999dk Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") describes how 999dk ("we", "us", "our", or "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", or "Player") who access or use the 999dk website and associated services, including sports betting, live casino, and slot gaming facilities.

This Policy applies to all personal data processed by 999dk in connection with the operation of its platform, regardless of the device or channel through which you access our services — including desktop browsers, mobile browsers, and any future 999dk applications. It applies equally to players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other locations in Bangladesh, as well as to players accessing the platform from other jurisdictions.

This Policy should be read alongside the 999dk Terms & Conditions and Responsible Gaming Policy. Where any conflict exists between those documents and this Policy in relation to the processing of personal data, this Privacy Policy shall take precedence.

Data Controller Information

For the purposes of applicable data protection law, 999dk acts as the data controller in respect of all personal data collected and processed through the platform. As data controller, 999dk determines the purposes for which personal data is processed and the means by which that processing is carried out.

999dk operates as an international online gaming platform under an international gaming licence. If you have any questions about how 999dk processes your personal data, or if you wish to exercise any of the rights described in Section 11 of this Policy, you may contact our dedicated data privacy team at the following address:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your 999dk account dashboard
• Response Time: Data-related requests are responded to within thirty (30) calendar days of receipt

Data We Collect

999dk collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of data collected and provides examples of the specific data points within each category.

999dk does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless such data is voluntarily disclosed in the context of a responsible gaming self-assessment or a support interaction, in which case it is processed solely for the purpose of providing appropriate support and is not used for any other purpose.

How We Collect Your Data

999dk collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering an account, completing the identity verification process, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automatically: Technical and behavioural data collected automatically when you visit the 999dk website, including data gathered through cookies, web beacons, server logs, and similar tracking technologies (see Section 10 for full details).
• From third-party payment processors: Transaction confirmation data received from payment service providers including bKash, Nagad, Rocket, Upay, Visa network processors, and Mastercard network processors.
• From identity verification partners: Data received from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers used to verify the accuracy of identity documentation submitted during the account verification process.
• From fraud prevention services: Risk scoring signals and device fingerprint data provided by third-party fraud detection partners to help protect the platform and its players from fraudulent activity.
• From game providers: Aggregated game session and outcome data received from third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of resolving game disputes and conducting responsible gaming reviews.

Legal Basis for Processing

999dk processes your personal data only where a valid legal basis exists for doing so. The legal bases on which 999dk relies are as follows:

• Contract performance: Processing necessary to register your account, verify your identity, process your deposits and withdrawals, and provide the gaming services you have requested from 999dk.
• Legal obligation: Processing necessary to comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, responsible gaming obligations, and any other legal or regulatory requirements to which 999dk is subject.
• Legitimate interests: Processing necessary for 999dk's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, internal analytics, and service improvement — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 999dk relies on your consent as the basis for processing (for example, for the sending of marketing communications or the placement of non-essential cookies), you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

999dk uses the personal data it collects for the following specific purposes:

• To create, manage, and administer your 999dk account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain an accurate transaction history for your account.
• To verify that you meet the minimum age requirement of 21 years and to comply with all applicable KYC and AML obligations.
• To detect and prevent fraud, bonus abuse, multi-accounting, money laundering, and other activities that violate the 999dk Terms & Conditions or applicable law.
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour and reaching out proactively where appropriate.
• To resolve disputes regarding bets, game outcomes, transactions, or account matters, and to respond to your support enquiries in a timely and informed manner.
• To send you transactional communications regarding your account, including deposit confirmations, withdrawal notifications, and important policy or security updates.
• To send you promotional and marketing communications about 999dk offers, bonuses, and new game launches — where you have provided consent or where we have a legitimate interest in doing so and you have not opted out.
• To conduct internal analytics and platform improvement activities, using aggregated and where possible anonymised data, to understand how players use the 999dk platform and to improve the gaming experience.
• To comply with any court order, legal process, or regulatory request requiring the disclosure of personal data.

Sharing Your Data

999dk does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Personal data is shared only in the following limited circumstances and only with parties who are contractually bound to maintain appropriate confidentiality and security standards:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors receive the minimum data necessary to process your financial transactions securely.
• Identity verification and KYC providers: Third-party providers who assist 999dk in verifying player identities and conducting AML screening receive relevant identity documentation and personal data for this specific purpose only.
• Game technology providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and game activity data necessary for the delivery and integrity of their games on the 999dk platform.
• Fraud prevention and risk management services: Third-party providers who assist 999dk in detecting and preventing fraudulent activity, including device fingerprinting and behavioural analytics services.
• IT and hosting infrastructure providers: Cloud hosting and data storage providers who maintain the technical infrastructure on which the 999dk platform operates, under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where disclosure is required by applicable law, court order, or regulatory instruction.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of 999dk's assets, your personal data may be transferred to the acquiring entity, subject to that entity honouring the commitments made in this Privacy Policy.

International Data Transfers

As an international online gaming platform, 999dk may transfer your personal data to countries outside of Bangladesh for processing and storage. This may include transfers to countries where data protection laws differ from those applicable in Bangladesh.

Where 999dk transfers personal data internationally, it takes steps to ensure that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, data processing agreements that incorporate internationally recognised data protection principles, or transfers to jurisdictions that have been assessed as providing adequate levels of data protection.

All third-party service providers who receive personal data from 999dk — regardless of their location — are contractually required to maintain data security standards consistent with those described in this Policy and to process personal data only for the specific purposes for which it was transferred.

Data Retention

999dk retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to comply with AML record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping regulations.
• Gaming activity data: Retained for a period of three (3) years from the date of the relevant gaming session, for dispute resolution and responsible gaming review purposes.
• Support and communications data: Retained for a period of two (2) years from the date of the most recent interaction, unless a live dispute or legal matter requires longer retention.
• Technical and device data: Retained for a maximum of thirteen (13) months from collection, after which it is aggregated or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 999dk's internal data lifecycle procedures. Anonymised data (which can no longer be used to identify you) may be retained indefinitely for statistical and analytical purposes.

Cookies & Tracking Technologies

999dk uses cookies and similar tracking technologies (including web beacons, local storage objects, and session tokens) to operate the platform, enhance user experience, and gather analytical data about platform usage. The following categories of cookies are used on the 999dk platform:

• Strictly necessary cookies: Essential for the operation of the platform, including session management, authentication, and security. These cookies cannot be disabled without impairing core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate and use the 999dk platform, including which pages are visited most frequently and how players move through the site. This data is used to improve platform performance and user experience.
• Functional cookies: Used to remember your preferences and settings, such as your preferred language and the last game category you visited, to provide a more personalised experience on return visits.
• Marketing and targeting cookies: Used to deliver relevant promotional content and to track the effectiveness of 999dk's marketing activities. These cookies are placed only with your consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 999dk platform. Disabling performance, functional, or marketing cookies will not affect platform access but may reduce the quality of your experience.

Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that 999dk holds about you. To exercise any of these rights, please contact the 999dk data privacy team at [email protected]. We will respond to all verified requests within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the personal data that 999dk holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 999dk be corrected or completed without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed — subject to 999dk's legal obligations to retain certain data as described in Section 9.
• Right to restriction of processing: You have the right to request that 999dk restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where 999dk relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where 999dk relies on consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Children & Age Verification

The 999dk platform is strictly intended for adults aged 21 years and above. 999dk does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not attempt to register or use the 999dk platform.

If 999dk becomes aware that personal data has been collected from an individual who is under the age of 21 — whether through the registration process, identity verification, or any other means — the relevant account will be immediately suspended and all personal data associated with that account will be securely deleted, subject only to any legal obligation to retain records of the relevant incident. Any deposits made by an underage player will be returned to the originating payment method after deduction of any gambling winnings.

Parents and guardians who believe that a minor under their care may have registered or attempted to use the 999dk platform are encouraged to contact [email protected] immediately so that the matter can be investigated and resolved without delay.

Security Measures

999dk implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 999dk platform.
• AES-256 encryption for sensitive personal data and financial data stored in 999dk's databases.
• Multi-factor authentication (MFA) requirements for all internal staff accounts with access to player data systems.
• Role-based access controls ensuring that only personnel with a specific operational need can access player personal data, with all access events fully logged and auditable.
• Regular third-party security penetration testing and vulnerability assessments of the 999dk platform infrastructure.
• Automated intrusion detection and monitoring systems operating on a 24/7 basis to identify and respond to potential security incidents in real time.
• Strict vendor due diligence processes for all third-party service providers who handle personal data on 999dk's behalf, including mandatory data processing agreements and periodic security reviews.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you become aware of or suspect any security vulnerability or unauthorised access to your 999dk account, you must contact [email protected] immediately.

Changes to This Privacy Policy

999dk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The version number and effective date at the top of this document indicate when the Policy was last revised.

Where changes are material — meaning they meaningfully affect how your personal data is collected, used, or shared — 999dk will provide advance notice to registered players via the email address on file or through a prominent notification displayed on the platform, at least seven (7) days prior to the changes taking effect. For non-material changes (such as clarifications of existing practices or corrections of typographical errors), the updated Policy will be posted on the platform without prior individual notification.

Your continued use of the 999dk platform following the effective date of any revised Privacy Policy constitutes your acknowledgement that you have reviewed the changes. If you do not agree with the revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 999dk processes your personal data, please contact our support team using the details below. We take all privacy-related enquiries seriously and will respond promptly and in good faith.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within your 999dk account dashboard
• Response Target: Privacy and data protection queries responded to within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. 999dk will cooperate fully with any such regulatory enquiry.