Privacy Policy — ba992 Online Casino Bangladesh
At ba992, your privacy is a core commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we protect it, and what rights you have as a player in Bangladesh.
End-to-End Encryption
All data transmitted between your device and ba992's servers is protected by TLS 1.3 encryption. Stored sensitive data — including payment details — is encrypted at rest using AES-256.
No Third-Party Data Sales
ba992 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your data is used solely to operate the Platform and comply with applicable obligations.
Your Rights Are Respected
ba992 Players have the right to access, correct, delete, and port their personal data. We process all such requests promptly and without charge for standard requests.
Transparent Cookie Use
ba992 uses cookies strictly for Platform functionality, session management, fraud prevention, and analytics. We do not deploy third-party advertising cookies or cross-site tracking scripts.
Defined Retention Periods
We only retain your personal data for as long as necessary to provide our services, meet our legal obligations, or resolve disputes. Retention periods are clearly defined for each data category.
AML and KYC Compliance
ba992 collects identity and payment verification data strictly for KYC and AML compliance. This data is handled with the highest confidentiality and is never shared beyond legal necessity.
// section_01
Data Controller Information
ba992 operates the online casino and sports betting platform accessible at ba992.app. For the purposes of this Privacy Policy, ba992 acts as the data controller — meaning ba992 is the entity that determines the purposes and means by which your personal data is processed.
As data controller, ba992 is responsible for ensuring that all personal data collected through the Platform is processed lawfully, fairly, and transparently. ba992 maintains internal data processing records and appoints designated personnel responsible for data protection compliance.
Where ba992 engages third-party service providers who process personal data on its behalf (for example, payment processors, game studios, and fraud detection partners), those providers act as data processors under written data processing agreements that bind them to ba992's data protection standards and restrict their use of your data to the specific services they provide.
// section_02
Information We Collect
ba992 collects personal data in several ways: directly from you when you register an account or contact support, automatically when you use the Platform, and from third parties such as payment processors and identity verification services. The categories of data we collect are set out in the table below.
| Data Category | Examples of Data Collected | Primary Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID), passport number, driving licence number | Provided directly by you during registration and KYC verification |
| Contact Data | Mobile number (Bangladesh), email address, residential address (division, district, upazila) | Provided directly by you during registration or account updates |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, bank account details, transaction IDs, deposit and withdrawal amounts in BDT (৳) | Provided during deposit/withdrawal requests; confirmed via MFS and banking partners |
| Gaming Data | Wager history, game session duration, win/loss records, bonus claim history, sports bet slip details | Automatically generated by Platform systems during gameplay |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, time zone (BST UTC+6), session tokens | Automatically collected via server logs and browser telemetry |
| Behavioural Data | Pages visited, navigation flow, click patterns, feature usage, time on site, search queries within the Platform | Automatically collected via analytics tools and first-party cookies |
| Communications Data | Live chat transcripts, support email content, feedback submissions, promotional opt-in/out records | Captured when you contact ba992 support or respond to communications |
| Verification Data | Copies of identity documents submitted for KYC, selfie/liveness-check images where applicable | Provided directly by you in response to a KYC request |
ba992 does not intentionally collect data from individuals under 18 years of age. If we identify that a minor has registered an account, we will immediately suspend that account, delete the associated personal data where legally permissible, and return any deposits made. If you believe a minor has registered on ba992, please notify us at [email protected] without delay.
// section_03
How We Use Your Data
ba992 processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your personal data are as follows.
- Account Management: To create, maintain, and administer your ba992 account, including authenticating your identity at login, processing password resets, and managing account settings.
- Payment Processing: To facilitate deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported payment channels. Transaction data is retained for reconciliation and dispute resolution.
- KYC and AML Compliance: To verify your identity, confirm your age (18+ requirement), and fulfil our Anti-Money Laundering obligations. KYC data is processed as a prerequisite for withdrawal requests and as required by our compliance programme.
- Platform Delivery: To provide access to casino games (slots, live casino, table games), sports betting markets (cricket, football, kabaddi), and all other Platform features in a stable, secure, and personalised manner.
- Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, enforce self-exclusion and deposit limit settings requested by Players, and fulfil our duty of care obligations.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, collusion, and other prohibited conduct. Technical and behavioural data is processed by our automated fraud detection systems in real time.
- Customer Support: To respond to enquiries, resolve disputes, investigate complaints, and deliver support via live chat and email. Communications data is retained to maintain a consistent support record.
- Marketing Communications: To send promotional offers, seasonal bonuses (Eid, Pohela Boishakh, BPL season, ICC T20 World Cup), and platform updates to Players who have opted in to marketing communications. You may opt out at any time by contacting [email protected].
- Analytics and Improvement: To analyse aggregated, anonymised usage data in order to improve the Platform's performance, user experience, game selection, and betting market coverage.
- Legal Compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and exercise or defend legal claims.
ba992 does not use personal data for automated decision-making that produces significant legal effects without human oversight, except where such processing is required to fulfil a contract or comply with a legal obligation.
// section_04
Data Sharing and Disclosure
ba992 shares your personal data only where necessary and only with the categories of recipients described below. We do not sell your data to any third party for their own commercial use.
- Payment Service Providers: Your financial data is shared with the relevant MFS operator (bKash, Nagad, Rocket, Upay) or banking partner strictly to process the specific transaction you have initiated. Payment processors receive only the minimum data necessary to complete the transaction.
- Identity Verification Partners: Where ba992 uses third-party KYC technology to verify identity documents, the relevant identity and verification data is shared with that provider under a data processing agreement. The provider does not retain or use your data beyond the scope of the verification check.
- Game Studio Providers: Technical session data (player token, session ID, game round ID) is shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver the game experience and resolve round disputes. No directly identifiable personal data such as your name, NID, or contact details is shared with game studios.
- Fraud Prevention and Analytics: Anonymised or pseudonymised technical and behavioural data may be processed by fraud prevention and analytics platforms to detect unusual activity. These platforms operate under contractual data protection obligations.
- Legal and Regulatory Authorities: ba992 may disclose personal data to competent authorities — including law enforcement agencies and financial intelligence units — where required by a lawful order, court order, or applicable statutory obligation. ba992 will, where legally permitted, notify the affected Player of such a disclosure.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ba992's business assets, your personal data may be transferred as part of that transaction. You will be notified of any change in data controller arising from such a transfer.
// section_05
Cookies and Tracking Technologies
ba992 uses cookies and similar tracking technologies (local storage, session tokens) to operate the Platform effectively. Cookies are small data files placed on your device when you visit ba992.app. They help us keep you logged in, remember your preferences, protect your session, and understand how the Platform is used.
- Essential Cookies: These are required for the Platform to function. They manage your login session, maintain your account state, enforce security tokens, and remember your language preferences. You cannot opt out of essential cookies while using ba992.
- Functional Cookies: These remember your Platform preferences such as game lobby filters, preferred payment method, and notification settings. They improve your experience but are not strictly necessary for the Platform to operate.
- Analytics Cookies: ba992 uses first-party analytics to measure page performance, understand navigation flows, and identify areas for improvement. Analytics data is aggregated and does not identify individual Players by name.
- Fraud Prevention Tokens: Device fingerprinting tokens and session integrity markers are used to identify suspicious login patterns, detect multi-accounting, and protect against automated bot activity. These are classified as security cookies and cannot be disabled.
ba992 does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking scripts. You will not see ba992 advertisements follow you across other websites as a result of cookies set on ba992.app.
// section_06
Data Retention Periods
ba992 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to exercise or defend legal claims. The retention periods below represent our standard practice; individual data elements may be retained for shorter or longer periods depending on specific legal requirements.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Identity and KYC Data | 5 years from account closure | AML and financial regulation compliance; identity dispute resolution |
| Financial Transaction Data | 5 years from transaction date | Accounting obligations; chargeback dispute resolution; AML audit trail |
| Gaming and Bet History | 3 years from account closure | Game dispute resolution; responsible gaming monitoring; audit compliance |
| Customer Support Records | 3 years from last interaction | Quality assurance; complaint investigation; legal claim defence |
| Technical / Log Data | 12 months from collection | Security monitoring; fraud detection; platform performance analysis |
| Marketing Preferences | Until opt-out or account closure | Consent management; proof of marketing opt-in status |
| Cookies and Session Tokens | Session-based to 12 months | Varies by cookie type; essential cookies expire at session end; persistent cookies expire per schedule |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual Player. Anonymised data derived from your usage may be retained indefinitely for aggregated statistical analysis.
// section_07
Your Privacy Rights
ba992 respects your rights over your personal data. As a registered Player, you may exercise the following rights by contacting ba992 at [email protected] with the subject line "Privacy Request". We will verify your identity before processing any request and will respond within 5 business days.
Right of Access
You have the right to request a copy of the personal data ba992 holds about you, along with information about how that data is processed, who it has been shared with, and how long it will be retained.
Right to Rectification
If any of the personal data ba992 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Some corrections may require re-verification of your identity.
Right to Erasure
You may request that ba992 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
Right to Restrict Processing
You may request that ba992 restrict how your data is processed in certain circumstances, such as while a dispute about accuracy is being resolved or while an objection to processing is being considered.
Right to Data Portability
Where ba992 processes your data on the basis of your consent or to perform a contract, you have the right to receive that data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
Right to Object
You have the right to object to ba992 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances provide grounds for doing so.
Right to Withdraw Consent
Where ba992 relies on your consent as the legal basis for processing (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
// section_08
Data Security Measures
ba992 implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure.
- Transport Encryption: All data transmitted between your browser or app and ba992's servers is encrypted using TLS 1.3. Connections using older, insecure protocol versions (TLS 1.0, TLS 1.1, SSL 3.0) are rejected at the server level.
- Storage Encryption: Sensitive data at rest — including KYC documents, financial records, and authentication credentials — is encrypted using AES-256. Encryption keys are managed separately from the data they protect.
- Access Controls: Access to personal data is restricted to ba992 personnel who require it to perform their specific job functions. All staff with data access receive data protection training and are bound by confidentiality obligations.
- Two-Factor Authentication: ba992's internal administrative systems require multi-factor authentication for all staff access. Players are also offered optional SMS-based 2FA for their player accounts.
- Intrusion Detection: ba992 operates continuous server-side intrusion detection and anomaly monitoring. Suspicious access patterns trigger automated alerts for manual investigation by our security team.
- Penetration Testing: ba992's platform infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Data Breach Response: In the event of a confirmed personal data breach that poses a risk to Players, ba992 will notify affected individuals as promptly as practically possible, with details of the nature of the breach, data categories affected, and steps being taken to mitigate harm.
Despite these measures, no online platform can guarantee absolute security. Players are encouraged to protect their own accounts by using strong, unique passwords, enabling 2FA, and logging out of ba992 on shared or public devices.
// section_09
Changes to This Policy
ba992 reviews this Privacy Policy periodically to ensure it remains accurate, up to date, and reflective of how we process personal data. We may update this Policy in response to changes in our services, changes in applicable law, or feedback from Players and regulators.
When material changes are made to this Privacy Policy, ba992 will publish the updated version on ba992.app with a revised effective date at the top of the document. Where practicable, registered Players will be notified of material changes via their registered email address or via an in-platform notification on their next login.
Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should discontinue use of the Platform and request account closure by contacting [email protected].
Prior versions of this Privacy Policy are maintained in ba992's internal document archive. Players who require a copy of a previous version may request one at [email protected], stating the approximate date of the version required.
Your Privacy, Our Priority
Have questions about how ba992 handles your data? Explore our FAQ, review Responsible Gaming guidelines, or head to the casino. 18+ only. Play responsibly.
Read the FAQ Responsible Gaming Explore ba992 Casino