Privacy Policy — How 999dt Handles Your Data
At 999dt, your privacy is taken seriously. This Privacy Policy explains exactly what personal information we collect, why we collect it, how it is used and protected, and what rights you have as a player on Bangladesh's premier online betting and casino platform.
All data transmitted between your device and 999dt's servers is protected by industry-standard SSL/TLS encryption. Your personal and financial information is never transmitted in plain text over the internet.
999dt does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate the platform and improve your player experience.
Access to player data within 999dt is restricted on a strict need-to-know basis. Only authorised personnel with specific job functions may access personal data, and all such access is logged and audited.
Identity verification data collected during the KYC process is handled with the highest level of care. Document images and verification outcomes are stored securely and retained only for the period required by applicable regulations.
As a 999dt player, you have meaningful control over your personal data. You may request access to, correction of, or deletion of your data at any time by contacting our support team. See the "Your Privacy Rights" section below for full details.
999dt does not retain personal data indefinitely. Retention periods are defined per data category and aligned with operational necessity and applicable legal obligations. Data that is no longer required is securely deleted or anonymised.
Information We Collect
999dt collects personal information from players through several channels: directly during the registration and KYC process, automatically through your use of the platform, and occasionally from third-party service providers. The categories of data we collect are described in the table below.
| Data Category | Specific Information Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, national identity card (NID) number, passport number, scanned copies of identity documents | Registration form, KYC upload |
| Contact Data | Email address, Bangladeshi mobile phone number (bKash/Nagad/Rocket-linked), residential address including city (Dhaka, Chittagong, Sylhet, etc.) | Registration form, account settings |
| Financial Data | Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, etc.), deposit and withdrawal history, transaction amounts in BDT | Payment processor, transaction records |
| Gaming Activity Data | Bet history, wager amounts, game preferences, cricket markets selected (BPL, IPL, T20 World Cup), session duration, win/loss records, bonus usage | Platform activity logs |
| Technical Data | IP address, device type and model, operating system, browser type and version, time zone setting (BST UTC+6), screen resolution, referral URL | Automatic collection via server logs and cookies |
| Communication Data | Live chat transcripts, support email correspondence, any content you submit through contact forms or dispute submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, session time-out preferences, self-exclusion status and duration, reality check intervals | Responsible Gaming tool settings |
| Marketing Preferences | Email and SMS marketing opt-in/opt-out status, promotional offer engagement history, bonus claim records | Account preferences, marketing interactions |
999dt does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data — except where health-related information is voluntarily provided in the context of a responsible gaming assessment or self-exclusion request, in which case such data is treated with the highest level of protection and used solely for the purpose for which it was provided.
If you are under the age of 18, you must not provide any personal data to 999dt. The platform is strictly for adults aged 18 and above. If 999dt becomes aware that it has inadvertently collected data from a person under 18, that data will be deleted immediately and the associated account will be closed in accordance with our eligibility policy.
How We Use Your Information
999dt uses the personal data it collects for the following specific and legitimate purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or being required to do so by applicable law.
- Account Management: To create, verify, maintain, and administer your 999dt player account, including processing your registration, verifying your age and identity through KYC procedures, and managing your account security settings.
- Service Delivery: To provide you with access to the full range of 999dt products and services, including cricket betting on BPL, IPL and T20 World Cup markets, live casino games, slot titles, entertainment games, and fishing game products.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment methods, and to maintain accurate financial records of all transactions on your account denominated in BDT.
- Fraud Prevention and Security: To monitor account activity for signs of fraud, collusion, multi-accounting, money laundering, or any other prohibited conduct as defined in our Terms & Conditions. This includes automated risk-scoring and manual compliance review of flagged accounts.
- Responsible Gaming: To administer the responsible gaming tools you have activated, including enforcing deposit limits, session time-outs, and self-exclusion periods. Your responsible gaming data is also used to assess whether additional intervention or support may be appropriate.
- Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance through our live chat and email support channels.
- Legal and Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and any lawful requests from competent authorities.
- Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign information (for example, Eid, BPL season, or Pohela Boishakh promotions) — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time via your account preferences or by contacting support.
- Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving platform performance, optimising game selection, and enhancing the overall user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other regions of Bangladesh.
Legal Basis for Processing
999dt processes your personal data on the following legal bases, depending on the nature of the processing activity in question:
- Contractual Necessity: The majority of data processing on 999dt is necessary for the performance of the contract between you and 999dt — specifically, the Terms & Conditions you agree to upon registration. This includes processing your identity data, contact data, financial data, and gaming activity data to deliver the services you have signed up for.
- Legal Obligation: Certain processing activities are required by applicable law. For example, 999dt is obligated to retain transaction records and identity verification data for anti-money laundering compliance purposes, and to respond to lawful information requests from competent authorities.
- Legitimate Interests: 999dt processes certain data — such as technical data, device information, and usage analytics — on the basis of its legitimate interest in maintaining platform security, preventing fraud, and improving its services. Where legitimate interest is relied upon, 999dt has assessed that its interests do not override your fundamental rights and freedoms.
- Consent: Where 999dt sends you direct marketing communications or uses non-essential cookies, it does so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
If you would like more information about the specific legal basis applied to any particular processing activity, you may request this by contacting 999dt support at [email protected] (plain text — not a link).
Data Sharing and Disclosure
999dt does not sell, rent, or trade your personal data to any third party. However, to operate the platform effectively and comply with legal obligations, 999dt shares limited categories of personal data with the following trusted categories of third-party recipients:
- Payment Service Providers: To process deposits and withdrawals, 999dt shares the minimum necessary financial data with its payment processing partners, including bKash, Nagad, Rocket, Upay, and integrated banking partners. These providers are contractually obligated to process your data only for the purpose of completing the relevant transaction.
- Identity Verification Providers: To conduct KYC checks, 999dt uses third-party identity verification services that process the identity documents and personal data you submit during verification. These providers operate under strict data processing agreements and are not permitted to use your data for any independent purpose.
- Game Technology Providers: Game studios and platform technology providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt) may receive technical session data necessary to operate their games within the 999dt environment. No personally identifiable information beyond a pseudonymous player session ID is shared with game providers.
- Fraud Prevention and AML Services: To detect and prevent fraud and money laundering, 999dt may share transaction data and account activity patterns with third-party risk management services. These disclosures are made strictly on the basis of legitimate interest and legal obligation.
- Legal and Regulatory Authorities: 999dt will disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory mandate. In such cases, 999dt will disclose only the minimum data necessary to satisfy the legal requirement.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 999dt's assets, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified via their registered email address in advance of any such transfer, and the recipient will be bound by this Privacy Policy.
Cookies and Tracking Technologies
999dt uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse how the platform is used. The following categories of cookies are used on 999dt:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Essential for the platform to function correctly. These cookies manage your login session, maintain your account security state, remember your language preference, and ensure the platform loads correctly across your browsing session. | No — these are required for the service to operate |
| Functional | Remember your preferences such as preferred deposit method (bKash, Nagad, etc.), display settings, and sports betting market selections so you do not need to re-enter them each visit. | Yes |
| Analytics | Collect anonymised data about how players use the platform — which game categories are most popular, average session length, error rates, and page load performance. This data is used solely to improve the platform. | Yes |
| Security | Support fraud detection systems by identifying unusual access patterns, repeated failed login attempts, and suspicious device fingerprinting behaviour that may indicate account compromise or bot activity. | No — these are required for security |
You may manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the 999dt platform — in particular, blocking strictly necessary cookies may prevent you from logging in or maintaining an active session.
999dt does not use third-party advertising cookies or serve targeted advertising based on your personal data. Cross-site tracking for the purpose of building advertising profiles is not conducted on the 999dt platform.
Data Retention
999dt retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply to the main categories of player data held by 999dt:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance and legal record-keeping obligations |
| KYC Documents | Duration of account + 5 years after closure | Regulatory requirement for identity verification records |
| Financial Transaction Records | Duration of account + 7 years after closure | Financial record-keeping and AML regulatory requirements |
| Gaming Activity Logs | Duration of account + 3 years after closure | Dispute resolution, responsible gaming assessment |
| Customer Support Communications | 3 years from the date of the interaction | Complaint handling and quality assurance |
| Marketing Preferences | Until consent is withdrawn, then deleted within 30 days | Consent-based processing — deletion upon withdrawal |
| Technical & Analytics Data | 13 months on a rolling basis | Platform performance analysis and security monitoring |
Upon expiry of the applicable retention period, personal data is either securely deleted from 999dt's systems or irreversibly anonymised so that it can no longer be linked to an identified or identifiable individual. Anonymised data may be retained for longer periods for statistical and analytical purposes, as it no longer constitutes personal data.
Where a player requests deletion of their data before the end of the applicable retention period, 999dt will action the request to the extent possible — but will retain data that it is legally obligated to keep for the remainder of the required retention period, after which it will be deleted as per the schedule above.
Data Security
999dt takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:
- Transport Layer Encryption: All data transmitted between your device and 999dt's servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire platform — there are no unencrypted HTTP connections permitted for authenticated sessions.
- Data-at-Rest Encryption: Sensitive data stored in 999dt's databases — including financial data, identity documents, and KYC records — is encrypted at rest using AES-256 encryption or equivalent.
- Access Control: Internal access to player data is governed by role-based access controls. Staff members are granted access only to the data categories required to perform their specific job function. All access is logged and subject to periodic audit.
- Two-Factor Authentication: 999dt offers SMS-OTP two-factor authentication (2FA) for player logins from new devices. Players are strongly encouraged to enable this feature from their account security settings to protect against unauthorised account access.
- Penetration Testing: 999dt's platform and infrastructure are subject to regular third-party security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: 999dt maintains a documented data breach response plan. In the event of a security incident that poses a risk to player data, affected players will be notified promptly via their registered email address, along with guidance on protective steps they should take.
Your Privacy Rights
As a player on 999dt, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] (plain text — not a link). 999dt will respond to all valid requests within 30 days of receipt.
- Right of Access: You have the right to request a copy of all personal data that 999dt holds about you, along with information about how it is being used. 999dt will provide this in a structured, commonly used format.
- Right to Rectification: If any personal data held by 999dt about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information (such as your contact email or phone number) directly through your account settings.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing on legitimate interest grounds and 999dt has no overriding legitimate reason to continue. This right is subject to 999dt's legal retention obligations described in Section 6.
- Right to Restrict Processing: You may request that 999dt temporarily restricts its processing of your data — for example, while a dispute about data accuracy is being resolved — without requesting full deletion.
- Right to Data Portability: For data processed on the basis of consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted directly to another service provider where technically feasible.
- Right to Object: You have the right to object to 999dt's processing of your personal data where that processing is based on legitimate interest. Upon receiving an objection, 999dt will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Marketing Consent: You may withdraw consent to receive marketing communications at any time by updating your preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect the processing of data required to operate your account.
999dt will not charge a fee for handling reasonable data rights requests. Where requests are manifestly unfounded or excessive, 999dt reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided to the player.
Third-Party Services
The 999dt platform integrates with a number of third-party service providers to deliver a complete betting and gaming experience to players in Bangladesh. Each third-party provider operates under its own privacy policy and data processing terms. 999dt requires all third-party providers to implement data protection standards consistent with this Privacy Policy through contractual data processing agreements.
Key third-party integrations on 999dt include:
- Payment Gateways: bKash, Nagad, Rocket, and Upay process payment transactions on behalf of 999dt. These providers handle payment-specific data in accordance with their own privacy policies and applicable financial services regulations in Bangladesh. 999dt does not store your full bKash or Nagad PIN — only the account number required to process your transaction.
- Game Studio Providers: Studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming supply the games hosted on the 999dt platform. Game session data is exchanged with these providers via secure APIs. The data shared is limited to pseudonymous session identifiers and bet outcomes; your full identity is not shared with game providers.
- Analytics Services: 999dt uses anonymised analytics tools to understand platform usage patterns and improve performance. No personally identifiable data is shared with analytics providers — only aggregated, de-identified metrics.
- Customer Support Tools: Live chat and support ticketing functionality is powered by third-party support software. Conversation data is processed and stored by these tools in accordance with their own data processing terms, which 999dt has reviewed and approved.
999dt is not responsible for the privacy practices of third-party websites or services that may be accessible through links appearing on the platform, though as policy, 999dt does not include external links to third-party sites on any page of the 999dt platform. If you navigate to a third-party site independently, you should review that site's own privacy policy before providing any personal data.
Updates to This Policy
999dt may update this Privacy Policy from time to time to reflect changes in our data processing practices, new platform features, evolving legal requirements, or feedback from players. All updates take effect from the date they are published on this page.
Where an update is material — meaning it significantly changes how your personal data is collected, used, or shared — 999dt will notify you by sending an alert to your registered email address at least seven (7) days before the change takes effect. For minor updates, such as clarifications of existing practices or typographical corrections, no advance notice will be given, but the "Effective Date" shown at the top of this page will be updated to reflect the date of the change.
Your continued use of the 999dt platform after the effective date of any update to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree to the updated policy, you should cease using the platform and contact support to request account closure. Any data collected up to the point of closure will continue to be handled in accordance with the version of the policy in effect at the time of collection, subject to applicable legal retention obligations.
We encourage you to review this Privacy Policy periodically to stay informed about how 999dt protects your data. If you have any questions about a specific update or about this policy in general, please contact our support team via live chat or at [email protected] (plain text — not a link).
This Privacy Policy was last reviewed and updated in January 2026. It supersedes all prior versions published on the 999dt platform.
Your Data Is Safe — Now Enjoy the Games
With your privacy protected by industry-standard security measures, explore everything 999dt has to offer — live cricket betting on BPL and IPL, hundreds of casino tables, and over 1,500 slots, all accessible via bKash and Nagad.