Privacy Policy — How 999de Handles Your Personal Data
At 999de, protecting the personal information of every player in Bangladesh is a core responsibility, not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over your information at all times.
Six Privacy Principles That Guide 999de
These are the core principles that govern how 999de approaches personal data. The full legal text follows below in the detailed policy sections.
Minimal Data Collection
999de collects only the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with legal obligations. We do not collect data speculatively or for purposes unrelated to delivering the 999de service to you.
Full Transparency
This Privacy Policy clearly explains every category of data we collect, every purpose for which it is used, and every type of third party with whom it may be shared. We do not engage in hidden data practices. If our data use changes materially, we will notify you in advance.
Robust Security Measures
All data transmitted between your device and 999de is protected by 256-bit SSL/TLS encryption. Account data is stored on secure, access-controlled servers. We conduct regular security reviews and apply industry-standard technical and organisational measures to prevent unauthorised access.
Your Data Rights Respected
You have the right to access, correct, export, and request deletion of your personal data held by 999de. These rights are exercisable at any time by contacting our support team. We will respond to all data rights requests within a reasonable timeframe, typically within 30 days.
Consent-Based Marketing
999de will only send you promotional communications if you have opted in to receive them. You can withdraw marketing consent at any time by updating your account preferences or contacting [email protected]. Withdrawing marketing consent does not affect the delivery of transactional account communications.
Defined Retention Periods
We retain personal data only for as long as it is required for the purpose for which it was collected, or for as long as applicable laws and regulations require us to keep it. Once the applicable retention period expires, data is securely deleted or anonymised in accordance with our internal data management procedures.
1. Introduction
This Privacy Policy ("Policy") describes how 999de ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal information of individuals ("you", "the User") who access or use the 999de online betting and casino platform at https://999de.io and all associated services.
999de is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy has been prepared to give you a clear and comprehensive understanding of our data practices so that you can make informed decisions about your use of the platform.
This Policy applies to all personal data collected through the 999de website, mobile-optimised browser experience, live chat support interactions, email correspondence, and any other channel through which you interact with 999de. It covers all registered users, prospective users who browse the platform without registering, and former users whose data 999de is required to retain under applicable law.
This Privacy Policy should be read alongside the 999de Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 999de.
2. Data Controller
For the purposes of this Privacy Policy, 999de acts as the data controller — meaning 999de is the entity that determines the purposes for which and the manner in which your personal data is processed. All questions, requests, and complaints relating to the processing of your personal data should be directed to 999de using the contact details provided in Section 14 of this Policy.
Where 999de engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, and game software providers), those parties act as data processors under contractual arrangements that require them to process your data only in accordance with 999de's instructions and to implement appropriate security measures.
3. Data We Collect
3.1 Registration and Account Data
When you create a 999de account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to open and maintain your account and to verify your eligibility to use the platform.
3.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) obligations, we may collect copies of identity documents such as your national ID card, passport, or driving licence, as well as proof of address documents such as utility bills or bank statements. Where payment method verification is required, we may also request documentation confirming ownership of the payment account used for deposits.
3.3 Financial and Transaction Data
We collect information about all financial transactions conducted through your 999de account, including deposit amounts, withdrawal requests, payment method identifiers (such as bKash or Nagad account references), transaction timestamps, and account balance history. We do not store full card numbers or payment account PINs — sensitive payment data is handled directly by our payment processing partners.
3.4 Betting and Gaming Activity Data
We collect detailed records of your betting and gaming activity on the platform, including the games played, bet amounts placed, odds accepted, outcomes, bonus usage, and session durations. This data is necessary for account management, dispute resolution, responsible gaming monitoring, and fraud prevention purposes.
3.5 Technical and Device Data
When you access the 999de platform, we automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, device identifiers, referring URL, and pages visited within the platform. This data is collected through server logs and cookies (see Section 7).
3.6 Communications Data
We retain records of all communications between you and the 999de support team, including live chat transcripts, email correspondence, and any feedback or complaint submissions. These records are kept for quality assurance, dispute resolution, and legal compliance purposes.
3.7 Marketing Preferences
Where you have opted in to receive promotional communications, we retain a record of your marketing preferences including the types of promotions you are interested in, your preferred communication channels, and the history of marketing messages sent to you.
4. How We Use Your Data
999de uses your personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your 999de account | Registration data, identity data |
| Verifying your identity and age (KYC) | Identity verification data, registration data |
| Processing deposits and withdrawals | Financial and transaction data, identity data |
| Delivering betting and casino game services | Betting and gaming activity data, account data |
| Fraud detection and prevention | Technical data, financial data, gaming activity data |
| Responsible gaming monitoring and intervention | Gaming activity data, account data, communications data |
| Providing customer support | Communications data, account data, transaction data |
| Sending transactional communications (e.g., deposit confirmations) | Registration data, transaction data |
| Sending promotional communications (where opted in) | Registration data, marketing preferences, gaming activity data |
| Legal and regulatory compliance | All categories as required by applicable law |
| Improving platform performance and user experience | Technical data, gaming activity data (anonymised where possible) |
999de does not use your personal data for any purpose that is incompatible with the purposes listed above. We do not sell your personal data to any third party for that party's own marketing or commercial purposes.
5. Legal Basis for Processing
999de processes your personal data on the following legal bases:
- Contractual Necessity: Processing that is necessary to provide the services you have requested by opening a 999de account — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to perform our contract with you.
- Legal Obligation: Processing that is required to comply with applicable laws and regulations — including KYC/AML obligations, age verification, and record-keeping requirements — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the 999de service is carried out on the basis of 999de's legitimate interests, balanced against your rights and interests.
- Consent: Processing for the purpose of sending you promotional and marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time.
6. Data Sharing and Third Parties
6.1 Payment Processors
To facilitate deposits and withdrawals, 999de shares necessary financial and identity data with our payment processing partners, including but not limited to bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and where applicable Visa and Mastercard processing networks. These partners are contractually bound to use your data only for the purpose of processing the specific transaction and to maintain appropriate security standards.
6.2 KYC Verification Providers
To comply with identity verification requirements, 999de may share identity document data with third-party KYC verification service providers. These providers verify the authenticity of submitted documents and return a verification result to 999de. They are not permitted to retain or use your identity data for any purpose beyond the verification check.
6.3 Game Software Providers
Casino and sports betting games on the 999de platform are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive session identifiers and game-related data necessary to deliver the game experience. They do not receive your full personal profile or financial data beyond what is operationally necessary.
6.4 Legal and Regulatory Authorities
999de may disclose your personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory directive. 999de will notify you of such disclosure where legally permitted to do so.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of 999de's business, your personal data may be transferred as part of the transaction. 999de will notify affected users in advance of any such transfer and ensure that the receiving entity commits to honouring this Privacy Policy.
7. Cookies and Tracking Technologies
7.1 What Are Cookies
Cookies are small text files that are placed on your device when you visit the 999de website. They allow the platform to recognise your device on subsequent visits, remember your preferences, maintain your login session, and collect anonymous usage statistics to help improve the platform.
7.2 Types of Cookies Used
- Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during an active visit and security cookies that help detect and prevent fraudulent activity. These cookies cannot be disabled without significantly affecting your ability to use the platform.
- Functional Cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool settings. Disabling these cookies may result in a reduced personalised experience.
- Analytics Cookies: Used to collect anonymous, aggregated data about how users interact with the platform — such as which pages are visited most frequently and how long sessions last. This data is used solely to improve the 999de service and is not linked to your personal identity.
- Marketing Cookies: Placed only where you have consented to receiving personalised promotional content. These cookies help 999de deliver offers that are relevant to your betting preferences and activity on the platform.
7.3 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling essential cookies will impair the functionality of the 999de platform, including your ability to maintain a login session.
8. Data Security
999de implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
- Encryption in Transit: All data transmitted between your browser or device and the 999de platform is encrypted using 256-bit SSL/TLS protocols. This ensures that your login credentials, financial data, and personal information cannot be intercepted during transmission.
- Encryption at Rest: Sensitive data stored on 999de's servers — including identity documents and payment references — is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data within the 999de organisation is restricted on a strict need-to-know basis. Support agents, compliance officers, and technical staff are granted only the minimum level of access required to perform their specific role.
- Regular Security Reviews: 999de conducts periodic security assessments and vulnerability reviews to identify and address potential weaknesses in the platform's infrastructure.
- Incident Response: In the event of a data security incident that poses a risk to your personal data, 999de will notify affected users promptly and take all reasonable steps to contain and remediate the incident.
While 999de takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You also have a role to play in keeping your account secure — please ensure your password is strong, unique, and not shared with anyone.
9. Data Retention
999de retains personal data for different periods depending on the category of data and the legal or operational requirement that necessitates its retention:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC identity documents | Duration of account + 5 years after closure | AML obligations |
| Financial transaction records | Duration of account + 7 years after closure | Financial record-keeping requirements |
| Betting and gaming activity logs | Duration of account + 3 years after closure | Dispute resolution and responsible gaming |
| Customer support communications | 3 years from date of communication | Quality assurance and legal compliance |
| Marketing preference records | Until consent is withdrawn + 1 year | Demonstrating compliance with consent requirements |
| Technical and device data (server logs) | 90 days | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, personal data is securely and permanently deleted, or anonymised such that it can no longer be linked to any individual user. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
10. Your Data Rights
As a user of the 999de platform, you have the following rights with respect to your personal data:
- Right of Access: You have the right to request a copy of the personal data that 999de holds about you. We will provide this information within 30 days of a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account information directly through your account settings, or by contacting support.
- Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to 999de's legal obligation to retain certain data under applicable laws.
- Right to Restriction of Processing: In certain circumstances, you may request that 999de restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
- Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing that is based on 999de's legitimate interests. 999de will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of the above rights, please contact 999de at [email protected] with the subject line "Data Rights Request — [Your Username]". We may need to verify your identity before processing your request. All requests will be acknowledged within 5 business days and resolved within 30 calendar days.
11. Children and Minors
The 999de platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes age verification steps designed to prevent minors from creating accounts.
If you believe that a minor has created an account on 999de or that a 999de account is being accessed by a minor, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly on any such report.
Parents and guardians are encouraged to use device-level parental controls and internet filtering tools to prevent minors from accessing online gambling platforms. For guidance on available tools, please visit our Responsible Gaming page.
12. Third-Party Links and Services
The 999de platform may contain references to third-party game providers, payment services, and other external services. While we take care to work only with reputable partners, 999de is not responsible for the privacy practices or data handling policies of any third-party service provider or website that is accessible through the 999de platform.
When you interact directly with a third-party service — for example, when completing a bKash or Nagad payment transaction through that provider's own interface — the data you submit to that provider is subject to that provider's privacy policy, not this Policy. We encourage you to review the privacy policies of all third-party services you use in connection with your 999de account.
13. Updates to This Privacy Policy
999de reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. The effective date at the top of this Policy will be updated whenever a new version is published.
Where changes are material — such as the introduction of a new data processing purpose, a change to data retention periods, or the addition of a new category of third-party recipients — 999de will provide at least fourteen (14) days' advance notice via a prominent notice on the platform and, where applicable, by email to registered users.
Continued use of the 999de platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept the updated Policy, you should discontinue use of the platform and contact support to request account closure.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999de handles your personal data, please contact our support team using the details below. All privacy-related enquiries will be handled with strict confidentiality.
- Email: [email protected]
- Subject Line (for data rights requests): Data Rights Request — [Your Username]
- Subject Line (for general privacy enquiries): Privacy Enquiry — [Your Username]
- Live Chat: Available to logged-in users via the platform interface — average response time 2–5 minutes
- Support Hours: 24/7, 365 days a year — Bangladesh Standard Time (BST, UTC+6)
- Languages: English and Bengali
All formal privacy notices and data rights requests must be submitted in writing via email to [email protected]. Requests submitted via live chat will be acknowledged and escalated to the appropriate team but will not be treated as formal legal notices until confirmed in writing by email.
999de aims to acknowledge all privacy-related requests within 5 business days and to resolve them fully within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Your Data Is Protected — Now Enjoy the Platform
Now that you understand how 999de safeguards your personal information, you can explore the platform with confidence. Browse our cricket markets, spin the slots, or head to the live casino — all backed by the same commitment to privacy and security.
21+ only. Gambling involves financial risk. Please play responsibly.