by99 Privacy Policy

1. Introduction

by99 ("we", "us", or "our") operates the online casino and sports betting platform available at https://by99.onl (the "Platform"). We are committed to protecting the privacy and personal data of all users who access, browse, register on, or use our Platform. This Privacy Policy ("Policy") explains in plain language what personal data we collect, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to it.

This Policy applies to all personal data collected through the Platform, including data submitted during account registration, during the use of our services, through customer support interactions, and through your device when you browse the Platform. By using by99, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, you should discontinue use of the Platform.

2. Data We Collect

by99 collects personal data in the following categories. We collect only the data that is necessary for the specific purpose described, and we do not collect data speculatively or in excess of what is required to deliver and secure our services.

3. How We Use Your Data

by99 uses your personal data for the following purposes. Each use is tied to a specific operational, legal, or security necessity — we do not process data beyond what is required for the stated purpose.

• To create and manage your by99 account, verify your identity, process deposits and withdrawals, and credit winnings to your account balance.
• To fulfil our legal and regulatory obligations, including anti-money-laundering (AML) compliance, KYC verification, and responsible gaming requirements.
• To detect, investigate, and prevent fraud, money laundering, abuse of bonus systems, and other prohibited conduct as described in our Terms and Conditions.
• To provide customer support, respond to enquiries, process complaints, and communicate account-related information such as transaction confirmations and security alerts.
• To send you marketing and promotional communications about by99 offers, bonuses, and seasonal promotions — only where you have provided consent or where we have a legitimate interest and you have not opted out.
• To analyse usage patterns, improve Platform performance, personalise your experience, and develop new features and services that better serve Bangladeshi players.

by99 does not use automated decision-making that produces legal or similarly significant effects on you without human review. Where by99's systems flag an account for fraud or compliance review, a member of our team will review the case before any consequential action is taken.

4. Legal Basis for Processing

by99 processes your personal data under the following legal bases. Each processing activity is mapped to at least one of these bases, and we will not process your data without a valid legal justification.

• Contract performance: processing necessary to open and manage your account, process transactions, and provide the betting and casino services you have requested.
• Legal obligation: processing required to comply with applicable laws, including AML regulations, KYC requirements, tax reporting obligations, and law enforcement requests.
• Legitimate interests: processing for fraud prevention, platform security, abuse detection, and service improvement where these interests are not overridden by your rights and freedoms.
• Consent: processing for marketing communications and non-essential cookies, where you have given specific, informed, and freely given consent that you may withdraw at any time.

5. Sharing Your Data

by99 does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations.

• Payment processors and financial institutions (such as bKash, Nagad, and bank transfer partners) to the extent necessary to process your deposits and withdrawals securely.
• Game technology providers (such as Evolution Gaming, Pragmatic Play, and Spribe) to the extent that they need account identifiers to deliver the games you play and record outcomes correctly.
• Fraud prevention and identity verification service providers who assist by99 in verifying player identities and detecting suspicious activity, operating under strict data processing agreements.
• Regulatory authorities, law enforcement agencies, and courts where by99 is required by law to disclose information, including in response to court orders, regulatory investigations, or anti-money-laundering reporting obligations.

6. Cookies and Tracking Technologies

by99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session while logged in, and analyse how the Platform is used so we can improve it. The following types of cookies are used on by99.

• Essential cookies: strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your language preference. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies: used to understand how players navigate the Platform, which features are most used, and where technical issues occur. This data is aggregated and anonymised and is used solely to improve the Platform experience.
• Preference cookies: used to remember your settings and choices such as language selection, responsible gaming tool configurations, and notification preferences so you do not need to re-enter them on each visit.

You can manage your cookie preferences through your device or browser settings. Please note that disabling essential cookies will prevent you from logging in and using key Platform features. by99 does not use third-party advertising cookies and does not share cookie data with advertising networks.

7. Data Security

by99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes SSL/TLS encryption for all data in transit between your device and our servers; secure encrypted storage for all personal data held at rest; access controls that restrict data access to by99 personnel who need it to perform their role; regular security audits and vulnerability assessments; and real-time monitoring for suspicious access patterns and anomalous account activity.

While by99 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security against all possible threats. If you believe your by99 account has been compromised, you should change your password immediately and contact our support team at [email protected]. In the event of a data breach that is likely to result in a risk to your rights and freedoms, by99 will notify affected users as required by applicable law.

8. Data Retention

by99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy our legal, accounting, and reporting obligations. The specific retention periods we apply are as follows: account data is retained for the duration of your account relationship with by99 and for a period of five (5) years following account closure, to comply with AML and financial record-keeping requirements; transaction records are retained for seven (7) years to satisfy applicable financial regulatory requirements; KYC verification documents are retained for five (5) years following the end of the customer relationship; customer support correspondence is retained for two (2) years.

Where by99 has obtained your consent for marketing communications, we will retain your contact data for this purpose until you withdraw your consent. You may withdraw consent for marketing at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email we send you. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew consent.

9. Your Privacy Rights

As a by99 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within a reasonable timeframe and at no charge to you, unless your request is manifestly unfounded or excessive.

• Right of Access — You may request a copy of the personal data by99 holds about you, including information about how it is being used and with whom it has been shared.
• Right of Rectification — You may request that by99 corrects any inaccurate or incomplete personal data held about you. You can update basic account details directly from within your account settings.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to by99's legal retention obligations. Where legal obligations require us to retain certain data, we will inform you of this at the time of your request.
• Right to Restriction — You may request that by99 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests.
• Right to Object — You may object to by99's processing of your personal data where it is based on legitimate interests. You also have the right to object to processing for direct marketing purposes at any time, and by99 will cease such processing upon receipt of a valid objection.
• Right to Data Portability — Where processing is based on your consent or on contract performance, you may request that by99 provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

by99 will not discriminate against you for exercising any of these rights. If you are unsatisfied with by99's response to a data request, you have the right to escalate your complaint through applicable channels. To initiate a rights request, email [email protected] with the subject line "Data Rights Request" and a brief description of your request.

10. Children and Minors

If by99 becomes aware that it has inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has created a by99 account or provided personal data to us, please contact [email protected] immediately so that we can take appropriate action.

11. Third-Party Links and Services

The by99 Platform may reference or integrate third-party services such as game providers and payment processors. These third parties operate under their own privacy policies, and by99 is not responsible for the privacy practices of third-party services. Where by99 shares data with third-party processors, we do so under data processing agreements that require them to handle your data securely and in accordance with applicable law. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of by99.

12. Changes to This Privacy Policy

by99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will post the revised Policy on this page with an updated effective date and, where appropriate, notify you via the email address registered on your account. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of a revised Policy constitutes your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how by99 handles your personal data, please contact our support team. We are committed to addressing all privacy enquiries promptly and transparently. Support is available 24/7 in Bangladesh Standard Time (BST, UTC+6).

When contacting us about a data rights request, please include your registered username and a clear description of your request so we can process it efficiently.