides, changes in applicable law or regulatory requirements, or improvements to ba996's data protection practices. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.

Where changes to this Policy are material — meaning they meaningfully alter how ba996 processes your personal data or affect your data rights — ba996 will notify registered account holders via the email address or mobile number on file, or through a prominent notice on the ba996 platform, before the updated Policy takes effect. Your continued use of the ba996 platform following the effective date of an updated Policy constitutes acceptance of the revised terms.

ba996 encourages all account holders to review this Privacy Policy periodically to stay informed about how their personal data is being protected and used.

14. Contact & Privacy Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way ba996 handles your personal data, please contact the ba996 data privacy team using the details below:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Privacy Request"
• Response Time: ba996 aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week

ba996 takes all privacy complaints seriously and will investigate each complaint thoroughly before providing a written response. If you are not satisfied with ba996's response to your privacy complaint, you may have the right to refer your complaint to an appropriate supervisory authority in your jurisdiction.

For questions about your account, deposits, withdrawals, or game-related matters, please visit the FAQ page or contact ba996 support directly. For information about responsible gaming tools and self-exclusion, please visit the Responsible Gaming page.