dd999 Privacy Policy

1.Introduction

This Privacy Policy ("Policy") applies to all users of the dd999 platform accessible at https://dd999.bio and any associated mobile applications or services (collectively, the "Platform"). dd999 operates this Platform for players located in Bangladesh and is committed to responsible, transparent data practices that respect the privacy of every individual who interacts with our services.

By accessing or using the dd999 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately. This Policy should be read together with the dd999 Terms & Conditions, which are incorporated by reference.

2.Information We Collect

dd999 collects personal data through several channels: directly from you when you register and use the Platform, automatically through the Platform's technical infrastructure, and from third-party service providers involved in operating the Platform. The categories of personal data we may collect include:

• Identity information: full name, date of birth, gender, and government-issued identification details (as required for KYC verification).
• Contact information: mobile phone number, email address, and residential address (city, district, and Bangladesh postcode).
• Payment information: mobile financial service account references (bKash, Nagad, Rocket), bank account identifiers where applicable, and transaction records including deposit amounts, withdrawal amounts, dates, and reference numbers.
• Account activity data: login timestamps, session durations, games played, bet history, win/loss records, bonus usage, and responsible gaming tool activations (deposit limits, self-exclusion periods).
• Technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network operator.
• Communications data: records of all communications between you and dd999 support, including live chat transcripts, email correspondence, and any complaints or dispute submissions.

dd999 collects only the minimum personal data necessary to provide, secure, and comply with legal obligations relating to our services. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by applicable law and with explicit consent where mandated.

3.How We Use Your Information

dd999 processes your personal data for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The purposes for which we use your personal data include:

• Account registration and management: creating and maintaining your dd999 player account, verifying your identity at registration and upon request, and managing your account preferences and settings.
• Payment processing: initiating, processing, and recording deposits and withdrawals via bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported payment channels.
• Customer support: responding to your enquiries, resolving disputes, processing complaints, and providing you with account-related information and assistance.
• Fraud prevention and security: detecting, investigating, and preventing fraud, money laundering, identity theft, bonus abuse, account takeover, and other prohibited activities using automated monitoring systems and manual review.
• Responsible gaming compliance: monitoring gambling patterns to identify problem gambling behaviour, applying deposit limits and self-exclusion periods you have requested, and fulfilling our duty of care obligations.
• Platform improvement: analysing aggregated, anonymised usage data to understand how players use the Platform, identify technical issues, test new features, and improve the overall player experience.
• Marketing communications: where you have given explicit consent, sending you information about dd999 promotions, new game launches, and seasonal offers relevant to the Bangladesh market. You may withdraw your marketing consent at any time by contacting support at [email protected].

4.Legal Basis for Processing

dd999 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are:

• Contractual necessity: processing required to provide the services you have requested under the dd999 Terms & Conditions — including account registration, payment processing, and game delivery.
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering requirements, KYC obligations, responsible gaming duties, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing for purposes such as fraud prevention, platform security, abuse detection, and analytics where our legitimate interests do not override your fundamental privacy rights.
• Consent: processing for marketing communications and certain optional data collection activities where your freely given, specific, informed, and unambiguous consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.Sharing Your Information

dd999 does not sell, rent, or trade your personal data. We share personal data only with third parties where it is strictly necessary to operate the Platform or to comply with a legal obligation. The categories of third parties with whom we may share your data are:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — shared solely to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to their own regulatory obligations.
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other licensed game studios that provide the games available on the dd999 Platform — shared only to the extent necessary to facilitate game session authentication and fair play auditing.
• Identity verification and KYC partners: third-party identity verification service providers engaged to assist with document verification and due diligence as required by our operating obligations.
• Regulatory and law enforcement authorities: where dd999 is required by a legally binding order, court direction, or applicable law to disclose your personal data to a government body, regulatory authority, or law enforcement agency.

All third parties with whom dd999 shares personal data are required to process that data in accordance with applicable data protection law and only for the specific purposes for which it was shared. dd999 does not permit its data processing partners to use your personal data for their own marketing, profiling, or any secondary purpose beyond the scope of the service they provide to dd999.

6.Payment Data and Financial Information

dd999 processes payment data in BDT (Bangladeshi Taka) exclusively. When you make a deposit via bKash, Nagad, or Rocket, dd999 receives a transaction confirmation and reference number from the payment provider — dd999 does not receive or store your full mobile financial service PIN, password, or OTP. Your bKash, Nagad, or Rocket credentials are entered directly into the payment provider's own secure interface and never pass through dd999 servers.

For bank transfers via Dutch-Bangla Bank, BRAC Bank, or other supported banks, dd999 collects your bank account number and branch details solely to facilitate the withdrawal transfer. This information is encrypted in transit and at rest, accessible only to authorised payment processing personnel, and retained only for the period required to complete the transaction and fulfil our record-keeping obligations.

7.Cookies and Tracking Technologies

dd999 uses cookies and similar tracking technologies on the Platform to ensure correct functionality, maintain your session state, and analyse aggregated usage patterns. The categories of cookies we use are:

• Strictly necessary cookies: essential for the Platform to function correctly, including session authentication tokens, login state persistence, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: used to remember your language preference, display settings, and other personalisation choices you have made on the Platform.
• Analytics cookies: used to collect anonymised data about how players navigate and interact with the Platform, including pages visited, session length, and click paths. This data is aggregated and cannot be used to identify you individually.
• Security and fraud detection cookies: used to identify suspicious activity, detect bot traffic, and protect the Platform against automated attacks. These work in conjunction with our server-side fraud detection systems.

You can manage cookie preferences through your mobile browser settings. Please note that disabling strictly necessary or security cookies may prevent you from accessing certain parts of the Platform or may impair your ability to log in and play. dd999's Platform is designed primarily for mobile use in Bangladesh and does not rely on third-party advertising networks or social media tracking pixels.

8.Data Retention

dd999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: account data and transaction records are retained for a minimum of five years from the date of account closure or last transaction (whichever is later) to comply with anti-money laundering record-keeping requirements; communications data (support tickets, email correspondence) is retained for three years from the date of the last communication; analytics data is anonymised within 12 months of collection and retained in anonymised form indefinitely for platform improvement purposes.

When the applicable retention period expires, dd999 will securely delete or irreversibly anonymise your personal data. Where deletion is not immediately technically feasible (for example, data held in backup archives), dd999 will isolate the data from active processing until deletion or anonymisation can be completed. You may request early deletion of your personal data subject to applicable legal retention requirements by contacting [email protected].

9.Data Security

dd999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and dd999 servers, ensuring that data intercepted in transit cannot be read.
• Password storage using secure one-way hashing algorithms. dd999 never stores your plaintext password and our support team cannot retrieve your password — only a reset can be initiated.
• Role-based access controls ensuring that only authorised personnel with a specific operational need can access player personal data. Access is logged, audited, and subject to regular review.
• Intrusion detection systems, firewalls, and regular penetration testing to identify and remediate vulnerabilities in the Platform's infrastructure before they can be exploited.

Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, dd999 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. You can reduce your own risk by choosing a strong, unique password for your dd999 account and by never sharing your login credentials with anyone.

10.Your Rights

As a player on the dd999 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: you may request a copy of all personal data dd999 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right of rectification: you may request correction of inaccurate or incomplete personal data held about you. Certain data (such as your registered name and date of birth) may require documentary evidence before a correction can be made.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis), or where the data has been unlawfully processed. This right is subject to legal retention obligations — we cannot delete data we are legally required to retain.
• Right to restriction: you may request that dd999 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while your objection to processing is being considered.
• Right to object: you may object to processing of your personal data where dd999 relies on legitimate interests as its legal basis, including profiling for fraud detection purposes. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

dd999 will respond to all data rights requests within 30 days of receipt. Where a request is complex or where dd999 has received a high volume of requests, we may extend the response period by a further 60 days, in which case we will notify you of the extension within the initial 30-day period. dd999 does not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

11.Children's Privacy

The dd999 Platform is strictly for adults aged 21 and above. dd999 does not knowingly collect personal data from persons under the age of 21. The Platform implements age verification measures during the registration process and reserves the right to request proof of age at any time.

If dd999 becomes aware that personal data has been collected from an individual who was under the age of 21 at the time of collection, dd999 will immediately close the associated account, delete the personal data collected, void any associated transactions, and where required, report the matter to relevant authorities. Parents or guardians who believe that a minor in their care has registered on the dd999 Platform should contact [email protected] immediately.

12.Responsible Gaming and Your Data

dd999 uses personal data — specifically your account activity data, betting history, session duration records, and deposit patterns — as part of its responsible gaming programme. This analysis helps dd999 identify players who may be exhibiting signs of problem gambling behaviour, such as significantly increasing bet sizes, extended uninterrupted play sessions, repeated attempts to deposit immediately after large losses, or activation of multiple self-exclusion periods followed by immediate re-registration attempts.

Where dd999's responsible gaming monitoring systems identify a player who may be at risk, a member of our support team may contact you proactively to offer information about responsible gaming tools, self-exclusion options, and external support resources. This is a duty-of-care measure, not a marketing activity, and does not require your marketing consent. If you wish to discuss your account activity or access responsible gaming tools, you can contact support at [email protected] at any time.

13.Changes to This Privacy Policy

dd999 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable law. When we make material changes to this Policy, we will notify registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the Platform, at least 14 days before the changes take effect.

The effective date of the current version of this Privacy Policy is shown at the top of this page. Continued use of the dd999 Platform after the effective date of any update constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how dd999 protects your personal data. If you have questions about any changes, please contact [email protected] before the changes take effect.

14.Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to dd999's handling of your personal data, please contact our support team. We are committed to responding to all privacy-related enquiries promptly and transparently. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

Email: [email protected]