bx999 Privacy Policy
— How We Handle Your Data
At bx999, your personal data is treated with the same level of care we apply to your gaming experience. This Privacy Policy explains precisely what information we collect when you use bx999.club, why we collect it, how it is stored and protected, and what rights you hold over your own data as a registered player in Bangladesh.
Six Ways bx999 Protects Your Privacy
We built our data practices around six core commitments. Full legal detail is in the sections below, but here is what matters most to you as a bx999 player.
End-to-End Encryption
All data transmitted between your device and bx999.club is protected by TLS 1.2+ (SSL) encryption. Your login credentials, payment details, and personal information travel over an encrypted channel at all times.
No Payment Data Stored
bx999 never stores your bKash PIN, Nagad code, card number, or CVV on our servers. All sensitive payment data is handled exclusively by PCI-DSS compliant payment processors — bx999 receives only a transaction confirmation token.
No Data Selling
bx999 does not sell, rent, or auction your personal data to unaffiliated third parties for marketing purposes. Your information is used solely to operate your account, process transactions, and improve the bx999 platform.
Player-Controlled Preferences
You can manage your marketing communication preferences, cookie consent settings, and data access requests directly from your bx999 account dashboard. You remain in control of how your data is used for non-essential purposes.
Strict Purpose Limitation
We collect only the data necessary for the specific purpose stated at the point of collection. We do not collect data "just in case" — every data point we hold serves a defined, documented purpose linked to running a safe, fair casino platform.
Transparent Record Keeping
You can request a full copy of the personal data bx999 holds about you at any time. We will respond to verified data subject access requests within 30 days. See the "Your Privacy Rights" section below for full details.
1 Information We Collect
bx999 collects personal data from you in two ways: information you provide directly when registering and using the Platform, and information collected automatically as you interact with bx999.club. We collect only what is necessary to provide our services, verify your identity, process payments, and fulfil our legal obligations.
1.1 Information You Provide Directly
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID or passport number | Registration & KYC verification |
| Contact Data | Mobile phone number, email address, city/district | Registration & account updates |
| Financial Data | bKash / Nagad / Rocket / Upay account number, Visa/Mastercard last 4 digits | Deposit & withdrawal requests |
| KYC Documents | NID scan, selfie with ID, utility bill (for address verification) | First withdrawal or on request |
| Support Correspondence | Live chat transcripts, email messages, complaint records | When you contact support |
| Responsible Gaming Data | Self-exclusion requests, deposit limit preferences, time-out periods | When you use RG tools |
1.2 Information Collected Automatically
When you access bx999.club, our systems automatically record certain technical data about your session. This includes:
- Device data: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution.
- Network data: IP address, approximate geographic location derived from IP (country and city level only), internet service provider.
- Usage data: Pages visited, time spent on each page, game sessions started and completed, bet amounts and outcomes, navigation path through the site.
- Cookie and tracking data: Session identifiers, preference cookies, analytics cookies. See Section 5 (Cookies) for full details.
1.3 Data We Do NOT Collect
bx999 does not collect or process the following categories of sensitive personal data unless you voluntarily provide them in a support communication (in which case they are used only to resolve your query):
- Racial or ethnic origin
- Political opinions or religious beliefs
- Biometric data beyond what is needed for KYC identity verification
- Health data beyond voluntary self-disclosure in the context of responsible gaming requests
2 How We Use Your Information
bx999 uses your personal data for specific, documented purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are set out below.
2.1 Account Management
We use your identity, contact, and login data to create and maintain your bx999 account, authenticate your sessions, send you account-related notifications (deposit confirmations, withdrawal updates, security alerts), and enforce the one-account-per-player rule.
2.2 Payment Processing
Your financial data (mobile payment account numbers, card details) is used exclusively to process deposit and withdrawal requests. bx999 passes the minimum required data to our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to complete your transaction. We retain a transaction reference and amount for accounting and AML purposes, but we do not store full card numbers or mobile banking PINs.
2.3 Identity Verification & Fraud Prevention
KYC documents and identity data are used to verify that you are who you say you are, that you meet the 18+ age requirement, and that you are not on any self-exclusion registers or watchlists. We also use usage and network data to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities described in our Terms & Conditions.
2.4 Regulatory Compliance
Certain data is processed and retained because we are legally required to do so — for example, transaction records for anti-money laundering (AML) audit purposes, and age-verification records to demonstrate compliance with our 18+ policy.
2.5 Platform Improvement
Anonymised and aggregated usage data (page views, game session metrics, navigation patterns) helps us understand how players use bx999 and where we can improve load times, game availability, and the overall user experience. This analysis does not identify individual players.
2.6 Marketing Communications
With your explicit consent, we may send you promotional emails, SMS messages, or push notifications about bx999 bonuses, new game launches, seasonal promotions, and special events. You can withdraw your marketing consent at any time by updating your preferences in your account settings or by contacting our support team. Withdrawing marketing consent does not affect your ability to continue using the Platform.
bx999 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your consent. Our responsible gaming monitoring tools flag accounts showing behavioural patterns associated with problem gambling, but a human agent reviews each flagged account before any action is taken.
3 Legal Basis for Processing
bx999 processes your personal data on one or more of the following legal grounds:
- Contractual necessity: Processing is necessary to perform the contract between you and bx999 — i.e., to provide you with a functional account, process your bets, and pay out your winnings. Without this processing, bx999 cannot deliver its services to you.
- Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification obligations, and financial record-keeping requirements.
- Legitimate interests: Processing is necessary for bx999's legitimate business interests — including fraud detection, platform security, abuse prevention, and improving service quality — provided those interests are not overridden by your rights and interests.
- Consent: For non-essential data uses such as marketing communications and non-essential analytics cookies, bx999 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
4 Data Sharing & Third Parties
bx999 does not sell your personal data. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards requiring the recipient to protect your data to at least the standard described in this Privacy Policy.
4.1 Payment Service Providers
To process your deposits and withdrawals, bx999 must share your payment account identifier (e.g., your bKash number or card last four digits) and the transaction amount with the relevant payment processor. These providers operate under their own privacy policies and PCI-DSS security standards.
4.2 Game Technology Providers
Live casino and slot game providers (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Habanero, and Spribe) may receive a session token and your anonymous player ID when you launch a game hosted on their platform via bx999. These providers do not receive your full name, NID, or payment details — only the minimum data necessary to run the game session and record the outcome.
4.3 Identity Verification Services
bx999 may use third-party KYC verification services to cross-reference the identity documents you submit. These services process your submitted document data only for verification purposes and are contractually prohibited from using your data for any other purpose.
4.4 Analytics & Security Services
We use reputable analytics and cybersecurity service providers to monitor Platform performance, detect threats, and analyse aggregated usage patterns. These providers process data only on our behalf and under our instructions.
4.5 Legal and Regulatory Disclosure
bx999 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, court directive, or regulatory requirement. We will inform you of any such disclosure where we are legally permitted to do so.
No third-party marketing sharing. bx999 does not share your contact details with advertising networks, data brokers, or third-party marketers. Any marketing communications you receive from bx999 are sent by bx999 directly, not through purchased or rented data lists.
6 Data Retention Periods
bx999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, DOB, contact details) | Duration of account + 5 years after closure | AML compliance, dispute resolution |
| KYC documents (NID, passport scans, selfies) | Duration of account + 5 years after closure | Age verification audit trail, AML |
| Financial transaction records | 7 years from transaction date | Financial record-keeping regulations |
| Betting history and game logs | 5 years from date of bet | Dispute resolution, fair play monitoring |
| Support correspondence | 3 years from last interaction | Quality assurance, complaint resolution |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of lawful marketing basis |
| Analytics data (anonymised) | 26 months from collection | Platform improvement analysis |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gaming compliance |
When the retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you. Anonymised, aggregated data (for example, total number of players from Dhaka in a given month) may be retained indefinitely for statistical purposes.
7 Your Privacy Rights
As a bx999 player, you hold the following rights over your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] (plain text address — not a clickable link). We will respond to all verified requests within 30 calendar days.
7.1 Right of Access
You have the right to request a copy of all personal data bx999 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide the data in a structured, commonly used, machine-readable format where technically feasible. For security, we will verify your identity before releasing any data.
7.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most personal details (phone number, email address, residential city) directly from your bx999 account settings. Changes to identity data (name, date of birth, NID number) require supporting documentation and must be processed by our support team.
7.3 Right to Erasure
You may request that bx999 delete your personal data ("right to be forgotten"). This right applies where the data is no longer needed for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been unlawfully processed. Please note that this right is not absolute — bx999 may be required to retain certain data for legal or regulatory reasons (see Section 6) even after an erasure request is received. In such cases, we will explain which data must be retained and why.
7.4 Right to Restriction
You can request that bx999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests and we are assessing your objection.
7.5 Right to Data Portability
For data that you have provided to us and that is processed on the basis of your consent or a contract, you have the right to receive that data in a portable, structured format so you can transfer it to another service provider.
7.6 Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, although bx999 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
All privacy rights requests must be submitted in writing to [email protected] (plain text). Include your registered full name and mobile number so we can verify your identity before acting on the request. We do not charge a fee for rights requests unless they are manifestly unfounded or excessive in nature.
8 Data Security Measures
bx999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our key security controls include:
- TLS 1.2+ encryption: All data in transit between your browser and bx999.club is encrypted using Transport Layer Security. The padlock icon in your browser's address bar confirms the encrypted connection is active.
- Data encryption at rest: Sensitive personal data stored in our databases (including KYC document references and identity records) is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data is restricted on a need-to-know basis. bx999 staff members can only access the data required to perform their specific job function. All internal access to player data is logged and auditable.
- Two-factor authentication (2FA): bx999 offers 2FA for player accounts and mandates it for all internal administrative access to systems holding personal data.
- Penetration testing: Our Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident response plan: In the event of a data breach that poses a risk to your rights and interests, bx999 will notify affected players and take all reasonable steps to contain and remediate the breach as quickly as possible.
While bx999 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You also play a role in keeping your account secure: use a strong, unique password for your bx999 account, enable 2FA, and do not share your login credentials with any other person.
9 Children & Underage Users
bx999 is an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. If you are under 18, you must not register an account, deposit funds, or use any feature of bx999.club.
If bx999 discovers or is notified that personal data has been collected from a person under the age of 18, we will take the following immediate steps:
- Permanently close the account associated with the underage user.
- Delete all personal data collected from the underage individual, subject to any legal retention obligations.
- Reverse any deposits made to the account back to the originating payment method.
- Void all wagers placed and forfeit all winnings accumulated by the underage account.
Parents and guardians: We strongly encourage you to use parental control software on devices shared with minors to restrict access to online gambling and betting websites, including bx999.club. If you suspect a minor has registered on bx999 using your payment details, contact us immediately at [email protected] (plain text — not a clickable link).
10 Updates to This Policy
bx999 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, or updated legal requirements. When we make material changes to this Policy, we will notify registered players via email and display a prominent notice on bx999.club at least 7 days before the changes take effect.
The "last updated" date at the top of this page (and in the hero section above) always reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically so you remain informed about how bx999 handles your personal data.
Your continued use of bx999.club after any revised Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you disagree with any changes, you should stop using the Platform and may request account closure as described in our Terms & Conditions, Section 8.1.
Privacy Questions or Concerns?
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how bx999 handles your personal data, please contact our support team. We aim to resolve all privacy-related queries within 30 calendar days.
Your Data Is Safe at bx999
Now that you understand how bx999 protects your privacy, you can play with confidence. Explore our cricket betting markets, spin the slots, try your luck at live roulette, or log in to your account. 18+ only. Play responsibly.