Privacy Policy

iCategories of Data Collected

1Account Registration and Management

We use identity and contact data to create and manage your bec999 account, verify your eligibility to participate (including confirming you are aged 21 or above), and maintain accurate account records. This processing is necessary to perform the contract between you and bec999.

2Identity Verification and KYC Compliance

bec999 is required to verify the identity of all registered players before processing withdrawal requests above certain thresholds. We collect and process identity documents solely for the purpose of satisfying our Know Your Customer (KYC) obligations and preventing fraudulent account activity. Verified documents are stored securely and are not used for any other purpose.

3Payment Processing and Financial Transactions

Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banking channels in Bangladesh. We apply the same-source rule to all withdrawals and retain transaction records to comply with anti-money laundering (AML) obligations. We do not store full payment credentials on our own servers — sensitive payment data is handled directly by our certified payment processing partners.

4Security, Fraud Detection, and AML Monitoring

Technical data, financial data, and gaming activity data are continuously analysed to detect and prevent fraudulent behaviour, money laundering, account takeovers, and other security threats. Where suspicious activity is identified, we may be required by law to report it to the relevant financial intelligence authorities without prior notification to the account holder.

5Customer Support and Dispute Resolution

Communications data is retained to enable our support team to assist you effectively and to resolve any disputes that arise concerning your account, transactions, or game results. Support records are typically retained for a minimum of two years from the date of the interaction.

6Responsible Gaming Monitoring

Gaming activity data is used to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, bec999 may proactively reach out to offer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion. This processing is carried out in the legitimate interests of player welfare. For more information, please visit our Responsible Gaming page.

7Platform Improvement and Analytics

We use aggregated and anonymised technical and gaming activity data to analyse platform performance, identify usability improvements, and develop new features. This analysis does not identify individual users and is conducted purely to enhance the bec999 platform experience for all players.

8Marketing and Promotional Communications

With your consent, we may use your contact data to send you information about promotions, bonuses, seasonal offers (such as Eid, Pohela Boishakh, or IPL / BPL season specials), and platform updates. You may withdraw your consent to marketing communications at any time by contacting our support team or updating your account preferences. Withdrawal of marketing consent does not affect your ability to continue using the bec999 platform.

APayment Service Providers

We share financial data with certified payment processing partners (including bKash, Nagad, Rocket, Upay, and partner banks) solely to process your deposits and withdrawals. These partners are contractually bound to use your data only for transaction processing and to maintain security standards consistent with industry best practice.

BGame Technology Providers

Certain technical session data is shared with our certified game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to facilitate game delivery, maintain RNG integrity, and resolve game-related disputes. Game providers receive only the minimum data necessary to deliver their services.

CLegal and Regulatory Authorities

bec999 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities when required to do so by applicable law, court order, or other binding legal process. We will make reasonable efforts to notify you of such disclosures where legally permitted to do so.

DFraud Prevention and Security Partners

We may share technical data and account activity data with specialist fraud prevention and cybersecurity service providers who assist us in identifying and responding to security threats. All such providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond fraud prevention.

IHow Long We Retain Your Data

bec999 retains personal data for as long as your account remains active and for a period thereafter as required to comply with applicable legal, regulatory, and AML obligations. In practice, this means:

• Account and identity data: retained for a minimum of 5 years following account closure.
• Financial transaction records: retained for a minimum of 5 years from the date of the transaction.
• Support and communications records: retained for a minimum of 2 years from the date of the last interaction.
• Technical and log data: retained for up to 12 months, after which it is anonymised or deleted.

IIYour Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by bec999:

• Right of access: Request a copy of the personal data bec999 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction: Request that bec999 restricts its processing of your personal data in certain circumstances (e.g., while a rectification request is being assessed).
• Right to object: Object to the processing of your personal data where bec999 relies on legitimate interests as its legal basis.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days. In some cases, we may need to verify your identity before processing a data rights request.

IIIData Security

bec999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a strictly need-to-know basis, regular security audits and penetration testing, and multi-factor authentication for all administrative platform access. In the event of a data breach that poses a significant risk to your rights or interests, bec999 will notify affected users without undue delay.