pb99 Privacy Policy

pb99 ("we", "us", "the platform") is committed to protecting the personal data of every individual who interacts with the pb99 website and its associated services. This Privacy Policy describes the personal data we collect from players and visitors, the purposes for which that data is used, the parties with whom it may be shared, the security measures we apply to protect it, and the rights available to you as a data subject.

This Privacy Policy applies to all personal data processed in connection with your use of the pb99 platform, including account registration, deposits and withdrawals, sports betting, live casino gameplay, slot games, promotional participation, and any communications you initiate with the pb99 support team. It applies regardless of whether you access pb99 via a desktop browser, a mobile browser, or any other interface through which the pb99 service is delivered.

By registering an account on pb99 or by continuing to use the platform after the effective date stated above, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue your use of the pb99 platform and may request account closure by contacting [email protected].

This Privacy Policy should be read alongside the pb99 Terms & Conditions, which govern the overall relationship between pb99 and its players.

For the purposes of this Privacy Policy, pb99 acts as the data controller in respect of personal data collected from players and visitors to the pb99 platform. As data controller, pb99 determines the purposes and means by which personal data is processed.

If you have any questions about how pb99 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 11 of this Policy, you may contact the pb99 data privacy team at [email protected]. All data-related enquiries are handled by pb99's designated privacy contact, who will respond within 30 days of receiving a written request.

pb99 collects personal data that falls into the following categories. We collect only what is necessary for the stated purposes and do not retain data beyond the periods specified in Section 8 of this Policy.

pb99 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where you voluntarily disclose such information in the context of a responsible gaming or welfare enquiry, in which case it is handled with heightened care and used solely for the purpose of providing you with appropriate support.

pb99 collects personal data through the following channels:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, participate in a promotion, or contact the pb99 support team.
• Automatically during platform use: Technical data such as IP addresses, device identifiers, session cookies, and gameplay logs are collected automatically as you navigate and interact with the pb99 platform.
• From third-party payment providers: When you use bKash, Nagad, Rocket, Upay, Visa, or Mastercard to transact on pb99, the relevant payment provider may share transaction confirmation data and wallet identifiers with pb99 to facilitate payment processing.
• From identity verification services: Where pb99 uses a third-party KYC service provider to verify your identity documents, that provider may return verification status data and document metadata to pb99.
• From fraud prevention and anti-money-laundering (AML) databases: pb99 may cross-reference your registration data against industry fraud-prevention databases and politically exposed persons (PEP) lists as part of our AML compliance obligations.

pb99 processes your personal data only where there is a clear and lawful purpose for doing so. The table below summarises our primary processing purposes and the corresponding legal basis for each.

Where pb99 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

pb99 may share your personal data with third parties only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data handling practices.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, and NetEnt may receive session identifiers and wagering data necessary to deliver their games within the pb99 platform. No sensitive personal identity data is shared with game providers beyond what is technically required to maintain your game session.
• Identity verification (KYC) service providers: Where pb99 uses a third-party KYC platform to verify identity documents, your ID document images and identity data are shared with that provider solely for verification purposes and are not retained by the provider beyond the period required to complete verification.
• Fraud prevention and AML service providers: pb99 may share account and transaction data with industry-standard fraud prevention or AML screening services to detect and prevent financial crime and bonus abuse.
• Legal and regulatory authorities: pb99 will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, or where pb99 reasonably believes that disclosure is necessary to protect the rights, property, or safety of pb99, its players, or the public.
• Professional advisers: pb99's legal, audit, and financial advisers may have access to personal data on a need-to-know basis and are bound by professional confidentiality obligations.

All third-party service providers engaged by pb99 are required to process personal data only on pb99's documented instructions and to implement appropriate technical and organisational security measures consistent with the standards described in Section 9 of this Policy.

Some of pb99's service providers and game content partners operate infrastructure located outside Bangladesh. Where your personal data is transferred to, or accessed from, a location outside Bangladesh, pb99 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard that is consistent with this Privacy Policy.

These safeguards may include data processing agreements incorporating standard contractual protections, the selection of service providers that maintain internationally recognised security certifications (such as ISO 27001), and technical measures to encrypt data both in transit and at rest during international transfers.

If you have questions about the specific safeguards applied to international transfers of your personal data, you may contact [email protected] and pb99 will provide further details within a reasonable timeframe.

pb99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, audit, or reporting obligations. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping best practices.
• Bet and gameplay records: Retained for a minimum of three (3) years from the date of the relevant activity.
• Support communications: Retained for a minimum of two (2) years from the date of the last support interaction.
• Marketing consent records: Retained for the duration of your active account and for one (1) year following account closure or withdrawal of consent, whichever is earlier.
• Responsible gaming records (including self-exclusion elections): Retained for a minimum of five (5) years to support ongoing responsible gaming obligations and prevent the re-registration of self-excluded players.

At the end of the applicable retention period, pb99 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Anonymised and aggregated data that cannot be used to identify you may be retained indefinitely for platform improvement and statistical analysis purposes.

pb99 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the pb99 platform.
• Encryption at rest for sensitive personal and financial data stored on pb99's servers.
• Role-based access controls ensuring that internal staff access to personal data is restricted to those with a legitimate business need.
• Audit logging of internal access to personal data, enabling detection and investigation of any unauthorised access events.
• Two-factor authentication available for player accounts and required for internal administrative access to data systems.
• Regular security assessments including vulnerability scanning and periodic review of data handling practices.
• Incident response procedures in place to identify, contain, and notify affected parties of any data security incident in a timely manner.

While pb99 applies robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own pb99 account credentials. If you believe your account has been compromised, contact [email protected] immediately.

pb99 uses cookies and similar browser-based technologies to enable core platform functionality and to gather aggregated analytics data that helps us improve the platform experience for all players.

Types of cookies used by pb99:

• Strictly necessary cookies: These cookies are required for the pb99 platform to function. They maintain your login session, preserve your account preferences, and enable secure navigation between pages. These cookies cannot be disabled without impacting core platform functionality.
• Analytics cookies: These cookies collect aggregated, anonymised data about how players navigate and interact with the pb99 platform — for example, which pages are visited most frequently and where users tend to drop off. This data is used solely to improve platform design and performance. Analytics data is not linked to your individual account identity.
• Functional cookies: These cookies remember choices you make on the platform (such as preferred language or display settings) to provide a more personalised experience on your next visit.

pb99 does not use advertising cookies, cross-site tracking pixels, social media retargeting cookies, or any third-party behavioural profiling technologies. Your browsing activity on pb99 is not shared with advertising networks.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use the pb99 platform normally.

As a player on the pb99 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with sufficient detail to allow pb99 to identify your account and the specific right you wish to exercise. pb99 will respond within 30 days.

• Right of access: You may request a copy of the personal data pb99 holds about you, along with information about the purposes for which it is processed.
• Right to rectification: If any personal data pb99 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Some data (such as identity data) can also be updated directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to pb99's legal data retention obligations as described in Section 8 — pb99 cannot delete data it is legally required to retain.
• Right to restriction of processing: You may request that pb99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection is being considered.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, and is carried out by automated means, you may request that pb99 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where pb99 relies on legitimate interests as the legal basis, or where your data is being used for direct marketing purposes. Upon receipt of a valid objection to direct marketing, pb99 will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

pb99 will not charge a fee for handling data subject requests submitted in good faith. However, pb99 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive in nature.

pb99 employs age verification checks during the registration process to prevent underage access to the platform. If pb99 becomes aware that personal data has been collected from an individual under the age of 21, that account will be suspended immediately, any funds held in the account will be dealt with in accordance with the pb99 Terms & Conditions, and the personal data associated with the account will be deleted as soon as practicable.

If you are a parent or guardian and you believe that your child has created a pb99 account or provided personal data to pb99, please contact us immediately at [email protected] and we will take prompt action to investigate and remediate the situation.

pb99 processes certain personal data specifically to fulfil its responsible gaming obligations. This includes monitoring account activity patterns that may indicate problem gambling behaviour, maintaining records of self-exclusion elections, and applying deposit and loss limits requested by players.

Responsible gaming data — including self-exclusion status, voluntary limit elections, and at-risk player flags — is treated with heightened confidentiality. Access to this data is restricted to pb99 staff whose role requires it to support the player's welfare, and it is never used for marketing or commercial profiling purposes.

Self-exclusion records are retained for a minimum of five years after the exclusion period ends to prevent the inadvertent re-registration of a player who has self-excluded. If you wish to discuss pb99's responsible gaming data practices, please contact the dedicated responsible gaming team at [email protected]. You can also visit the pb99 Responsible Gaming page for full details on the tools available to you.

pb99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When a material change is made, pb99 will notify registered players by email to the address associated with their account, and will publish the updated Policy on this page with a revised effective date.

Where a change to this Privacy Policy requires your fresh consent (for example, where a new processing purpose is introduced that relies on consent as its legal basis), pb99 will seek that consent before the new processing commences.

We encourage you to review this Privacy Policy periodically to stay informed about how pb99 protects your data. Your continued use of the pb99 platform after a Policy update constitutes your acknowledgement of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pb99 handles your personal data, please reach out using the contact details below. Note that all contact details are provided as plain text — they are not clickable links.

• General Privacy Enquiries: [email protected]
• Responsible Gaming & Data: [email protected]
• Website: https://pb99.io
• Response Time: Within 30 days for data subject requests; within 48 hours for general support enquiries
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

pb99 takes all privacy-related communications seriously and will acknowledge receipt of your request promptly. For urgent account security matters, please also use the live chat function available within your logged-in account dashboard for the fastest possible response.