be998 Privacy Policy

1 Introduction

be998 operates the online betting and casino platform accessible at be998.io and its associated mobile-optimised versions (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the Platform, whether as registered Members or as visitors browsing the site without an account.

This Privacy Policy sets out in clear and transparent terms the personal information we collect, the lawful purposes for which we use it, the circumstances in which it may be shared with third parties, the safeguards we have in place to protect it, and the rights available to you as a data subject. This Policy applies to all data collected through the Platform, including through our website, mobile site, and any communication channels operated by be998 such as live chat, email, and WhatsApp support.

This Privacy Policy should be read together with our Terms and Conditions, which govern your use of the Platform more broadly. In the event of any conflict between the two documents on a data protection matter, this Privacy Policy shall prevail.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes names, email addresses, mobile phone numbers, IP addresses, device identifiers, and payment account references.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means be998 in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of be998 pursuant to a written agreement and our documented instructions.
• "Member" means an individual who has registered a player account on the be998 Platform.
• "Visitor" means an individual who accesses the Platform without registering an account.
• "KYC Data" means identity verification documents and associated data submitted by a Member as part of the Know Your Customer verification process.
• "Cookie" means a small data file placed on your device by the Platform to support session management, preference storage, and analytics functions.

3 Data We Collect

3.1 Registration Data

When you create a be998 account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address in Bangladesh (district, division, and full address)
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account communications and notifications)
• Username and hashed password (your password is never stored in plain text)
• Preferred payment method reference (e.g., your bKash or Nagad account number)

3.2 KYC Verification Data

To comply with our identity verification obligations and to process withdrawal requests above certain thresholds, we may collect the following KYC Data from Members:

• A scanned copy or photograph of your Bangladesh National ID card, passport, or driving licence
• A selfie or video verification image (where required for enhanced verification)
• Proof of residential address such as a utility bill, bank statement, or official correspondence dated within the past three months
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing your registered number)

3.3 Transaction Data

When you make deposits, place bets, or request withdrawals, we collect and retain records of:

• Deposit amounts, timestamps, and payment method references in BDT
• Withdrawal requests, amounts, processing timestamps, and payment destinations
• Betting history including event names, stake amounts, odds, and settlement outcomes
• Casino game session logs including game provider, game title, stake, and result
• Bonus activations, wagering progress, and promotional redemption records

3.4 Technical & Usage Data

When you access the Platform, our servers and analytics systems automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, session duration, click paths, and feature interactions
• Referring URL (the website or search result that directed you to be998.io)
• Error logs and crash reports generated during your session

3.5 Communication Data

When you contact our support team via live chat, email, or WhatsApp, we retain records of:

• The content of your messages and our responses
• The date, time, and channel of each support interaction
• Any documents or screenshots you share with our support team
• Complaint records and their resolution outcomes

4 How We Collect Data

be998 collects Personal Data through the following channels and mechanisms:

• Directly from you: Registration forms, KYC document uploads, payment method setup, support interactions, and any other information you voluntarily provide when using the Platform.
• Automatically through the Platform: Server logs, session cookies, and analytics tools that record technical and usage data when you browse or interact with be998.io.
• From payment service providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment processors, sufficient to confirm that a deposit or withdrawal has been completed.
• From identity verification partners: When you submit KYC documents, our verification partner may return a verification result (approved, rejected, or pending further review) along with a verification reference number.
• From game providers: Aggregated session data from game providers such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi relating to your game activity on the Platform. This data is used for dispute resolution and responsible gaming monitoring.

5 Legal Basis for Processing

be998 processes your Personal Data on the following legal grounds:

Processing Activity	Legal Basis
Creating and managing your player account	Performance of a contract (the Terms and Conditions you accepted at registration)
Processing deposits and withdrawals	Performance of a contract; compliance with payment processing obligations
Identity verification (KYC)	Legal obligation; legitimate interest in preventing fraud and underage gambling
Responsible gaming monitoring	Legitimate interest in protecting Member welfare and preventing gambling harm
Anti-money laundering checks	Legal obligation; legitimate interest in maintaining platform integrity
Sending transactional communications (deposit confirmations, withdrawal receipts)	Performance of a contract
Sending promotional communications (bonus offers, tournament alerts)	Consent (you may withdraw consent at any time via account settings or by emailing [email protected])
Platform analytics and performance monitoring	Legitimate interest in improving the Platform
Fraud detection and security monitoring	Legitimate interest in protecting Members and the Platform from fraudulent activity

6 How We Use Your Data

be998 uses the Personal Data we collect for the following purposes:

• Account administration: Creating, maintaining, and securing your player account, processing login requests, and managing account settings and preferences.
• Age and identity verification: Confirming that you meet the 21+ age requirement and that the identity you have provided is accurate and genuine.
• Payment processing: Facilitating deposits into your Wallet and processing withdrawal requests to your registered payment methods in BDT.
• Betting and gaming services: Recording your bets, calculating and crediting winnings, managing your bonus balance, and providing access to our full range of sports betting, live casino, and crash game products.
• Customer support: Responding to your queries, resolving disputes, investigating complaints, and providing technical assistance.
• Responsible gaming: Monitoring your play patterns to identify potential signs of problem gambling, enforcing deposit limits, session limits, and self-exclusion requests you have set or requested.
• Fraud and security: Detecting, investigating, and preventing fraud, money laundering, match fixing, multiple account abuse, bonus abuse, and other prohibited activities.
• Platform improvement: Analysing aggregated usage data to improve the design, performance, and content of the Platform.
• Marketing communications: Sending you promotional emails or messages about bonuses, tournaments, and seasonal offers relevant to the Bangladesh market — subject to your consent and your right to opt out at any time.
• Legal compliance: Meeting our legal and regulatory obligations, responding to lawful requests from authorities, and maintaining accurate financial records.

7 Data Sharing & Disclosure

be998 does not sell your Personal Data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Service Providers (Data Processors)

We share Personal Data with trusted third-party service providers who process data on our behalf under written data processing agreements. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard network processors — for the purpose of completing deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and document verification services used to validate government-issued ID documents submitted by Members.
• Game providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming, Play'n GO, and other certified game studios — who receive your Member ID and session data to deliver their gaming content within the Platform.
• Cloud hosting and infrastructure providers: Secure data centre and cloud infrastructure providers who host the Platform's servers and databases.
• Analytics providers: Aggregated, anonymised usage analytics platforms used to monitor Platform performance and identify technical issues.
• Customer support platforms: Live chat and helpdesk software providers used to manage support ticket workflows.

7.2 Legal and Regulatory Disclosures

be998 may disclose your Personal Data to law enforcement agencies, financial intelligence units, courts, or other governmental bodies where we are required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of be998, its Members, or the public. We will notify you of any such disclosure request where we are legally permitted to do so.

7.3 Business Transfers

In the event that be998 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected Members of any such transfer and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7.4 Aggregated and Anonymised Data

be998 may share aggregated, statistical, or anonymised data that does not identify any individual Member with third parties for industry research, market analysis, or promotional purposes. This data cannot be used to re-identify you.

8 Cookies & Tracking Technologies

be998 uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. Below is a summary of the cookie categories we use:

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, and basic Platform functionality. Without these cookies the Platform cannot function.	No — required for operation
Functional	Remembering your language preference, display settings, and game lobby filters across sessions.	Yes — disabling may affect user experience
Analytics	Collecting aggregated, anonymised data about how Members navigate the Platform, which pages are most visited, and where technical errors occur. This data is used to improve Platform performance.	Yes — opt out via account settings
Responsible Gaming	Storing your session timer data and responsible gaming preference settings (deposit limits, reality check intervals) between sessions.	No — required for responsible gaming compliance

be998 does not use third-party advertising cookies, retargeting pixels, or any tracking technology that enables cross-site behavioural profiling. You can manage cookie preferences in your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into or using the Platform.

9 Data Retention

be998 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a period of 5 years following permanent account closure, in accordance with standard financial record-keeping requirements.
• KYC documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Retained for 5 years from the date of each transaction, in line with financial record-keeping standards.
• Betting and gaming logs: Retained for 3 years from the date of each session for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for 2 years from the date of the last interaction in a support thread, unless the interaction relates to a formal complaint that remains unresolved, in which case it is retained until resolution plus 2 years.
• Technical and usage data (cookies/logs): Anonymised and aggregated after 13 months. Raw IP logs are deleted after 90 days unless retained as part of a fraud investigation.
• Marketing consent records: Retained for the duration of your account plus 3 years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual.

10 Data Security

be998 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• SSL-256 encryption on all data transmitted between your device and our servers, ensuring that your credentials and payment information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including passwords (stored as salted hashes), payment method references, and KYC document files.
• Two-factor authentication (2FA) available to all Members as an additional login security layer. We strongly recommend enabling 2FA via your account security settings.
• Role-based access controls ensuring that be998 staff can only access Member data that is necessary for their specific role. No staff member has unrestricted access to the full database.
• Regular security audits and penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• DDoS protection and web application firewall (WAF) to protect the Platform against network-level attacks and malicious traffic.
• Incident response procedures that require be998 to notify affected Members of any data breach that poses a significant risk to their rights or interests within 72 hours of the breach being discovered.

11 Your Rights

As a data subject, you have the following rights in relation to the Personal Data that be998 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data that be998 holds about you, along with information about how it is being used. We will provide this data in a clear, structured format.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly in your account settings, or contact support for changes to identity-verified fields.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected. Note that this right is subject to our legal obligations to retain certain records (see Section 9 above), and may not apply where retention is required by law.
• Right to Restriction of Processing: In certain circumstances, such as where you contest the accuracy of your data or where processing is unlawful, you may request that we restrict how your data is used while the matter is resolved.
• Right to Data Portability: You may request a copy of the Personal Data you have provided to be998 in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your Personal Data where we rely on legitimate interests as our legal basis. You may also object to receiving direct marketing communications at any time, with immediate effect.
• Right to Withdraw Consent: Where we rely on your consent to process Personal Data (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

12 Children's Privacy

The be998 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has registered an account or provided us with Personal Data, we will immediately suspend the account, delete the associated data, and forfeit any funds connected with the underage account in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor in your care has registered an account on be998.io, please contact us immediately at [email protected] so that we can take prompt action. We take underage gambling extremely seriously and cooperate with any legitimate request to investigate and close accounts held by minors.

13 Third-Party Links

The be998 Platform may contain references to third-party services such as game providers, payment platforms, and sports data feeds. These third-party services operate under their own privacy policies, which are entirely independent of this Policy. be998 is not responsible for the privacy practices of any third-party service and encourages you to review the privacy policies of any external platforms you interact with.

Within the Platform itself, all game content is delivered within the be998 interface via embedded integrations. Game providers receive only the data necessary to deliver their gaming content and settle game outcomes. They do not receive your full personal profile.

14 International Data Transfers

be998's primary servers and data storage infrastructure are located in secure data centres serving the South and Southeast Asian region. Some of our third-party service providers — including certain game providers and cloud infrastructure partners — may process or store data in jurisdictions outside Bangladesh. Where such transfers occur, be998 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to maintain data protection standards consistent with those described in this Privacy Policy.

We do not transfer your Personal Data to jurisdictions that lack adequate data protection frameworks without ensuring that appropriate contractual protections are in place. If you have specific questions about where your data is stored or processed, please contact our support team.

15 Policy Changes

be998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational circumstances. When material changes are made, we will notify registered Members by email and by displaying a prominent notice on the Platform at least 7 calendar days before the changes take effect. The updated Policy will be identified by a new version number and effective date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, please discontinue use of the Platform and contact our support team to request account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way be998 handles your Personal Data, please contact our support team through any of the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request" as appropriate
• Live Chat: Available directly on the be998 Platform, 24 hours a day, 7 days a week
• WhatsApp: +880 1XXX-XXXXXX

Our support team operates in both English and Bengali and will acknowledge all privacy-related enquiries within 48 hours. Formal data rights requests will receive a substantive response within 30 days of receipt.