999d Privacy Policy — How We Protect Your Data
At 999d, protecting the personal data of every Bangladeshi player is a core commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data at all times.
Table of Contents
1. Introduction
999d ("we", "us", "our") operates the online casino and sports betting platform accessible at https://999d.io. This Privacy Policy sets out our practices regarding the collection, use, storage, disclosure, and protection of personal information obtained from players and visitors based primarily in Bangladesh.
We understand that privacy matters deeply to our players. When you register a 999d account, make a deposit via bKash, Nagad, or Rocket, place a bet on cricket or slots, or simply browse the platform, you may be sharing personal information with us. This document explains how that information is handled at every step — from initial collection through to eventual deletion.
This Privacy Policy should be read alongside our Terms & Conditions, which together govern your use of the 999d platform. By creating an account or using any 999d service, you confirm that you have read and understood this Privacy Policy and that you agree to its terms.
Plain language summary: This policy tells you what personal data 999d collects about you, why we collect it, how we protect it, and what choices you have. We do not sell your data to third parties. We collect only what is necessary to run a safe, compliant betting platform for players in Bangladesh.
2. Information We Collect
999d collects personal information through several channels, including account registration, ongoing platform use, payment processing, customer support interactions, and automatic technical logging. The categories of information we collect are as follows:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, National Identity Card (NID) number, passport number, photograph | Registration form, verification upload |
| Contact Data | Mobile phone number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash/Nagad/Rocket wallet numbers, transaction amounts in ৳ BDT, deposit and withdrawal history | Payment processor integration |
| Gameplay Data | Bets placed, games played, wagering amounts, bonus usage, win/loss records | Platform activity logging |
| Technical Data | IP address, device type, browser, operating system, session timestamps, cookie identifiers | Automatic server logging, cookies |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support interactions |
| Marketing Preferences | Opted-in promotional preferences, preferred sports/game categories, notification settings | Account settings, consent forms |
999d does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where this arises incidentally in a responsible gaming context (for example, if a player discloses a gambling-related health concern when requesting self-exclusion). Such disclosures are handled with the utmost care and used solely to provide appropriate support.
3. How We Use Your Information
999d uses personal data only for clearly defined, legitimate purposes. We do not use your data in any manner that conflicts with those stated purposes, and we do not engage in automated individual decision-making that produces legal or significantly adverse effects without human review. Our primary purposes for processing personal data are:
- Account Administration: Creating, managing, and securing your 999d account; processing deposits and withdrawals; maintaining accurate account records.
- Identity Verification and Compliance: Confirming your identity and age (21+) in accordance with our responsible gaming obligations and internal anti-money laundering (AML) policies.
- Service Delivery: Enabling you to play casino games, place sports bets, claim bonuses, and use all other platform features.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and prohibited conduct as defined in our Terms & Conditions.
- Responsible Gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour and providing timely interventions such as deposit limit suggestions and self-exclusion notices.
- Customer Support: Responding to queries, resolving disputes, and improving service quality based on support interaction analysis.
- Marketing Communications: Sending promotional offers, bonus notifications, and seasonal promotions (e.g., BPL cricket season offers, Eid specials, Pohela Boishakh promotions) to players who have opted in to receive such communications. You may opt out at any time.
- Legal Obligations: Retaining transaction records and identity documents as required by applicable financial and data retention laws.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience for the Bangladeshi market.
Marketing opt-out: If you no longer wish to receive promotional messages from 999d, you may update your communication preferences at any time from within your account dashboard, or by contacting our support team at [email protected]. Opting out of marketing does not affect the delivery of transactional or security-related communications.
4. Sharing of Information
999d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose:
- Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive technical session data (such as a pseudonymous session token and bet amounts) that is necessary to run their games within the 999d platform. These providers are contractually prohibited from using this data for any purpose other than game delivery and fair-play certification.
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive only the financial information strictly necessary to process your deposit or withdrawal transaction. 999d does not receive or store your full mobile banking PIN or card CVV at any point.
- Identity Verification Partners: Where required for KYC (Know Your Customer) verification, identity documents may be shared with a certified verification service provider operating under strict data processing agreements.
- Legal and Regulatory Authorities: 999d will disclose personal data to law enforcement, financial intelligence units, or other government bodies when required to do so by applicable law, court order, or binding regulatory directive. We will notify you of such disclosure where legally permitted to do so.
- Fraud Prevention Networks: Aggregated, pseudonymised risk signals may be shared with industry fraud prevention networks to protect the platform and its players from organised fraud. No directly identifying information is shared in this context.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 999d business, your data may be transferred to the successor entity. You will be notified in advance of any such transfer and of any changes to the applicable privacy terms.
All third parties with whom 999d shares personal data are required to implement appropriate technical and organisational security measures and to process the data only for the purposes for which it was shared.
5. Payment Data and Mobile Wallets
999d is designed for the Bangladeshi market and integrates natively with the country's leading mobile financial services — bKash, Nagad, Rocket, and Upay. Given the sensitive nature of payment information, 999d applies the following specific protections to all financial data:
- All payment transactions are processed over encrypted HTTPS connections using 256-bit TLS.
- 999d does not store complete mobile wallet numbers in plain text. Wallet identifiers are stored in a masked or tokenised format (e.g., 01712-***-789) sufficient only to confirm the payment method on file without exposing the full number to support staff or other systems.
- Transaction amounts and timestamps are retained in encrypted form for a minimum of five years in accordance with standard financial record-keeping practices.
- Withdrawal requests may only be processed to a payment method that has been previously verified as belonging to the account holder. This policy protects players from unauthorised withdrawal attempts by third parties.
- 999d never sends requests for mobile wallet PINs, OTPs, or banking credentials via live chat, email, or SMS. Any communication claiming to be from 999d and requesting such information should be treated as fraudulent and reported to [email protected] immediately.
6. Cookies and Tracking Technologies
999d uses cookies and similar tracking technologies (including local storage, session tokens, and analytics pixels) to operate the platform, maintain session continuity, and understand how players use the site. The categories of cookies we use are as follows:
- Essential Cookies: These are strictly necessary for the platform to function. They maintain your logged-in session, store your language and currency preferences, and ensure that security tokens work correctly. These cookies cannot be disabled without impairing platform functionality.
- Analytics Cookies: These collect aggregated, anonymised data about how visitors interact with the 999d website — which pages are visited most frequently, how long sessions last, and which features are used. This information is used exclusively to improve the platform experience. No personally identifying information is included in analytics data.
- Functional Cookies: These remember your preferences such as saved payment methods (in masked form), preferred game lobby view, and notification settings, so you do not have to reconfigure them on each visit.
- Marketing Cookies: If you have opted in to receive personalised promotional communications, marketing cookies may be used to track which promotions you have viewed or interacted with, so we can deliver more relevant offers (for example, BPL cricket betting promotions during the Bangladesh Premier League season).
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions.
7. Data Retention
999d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in any case for no longer than required by applicable legal obligations. Our standard retention periods are:
- Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to satisfy financial record-keeping and AML compliance requirements.
- Identity Verification Documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
- Transaction Records: Retained for a minimum of five years from each transaction date.
- Customer Support Records: Retained for three years from the date of the support interaction, unless the interaction is associated with a pending or resolved formal complaint, in which case it is retained for five years.
- Marketing Preferences: Retained until you withdraw consent or close your account, at which point they are deleted within 30 days.
- Technical Logs (IP, device data): Retained for 12 months from collection date, after which they are aggregated and anonymised or deleted.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with recognised data destruction standards. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and research purposes.
8. Data Security
999d implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the 999d platform.
- Encrypted storage for all sensitive personal and financial data at rest, using industry-standard encryption algorithms.
- Access controls that restrict access to personal data on a strict need-to-know basis, with all staff access logged and audited.
- Two-factor authentication (2FA) options for player accounts via SMS OTP, strongly recommended for all registered players.
- Regular internal security audits and vulnerability assessments of the platform infrastructure.
- Intrusion detection systems that monitor for unusual access patterns and automatically flag suspicious activity for review.
- Secure backup procedures ensuring that data can be recovered in the event of a technical failure without compromising integrity.
Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, 999d will notify affected players as promptly as possible and take all reasonable steps to contain and remediate the incident. You can reduce your personal risk by choosing a strong, unique password for your 999d account and enabling SMS two-factor authentication.
9. Your Rights Over Your Personal Data
As a 999d player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all verified requests within 30 days.
Rights You Hold Over Your Data at 999d
These are the data rights available to every registered player on the 999d platform. To exercise any right, contact our support team in writing.
Request a full copy of the personal data 999d holds about you, including account records, transaction history, and verification documents.
Request correction of any inaccurate or incomplete personal data. Updates to account details can also be made directly through your account settings.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention requirements.
Request that 999d restricts processing of your data in specific circumstances, such as while a data accuracy dispute is being resolved.
Request that your personal data be provided to you in a structured, machine-readable format so it can be transferred to another service if you choose.
Object to the processing of your data for direct marketing purposes at any time. Your objection will be honoured immediately with no impact on your account.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.
If you believe 999d has handled your data unlawfully, you may lodge a complaint with us directly or with the relevant data protection authority in your jurisdiction.
10. Protection of Minors
999d operates a strict 21+ age policy. The platform is not directed at, and must not be used by, any individual under the age of 21. We take the protection of minors extremely seriously and implement multiple safeguards to prevent underage access:
- Age confirmation is required at the point of registration, and players must affirm that they are 21 years of age or older.
- Identity verification procedures include cross-checking National Identity Card (NID) data, which contains date of birth information.
- Any account found to belong to a person under 21 will be immediately and permanently closed, all funds will be forfeited, and the account will not be reinstated.
- Where parental controls or filtering software is available, 999d encourages parents and guardians to use such tools to prevent minors from accessing gambling platforms.
Parental responsibility: If you believe a minor in your household has created a 999d account, please contact us immediately at [email protected]. We will investigate and take immediate action. We do not knowingly collect personal data from individuals under the age of 21 and will delete any such data promptly upon discovery.
11. Changes to This Privacy Policy
999d reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to new legal obligations, changes in the services we offer, updates to our data processing practices, or feedback from our player community in Bangladesh.
When material changes are made to this Privacy Policy, 999d will notify active players via a prominent notice displayed upon login and/or via a communication to your registered mobile number or email address. The revised policy will be published on this page with an updated effective date.
Your continued use of the 999d platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting our support team. We recommend reviewing this page periodically to stay informed of how 999d protects your personal data.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 9, please contact the 999d privacy team through one of the following channels:
- Email: [email protected] — displayed as plain text only; this is not a clickable link.
- Live Chat: Available 24 hours a day, 7 days a week from your account dashboard after logging in to your 999d account.
- Response Times: Privacy-related requests submitted by email will receive an acknowledgement within 24 hours and a substantive response within 30 days. Live chat queries are typically answered within 5 minutes.
All correspondence regarding privacy matters should be submitted in English. Please include your registered account username or the mobile number associated with your 999d account to help us locate your records and respond efficiently.
How 999d Protects Your Privacy
These six core commitments underpin every data decision made by the 999d platform for players across Bangladesh.
All data in transit between your device and 999d servers is protected by 256-bit TLS encryption. Sensitive data at rest — including identity documents and financial records — is stored using industry-standard encryption algorithms. Your information is never transmitted in plain text.
999d does not sell, rent, or trade your personal information to any third party for their own commercial use. Your data is shared only where strictly necessary for platform operations — such as with payment processors like bKash and Nagad — and always under binding confidentiality agreements.
Only verified account holders can initiate withdrawals, and funds are always returned to the payment method on file. Masked storage of wallet numbers and strict access controls mean your financial identifiers are protected from both external threats and internal misuse.
You retain eight distinct rights over your personal data at 999d, including access, rectification, erasure, portability, and the right to object to marketing. All rights requests are acknowledged within 24 hours and resolved within 30 days. No bureaucratic barriers — just a message to our support team.
999d retains personal data only as long as legally required or operationally necessary. Active account data is held for five years post-closure. Technical logs are cleared after 12 months. When retention periods expire, data is securely deleted or permanently anonymised — not archived indefinitely.
Intrusion detection systems monitor the 999d platform around the clock for suspicious access patterns. Regular security audits and penetration tests are conducted to identify and resolve vulnerabilities before they can be exploited. In the event of a confirmed breach, affected players are notified promptly.
Explore 999d — Bangladesh's Premier Online Casino
Now that you know how 999d protects your data, dive into the action. From live cricket betting and classic slots to crash games and live dealer tables — it's all waiting for you at 999d.