ba991 Privacy
Policy

ba991 collects personal data in three principal ways: information you provide directly during registration and platform use, information collected automatically through your use of our platform, and information received from third-party partners where necessary for payment processing and identity verification.

1.1 Information You Provide Directly

1.2 Information Collected Automatically

When you visit or use the ba991 platform, certain technical information is collected automatically to ensure platform security, performance, and integrity:

• Device and technical data: Device type, operating system, browser type and version, screen resolution, and hardware identifiers.
• Network data: IP address, approximate geolocation (country/city level only, not precise GPS location), ISP name.
• Usage data: Pages visited, games played, session duration, click patterns, deposit and withdrawal history, bet history, and game round records.
• Session identifiers: Cookies, session tokens, and locally stored identifiers used to maintain your logged-in session and detect fraud.

1.3 Information from Third Parties

ba991 may receive limited data from the following third-party sources in order to deliver specific platform services:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Transaction confirmation status, partial account identifiers, and fraud signals required to process and verify your payments.
• KYC verification partners: Identity verification results confirming the authenticity of your government-issued identification documents.
• Game providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe): Game round results, bet amounts, and RTP data for the purposes of dispute resolution, account reconciliation, and responsible gaming monitoring.

ba991 uses cookies and similar tracking technologies (local storage, session tokens) to operate the platform, maintain your login session, prevent fraud, and analyse aggregated usage patterns to improve performance. The following categories of cookies are used on ba991.app:

3.1 Managing Cookies

You can manage or disable non-essential cookies through your web browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. The major browsers provide cookie management tools at the following paths:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
• Safari (iOS/macOS): Settings → Safari → Privacy & Security

ba991 does not use third-party advertising or cross-site tracking cookies. We do not permit ad networks or social media platforms to place tracking pixels on ba991.app. All analytics data collected via cookies is processed internally and is never sold to external parties.

ba991 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, to maintain an active account relationship with you, or as required by applicable law. The following retention schedule applies:

Once a retention period expires, ba991 will either securely delete your data or irreversibly anonymise it so that it can no longer be associated with your identity. Anonymised, aggregated data may be retained indefinitely for statistical and product improvement purposes, as it no longer constitutes personal data.

ba991 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to, the following:

• SSL/TLS 256-bit encryption: All data in transit between your browser or mobile app and ba991's servers is encrypted with industry-standard SSL/TLS certificates. The padlock indicator in your browser confirms an active secure connection at all times.
• AES-256 encryption at rest: Sensitive personal data stored in ba991's databases — including identity documents, payment method identifiers, and account credentials — is encrypted at rest using AES-256 encryption.
• Hashed passwords: ba991 never stores your password in plain text. Passwords are stored as irreversible cryptographic hashes using a secure hashing algorithm with salt. Not even ba991 staff can read your password.
• Two-factor authentication (2FA/OTP): Players are encouraged to enable two-factor authentication via Account Settings. 2FA adds a one-time password layer that significantly reduces the risk of unauthorised account access even if login credentials are compromised.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. ba991 staff are granted access only to the data necessary for their specific role. All internal data access is logged and audited.
• Fraud and intrusion detection: ba991 operates automated systems that monitor login patterns, transaction behaviour, and session activity for anomalies indicative of account takeover, multiple-account abuse, or money laundering activity.
• Security testing: ba991 conducts periodic security assessments of its platform infrastructure, including vulnerability scanning and access control reviews.

While ba991 takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring the device you use to access ba991 is adequately protected against malware and unauthorised access. ba991 recommends using a unique, strong password for your ba991 account and enabling 2FA as a baseline security measure.