Mobile / App
ba99o collects only the information needed to run your account and process transactions through bKash, Nagad and Rocket. This policy sets out what we collect, how we use it, and the choices available to you — with access subject to your local law and eligible regions.
When you open an account with us, we collect the details you submit during registration — name, contact information and wallet identifiers linked to bKash, Nagad or Rocket as relevant. We also record session activity: login timestamps, device type, browser version and the pages you navigate inside the platform. This data serves three purposes: verifying your identity, processing your transactions, and keeping the account secure against unauthorised access. We do not sell your personal information to third parties. Where we share data with payment processors — such as the networks supporting bKash, Nagad and Rocket transfers — we do so only to complete the transaction you initiate and within the scope that processing requires. Cookies and similar tracking tools are active on our site; they help us remember session preferences and measure how pages load on your device. You can manage cookie settings through your browser. Retention periods depend on account status and any obligations that apply under local law in your eligible region. If your account is closed, we hold only what is legally required and remove the rest on the schedule that applies to your jurisdiction.
Not every part of your experience falls under one set of rules. This section draws the line between what our policy covers directly and where separate terms or third-party policies apply. Knowing the boundary helps you direct questions to the right place and understand what rights you can exercise with us versus with an external service.
Covered. All data collected when you register, log in or update your account profile — including contact details and wallet identifiers for bKash, Nagad or Rocket — is governed by this policy.
Partially covered. We hold the record of what you submitted; the payment network processes the transfer under its own terms. Disputes about a bKash, Nagad or Rocket transfer should start with us, but may involve the network's own process.
Covered for analytics. How you navigate game lobbies and which categories you open is logged as session data under this policy. Game outcomes and mechanics are governed by the applicable game rules, not this document.
Not covered. Links to external sites, payment network apps and any service outside ba99o operate under their own privacy policies. We have no control over how those services collect or use your data once you leave our platform.
You have real, actionable choices here — not just a list of principles. First, you can request a copy of the personal data we hold on your account at any time by contacting our support team through the route shown in the section below. Second, if any detail is wrong — a mistyped contact number, an outdated wallet identifier — you can ask us to correct it and we will update the record after verifying the change against your account. Third, you can ask us to explain why we hold a specific piece of data and how long we plan to retain it. Availability of certain rights may depend on your jurisdiction and the legal obligations that apply there. We will respond within the timeframe required by the rules that cover your eligible region. If your question is about a bKash, Nagad or Rocket transaction record specifically, include the transaction reference in your message so we can locate the correct entry without delay.
Submit a data access request through our published support contact. We will confirm receipt and provide the relevant account data in line with the obligations that apply to your eligible region.
If your registered contact or wallet information is wrong, raise a correction request with us. We verify the update against your account before applying any change.
You can ask how long we hold a specific data type. Our answer will reflect the legal retention requirements in your jurisdiction — we do not hold data beyond what is necessary or required.
For anything not covered by the steps above — including questions about cookies, session logs or payment identifiers — reach us through the contact routes listed in the support section of this page.
If you have a question about this policy, want to exercise a data right or need to report a concern about how your information is handled, use the routes below. These are the channels we have published; we do not operate undisclosed contact paths. When you write in, include your account username and — if your question relates to a payment record — the transaction reference for the bKash, Nagad or Rocket transfer in question.
Open the support widget inside your signed-in account area to raise a data query directly. This is the fastest route for questions tied to a specific account or transaction record.
Send your data rights request or policy question to our published support email address. Include your account username and any relevant transaction reference so we can locate the correct record.
Our help centre contains published answers to common policy questions. Check there first — if your question is not covered, use the chat or email route to reach us directly.
Security around your account data is not an afterthought. Each area below describes a concrete practice we follow — from how we store what you share to how long we keep it and how you can push back if something looks wrong.
Account and payment data — including wallet identifiers for bKash, Nagad and Rocket — is stored on access-controlled infrastructure. Only the processes that need a data field to function can read it; lateral access is not permitted within our systems.
We use cookies to maintain your login session, remember display preferences and measure page performance. You control cookie acceptance through your browser settings. Disabling all cookies may affect how certain account pages load on your device.
Active account data is held while your account is open and for the period required by the legal obligations in your eligible region after closure. We do not retain personal data indefinitely — the schedule is tied to legal requirement, not convenience.
When we update this policy, we publish the revised version here and note the change date at the top of the document. Continued use of your account after a posted update means you have had the opportunity to review the change.
These are the questions we get most often about how we handle account and payment data. If your question is not here, reach us through the support routes listed above.
We collect your name, contact details and the wallet identifiers you provide — such as your bKash, Nagad or Rocket number — along with the device and browser information recorded during your session. We collect only what is needed to run and secure your account.
We share data only with the payment networks required to complete a transfer you initiate — for example, passing your Nagad or Rocket reference to process a transaction. We do not sell personal data to third parties or share it for marketing purposes outside our platform.
We keep only what local legal obligations in your eligible region require us to hold after account closure. Everything beyond that is removed according to the retention schedule that applies to your jurisdiction. You can ask us for the specific timeframe that applies to your account.
Yes. Submit a data access request through our published support contact — account chat or email — and include your account username. We will confirm the request and provide the relevant data within the timeframe required by the rules covering your eligible region.
Raise a correction request with our support team. Include the field that needs updating and the correct detail. We verify the change against your account before applying it — this applies to contact information and wallet identifiers like your bKash or Rocket number.
Cookies keep your session active and remember your display settings. You can block or delete cookies through your browser settings at any time. Note that disabling session cookies may affect login persistence and how your account pages load on mobile.