bm999 Privacy Policy
Your privacy matters to bm999. This policy explains exactly what personal data we collect, why we collect it, how it is used, and the rights you have over your own information.
Data Protection
bm999's Commitment to Your Privacy
This Privacy Policy ("Policy") describes how bm999 ("Platform", "we", "us", or "our") collects, processes, stores, and protects personal data provided by or generated about players who register, access, or use the bm999 online casino and sports betting platform at bm999.lat. This Policy applies to all players located in Bangladesh and any other jurisdiction from which bm999 is accessed. By registering an account with bm999 or using any part of the bm999 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
bm999 takes data protection seriously. We collect only the personal data that is necessary to operate the platform, process transactions, verify player identities, prevent fraud, and comply with applicable legal obligations. We do not sell personal data to third parties. We do not share personal data with third parties for their own marketing purposes. Every data processing activity at bm999 serves a defined, legitimate purpose that is directly connected to the services we provide to you as a registered player.
Our Privacy Principles
Five Principles That Guide How bm999 Handles Your Data
Section 1
Personal Data We Collect and Why
bm999 collects personal data across several categories, each of which serves a specific operational purpose. The table below summarises the categories of data collected, along with the primary purpose for which each category is processed.
Section 2
How bm999 Uses Your Personal Data
bm999 processes personal data only where a lawful basis for processing exists. The lawful bases on which bm999 relies are as follows:
- Contract performance: processing that is necessary to provide you with the services you have requested, including account creation, deposit processing, withdrawal processing, game access, and bonus crediting.
- Legal obligation: processing required to comply with applicable law, including KYC/AML identity verification requirements, financial transaction record-keeping, and reporting obligations to relevant authorities.
- Legitimate interests: processing that serves bm999's legitimate interests in fraud prevention, platform security, abuse detection, and responsible gaming monitoring, where those interests are not overridden by your rights and interests.
- Consent: where bm999 sends you optional marketing communications about promotions, bonuses, or new games, this processing is based on your express consent. You may withdraw this consent at any time by contacting bm999 support or using the unsubscribe mechanism in any marketing email.
- Platform improvement: aggregated, anonymised gameplay and session data is used to improve platform performance, identify technical issues, and optimise the player experience. This processing uses data in a form that cannot identify individual players.
- Responsible gaming: session and gameplay data is monitored to identify patterns associated with problematic gambling behaviour, enabling bm999 to proactively apply responsible gaming safeguards where appropriate.
bm999 may send you promotional communications about new games, bonus offers, and platform updates via the mobile number or email address registered on your account. These communications are sent only with your consent, which you provide during account registration. You may opt out of marketing communications at any time without this affecting your ability to use any part of the bm999 platform. To opt out, contact bm999 support at [email protected].
Section 3
When and How bm999 Shares Your Data
bm999 does not share your personal data with third parties except in the specific circumstances described below. In all cases where data sharing occurs, it is limited to the minimum data necessary for the stated purpose, and bm999 maintains contractual protections with all third-party data recipients.
bm999 shares personal data only with the following categories of third parties, and only to the extent required to fulfil the stated purpose:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): transaction data necessary to process deposits and withdrawals is shared with the relevant payment service provider. These providers receive only the minimum data required to execute the transaction and are bound by their own data protection obligations.
- Identity verification service providers: KYC document data may be processed by specialist identity verification partners who assist bm999 in meeting its age verification and anti-money laundering obligations. These partners act as data processors under bm999's instruction and are contractually prohibited from using your data for any other purpose.
- Game platform providers (e.g. Evolution Gaming, Pragmatic Play, Ezugi): your player session identifier and gameplay activity may be transmitted to the third-party game engine that powers the specific game you are playing. Game providers do not receive your full personal profile — only the session data required to operate the game.
- Regulatory and law enforcement authorities: where bm999 is required by applicable law to disclose personal data to a regulator, court, or law enforcement agency, bm999 will comply with that legal obligation. bm999 will, where legally permitted to do so, notify the affected player of such a disclosure request prior to compliance.
bm999 does not sell, rent, licence, or otherwise commercially transfer any player personal data to any third party for that third party's independent commercial use. This prohibition applies regardless of the volume of data involved, the anonymisation status of the data, or the business rationale offered by any potential buyer. If bm999's ownership or control changes in the future as a result of a merger, acquisition, or sale of assets, any acquirer will be required to honour the privacy commitments in this Policy with respect to pre-existing player data, or players will be notified and given the opportunity to close their accounts before any transfer occurs.
Section 4
Cookies and Tracking Technologies
bm999 uses cookies and similar tracking technologies (collectively, "cookies") on the bm999.lat platform. Cookies are small text files placed on your device when you access the platform. bm999 uses the following categories of cookies:
- Essential cookies: these are strictly necessary for the platform to function. They maintain your login session, remember your language preference, and enable core platform features such as the game lobby, deposit flow, and account dashboard. These cookies cannot be disabled without breaking core platform functionality.
- Analytics cookies: bm999 uses anonymised session analytics to understand how players navigate the platform, which pages are most frequently visited, where technical errors occur, and how long typical sessions last. This data is aggregated and does not identify individual players. It is used solely to improve the platform.
- Security cookies: these cookies support bm999's fraud detection systems by tracking session identifiers, device fingerprints, and unusual login patterns. They do not contain personally identifiable information in readable form but enable bm999 to detect account takeover attempts and suspicious betting patterns.
You may adjust your browser settings to block or delete cookies at any time. Please note that blocking essential cookies will impair core platform functionality, including the ability to log in, maintain your session, and access games. bm999 does not currently use third-party advertising or retargeting cookies. If this changes in the future, this Policy will be updated and players will be informed.
Section 5
Data Retention and Security
bm999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Registration and account data is retained for the duration of the active account relationship and for a minimum period of five years following account closure, in order to comply with anti-money laundering record-keeping requirements. KYC documents are retained for a minimum of five years from the date of verification, or longer if required by applicable law. Transaction records are retained for a minimum of five years. Marketing consent records are retained for the period during which consent remains active plus a reasonable period thereafter to demonstrate compliance. Where you exercise your right to erasure (see Your Rights below), bm999 will delete personal data that is not subject to a legal retention obligation within a reasonable timeframe following receipt of a valid erasure request.
bm999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, access controls that restrict personal data access to authorised personnel only, regular security assessments of platform infrastructure, and incident response procedures for data security events. While bm999 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that affects your personal data, bm999 will notify you within a reasonable timeframe and take all necessary steps to mitigate the impact.
Section 6
Your Privacy Rights as a bm999 Player
As a registered bm999 player, you have the following rights with respect to the personal data bm999 holds about you. To exercise any of these rights, please contact bm999 support at [email protected] with the subject line "Privacy Rights Request". bm999 will acknowledge your request within 72 hours and respond in full within a reasonable timeframe.
- Right of access: you have the right to request a copy of the personal data bm999 holds about you, along with information about how that data is being processed. bm999 will provide this information in a clear, structured format.
- Right to rectification: if any personal data bm999 holds about you is inaccurate or incomplete, you have the right to request correction. bm999 will correct inaccurate data promptly upon receipt of a valid rectification request supported by appropriate evidence.
- Right to erasure: you may request deletion of personal data that bm999 holds about you where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. bm999 will delete qualifying data within a reasonable timeframe, subject to any legal retention obligations that override this right.
- Right to restriction of processing: in certain circumstances you may request that bm999 restrict the processing of your personal data while a dispute regarding accuracy or lawfulness is resolved, rather than deleting it outright.
- Right to object to direct marketing: you have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bm999 will immediately cease processing your data for that purpose.
To exercise any of the rights described above, send an email to [email protected] with the subject line "Privacy Rights Request". Include your registered mobile number or username so that bm999 can identify your account. bm999 may ask you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised person. There is no charge for exercising your privacy rights. bm999 will not penalise you in any way for exercising these rights — doing so will not affect your ability to use the platform.
Section 7
Additional Matters — Links, Minors, and Policy Updates
The bm999 platform may contain references to or integrations with third-party services, including game providers and payment processors. Where you interact directly with a third-party service, that service's own privacy policy governs the collection and use of your data by that third party. bm999 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party service you use in connection with the bm999 platform.
bm999 is strictly an adult platform. Players must be 21 years of age or older to register and use the bm999 platform. bm999 does not knowingly collect personal data from individuals under 21 years of age. If bm999 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed. Parents and guardians who believe their child may have accessed bm999 should contact [email protected] immediately.
bm999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via their registered contact details. Your continued use of the bm999 platform following publication of any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically so that you remain informed about how bm999 protects your personal data.