ba992 Privacy Policy — How We Handle Your Data

ba992 ("we", "us", "our") operates the online betting and casino platform at ba992.club and is the data controller responsible for the personal information collected through this platform. This Privacy Policy describes the categories of personal data we collect from users in Bangladesh, the purposes for which that data is processed, and the rights available to you as a data subject. By registering for or using ba992, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside ba992's Terms and Conditions, which govern your use of the platform generally. In the event of any conflict between this Privacy Policy and the Terms and Conditions in relation to data processing matters, this Privacy Policy shall take precedence. We may update this Privacy Policy from time to time. The most current version will always be published at this URL with a revised "Last Updated" date.

ba992 collects personal data in the following categories. We collect only the data that is reasonably necessary to operate the platform, comply with applicable legal obligations, and deliver the services you have requested.

ba992 uses the personal data described above for the following purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law:

• To create and manage your ba992 account and verify your identity and age eligibility.
• To process deposits and withdrawals and maintain accurate financial records in BDT.
• To detect, investigate and prevent fraud, money laundering, and prohibited conduct as defined in our Terms and Conditions.
• To communicate with you regarding your account, including transaction confirmations, security alerts and support responses.
• To send promotional communications about bonuses, seasonal offers and platform updates, where you have not opted out of such communications.
• To comply with applicable legal, regulatory and reporting obligations, including anti-money laundering (AML) requirements.

ba992 does not use your personal data to create profiles for sale to third-party advertisers, and does not engage in algorithmic profiling for purposes unrelated to platform security and fraud detection.

ba992 processes your personal data on the following legal grounds depending on the nature of the processing activity:

ba992 does not sell, rent or trade your personal data. We share your personal data only in the following limited circumstances: with certified payment processing partners (including providers that facilitate bKash, Nagad, Rocket and card payments) for the sole purpose of processing your deposit and withdrawal transactions; with identity verification service providers for the purpose of conducting KYC checks; and with our technical infrastructure providers who support the operation of the ba992 platform under strict data processing agreements.

ba992 may also disclose your personal data to law enforcement or regulatory authorities where required to do so by applicable law, court order, or in connection with the investigation or prevention of fraud, money laundering or other criminal activity. In all such cases, ba992 will disclose only the minimum data necessary to satisfy the applicable legal requirement.

ba992 does not store full payment card numbers on our servers. Card payment transactions are handled entirely by our certified PCI-DSS compliant payment processor partners. When you make a deposit using bKash, Nagad or Rocket, ba992 receives a transaction reference and confirmation but does not receive or store your full mobile banking credentials or PIN.

All BDT transactions processed through ba992 are recorded in our internal ledger for financial compliance purposes. These records identify you by your account identifier and the transaction details (amount, date, payment method) but do not include your full payment card number, bKash PIN, Nagad PIN, or Rocket PIN. Financial records are retained for the minimum period required under applicable regulations and are then securely deleted.

ba992 uses cookies and similar tracking technologies to operate the platform, maintain session security, and gather anonymous analytical data about platform usage. The cookies we set fall into two categories: essential session cookies, which are required for the platform to function and cannot be disabled; and analytical cookies, which help us understand how users navigate the platform so we can improve it. We do not set advertising or retargeting cookies, and we do not permit third-party advertising networks to set cookies on ba992.

You may manage cookie preferences through your browser settings. Please note that disabling essential session cookies will prevent you from logging into your ba992 account and using the platform. ba992 does not respond to browser "Do Not Track" signals at this time, as there is no industry-standard approach to responding to such signals that ba992 considers adequate for the purposes of this policy.

ba992 retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law or necessary to protect ba992's legitimate legal interests. Account data and transaction records are retained for a minimum of five years from the date of the last transaction on your account to comply with standard financial record-keeping requirements. KYC identity documents are retained for the same minimum period.

If you request deletion of your ba992 account, ba992 will deactivate your account promptly. However, certain data categories (including transaction records and KYC documentation) will be retained for the legally required minimum period even after account deactivation, after which they will be permanently and securely deleted from our systems. Technical usage logs are retained for a rolling 12-month period and then automatically purged.

As a user of ba992, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ba992 support at the email address provided at the end of this policy. ba992 will respond to all valid requests within 30 days of receipt:

• The right to access a copy of the personal data ba992 holds about you.
• The right to request correction of any inaccurate or incomplete personal data held about you.
• The right to request deletion of your personal data, subject to ba992's legal retention obligations.
• The right to object to processing of your personal data for direct marketing purposes. You may opt out of promotional emails or SMS at any time.
• The right to request restriction of processing in circumstances where you contest the accuracy of your data or object to processing on grounds of legitimate interests.

ba992 may need to verify your identity before processing a data rights request. This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it. We will not charge a fee for processing valid data rights requests except in cases where requests are manifestly unfounded or excessive, in which case ba992 reserves the right to charge a reasonable administrative fee.

ba992 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include SSL/TLS encryption of all data in transit between your device and our servers, encrypted storage of sensitive account data at rest, strict access controls limiting internal access to personal data on a need-to-know basis, regular security reviews of our platform infrastructure, and two-factor authentication options available to all account holders.

While ba992 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, ba992 will notify affected users without undue delay and will take all appropriate remedial action. You are also responsible for maintaining the security of your own account credentials — do not share your ba992 password with anyone.

ba992 is strictly for adults aged 21 and above. ba992 does not knowingly collect or process personal data belonging to any person under the age of 21. If ba992 discovers or has reason to believe that personal data has been provided by or collected from a person under the age of 21, ba992 will immediately suspend the associated account, delete all personal data related to that account to the extent permitted by law, and report the matter to the relevant authorities where required. If you believe a minor has created a ba992 account, please contact our support team immediately at [email protected].

ba992 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised. Where the changes are significant, ba992 may also notify registered users via the contact details held on their account. Your continued use of the ba992 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you must stop using the platform and may request account closure.

If you have any questions, concerns or requests regarding this Privacy Policy or the way ba992 handles your personal data, please contact our support team. Our data support staff are available seven days a week, 24 hours a day, including during public holidays in Bangladesh such as Eid, Victory Day (December 16) and Independence Day (March 26).

Email: [email protected]