Privacy Policy

bja999 collects personal data from you in several ways: directly when you register an account or complete identity verification, automatically when you use the platform, and occasionally from trusted third-party sources such as payment providers. Below is a structured overview of the categories of data we collect and the context in which each category arises.

bja999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless this is strictly required to fulfil a legal obligation (for example, processing a problem gambling self-exclusion that references a health condition). Where such data is provided voluntarily by a player in a support context, it will be treated with the highest level of care and will not be used for any purpose other than delivering the support requested.

We do not collect personal data from individuals we know to be under 18 years of age. If we become aware that an account was registered by a person under 18, we will close the account, delete or anonymise the associated data as far as legally permissible, and take appropriate action consistent with our age verification obligations.

bja999 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases on which we rely are: (a) performance of a contract — processing your data to provide the bja999 service you have signed up for; (b) legal obligation — processing required to comply with applicable laws, including KYC and AML obligations; (c) legitimate interests — processing that is necessary for bja999's legitimate business interests where those interests are not overridden by your rights; and (d) consent — where you have freely given specific, informed consent for a particular processing activity, such as receiving promotional communications.

The specific purposes for which bja999 uses your personal data are as follows:

• Account creation and management: To register your bja999 account, verify your identity, maintain your account profile, and communicate with you about your account status.
• Service delivery: To allow you to place bets, play games, make deposits and withdrawals, claim bonuses, and access all features of the bja999 platform.
• Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) and to maintain transaction records as required by law.
• Identity verification (KYC): To verify that you are who you say you are, that you meet the 18+ age requirement, and that your payment method belongs to you. KYC is a legal requirement that bja999 cannot waive.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, collusion, money laundering, bonus abuse, and other prohibited activities on the platform.
• Responsible gaming: To monitor player activity for signs of problem gambling, to apply deposit limits, time-outs, or self-exclusions that you request, and to flag accounts for responsible gaming intervention where our internal criteria indicate elevated risk.
• Legal and regulatory compliance: To fulfil our obligations under applicable AML legislation, to respond to court orders or regulatory requests, and to maintain records as required by law.
• Platform improvement: To analyse aggregate usage data in order to improve the design, performance, and content of the bja999 platform. This analysis is performed on anonymised or pseudonymised data where possible.
• Customer support: To respond to your queries, complaints, and feedback, and to maintain records of customer support interactions for quality assurance purposes.
• Marketing communications (with consent): To send you promotional offers, bonus announcements, and seasonal promotions (such as BPL, IPL, T20 World Cup season, Eid, or Pohela Boishakh offers) if you have opted in to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.

bja999 does not use automated decision-making or profiling that produces legal or similarly significant effects on individual players, except where strictly required to fulfil legal obligations (for example, automated screening against watchlists as part of AML compliance). Where such processing is used, you have the right to request human review of the automated decision.

bja999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: We share necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) to process your deposits and withdrawals. Each provider operates under its own privacy policy and is independently responsible for data it collects during payment processing.
• Identity verification providers: We may use third-party KYC and identity verification services to verify your age, identity, and address. These providers receive only the minimum data necessary to perform the verification and are contractually prohibited from using your data for any other purpose.
• Game technology providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session data (e.g., a player session token, game result data) in order to deliver their games on the bja999 platform. These providers do not receive your name, contact details, or financial information.
• IT and infrastructure providers: bja999 uses third-party hosting, cloud infrastructure, security, and analytics services. These providers act as data processors on bja999's behalf and are bound by contractual data processing agreements that restrict them to processing data only on our documented instructions.
• Legal and regulatory authorities: bja999 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of bja999, our players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of bja999's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer via their registered email address in advance of the transfer taking effect.

Where bja999 transfers personal data to third parties located outside Bangladesh, we ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to protect your data to a standard equivalent to that required under applicable Bangladeshi and international data protection principles.

bja999 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform, maintain your login session, prevent fraud, and understand aggregate usage patterns. Cookies are small text files placed on your device by your browser when you visit bja999.net.

We use the following categories of cookies:

bja999 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookies designed to build a behavioural profile of you for advertising purposes. The analytics data we collect is used exclusively for internal platform improvement purposes.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies entirely. Please note that disabling strictly necessary or security cookies may prevent you from logging in or using key features of the bja999 platform. bja999 is not responsible for any degradation of service resulting from browser-level cookie restrictions applied by the user.

bja999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• TLS/SSL encryption: All data transmitted between your browser and bja999's servers is encrypted using Transport Layer Security (TLS). This applies to all pages of the platform, including login, deposit, withdrawal, and account management pages.
• Encrypted data storage: Sensitive data fields — including passwords (stored as salted cryptographic hashes), payment credentials, and identity document references — are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to player personal data within bja999's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum data access required to perform their role.
• Two-factor authentication (2FA): bja999 offers two-factor authentication for player accounts as an additional security layer. Players are strongly encouraged to enable 2FA via their account security settings.
• Intrusion detection and monitoring: bja999's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and security incidents. Alerts are reviewed by a dedicated security team.
• Penetration testing: bja999 commissions periodic security audits and penetration tests from qualified third-party security professionals to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected players, bja999 will notify affected individuals via their registered email address within a reasonable timeframe, together with guidance on protective steps they can take.

While bja999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure. Please use a strong, unique password for your bja999 account, enable 2FA, never share your login credentials with anyone, and contact support immediately at [email protected] if you suspect unauthorised access to your account.

bja999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data (identity, contact, KYC documents): Retained for the duration of your active account relationship with bja999, plus a minimum of 5 years following account closure. This extended retention period is required to comply with AML record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping requirements.
• Customer support communications: Retained for 2 years from the date of the most recent communication in a support thread, or longer where a dispute remains unresolved.
• Technical and usage data (server logs, session data): Retained for up to 12 months for security and fraud detection purposes, after which it is aggregated or deleted.
• Marketing consent records: Retained for the duration of your marketing opt-in, plus 2 years following opt-out, as evidence of the consent lifecycle.
• Responsible gaming records (self-exclusion, deposit limits): Retained indefinitely to prevent the re-registration of self-excluded players and to meet player protection obligations.

At the end of the applicable retention period, personal data is securely deleted from bja999's live systems or, where deletion is not technically feasible, anonymised such that it can no longer be associated with any individual player. Anonymised aggregate data may be retained indefinitely for internal analytical and reporting purposes.

Players who close their accounts voluntarily may request confirmation that their data has been deleted or anonymised following the expiry of the applicable mandatory retention period. Such requests should be submitted to [email protected].

bja999 respects your rights in relation to your personal data. Subject to applicable legal limitations and verification of your identity, you have the following rights regarding the personal data bja999 holds about you:

• Right of access: You have the right to request a copy of the personal data bja999 holds about you, together with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data bja999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your contact email or address) directly within your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing. This right is subject to our legal retention obligations — data that we are required to retain by law cannot be deleted on request until the mandatory retention period expires.
• Right to restriction: You have the right to request that bja999 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed, or while you contest the lawfulness of our processing.
• Right to object: You have the right to object to bja999 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. If you object to marketing, we will cease sending promotional communications immediately.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where bja999 processes your personal data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact bja999's privacy team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and will respond within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

bja999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the features and services we offer. Any updates will be published on this page at bja999.net/privacy-policy with a revised effective date. Where changes are material — meaning they significantly affect how we use your personal data or reduce your rights — we will provide advance notice via the email address registered to your bja999 account, allowing you a reasonable period to review the changes before they take effect.

Continued use of the bja999 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any change to this Privacy Policy, you should cease using the platform and may request account closure by contacting support.

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all personal data collected by bja999 from players accessing the platform from Bangladesh and all other locations from which access is permitted.

Contact details for privacy-related enquiries:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support hours: 24 hours a day, 7 days a week (English-language support)
• Response time: We aim to acknowledge all privacy enquiries within 24 hours and resolve them within 10 business days.