bod99 Privacy Policy — Your Data, Your Rights

Last updated: January 2026

At bod99, we take the privacy and security of your personal data seriously. This Privacy Policy applies to all players who register an account on the bod99 platform, visit the bod99 website, or interact with any of our services. By registering an account or using the bod99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between bod99 and its registered players. If you do not agree with any part of this Privacy Policy, you should not use the bod99 platform. We may update this Policy from time to time; where updates are material, we will notify you via the platform or your registered contact details.

1. Information We Collect

bod99 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect are set out below.

• Full legal name, date of birth, and gender — used for identity verification and age compliance.
• Mobile phone number and email address — used for account communication, OTP verification, and support.
• Residential address — collected as part of the KYC verification process for players who request withdrawals above defined thresholds.
• Government-issued identification documents (National ID, passport, or similar) — collected when KYC verification is required.

• Mobile financial service account identifiers (such as bKash or Nagad account numbers) used for deposits and withdrawals — retained for fraud prevention and audit purposes.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used — retained in accordance with anti-money laundering obligations.
• Bonus and promotional activity records — retained to prevent bonus abuse and to verify wagering requirement compliance.

• IP address, device type, operating system, and browser information — collected automatically when you access the bod99 platform and used for security monitoring and fraud detection.
• Session logs including login timestamps, session duration, and pages visited — used for security auditing and to improve the player experience.
• Gameplay history including games played, stakes placed, outcomes, and session timing — retained for player account management, responsible gaming monitoring, and dispute resolution.

3. Legal Basis for Processing

bod99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity.

• Contractual necessity — processing required to perform the contract between bod99 and the player, including account management, payment processing, and gameplay provision.
• Legal obligation — processing required to comply with anti-money laundering legislation, age verification requirements, tax reporting obligations, and any other applicable legal or regulatory requirements.
• Legitimate interests — processing conducted for fraud prevention, security monitoring, platform analytics, and responsible gaming purposes, where these interests are not overridden by your rights as a data subject.
• Consent — processing conducted for direct marketing communications, where you have given explicit prior consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Payment Data and Financial Privacy

bod99 processes all financial transactions in Bangladeshi Taka via mobile financial services including bKash, Nagad, Rocket, and Upay. Payment data is processed using secure, encrypted channels. bod99 does not store full payment account credentials on its own servers; only the transaction reference identifiers necessary for deposit reconciliation, withdrawal processing, and audit trails are retained.

Transaction records are retained for a minimum period consistent with our anti-money laundering and financial crime prevention obligations. Access to transaction records is restricted to authorised personnel only, and all access is logged for audit purposes.

7. Data Retention

bod99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general principles govern our data retention practices: account data is retained for the duration of the active account and for a period of up to five years following account closure, in line with financial record-keeping obligations. Transaction records are retained for a minimum of five years to satisfy anti-money laundering and audit requirements. KYC documentation is retained for the same minimum period following the end of the business relationship.

Where data is no longer required for operational, legal, or compliance purposes, bod99 will securely delete or anonymise it. Anonymised and aggregated data (from which individual users cannot be identified) may be retained indefinitely for statistical and analytical purposes.

9. Your Data Rights

As a registered player on the bod99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the bod99 support team using the contact details provided at the end of this Policy.

• Right of access — you may request a copy of the personal data that bod99 holds about you. We will respond to verified access requests within a reasonable timeframe.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Where a correction would affect identity or KYC-verified data, additional verification may be required.
• Right to erasure — you may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected. This right is subject to bod99's legal retention obligations, which may require certain data to be retained for a defined period even following account closure.
• Right to restrict processing — you may request that bod99 restricts the processing of your personal data in certain circumstances, such as where you contest its accuracy or where processing is unlawful but you do not wish the data to be deleted.
• Right to withdraw consent — where processing is based on consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

bod99 aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension within the initial response period.

11. Third-Party Links

The bod99 platform may contain links to third-party websites or services, including the websites of game providers and payment partners. bod99 is not responsible for the privacy practices of these third parties. We recommend that you review the privacy policies of any third-party service you access via the bod99 platform. This Privacy Policy applies solely to data collected and processed by bod99 and does not extend to data collected by any third party.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the bod99 support team. Our support team is available 24 hours a day, 7 days a week. You can reach us via the live chat function in your account dashboard or by emailing [email protected]. Please include your registered username and a clear description of your query so that we can assist you efficiently.

Email (plain text — not a link): [email protected]. Please do not send sensitive personal data such as passwords or full payment account numbers via email.