Privacy Policy

1. Data We Collect

bk99vip collects personal data only to the extent necessary to provide a safe, compliant, and high-quality gaming experience. The categories of personal data we collect are described below.

Registration Data

When you create a bk99vip account, we collect the information you provide directly, including:

• Full legal name — used to verify your identity and process withdrawals.
• Date of birth — used to confirm that you are 18 years of age or older.
• Email address — used for account notifications, password recovery, and promotional communications (where you have opted in).
• Mobile phone number — a Bangladesh-registered number used for account security and deposit/withdrawal confirmation via bKash, Nagad, or Rocket.
• Residential address — collected at the KYC verification stage and used for identity confirmation purposes only.
• Username and password — your chosen login credentials, stored in hashed format. We never store your password in plain text.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of the following documents before processing your first withdrawal or if your account is flagged for review:

• National Identity Card (NID), valid passport, or government-issued photo identification.
• Proof of residential address such as a utility bill, bank statement, or official correspondence dated within the last three months.
• Confirmation of payment method ownership — for example, a screenshot of your bKash or Nagad account showing your registered name and number.

KYC documents are stored securely and used solely for identity verification and anti-money laundering (AML) compliance. They are not used for any marketing or profiling purpose.

Transaction Data

We record all financial transactions associated with your bk99vip account, including deposit amounts, withdrawal requests, payment methods used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction timestamps, and any bonus funds credited or wagered. This data is retained as part of our financial audit trail.

Technical and Usage Data

When you access bk99vip, our servers automatically collect certain technical information, including:

• IP address and approximate geolocation (country/city level).
• Device type, operating system, and browser version.
• Pages visited, session duration, click paths, and game activity logs.
• Referral source (how you arrived at the bk99vip website).

This technical data is used for platform performance monitoring, fraud detection, and improving the user experience. It is not used to identify you individually unless a security investigation requires it.

Communication Data

If you contact our support team via email or live chat, we retain records of those communications, including the content of messages and any attachments you send. This data is used to resolve your query and to maintain a service history for your account.

2. How We Use Your Data

bk99vip processes personal data on the basis of contractual necessity, legal obligation, and legitimate interest, depending on the specific use case. The table below summarises our primary data processing activities:

bk99vip does not use your personal data for automated profiling that produces legal or similarly significant effects. Our responsible gaming monitoring flags accounts for human review — it does not automatically restrict or close accounts without staff oversight.

If you have opted in to receive promotional communications, you may withdraw your consent at any time by contacting support@bk99vip (plain text) or by following the unsubscribe instructions in any promotional email. Opting out of marketing communications does not affect your ability to use the bk99vip Service.

3. Cookies & Tracking Technologies

bk99vip uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how the Service is used. A cookie is a small text file placed on your device by your browser when you visit a website.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the bk99vip platform to operate. They enable you to log in, maintain your session, and navigate between pages securely. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language setting, display options, and notification preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: We use anonymised analytics tools to understand how players interact with the bk99vip platform — for example, which game categories are most visited, where users drop off in the registration flow, and how long sessions last. This data is aggregated and cannot identify individual users.
• Security cookies: These cookies help us detect and prevent fraudulent activity, bot traffic, and other security threats by monitoring behavioural patterns during your session.

Managing Cookies

You can control cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the bk99vip platform. Blocking strictly necessary cookies will prevent you from logging in or completing transactions. Blocking analytics cookies will not affect your ability to use the Service.

bk99vip does not use third-party advertising cookies or retargeting pixels. We do not track your activity across other websites.

4. Data Sharing & Third Parties

bk99vip does not sell or rent your personal data to any third party. We share your information only in the following limited and clearly defined circumstances:

Payment Processors

To process your deposits and withdrawals, we share the minimum necessary transaction data with our payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card networks Visa and Mastercard. These partners process your data solely to complete the financial transaction and are bound by their own privacy and security obligations.

Game Studio Providers

Live casino and slot games on bk99vip are delivered by licensed third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive a session token and anonymised player ID to serve game content. They do not receive your full name, email address, or payment details.

Legal and Regulatory Disclosure

bk99vip may disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, a court order, or a legitimate legal process. We will notify you of such disclosures where permitted by law.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of the bk99vip business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

5. Data Retention

bk99vip retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. The general retention schedule is as follows:

• Account and registration data: Retained for the duration of your account plus five years after account closure, to satisfy financial audit and anti-money laundering record-keeping requirements.
• KYC documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for seven years from the date of each transaction in accordance with standard financial record-keeping practice.
• Communication records (support tickets, live chat logs): Retained for three years from the date of the last communication in the thread.
• Technical and usage logs: Retained in identifiable form for up to 12 months, then anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent and for one year thereafter as evidence of the consent having been obtained.

When data reaches the end of its retention period, it is securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to your identity. If you request deletion of your account before the retention period expires, we will anonymise all non-legally-required data immediately and delete the remainder at the end of the applicable retention window.

6. Your Privacy Rights

As a user of the bk99vip platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at support@bk99vip (plain text) with the subject line "Privacy Request — [Right Type]". We will acknowledge your request within two business days and respond in full within five business days (Bangladesh Standard Time, UTC+6).

• Right of Access: You may request a copy of all personal data bk99vip holds about you, along with information about how it is processed and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Some corrections may require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for its original purpose, where you have withdrawn consent (and no other legal basis applies), or where it has been processed unlawfully. This right is subject to our legal data retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data — for example, while a rectification request is being assessed or while you contest the accuracy of data we hold.
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you have provided to bk99vip, which you can then transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where it is carried out on the basis of legitimate interest — particularly in the context of direct marketing and profiling for responsible gaming purposes.
• Right to Withdraw Consent: Where processing is based on your consent (such as for promotional email communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Data Security

bk99vip takes the security of your personal data seriously and implements a multi-layered set of technical and organisational controls designed to protect against unauthorised access, disclosure, alteration, or destruction.

Technical Controls

• Transport encryption: All data in transit is encrypted using TLS 1.3 with 256-bit AES encryption. Older, insecure protocol versions are blocked at the server level.
• Password hashing: User passwords are stored using a modern, salted hashing algorithm. Plain-text passwords are never stored or transmitted.
• Firewall and DDoS protection: Our servers sit behind enterprise-grade firewalls and distributed denial-of-service (DDoS) mitigation systems.
• Intrusion detection: Automated systems monitor for unusual access patterns, brute-force login attempts, and other indicators of compromise around the clock.
• Data at rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.

Organisational Controls

• Access to personal data within the bk99vip organisation is restricted on a strict need-to-know basis. Staff do not have blanket access to the full user database.
• All personnel with access to personal data undergo privacy and security training as part of their onboarding and at least annually thereafter.
• We conduct regular internal security reviews and periodic independent security assessments of our platform and data-handling procedures.

In the Event of a Data Breach

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bk99vip will notify affected users without undue delay and will take immediate steps to contain, investigate, and remediate the breach. Notification will be sent to the email address registered on your account.

If you believe that your bk99vip account has been compromised or that your personal data has been accessed without authorisation, please contact us immediately at support@bk99vip (plain text). Do not share your account credentials with anyone, including bk99vip support staff — we will never ask for your password.

8. Policy Updates & Contact

bk99vip may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features available on the platform. The most current version of this policy will always be published at /privacy-policy with the effective date of the latest revision clearly displayed at the top.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect or use your personal data — we will notify registered users by email to the address on file at least seven days before the changes take effect. Continued use of the bk99vip Service after the effective date of any revision constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bk99vip handles your personal data, please contact our privacy team at support@bk99vip (plain text). Include "Privacy Enquiry" in the subject line so your message reaches the right team. We aim to respond to all privacy-related enquiries within five business days (Bangladesh Standard Time, UTC+6).