ba994 Privacy Policy
At ba994, protecting your personal data is a fundamental responsibility. This Privacy Policy explains precisely what information we collect when you use our platform, how we use it, who we may share it with, how long we retain it, and what rights you hold over your own data. We are committed to handling your information with full transparency and care.
How ba994 Protects Your Privacy
We apply the following data protection principles across every aspect of the ba994 platform, from registration through to withdrawal.
Data Minimisation
ba994 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect information beyond what is needed.
SSL Encryption
All data transmitted between your device and ba994 servers is protected using industry-standard TLS/SSL encryption. Sensitive information such as payment details and passwords is never stored or transmitted in plain text.
Access Controls
Access to player personal data within ba994's systems is restricted to authorised personnel only, operating on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
No Ad Tracking
ba994 does not share your personal data with third-party advertising networks or data brokers. We do not build advertising profiles on our players or sell user data to any external commercial entities.
Defined Retention Periods
ba994 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable record-keeping obligations. Data is securely deleted once the retention period expires.
Your Rights Respected
Registered players have the right to access, correct, or request deletion of their personal data at any time by contacting [email protected]. ba994 responds to all verified data requests within a reasonable timeframe.
1 Information We Collect
ba994 collects personal data about you from several sources when you use our platform. The categories of information we collect, and the specific data points within each category, are described below. We collect only what is necessary for the stated purposes.
1.1 Registration Data
When you create a ba994 account, we collect the following information directly from you:
- Full legal name (as it appears on your government-issued ID)
- Date of birth (to verify you are aged 18 or above)
- Email address (used for account communications and notifications)
- Mobile phone number (a Bangladeshi number, typically associated with bKash or Nagad)
- Chosen username and encrypted password
- Residential address (required for KYC verification at withdrawal stage)
1.2 Identity Verification (KYC) Data
When you request a withdrawal or when ba994 initiates a Know Your Customer (KYC) review, we may ask you to submit the following documentary evidence:
- A copy of your National Identity Card (NID) or passport issued by a Bangladeshi authority
- A recent utility bill or bank statement confirming your residential address
- A screenshot or document confirming ownership of your bKash, Nagad, Rocket, or Upay account
- A selfie photograph or short video for liveness verification, where required
KYC documents are processed and stored with strict access controls. They are used solely for identity verification and anti-fraud compliance purposes and are not shared with any third party except as described in Section 3 of this Policy.
1.3 Financial Transaction Data
Each time you make a deposit or withdrawal, ba994 records transactional data including the payment method used (e.g., bKash, Nagad, Visa), the transaction amount in Bangladeshi Taka (৳ BDT), the date and time of the transaction (Bangladesh Standard Time, UTC+6), and the transaction reference number provided by the payment provider. ba994 does not store full card numbers or mobile banking PINs — payment credentials are handled directly by the relevant payment service provider.
1.4 Gameplay & Betting Activity Data
ba994 maintains a complete log of your activity on the platform, including:
- Bets placed, odds accepted, and outcomes across all sports markets (cricket, volleyball, football, and others)
- Casino and slot game sessions, including game titles, stakes, and results
- Bonus offers claimed and wagering progress
- Live chat and support interactions
This data is used primarily for account management, dispute resolution, responsible gaming monitoring, and fraud prevention. It may also be used in aggregated, anonymised form to improve the ba994 platform.
1.5 Technical & Device Data
When you access ba994 via a browser or mobile device, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), the pages you visit and the duration of each visit, and referral URL (if you arrived via a search engine or external link). This data is used for security monitoring, fraud detection, and platform performance optimisation.
ba994 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness checks where required for KYC), or health information, unless you voluntarily disclose such information through support channels.
2 How We Use Your Data
ba994 uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary processing activities:
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Creating and managing your player account | Registration data, device data | Contract performance |
| Processing deposits and withdrawals | Financial transaction data, KYC data | Contract performance |
| Age and identity verification (18+ enforcement) | Registration data, KYC documents | Legal obligation |
| Fraud detection and anti-money-laundering checks | All data categories | Legal obligation / Legitimate interest |
| Responsible gaming monitoring and intervention | Gameplay data, financial data | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Registration data, gameplay data, support logs | Contract performance |
| Sending transactional notifications (e.g., deposit confirmed) | Registration data, financial data | Contract performance |
| Sending promotional communications (opt-in only) | Registration data, gameplay preferences | Consent |
| Platform improvement and analytics | Aggregated, anonymised gameplay and device data | Legitimate interest |
Marketing Communications
ba994 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses and offers if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw consent for marketing communications at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
ba994 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Our responsible gaming system may flag accounts for review based on behavioural patterns, but all consequential decisions (such as account restrictions) are made by trained ba994 personnel.
3 Data Sharing & Disclosure
ba994 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the categories of recipients described below, strictly for the purposes stated:
Payment Service Providers
To process your deposits and withdrawals, ba994 shares the minimum necessary transaction data with our integrated payment partners, including bKash, Nagad, Rocket, Upay, and international card processors (Visa/Mastercard networks). These providers receive only the data required to execute and verify the relevant transaction. They are contractually prohibited from using your data for any purpose other than payment processing.
Identity Verification Partners
Where ba994 uses third-party KYC or identity verification services to assist with document authentication, such partners receive copies of the documents you submit solely for verification purposes. All identity verification partners used by ba994 operate under strict data processing agreements and are required to maintain confidentiality.
Game Software Providers
Casino and slot game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and session token in order to operate their games within the ba994 platform. These providers do not receive your full name, contact details, or financial data.
Legal and Regulatory Disclosure
ba994 may disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, a valid legal order, or a legitimate official investigation into suspected financial crime, fraud, or other unlawful activity. In such cases, ba994 will disclose only the data specifically requested and will notify the affected player where legally permitted to do so.
Business Transfers
In the event that ba994 undergoes a corporate restructuring, merger, acquisition, or sale of assets, player personal data may be transferred to the successor entity as part of that transaction. In such circumstances, ba994 will provide affected players with advance notice and the successor entity will be required to honour this Privacy Policy.
ba994 will never share your personal data with third-party advertising networks, data brokers, or social media platforms for commercial targeting purposes.
4 Cookies & Tracking Technologies
ba994 uses cookies and similar technologies (such as local storage and session tokens) on its website. These are small data files stored on your device that help us deliver a functional, secure, and personalised experience. Below is a description of the types of cookies we use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login state, CSRF protection, load balancing. Required for the site to function correctly. | No — essential for operation |
| Functional | Remembering your language preferences, timezone (Bangladesh Standard Time, UTC+6), and display settings between sessions. | Yes — via browser settings |
| Analytics | Aggregated, anonymised data on page visits, session duration, and navigation paths, used to improve the platform. No personal identifiers are included. | Yes — via browser settings |
| Security | Fraud detection signals, bot detection, and device fingerprinting used to protect your account and the platform from unauthorised access. | No — essential for security |
Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security section of the browser preferences menu. Please note that disabling strictly necessary or security cookies may impair the functionality of the ba994 platform, including your ability to log in or complete financial transactions. ba994 does not use third-party advertising cookies or cross-site tracking pixels of any kind.
5 Data Retention
ba994 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, taking into account legal, regulatory, and operational requirements. The following retention schedule applies:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Anti-money-laundering record-keeping obligations |
| KYC identity documents | Duration of account + 5 years after closure | Regulatory compliance and fraud investigation |
| Financial transaction records | Duration of account + 7 years after closure | Financial record-keeping and audit requirements |
| Betting and gameplay logs | Duration of account + 3 years after closure | Dispute resolution and responsible gaming review |
| Customer support communications | 3 years from the date of the interaction | Dispute resolution and quality assurance |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for regulatory purposes |
| Technical/device logs | 90 days from collection | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player. Where data must be retained beyond the standard period due to an ongoing legal proceeding, regulatory inquiry, or dispute, it will be held in restricted access storage until the matter is resolved.
6 Your Data Rights
As a registered player on ba994, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ba994's support team at [email protected] with the subject line "Data Rights Request". ba994 will respond to all verified requests within 30 days.
- Right of Access: You have the right to request a copy of the personal data that ba994 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details directly through your account settings page.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that ba994 may be required to retain certain data for legal or regulatory reasons even following an erasure request — in such cases we will explain the specific legal basis for retention.
- Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
- Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
- Right to Object: You have the right to object to processing of your personal data where ba994 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent (for example, for receiving promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To verify your identity before processing a data rights request, ba994 may ask you to confirm account details or provide a copy of your identity document. This step is in place to protect you — it ensures we do not disclose your data to an unauthorised party.
7 Data Security
ba994 implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
- Transport Layer Security (TLS): All data in transit between your browser and ba994 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted encryption.
- Data at Rest Encryption: Sensitive personal data stored on ba994 servers — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 or equivalent standard encryption.
- Password Security: Player passwords are stored as one-way cryptographic hashes using a strong hashing algorithm. ba994 staff cannot retrieve your plain-text password — if you lose your password, it must be reset.
- Access Control: Access to production systems and player data is restricted to authorised ba994 personnel on a need-to-know basis. All internal data access is logged and audited.
- Two-Factor Authentication (2FA): ba994 supports 2FA for player accounts. We strongly recommend enabling this feature to provide an additional layer of protection against unauthorised login attempts.
- Intrusion Detection: ba994 operates automated intrusion detection and anomaly monitoring systems that flag unusual access patterns in real time for security team review.
- Vendor Security: All third-party vendors who handle personal data on ba994's behalf are required to maintain information security standards equivalent to or higher than those applied by ba994 itself, and are subject to contractual data processing obligations.
Breach Notification
In the unlikely event of a data security incident that poses a significant risk to the rights and freedoms of affected players, ba994 will notify the relevant players and applicable authorities without undue delay and in accordance with applicable legal obligations. Notifications will be sent to the email address registered on the affected account.
No data transmission over the internet can be guaranteed to be 100% secure. While ba994 applies best-practice security measures, players should also take responsibility for protecting their account credentials and keeping their devices secure.
8 Policy Updates & Contact
Changes to This Policy
ba994 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made to this Policy, we will notify registered players by sending an email to the address registered on their account, and by posting a prominent notice on the ba994 website. The "Last Updated" date at the top of this page will be revised each time the Policy is amended.
Your continued use of ba994 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should close your ba994 account and cease using the platform. Historical versions of this Privacy Policy are available on request by contacting [email protected].
Children's Privacy
ba994 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player account has been registered by a person under 18, that account will be closed immediately, all data associated with it will be deleted (subject to any overriding legal retention obligations), and any deposits will be returned to the payment method used. Parents and guardians concerned about underage access to online gambling platforms are advised to use parental control software on devices accessible to minors.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the ba994 data support team using the details below. All privacy-related enquiries are handled in English and are typically responded to within 5 business days.
- Email: [email protected]
- Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
- Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Please do not include sensitive personal data such as your full NID number or payment account PIN in your initial contact email. Our support team will guide you through a secure channel for submitting sensitive information if required.
Have Questions About Your Data?
Our support team is available 24/7 in English to help with any privacy-related questions. You can also explore our FAQ for quick answers, check your account settings, or head to our responsible gaming page. 18+ only — please play responsibly.