Privacy Policy
How buji99 Protects Your Data
Your privacy is fundamental to how buji99 operates. This Privacy Policy explains exactly what personal information we collect when you use our platform, why we collect it, how it is used and stored, and the rights you hold over your own data. We are committed to handling all player information with transparency, care, and strict security standards.
What You Need to Know About buji99 Privacy
End-to-End Encryption
All data transmitted between your device and buji99 servers is protected using industry-standard TLS/SSL encryption. Your personal details, payment information, and account activity are never sent over unencrypted connections.
We Do Not Sell Your Data
buji99 does not sell, rent, or trade any player personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate and improve your experience on the platform.
You Control Your Data
Registered players may request access to, correction of, or deletion of their personal data at any time by contacting support. We respond to all data requests within a clearly defined timeframe and in plain English.
Secure Payment Processing
Payment data processed through bKash, Nagad, Rocket, Upay, and banking partners is handled directly by those certified payment providers. buji99 does not store full card numbers or mobile banking PINs on its own servers.
Transparent Cookie Use
buji99 uses cookies only to maintain session security, remember your preferences, and analyse aggregate platform usage. We do not deploy third-party advertising cookies or cross-site tracking technologies.
Defined Retention Periods
buji99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable anti-money-laundering and financial record-keeping obligations. Clear retention periods are documented in this policy.
Introduction
This Privacy Policy governs the collection, processing, storage, and sharing of personal data by buji99 ("buji99", "we", "us", "our") in connection with the operation of the online gaming platform accessible at buji99.app. It applies to all registered players and to any visitor who accesses the platform, regardless of the device or network from which the platform is accessed.
buji99 is committed to protecting the privacy of its players and to handling personal data responsibly, transparently, and in accordance with recognised data protection principles. We collect only the information that is genuinely necessary to provide our services, verify player identity and age, process transactions, prevent fraud and money laundering, and fulfil our legal obligations.
By registering an account on buji99 or by continuing to use the platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood this policy and that you consent to the data practices described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the platform and may request account closure by contacting our support team.
This Privacy Policy should be read in conjunction with the buji99 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and buji99. Capitalised terms used but not defined in this Privacy Policy carry the meanings assigned to them in the Terms & Conditions.
Information We Collect
buji99 collects personal data through several distinct channels and for clearly defined purposes. The categories of information we collect are set out in the table below. We do not collect sensitive personal data (such as medical records, racial or ethnic origin, religious beliefs, or biometric data) unless this is strictly necessary to fulfil a specific legal obligation such as responsible gaming intervention.
| Category | Specific Data Points | How Collected |
|---|---|---|
| Registration Data | Full name, date of birth, email address, username, password (hashed), mobile number | Provided by you during account sign-up |
| Identity Verification (KYC) | National ID Card number, Passport details, Driver's Licence, selfie photograph, proof of address (utility bill or bank statement) | Submitted by you when KYC verification is triggered |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account references, deposit and withdrawal transaction records, account balance history | Generated during deposit and withdrawal transactions |
| Gaming Activity | Game session logs, bet amounts and outcomes, game titles accessed, wagering history, bonus usage records | Automatically logged by the platform during play sessions |
| Technical / Device Data | IP address, device type, operating system, browser type and version, screen resolution, timezone (Bangladesh Standard Time, UTC+6) | Automatically captured when you connect to the platform |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, survey responses, promotional opt-in records | Created when you contact buji99 support or respond to communications |
| Location Data | Country and city-level location derived from IP address; no precise GPS location is collected | Automatically derived from your IP address at login |
How We Use Your Information
buji99 uses the personal data it collects exclusively for the following legitimate purposes. We do not use your data for purposes incompatible with those listed here without first obtaining your explicit consent or as otherwise required by law.
Account management and service delivery. Registration data and financial data are used to create and manage your player account, authenticate your identity at each login, process deposits and withdrawals via your chosen payment method, and deliver the full range of buji99 gaming services to you.
Age and identity verification (KYC). KYC documentation is used to confirm that you are aged 18 or above and that the identity you have provided during registration is accurate. This is a mandatory compliance function that buji99 cannot waive. KYC verification also supports our obligations under anti-money-laundering frameworks.
Fraud prevention and platform security. Technical and device data, IP address information, and gaming activity logs are analysed to detect suspicious behaviour, prevent unauthorised account access, identify duplicate accounts, and protect the integrity of the platform and its player community.
Responsible gaming monitoring. Gaming activity data — including session duration, bet frequency, deposit patterns, and self-exclusion status — is used to identify players who may be exhibiting signs of problem gambling and to trigger responsible gaming interventions in accordance with our Responsible Gaming Policy.
Customer support. Communications data is used to resolve support queries, respond to complaints, manage account disputes, and improve the quality and efficiency of our support team's responses.
Platform improvement and analytics. Aggregated, anonymised usage data is used to understand how players navigate the platform, which features are most popular, and where technical issues arise. This helps us prioritise product development and enhance the player experience. This analysis uses only non-personally-identifiable aggregates — individual player profiles are not used for this purpose.
Marketing communications. If you have opted in to receive promotional communications from buji99, we will use your email address to send you information about bonuses, seasonal promotions, and new game releases. You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email or by contacting support. Opting out of marketing does not affect your ability to receive transactional communications (such as deposit confirmations and security alerts).
- Contractual necessity — to provide the gaming services you signed up for
- Legal obligation — KYC, AML compliance, age verification
- Legitimate interest — fraud prevention, platform security, responsible gaming monitoring
- Consent — marketing communications (opt-in only)
Data Sharing and Disclosure
buji99 does not sell, rent, or trade your personal data to any third party. We share personal data with external parties only in the limited, specific circumstances set out below, and always with appropriate safeguards in place to protect your information.
Transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) solely to execute and confirm your deposit or withdrawal. These providers operate under their own data protection frameworks and are independently certified payment institutions.
To deliver third-party games (from studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming), a session token and minimal player identifier may be passed to the relevant game provider. No full personal profile or financial data is shared with game studios.
KYC documentation may be processed via a third-party identity verification service to authenticate your identity documents against authoritative databases. These services act as data processors operating strictly under buji99's instructions and are contractually bound to the same data protection standards we apply internally.
buji99 may disclose personal data to law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or as part of an active investigation into fraud, money laundering, or other financial crime. Such disclosures are made only to the minimum extent required by the relevant legal obligation.
Cookies and Tracking Technologies
buji99 uses cookies and similar local storage technologies to operate the platform securely and to provide a consistent, personalised experience across sessions. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot be used to access other data stored on your device.
buji99 uses three categories of cookies: strictly necessary cookies, functional cookies, and analytics cookies. We do not use advertising cookies, third-party retargeting cookies, or social media tracking pixels.
Strictly Necessary Cookies
These cookies are essential for the platform to function. They maintain your login session, prevent cross-site request forgery (CSRF) attacks, and ensure that your account balance and game state are accurately preserved across page loads. These cookies cannot be disabled without breaking core platform functionality.
Functional Cookies
Functional cookies remember your preferences so you do not have to re-enter them on each visit. This includes your display language setting, preferred payment method, and any responsible gaming tool configurations (such as deposit limit values) that you have set in your account dashboard.
Analytics Cookies
Analytics cookies collect anonymised, aggregated data about how players navigate the platform — which pages are most visited, how long sessions last, and where technical errors occur. This information is used exclusively to improve platform performance. No individual player is identified in analytics reports.
You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies selectively. Please note that disabling strictly necessary cookies will prevent you from logging in to your buji99 account. Disabling functional cookies will mean your preferences are not saved between sessions. Disabling analytics cookies has no impact on platform functionality.
buji99 does not use browser fingerprinting for the purpose of tracking players across third-party websites. Device fingerprinting is used only as a supplementary fraud-detection signal within the buji99 platform itself.
Data Security
buji99 implements a multi-layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme encompasses technical controls, physical controls, and organisational policies reviewed on an ongoing basis.
Transport security. All communication between your browser or mobile device and buji99 servers is encrypted using TLS 1.2 or higher. This ensures that data in transit — including your login credentials, financial transaction details, and personal information — cannot be intercepted by any third party.
Data at rest. Personal data stored on buji99 infrastructure is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, governed by role-based access controls and multi-factor authentication requirements.
Password storage. Passwords are never stored in plain text. buji99 uses a modern, salted cryptographic hashing algorithm (bcrypt or equivalent) to store password credentials. Even in the event of a data breach, plaintext passwords cannot be recovered from stored hashes.
Fraud and intrusion detection. buji99's security systems continuously monitor for unusual login patterns, access from unfamiliar devices, multiple failed authentication attempts, and other indicators of potential account compromise or platform intrusion. Automated alerts are escalated to the security team for immediate investigation.
Data breach response. In the event of a personal data breach that poses a risk to affected players, buji99 will notify impacted players without undue delay via their registered email address, providing a clear description of the nature of the breach, the categories of data involved, and the steps being taken to contain and remediate the incident.
- TLS 1.2+ encryption on all data in transit
- AES-256 encryption for data stored at rest
- Bcrypt password hashing — plaintext passwords never stored
- Role-based access controls limiting internal data access
- Multi-factor authentication for all staff with data access
- Real-time intrusion detection monitoring platform traffic
- Regular security audits and penetration testing cycles
- Breach notification to affected players without undue delay
Data Retention
buji99 retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to each category of personal data held by buji99.
Your Rights
As a buji99 player, you hold a meaningful set of rights with respect to your personal data. buji99 is committed to honouring these rights promptly and without unnecessary barriers. All requests relating to your personal data should be submitted in writing to [email protected] with the subject line "Data Rights Request".
You have the right to request a copy of all personal data buji99 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a verified request. There is no fee for a single access request within any 12-month period.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as name, date of birth, or contact information, you may also update certain fields directly within your account profile, subject to KYC re-verification where required.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Requests for erasure that conflict with a legal obligation (such as AML record-keeping) will be partially fulfilled, with the conflicting portion retained only for the minimum legally required period.
You may request that buji99 restrict the processing of your personal data in certain circumstances — for example, while you are contesting the accuracy of data we hold, or where you object to processing based on legitimate interest. During a restriction, data may be stored but not actively processed beyond what is strictly necessary.
Where processing is based on your consent or on a contractual relationship, you may request that buji99 provide your personal data in a portable format (CSV or JSON) so that you may transfer it to another service provider. This right applies to data you have directly provided to buji99, not to data derived or inferred by the platform.
You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection to marketing, buji99 will cease marketing communications within 5 business days. You may also object to processing based on legitimate interests; buji99 will review such objections and cease processing unless a compelling legitimate ground overrides your interests.
Third-Party Services
The buji99 platform integrates with a number of third-party service providers to deliver core functionality. Each of these integrations involves some degree of data exchange, which is described below. buji99 conducts due diligence on all third-party providers to ensure that their data protection practices meet an acceptable standard before any integration is deployed in the live environment.
Third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming supply game content to the buji99 platform via certified APIs. When you launch a game from one of these providers, a session token is passed to the provider's game server. This token identifies your current session but does not transmit your full name, email address, payment details, or KYC documentation to the game studio. Game result data (bet amount and outcome) is returned to buji99 for wallet settlement and gaming activity logging. All game provider integrations use encrypted API connections.
Payment transactions are processed by your chosen method provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard. To initiate a transaction, buji99 passes the transaction amount, your account reference, and a payment session identifier to the provider. The provider returns a transaction status confirmation. buji99 does not receive or store full card numbers, mobile banking PINs, or any other sensitive authentication credential used within the payment provider's own interface. Each payment provider is independently responsible for the security of its own platform.
Where buji99 uses a third-party identity verification service to process KYC documents, the relevant documentation is transmitted to that provider via an encrypted channel solely for the purpose of verification. The provider acts as a data processor under buji99's instructions and is contractually prohibited from using your identity documents for any purpose beyond the specific verification task. Verification results are returned to buji99 in the form of a pass/fail status and risk score; raw document images are not retained by buji99 beyond the KYC retention period specified in this policy.
buji99's live chat and ticketing infrastructure may be powered by a third-party customer support software provider. Support interaction data — including your messages, your account identifier, and any attachments you share — is stored within that platform's infrastructure, which is subject to a data processing agreement with buji99. Support agents access this data solely to resolve your queries. Data retention within the support platform mirrors the 3-year communications retention period set out in this Privacy Policy.
Policy Updates
buji99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or improvements to the clarity of this document. The version of this Privacy Policy published on this page at any given time is the current, binding version applicable to your use of the platform.
When we make material changes to this Privacy Policy — meaning changes that significantly affect how your personal data is collected, used, or shared — we will notify registered players by email to their registered address at least 14 days before the changes take effect. For minor or clarificatory changes that do not materially alter the substance of the policy, we will update the "Last updated" date at the bottom of this page without separate notification.
Your continued use of the buji99 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change to this Privacy Policy, you should discontinue use of the platform before the change takes effect and may request account closure by contacting [email protected].
We encourage you to review this Privacy Policy periodically to stay informed about how buji99 handles your personal data. A record of all material changes to this Privacy Policy, including the date on which each version became effective, is available on request from the buji99 support team.
Last reviewed and updated: 1 January 2026. This Privacy Policy is the current binding version published on buji99.app.
Ready to Play at Bangladesh's Premier Casino?
Now that you understand how buji99 protects your data, explore everything the platform has to offer — from live cricket betting and slots to crash games and live casino tables. Deposits and withdrawals are available in Bangladeshi Taka via bKash, Nagad, and Rocket. For players aged 18 and above only.
18+ only · Play responsibly · Terms & conditions apply