Privacy Policy

01 Introduction

bmw99 is Bangladesh's leading online betting and casino platform, operating at https://bmw99.io and serving registered players across Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to protecting the privacy and personal data of every player who chooses to register and play on the bmw99 platform.

This Policy sets out the personal data we collect from you, the purposes for which we use that data, the circumstances in which we may share it with third parties, the security measures we have put in place to protect it, the periods for which we retain it, and the rights you hold in relation to your data.

bmw99 processes personal data in accordance with internationally recognised data protection principles, including lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. We are the data controller for the personal data described in this Policy.

If you have questions about this Policy or about how bmw99 handles your personal data, you may contact our Data Support team at any time by email at [email protected]. Our team operates 24 hours a day, 7 days a week, including all Bangladeshi public holidays such as Eid, Victory Day (16 December), Independence Day (26 March), and Pohela Boishakh.

02 Data We Collect

bmw99 collects personal data from you through several channels: directly from you during registration and account management; automatically through your use of the bmw99 platform; and from third-party identity and payment verification services. The categories of personal data we collect are described below.

03 How We Use Your Data

bmw99 uses the personal data it collects solely for the following defined purposes. We do not use your data in ways that are incompatible with these stated purposes without first obtaining your explicit consent or where required by applicable law.

• Account creation and management: To register your bmw99 account, verify your identity and age (you must be 21 or older), and maintain your account in a secure and functional state.
• Transaction processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banking partners; to maintain accurate financial records of all transactions.
• Platform delivery: To provide access to betting markets (including BPL, IPL, T20 World Cup, and Bangladesh Tigers cricket), live casino tables powered by Evolution Gaming and Ezugi, and slot titles from Pragmatic Play, NetEnt, Microgaming, and Spribe.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and provide assistance via our 24/7 support team.
• Responsible gaming: To monitor your gaming behaviour for signs of problem gambling; to enforce self-exclusion requests, deposit limits, and session time-outs you have activated; and to fulfil our duty of care obligations.
• Fraud prevention and security: To detect and prevent fraud, money laundering, multiple-account abuse, bonus exploitation, and other prohibited conduct; to maintain the security and integrity of the bmw99 platform.
• KYC and regulatory compliance: To verify your identity, age, and payment method ownership in fulfilment of our know-your-customer obligations prior to processing withdrawals.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, design, and feature set of the bmw99 platform.
• Promotional communications: To send you information about bonuses, promotions, and offers relevant to your play history — but only where you have not opted out of such communications. You may opt out at any time by contacting [email protected].

04 Legal Basis for Processing

bmw99 processes your personal data under the following legal bases, consistent with internationally recognised data protection standards:

• Contractual necessity: Processing required to perform the contract between you and bmw99 — including account registration, transaction processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC and anti-money-laundering obligations, age verification requirements, and our responsible gaming duty of care.
• Legitimate interests: Processing carried out in pursuit of bmw99's legitimate business interests — including fraud detection, platform security, abuse prevention, and platform performance analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your explicit consent, such as the sending of promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Sharing Your Data

bmw99 does not sell, rent, or trade your personal data. We share your personal data only in the following limited and controlled circumstances:

• Payment processors: We share your financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank solely to facilitate deposit and withdrawal transactions. These partners are contractually bound to process your data only for payment purposes and to maintain appropriate security standards.
• Game providers: We share necessary session and account data with our game studio partners — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to enable the delivery of their games within the bmw99 platform. These providers are bound by their own privacy policies and by contractual data processing agreements with bmw99.
• Identity verification services: We may share identity document data with trusted KYC verification partners to fulfil our age and identity verification obligations prior to processing withdrawal requests.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bmw99, our players, or others.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bmw99's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material change to how your data is processed.

06 Data Retention

bmw99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your bmw99 account being open and active.
• Closed account data: Following account closure (whether by you or by bmw99), core identity and transaction records are retained for a minimum of five (5) years to comply with anti-money-laundering record-keeping requirements and to support the investigation of any outstanding disputes.
• KYC documentation: Identity documents submitted for verification are retained for a minimum of five (5) years following the closure of the associated account.
• Support communications: Customer support chat transcripts and email correspondence are retained for a period of two (2) years following the closure of the relevant support case.
• Technical and usage logs: Server logs, IP address records, and usage analytics are retained for a period of twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Records of your marketing preferences and consent/opt-out history are retained for three (3) years following the last recorded interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and research purposes, as it can no longer be associated with any identifiable individual.

07 Cookies & Tracking Technologies

bmw99 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, maintain your session while logged in, and collect performance analytics that help us improve your experience. The following types of cookies are used on the bmw99 platform:

• Strictly necessary cookies: These cookies are essential for the bmw99 platform to function. They enable core features such as user authentication, session management, shopping basket retention, and security token validation. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the bmw99 platform — including which pages are visited most frequently, how long sessions last, and which game categories attract the most engagement. This data is used exclusively to improve platform performance and is not used to identify individual players.
• Functional cookies: These cookies remember your preferences — such as your preferred language (English), display settings, and responsible gaming limits you have activated — so that you do not need to re-enter them on each visit.

You may control and manage cookies through your browser settings. Most browsers allow you to view, block, and delete cookies at the individual site level. Please note that blocking strictly necessary cookies will prevent you from logging in to your bmw99 account and accessing the platform's core features. For guidance on managing cookies in your browser, consult your browser's help documentation.

08 Data Security

bmw99 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your browser and the bmw99 platform is encrypted using 256-bit TLS (Transport Layer Security). This applies to all pages of the platform, including the account login page, deposit and withdrawal pages, and the game lobby.
• Encryption at rest: Sensitive personal data stored on bmw99 servers — including identity document images and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within bmw99's internal systems is restricted on a strict need-to-know basis. All staff members with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Penetration testing: bmw99 conducts regular security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bmw99 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players promptly with information about the nature of the breach and the steps being taken to address it.

While bmw99 implements all commercially reasonable security measures, no online platform can guarantee absolute security. Players are also responsible for maintaining the security of their own bmw99 Login credentials. You should use a strong, unique password for your bmw99 account and never share your login details with any third party. If you suspect that your account credentials have been compromised, contact [email protected] immediately.

09 Your Rights

As a player whose personal data is processed by bmw99, you hold the following rights in relation to that data. bmw99 is committed to facilitating the exercise of these rights promptly and without undue obstruction.

• Right of access: You have the right to request a copy of the personal data bmw99 holds about you. We will provide this information within 30 days of receiving a verified request.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly via your bmw99 account settings panel.
• Right to erasure ("right to be forgotten"): Subject to applicable legal and regulatory retention obligations (see Section 6), you may request that bmw99 delete the personal data we hold about you. Please note that erasure requests cannot be fulfilled while your account is active or where data must be retained to comply with anti-money-laundering regulations.
• Right to restriction of processing: You may request that bmw99 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on bmw99's legitimate interests. If you object, bmw99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected], including your full name, the email address registered to your bmw99 account, and a description of the right you wish to exercise. We may ask you to provide additional verification information to confirm your identity before processing your request.

10 Children & Minors

The bmw99 platform is strictly for adults aged 21 years and above. bmw99 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes mandatory age verification, and all accounts are subject to KYC identity checks that confirm a player's date of birth prior to the processing of any withdrawal.

If bmw99 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration of age during registration or by any other means — the associated account will be immediately suspended, all balances held pending investigation, and the personal data deleted in accordance with applicable law.

11 Third-Party Links

The bmw99 platform may, from time to time, contain references to third-party services — such as game providers, payment processors, and support resources. Where such references include links to third-party websites or platforms, please be aware that those external platforms operate under their own privacy policies and terms of service, and bmw99 has no control over and accepts no responsibility for their data practices.

bmw99 recommends that you review the privacy policy of any third-party platform before providing any personal data to that platform. The inclusion of a reference to a third-party service on the bmw99 platform does not constitute an endorsement of that service's data practices by bmw99.

12 Policy Changes

bmw99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, or improvements to the bmw99 platform. When we make material changes to this Policy, we will notify registered players by email to the address associated with their bmw99 account, and we will update the "Last Updated" date at the top of this page.

Your continued use of the bmw99 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any material change to this Policy, you should discontinue use of the platform and submit an account closure request to [email protected].

We encourage all players to review this Privacy Policy periodically to stay informed about how bmw99 is protecting their personal data. Previous versions of this Policy are available on request by contacting our Data Support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bmw99 processes your personal data, please contact our Data Support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

When contacting us regarding a data rights request, please include your full legal name, the email address registered to your bmw99 account, and a clear description of your request or concern. This will allow us to locate your records and process your request as efficiently as possible. We may request additional identity verification before fulfilling certain data rights requests to protect the security of your personal information.

bmw99 is committed to resolving all data protection concerns fairly and transparently. If you are not satisfied with our response to your enquiry, you have the right to escalate your complaint through appropriate legal channels in your jurisdiction.