brv99 Privacy Policy
Your Data, Your Rights

1 Introduction & Scope

This Privacy Policy ("Policy") explains how brv99 ("brv99", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player") who access or use the brv99 online betting and casino platform at brv99.io and any associated web or mobile applications (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of the Platform, including data provided during registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications. It applies equally to Players located anywhere brv99 services are accessed, with particular relevance to players in Bangladesh.

By creating a brv99 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not accept the terms of this Policy, you must not use the Platform.

2 Data Controller Information

brv99 acts as the data controller in respect of the personal information collected and processed through the Platform. As data controller, brv99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our dedicated privacy support team using the details provided in Section 15 of this Policy. All privacy-related enquiries are handled by trained staff with experience in data protection matters affecting Bangladeshi players.

3 Data We Collect

brv99 collects personal data across several categories depending on your level of interaction with the Platform. The categories of data we may collect include, but are not limited to, the following:

Category	Examples of Data Collected	Purpose
Identity Data	Full name, date of birth, nationality, National ID number, passport number	Registration, KYC, age verification
Contact Data	Email address, phone number, residential address (city, district)	Account communication, support, notifications
Financial Data	bKash/Nagad/Rocket account reference, bank account reference, deposit and withdrawal history	Payment processing, fraud prevention, AML compliance
KYC Documents	Scanned/photographed ID documents, proof of address, selfie images	Identity verification, regulatory compliance
Gameplay Data	Bet history, wager amounts, game sessions, win/loss records, betting patterns	Service delivery, responsible gaming, fraud detection
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Security, fraud prevention, platform optimisation
Usage Data	Pages visited, features used, clicks, time on page, navigation paths	Platform improvement, personalisation
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, quality assurance, dispute resolution
Marketing Preferences	Opt-in/opt-out status for promotional emails and notifications	Delivering marketing communications with consent

4 How We Collect Your Data

brv99 collects personal data through the following channels and methods:

• Direct submission: Data you actively provide when creating an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access or interact with the Platform, including through cookies, log files, and analytics tools.
• Payment partners: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other integrated payment providers when you initiate a deposit or withdrawal.
• Identity verification services: Data returned by KYC and document verification partners used to confirm the authenticity of submitted identity documents.
• Fraud prevention and AML screening: Data from industry-standard anti-fraud and anti-money-laundering screening databases used to protect the integrity of the Platform.

5 Legal Bases for Processing

brv99 processes your personal data on one or more of the following legal bases, depending on the specific purpose and type of data involved:

• Contractual necessity: Processing required to fulfil our contractual obligations to you, including account creation, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) obligations, age verification requirements, and regulatory record-keeping.
• Legitimate interests: Processing necessary for the legitimate interests of brv99, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without detriment to your account status.

6 How We Use Your Data

brv99 uses the personal data collected for the following specific purposes:

• To create, maintain, and manage your brv99 Account, including login authentication and account security
• To verify your identity and age in accordance with our 21+ policy and KYC obligations
• To process deposits and withdrawals via your registered payment methods (bKash, Nagad, Rocket, Upay, and bank transfers)
• To deliver gaming services, calculate odds, settle bets, and maintain accurate bet history records
• To detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct
• To monitor gameplay patterns in support of our responsible gaming programme, including identifying signs of problem gambling
• To respond to customer support queries, complaints, and dispute resolution requests
• To send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts
• To send you promotional communications about brv99 offers, if you have provided marketing consent
• To analyse Platform usage and improve our products, services, and user experience for Bangladeshi players
• To comply with applicable legal and regulatory obligations, including maintaining records for AML purposes

7 Cookies & Tracking Technologies

brv99 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather usage analytics. A cookie is a small text file placed on your device by the Platform when you visit. The types of cookies used by brv99 include:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security tokens. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how Players navigate the Platform, which pages are most visited, and where users encounter difficulties. This data is aggregated and anonymised where possible.
• Preference cookies: Store your Platform preferences such as language settings and interface configurations to personalise your experience across sessions.
• Security cookies: Support fraud detection systems by identifying unusual login patterns, device changes, and suspicious session behaviour.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair Platform functionality, including the ability to log in. brv99 does not use advertising cookies or cross-site tracking cookies for third-party marketing purposes.

8 Data Sharing & Third Parties

brv99 does not sell, rent, or trade your personal data. We may share your personal information with carefully selected third parties only where necessary and under strict data protection obligations. Categories of recipients include:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to process your deposits and withdrawals. These providers receive only the minimum data necessary to complete the transaction.
• Identity verification partners: Third-party KYC and document verification services used to confirm the authenticity of identity documents submitted during account verification.
• Game content providers: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive limited technical data (e.g., session tokens) to deliver their games within the Platform environment.
• Fraud prevention and AML services: Specialist screening providers used to protect the Platform against financial crime. Data shared is limited to what is necessary for the screening check.
• IT and hosting infrastructure: Cloud hosting and infrastructure providers who store and process Platform data under contractual data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate regulatory request, brv99 may be obligated to disclose personal data to relevant authorities without prior notice to you.

9 International Data Transfers

The operation of the brv99 Platform may involve the transfer of personal data to servers or service providers located outside Bangladesh. Where such transfers occur, brv99 takes all reasonable steps to ensure that your personal data receives an equivalent level of protection as it would in Bangladesh, including through:

• Contractual data protection clauses binding the recipient to appropriate standards of data protection
• Use of service providers certified under recognised international data protection frameworks
• Technical security measures including encryption of data in transit and at rest

By using the brv99 Platform, you acknowledge and consent to the transfer of your personal data across international borders in the circumstances described in this Policy.

10 Data Retention

brv99 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML obligations, dispute resolution
KYC documents	Duration of account + 5 years post-closure	Regulatory compliance, anti-fraud
Financial transaction records	Duration of account + 7 years post-closure	AML compliance, tax and audit records
Gameplay and betting records	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming
Customer support records	3 years from date of interaction	Quality assurance, dispute resolution
Marketing preferences	Until consent is withdrawn or account closed	Consent management
Technical and usage logs	13 months from collection	Security monitoring, fraud detection

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data must be retained longer than the standard period due to an ongoing investigation, legal claim, or regulatory requirement, brv99 will retain the data until the matter is resolved.

11 Your Privacy Rights

As a brv99 account holder, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected]:

• Right of Access: You may request a copy of all personal data brv99 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances, you may request that your personal data be deleted. This right is subject to brv99's legal obligations to retain data for AML and regulatory purposes, which may take precedence.
• Right to Restriction: You may request that brv99 restricts the processing of your personal data in specific circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that brv99 provide your personal data in a structured, machine-readable format for transfer to another service.
• Right to Object: You may object to the processing of your personal data where brv99 relies on legitimate interests as the legal basis, unless brv99 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right against Automated Decisions: Where a significant decision affecting you is made solely by automated means, you have the right to request human review of that decision.

brv99 will respond to all verified privacy rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. Standard privacy rights requests are processed free of charge.

12 Children & Minors

The brv99 Platform is strictly intended for adults aged 21 years and above. brv99 does not knowingly collect personal data from any individual under the age of 21. Registration on the Platform by individuals under 21 is prohibited, and brv99 enforces this restriction through its KYC age verification process.

If brv99 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false declaration during registration or any other means — that account will be immediately suspended, all associated funds will be handled in accordance with our Terms & Conditions, and the personal data will be deleted from our systems as promptly as possible.

Parents and guardians who believe that a minor may have created an account on the brv99 Platform are urged to contact our support team at [email protected] immediately so that we can investigate and take appropriate action without delay.

13 Security Measures

brv99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of sensitive personal data at rest, including KYC documents and financial records
• Role-based access controls ensuring that personal data is accessible only to brv99 staff with a demonstrated operational need
• Multi-factor authentication requirements for internal system access by brv99 employees
• Regular penetration testing and security audits conducted by independent security professionals
• Automated intrusion detection and anomaly monitoring systems operating continuously
• Segregation of payment data: full payment credentials are not stored on brv99's servers and are processed exclusively via compliant payment gateway partners
• Staff training on data protection obligations and security best practices

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a significant risk to the rights and freedoms of affected Players, brv99 will notify affected individuals and, where required by applicable law, the relevant regulatory authorities, without undue delay.

14 Changes to This Policy

brv99 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, brv99 will publish the revised Policy on this page with an updated "Last Updated" date and will endeavour to notify registered Players via the email address associated with their account.

Your continued use of the brv99 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you must stop using the Platform and may request account closure in accordance with Section 13 of the Terms & Conditions.

We recommend that you review this Policy periodically to stay informed about how brv99 handles your personal information. The date at the top of this page always reflects when the Policy was most recently revised.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by brv99, please contact our dedicated privacy support team using the details below. We are committed to resolving all data protection queries promptly and transparently.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Average response time: within 24 hours for privacy-related email enquiries
• For urgent data security concerns (e.g., suspected unauthorised account access ), please include "URGENT PRIVACY" in the subject line of your email for priority handling

brv99 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days and aim to provide a full resolution within 30 calendar days. Where a complaint cannot be resolved within that timeframe, we will keep you informed of progress and the expected resolution date.