bg997 Privacy Policy

1. Introduction

bg997 ("bg997", "we", "us", "our") operates the online casino and sports betting platform available at bg997.io, offering casino games, live dealer tables, sports wagering, and related services to players in Bangladesh and other eligible markets. bg997 is deeply committed to maintaining the privacy and security of all personal data entrusted to us by our players.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bg997. Please read this Policy carefully to understand our practices regarding your personal data and how we handle it. This Policy should be read alongside our Terms & Conditions, which are available at bg997.io/terms-conditions.

This Policy covers all personal data processing activities related to your use of the bg997 platform, whether you access it via a web browser on desktop, via a mobile browser, or via any other supported access method. "Personal data" means any information that identifies you or could reasonably be used to identify you as an individual.

---

2. Data Controller

bg997 is the data controller for personal data collected through the bg997 platform. As the data controller, bg997 is responsible for determining the purposes and means of processing your personal data. If you have any questions about how your data is handled, or wish to exercise any of your data rights described in Section 11 of this Policy, please contact us at the address provided in Section 16.

In certain cases — for example, where data is processed jointly by bg997 and a game provider for the purpose of delivering a specific game — both parties may act as joint data controllers for that specific processing activity. In these instances, bg997 remains your primary point of contact for data rights requests, and we will coordinate with the relevant provider on your behalf.

---

3. Data We Collect

bg997 collects the following categories of personal data in the course of providing the platform and fulfilling our legal and regulatory obligations:

3.1 Registration & Identity Data

When you create a bg997 account, we collect: your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is required to open and manage your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) best practices and to verify your age and identity, bg997 may request and process copies of official identification documents, including: National Identity Card (NID), passport, driver's licence, and/or a recent utility bill or bank statement confirming your residential address. We may also collect a selfie photograph for liveness verification purposes.

3.3 Financial & Transaction Data

When you make deposits or request withdrawals, bg997 collects transaction details including: payment method type (bKash, Nagad, Rocket, Upay, DBBL bank transfer, Visa, or Mastercard), mobile number or account identifier associated with the payment method, transaction amounts in BDT, transaction timestamps, and transaction reference numbers. bg997 does not store full card numbers — card payment data is tokenised by the payment processor.

3.4 Gaming & Wagering Data

We record details of your gaming activity on the bg997 platform, including: game sessions played, wagers placed and their outcomes, sports betting selections, bonus usage, and win/loss history. This data is used for account management, responsible gaming monitoring, and fraud detection.

3.5 Technical & Device Data

bg997 automatically collects certain technical data when you access the platform, including: your IP address, device type and operating system, browser type and version, screen resolution, session duration and timestamps, pages visited within the platform, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

If you contact bg997 support via live chat or email, we retain records of those communications, including the content of your messages and any attachments, for the purpose of resolving your query and improving our support service.

3.7 Responsible Gaming Data

Where you configure responsible gaming tools on your account — such as deposit limits, cooling-off periods, or self-exclusion — bg997 records these settings and the dates on which they were applied or modified. This data is used solely to enforce the protections you have chosen.

---

4. How We Collect Your Data

bg997 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a wager, contact support, or update your account settings.
• Automatically — through cookies, session tracking, and server logs when you access and navigate the bg997 platform (see Section 8 for our full Cookies policy).
• From third-party partners — our KYC and identity verification partners may provide verified identity data back to bg997 following a verification check you have initiated. Payment processors may confirm transaction status and provide fraud-risk scoring. Game providers may pass session data for games hosted on their infrastructure.
• From publicly available sources — in limited fraud prevention contexts, bg997 may cross-reference information against publicly available sanctions lists, politically exposed persons (PEP) registers, and adverse media databases as part of our AML compliance programme.

---

5. How We Use Your Personal Data

bg997 uses the personal data it collects for the following purposes:

bg997 does not use automated decision-making (including profiling) to make decisions that produce legal or similarly significant effects on you, except where this is necessary for fraud prevention or regulatory compliance. Where such automated processing occurs, you have the right to request human review of the decision, as described in Section 11.

---

6. Legal Basis for Processing

bg997 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your bg997 account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable law, including AML obligations, age verification requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out for bg997's legitimate business interests, such as fraud detection, platform security, and analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — for example, receiving marketing communications or promotional offers from bg997 — you may withdraw that consent at any time by contacting [email protected] or updating your account communication preferences.

---

7. Data Sharing & Disclosure

7.1 Service Partners

bg997 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include: payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard network processors), KYC and identity verification providers, game studios and content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and others), customer support platform providers, IT infrastructure and cloud hosting providers, and fraud detection and cybersecurity specialists. All service partners are subject to data processing agreements that require them to protect your data to a standard consistent with this Policy and applicable law.

7.2 Legal & Regulatory Disclosure

bg997 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required or permitted by applicable law — for example, in response to a valid court order, in connection with the prevention or detection of crime, or for the purposes of AML compliance reporting.

7.3 Business Transfers

In the event that bg997 undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, personal data held by bg997 may be transferred as part of that transaction. You will be notified of any such transfer and any material changes to the Privacy Policy that result from it, via the registered email address on your account, with reasonable advance notice.

7.4 No Sale of Personal Data

bg997 does not sell, rent, or lease your personal data to any third party for their independent marketing or commercial purposes. Data shared with advertising networks for platform-level analytics is anonymised and aggregated before sharing — it cannot be used to identify you individually.

---

8. Cookies & Tracking Technologies

8.1 What Cookies We Use

bg997 uses the following categories of cookies and similar tracking technologies on the platform:

• Strictly Necessary Cookies: Required for the platform to function — these maintain your login session, remember your account preferences, and protect against cross-site request forgery. These cookies cannot be disabled without preventing the platform from working correctly.
• Analytics & Performance Cookies: Used to understand how players use the bg997 platform — which pages are visited most often, how long sessions last, and where players encounter errors. This data is used in aggregated, anonymised form to improve the platform. These cookies are enabled by default but can be disabled in your browser settings.
• Functionality Cookies: Used to remember personalisation choices such as display language preferences and responsible gaming notification settings.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to alert you before a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in and using the bg997 platform. Information on managing cookies in the most common browsers is available from the browser providers directly. bg997 does not use advertising or retargeting cookies that track you across third-party websites.

---

9. Data Retention

bg997 retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by law. The following retention guidelines apply:

• Account and registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant transaction, as required by applicable AML regulations.
• Financial and transaction records: Retained for a minimum of 5 years following the date of each transaction.
• Gaming and wagering history: Retained for a minimum of 3 years following the date of the relevant gaming session for dispute resolution and audit purposes.
• Support communications: Retained for 2 years from the date of the last communication in a support thread.
• Technical and device data (logs): Retained for up to 12 months for security and fraud detection purposes.
• Marketing preference records: Retained until you withdraw consent or request deletion, plus a short period afterward to document your withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

---

10. Data Security

bg997 implements a layered, defence-in-depth approach to data security. The key security measures in place include:

• 256-bit SSL/TLS encryption on all pages of bg997.io, ensuring data transmitted between your device and our servers is protected from interception.
• Encrypted data storage for sensitive personal data at rest, including identity documents and financial information.
• Access controls limiting access to personal data to only those bg997 employees and contractors who have a legitimate need to access it to perform their job functions.
• Multi-factor authentication for internal administrative access to systems holding personal data.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Intrusion detection systems monitoring for unusual access patterns or suspicious activity on a 24/7 basis.
• Incident response procedures ensuring that in the event of a data breach, affected players and relevant authorities are notified in accordance with applicable law and without undue delay.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. bg997 cannot guarantee absolute security, but we are committed to using commercially reasonable means to protect your data at all times.

---

11. Your Data Rights

As a player on the bg997 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with a clear description of your request. bg997 will respond within 10 business days. We may need to verify your identity before processing your request.

11.1 Right of Access

You have the right to request a copy of the personal data bg997 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR). bg997 will provide this information free of charge in a structured, commonly used, machine-readable format.

11.2 Right to Rectification

If any personal data bg997 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update basic account information (such as your address or phone number) directly in your account settings panel. For corrections to identity documents or date of birth, please contact support.

11.3 Right to Erasure

You have the right to request that bg997 delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, if you withdraw consent (where processing was based on consent), or if the data has been processed unlawfully. Please note that this right is subject to overriding legal obligations: bg997 is required by AML law to retain certain records for a minimum of 5 years, and erasure requests cannot override these obligations.

11.4 Right to Restriction of Processing

You have the right to request that bg997 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while a legitimate interests objection is being considered. Where processing is restricted, bg997 will continue to store your data but will not actively process it beyond storage.

11.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of the personal data you have provided to bg997 in a structured, machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.

11.6 Right to Object

You have the right to object to bg997's processing of your personal data where that processing is based on legitimate interests or is for direct marketing purposes. If you object to direct marketing, bg997 will cease processing your data for that purpose immediately. If you object to processing based on legitimate interests, bg997 will consider your objection and cease or restrict processing unless we can demonstrate compelling legitimate grounds that override your interests.

11.7 Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to decisions made solely by automated processing — including profiling — that produce legal or similarly significant effects on you. If bg997 makes such a decision (for example, an automated account suspension based on fraud detection), you have the right to request human review of that decision by contacting [email protected].

---

12. Children & Minors

The bg997 platform is strictly for adults aged 21 years and above. bg997 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has provided us with personal data or has registered an account, we will immediately suspend the account, delete the data associated with it (except where retention is required by law), and return any real-money balance to the payment method used for deposit.

If you are a parent or guardian and believe that your child may have registered on or used the bg997 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. We also recommend the use of parental control software to prevent minors from accessing online gambling platforms.

---

13. International Data Transfers

bg997 primarily serves players located in Bangladesh, and our core data processing infrastructure is designed with this market in mind. However, some of our third-party service providers — including certain game studios, KYC verification providers, and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, bg997 takes appropriate steps to ensure that your data receives a level of protection consistent with this Policy. These steps may include: entering into standard contractual clauses (SCCs) with the recipient, relying on adequacy decisions where applicable, or implementing equivalent contractual safeguards. Where you would like more information about the international transfer safeguards bg997 has in place, please contact [email protected].

---

14. Third-Party Links

The bg997 platform may include links to third-party websites or services — for example, links to game provider information pages or payment method help centres. This Privacy Policy applies only to the bg997 platform. bg997 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any third-party sites you visit via links on the bg997 platform.

---

15. Policy Updates

bg997 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material — for example, a change in the categories of data we collect or a new category of third-party sharing — bg997 will notify you via your registered email address with at least 14 days' notice before the changes take effect.

Non-material updates (such as clarifications, formatting corrections, or updates to contact details) may be made without prior notice. The effective date at the top of this Policy will always reflect when it was last updated. Continued use of the bg997 platform following the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

---

16. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights described in Section 11, please contact bg997 using the following details:

If you are not satisfied with bg997's response to a privacy complaint, you may have the right to escalate your complaint to a relevant data protection authority in your jurisdiction. bg997 is committed to working constructively with any regulatory body investigating a complaint made against us.