Privacy Policy — How 999dd Protects Your Data

1. Introduction & Scope

999dd operates an online casino and sports betting platform accessible at https://999dd.app, serving players primarily located in Bangladesh. We understand that when you share your personal information with us — whether during registration, during KYC verification, or in the course of everyday platform use — you are placing a significant degree of trust in us. We take that trust seriously.

This Privacy Policy sets out, in a clear and structured manner, the types of personal data we collect from players and site visitors, the lawful basis on which we process that data, the purposes for which it is used, how long we retain it, the circumstances in which we may share it with third parties, and the rights available to you in respect of your personal data.

This Policy applies to all personal data processed by 999dd in connection with:

• Registration and maintenance of your 999dd player account.
• Identity verification and Know Your Customer (KYC) processes.
• Financial transactions, including deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and withdrawal requests.
• Gameplay activity across all games and sports betting markets on the 999dd platform.
• Customer support communications conducted by email or live chat.
• Marketing and promotional communications (where you have opted in or where otherwise permitted).
• Your browsing and navigation activity on the 999dd website.

This Policy does not apply to third-party websites, platforms, or services that may be linked to or from the 999dd platform. Those third parties operate under their own privacy policies, for which 999dd accepts no responsibility.

2. Data We Collect

999dd collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser as you navigate the site, and in some cases from third-party identity verification and payment service providers. The categories of personal data we collect are set out in detail below.

2.1 Registration & Account Data

When you create a 999dd account, we collect the information you provide during the registration process. This includes:

• Full legal name (first name and surname).
• Date of birth (used to verify you are 18 years of age or older).
• Email address and mobile phone number (registered in Bangladesh).
• Preferred username and encrypted password.
• Residential address (including city, district, and postal code).
• Preferred currency (Bangladeshi Taka, ৳).

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, and as required by our fraud prevention and responsible gaming obligations, we collect identity verification documents. These may include:

• Government-issued photo identification: National Identity Card (NID) or valid passport.
• A selfie or live photograph taken for facial comparison against your submitted ID document.
• Proof of payment method ownership (e.g., a screenshot or statement from your bKash or Nagad account confirming that the mobile number is registered in your name).
• Proof of address documents (utility bills, bank statements) where required for enhanced due diligence.

2.3 Financial Transaction Data

For each financial transaction you conduct on the 999dd platform, we record:

• Transaction type (deposit or withdrawal), amount in Taka (৳), and timestamp.
• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard).
• The mobile number or masked account number associated with your payment method.
• Transaction reference numbers issued by the payment provider.
• Running account balance and bonus credit records.

2.4 Gameplay & Betting Activity Data

We maintain detailed records of your activity on the 999dd platform for the purposes of account management, responsible gaming monitoring, and regulatory compliance. This includes:

• Bet placement records: game title, market, stake amount, odds, and outcome.
• Session duration, login timestamps, and session time-out events.
• Bonus claims, wagering progress, and bonus expiry events.
• Self-imposed deposit limits, session time-outs, and self-exclusion requests.

2.5 Technical & Device Data

When you access the 999dd platform through a browser or mobile device, certain technical data is collected automatically:

2.6 Customer Support Communications

When you contact the 999dd support team by email or through the platform's live chat feature, we retain records of those communications — including the content of your messages, any attachments or screenshots provided, and the date and time of each interaction. These records are used to resolve your enquiry and to improve the quality of our support service.

3. How We Use Your Data

999dd processes personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those for which it was collected. The table below summarises the primary purposes for which we use personal data, together with the lawful basis for each.

Marketing Communications

999dd may send you promotional emails or SMS notifications about bonuses, new games, seasonal offers (such as Eid promotions or Pohela Boishakh specials), and platform updates. These communications will only be sent where you have opted in during registration or subsequently via your account settings. You may withdraw your consent and opt out of marketing communications at any time by contacting support at [email protected] or by updating your notification preferences within your account.

Opting out of marketing communications does not affect the delivery of transactional notifications (such as deposit confirmations, withdrawal status updates, or security alerts), which are sent as a necessary function of maintaining your account.

4. Data Sharing & Disclosure

999dd does not share your personal data with third parties except in the specific circumstances described in this section. Where data is shared, we apply appropriate contractual and technical safeguards to ensure it is handled with the same standard of care we apply internally.

4.1 Payment Service Providers

To process your deposits and withdrawals, 999dd shares the minimum necessary financial and identity data with our payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each payment provider processes this data under their own privacy policy and in accordance with applicable financial regulations. Data shared with payment providers is limited to what is strictly required to complete the transaction in question.

4.2 Identity Verification Partners

999dd uses third-party identity verification services to assist with KYC processes. These providers may receive copies of your ID documents and biometric data (selfie) solely for the purpose of verifying your identity. They are contractually prohibited from using this data for any other purpose.

4.3 Game Providers

Some games available on the 999dd platform are powered by third-party studio software, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and gameplay data necessary to render and operate their games on our platform. They do not receive your full personal profile or financial data.

4.4 Legal and Regulatory Disclosure

999dd may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other competent government bodies where we are legally required to do so — for example, in response to a valid court order, law enforcement request, or regulatory investigation. In such cases, we will disclose only the data specifically requested and will notify the affected player where we are legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of 999dd's business assets, personal data held by 999dd may be transferred to the acquiring or successor entity as part of that transaction. If such a transfer occurs, we will take reasonable steps to notify affected players and to ensure that appropriate privacy protections are maintained by the recipient entity.

5. Cookies & Tracking Technologies

The 999dd platform uses cookies and similar tracking technologies to operate core platform functionality, to analyse site usage, and to deliver a personalised experience. A cookie is a small text file placed on your device by a web server. Cookies allow the server to recognise your browser on subsequent visits and to maintain session state across page loads.

Types of Cookies We Use

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from logging in and using the 999dd platform. Disabling functional cookies may affect your user experience, such as requiring you to re-enter preferences on each visit.

Instructions for managing cookies in the most commonly used browsers are available in each browser's help documentation. Third-party analytics tools used by 999dd process only anonymised, aggregated data and cannot be used to identify you as an individual.

6. Data Retention

999dd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods we apply are informed by our contractual obligations to players, our legal obligations under applicable anti-money laundering and financial regulation frameworks, and our legitimate interest in maintaining accurate records for dispute resolution.

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Self-exclusion records are retained permanently to ensure that a previously self-excluded player cannot re-register during their exclusion period and to support ongoing responsible gaming obligations.

7. Data Security

999dd implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, we apply industry-standard practices consistently across all systems that store or process personal data.

Technical Measures

• TLS/SSL Encryption: All data transmitted between your device and the 999dd platform is encrypted using TLS 1.2 or higher, ensuring that your login credentials, financial information, and personal data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields — including passwords (which are stored as salted hashes, never in plain text), KYC document files, and payment details — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 999dd's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review.
• Two-Factor Authentication (2FA): All 999dd staff accounts with access to personal data systems are protected by two-factor authentication. We strongly encourage players to enable 2FA on their own accounts where available.
• Intrusion Detection and Monitoring: 999dd's platform infrastructure is monitored continuously for anomalous activity, with automated alerts and human review processes in place to identify and respond to potential security incidents promptly.

Organisational Measures

• All staff who handle personal data receive regular privacy and data security training.
• Data processing activities are documented in an internal data register that is reviewed and updated regularly.
• Third-party vendors with access to personal data are subject to security assessments prior to onboarding and periodic reviews thereafter.
• A documented incident response procedure is in place to ensure that any personal data breach is identified, contained, and (where required) reported in a timely manner.

Your Responsibilities

Security is a shared responsibility. As a 999dd player, you play an important role in protecting your own account. You should:

• Use a strong, unique password for your 999dd account that you do not use on any other platform.
• Never share your password, OTP, or security credentials with anyone — including anyone claiming to represent 999dd support. Our support team will never ask for your password.
• Log out of your account when using a shared or public device.
• Notify 999dd immediately at [email protected] if you suspect unauthorised access to your account.

8. Your Privacy Rights

As a data subject, you have a set of rights in relation to the personal data that 999dd holds about you. We are committed to upholding these rights and will respond to all valid rights requests within a reasonable timeframe — typically within thirty (30) calendar days of receipt, with complex requests addressed within sixty (60) days where prior notice is given.

How to Submit a Rights Request

To exercise any of the rights listed above, please contact the 999dd privacy team at [email protected] with the subject line "Privacy Rights Request". Your request must include your registered username and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing the request to ensure the security of your data.

Rights requests are processed free of charge in the vast majority of cases. Where requests are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or to decline to act, with written explanation provided within the standard response window.

9. Third-Party Services

The 999dd platform integrates with a number of third-party services to deliver the full range of casino and sports betting features available to players. Each of these integrations involves the exchange of limited data as described below. 999dd is not responsible for the privacy practices of any third-party service and encourages players to review the privacy policies of any third-party provider with which they interact.

Game Studio Software Providers

Games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios are embedded within the 999dd platform via API integration. When you launch and play a game, limited session data (including your player session token, stake amounts, and game round identifiers) is exchanged with the relevant studio's servers to operate the game. This data is used solely for game delivery and result certification purposes. No additional personal data (such as your full name, email, or payment details) is transmitted to game studios.

Sports Data Providers

Live odds and match data for cricket (BPL, IPL, T20 World Cup, ICC tournaments, Bangladesh Tigers), football, kabaddi, and other sports markets are supplied by third-party data feed providers. These providers supply data to 999dd; they do not receive personal data about individual players in return.

Analytics Services

999dd uses privacy-preserving analytics tools to understand aggregate platform usage patterns. These tools process only anonymised, non-personal data and are configured to respect user privacy by default. No individual player profile is built from analytics data, and no analytics data is shared with or sold to third-party advertisers.

10. Changes to This Policy

999dd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, to incorporate new legal or regulatory requirements, or to improve clarity. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Where changes to this Policy are material — meaning they affect your rights as a data subject or change the way in which we process your personal data in a meaningful way — we will notify you in advance by email to your registered address and/or by an in-platform notification upon your next login. We will give you a reasonable period to review the changes before they take effect.

Non-material changes, such as typographical corrections, structural reformatting , or clarifications that do not alter the substance of our data processing practices, may be made without prior notice. We encourage you to review this Privacy Policy periodically to stay informed about how 999dd protects your personal data.

Your continued use of the 999dd platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated version of this Policy, you should discontinue use of the platform and may request account closure by contacting us at [email protected].

11. Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999dd processes your personal data, please contact our privacy team using the details below. We aim to acknowledge all enquiries within two (2) business days and to provide a full response within thirty (30) calendar days.

When contacting us about a privacy matter, please include your registered username and a clear description of your enquiry or the right you wish to exercise. This helps us locate your records quickly and process your request without unnecessary delay. For security purposes, we may ask you to verify your identity before we can action a request to access, correct, or delete your personal data.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction. 999dd is committed to working cooperatively with data protection authorities to resolve any complaints that cannot be settled directly between us and the affected player.