Privacy Policy — How d99 Handles Your Data
Your privacy matters to us. This Privacy Policy explains exactly what personal data d99 collects, why we collect it, how it is stored and processed, and what rights you hold over your own information. We are committed to handling all player data with transparency, security, and respect.
Privacy at the Core of d99
At d99, we understand that trust is the foundation of every player relationship. When you create an account, place a bet, or contact our support team, you share personal information with us. This Privacy Policy is our promise to you about how that information is handled — collected only for legitimate purposes, stored securely, never sold to third parties, and always available for you to review or request deletion.
This policy applies to all users of the d99 platform at d99.lat, including registered players, visitors who browse without registering, and anyone who contacts d99 through our support channels. By using d99, you acknowledge that you have read and understood this Privacy Policy.
256-Bit SSL Encryption
Every data transmission between your device and d99's servers is protected by industry-standard 256-bit SSL encryption. Your personal and financial data travels over an encrypted channel at all times.
No Data Sales — Ever
d99 will never sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used solely to operate your account, comply with legal obligations, and improve your experience on the platform.
Minimal Data Collection
We collect only the information that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect unnecessary data or build behavioural profiles for advertising purposes.
Your Rights Are Respected
You have the right to access, correct, export, or request deletion of your personal data held by d99 at any time. Submit a request to our support team and we will respond within a reasonable timeframe as required by applicable law.
Secure Payment Processing
d99 does not store your full card numbers, bKash PINs, Nagad credentials, or other payment secrets on our servers. All payment data is handled by independently certified, PCI-DSS-compliant payment processors.
Marketing Opt-Out Available
If you have opted in to receive promotional communications from d99, you may withdraw that consent and opt out at any time by contacting our support team or using the unsubscribe option in any marketing email you receive.
Data We Collect
d99 collects personal data in several ways: directly from you when you register or use the platform, automatically through technical systems as you browse, and occasionally from third-party verification partners. The categories of data we collect are described below.
1.1 Registration & Identity Data
When you create a d99 account, we collect the following information:
- Full legal name (as it appears on your government-issued identification)
- Date of birth (for age verification — players must be 18 or older)
- Email address
- Mobile phone number (Bangladesh-registered)
- Residential address in Bangladesh
- Username and encrypted password
1.2 Identity Verification Data
To comply with anti-money-laundering (AML) and know-your-customer (KYC) obligations, d99 may request copies of:
- National Identity Card (NID) or passport
- Birth certificate (where NID is unavailable)
- Proof of address — a recent utility bill or bank statement (issued within the last three months)
- Selfie photograph for facial verification (where applicable)
These documents are processed securely and retained only for as long as required by applicable law.
1.3 Financial & Transaction Data
When you deposit or withdraw funds through d99, we record:
- Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
- Transaction amounts in BDT (৳)
- Transaction timestamps and reference numbers
- Account identifiers associated with your payment method (mobile number for MFS, masked card number for cards)
Full card numbers, bKash PINs, and Nagad passwords are never stored on d99 servers. All sensitive payment credentials are handled exclusively by our certified payment gateway partners.
1.4 Gaming & Betting Activity Data
We maintain records of your activity on the platform, including:
- Games played, bets placed, and outcomes
- Bonus claims and wagering history
- Session start and end times
- Responsible gaming tool usage (deposit limits set, self-exclusion periods)
This data is used to manage your account, resolve disputes, detect fraudulent activity, and support responsible gaming interventions where necessary.
1.5 Technical & Device Data
When you access d99, our systems automatically collect certain technical information:
| Data Type | Examples | Purpose |
|---|---|---|
| IP Address | IPv4 / IPv6 address at time of access | Fraud detection, geo-restriction enforcement |
| Device Information | Device type, OS version, browser name and version | Platform optimisation, security monitoring |
| Session Data | Login times, pages visited, session duration | Account security, responsible gaming monitoring |
| Referral Source | URL or campaign identifier that directed you to d99 | Internal analytics, affiliate management |
1.6 Communications Data
If you contact d99 via email or live chat support, we retain records of those communications — including the content of your messages and our responses — for quality assurance, dispute resolution, and training purposes.
d99 never contacts players by phone to request passwords, PINs, or payment details. If you receive such a call claiming to be from d99, do not comply and report the incident immediately to [email protected].
How We Use Your Data
d99 processes your personal data only for specific, legitimate purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your data are set out below.
2.1 Account Management
Your registration data is used to create and maintain your player account, verify your identity and age, authenticate your login sessions, and communicate with you about your account status, security alerts, and important platform changes.
2.2 Payment Processing
Financial data is used to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Visa, Mastercard), reconcile transactions, and investigate any payment disputes or discrepancies.
2.3 Legal & Regulatory Compliance
d99 is required to process certain personal data to fulfil its legal obligations, including:
- Know Your Customer (KYC) and anti-money-laundering (AML) checks
- Age verification to prevent underage gambling
- Responsible gaming monitoring and intervention
- Fraud prevention and detection
- Record-keeping as required by applicable laws and regulations
2.4 Platform Improvement & Security
Technical and session data is used to monitor platform performance, detect and prevent security threats, fix bugs, and optimise the user experience for players accessing d99 from Bangladesh — including from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other regions.
2.5 Responsible Gaming
Gaming and session data is used to monitor player behaviour for signs of problem gambling. d99 uses this data to support responsible gaming interventions such as sending session reminders, triggering cooling-off suggestions, or applying account restrictions in accordance with a player's own self-imposed limits.
2.6 Marketing Communications (Consent-Based Only)
If you have explicitly opted in to receive marketing communications, d99 may use your email address or mobile number to send you information about promotions, bonuses, new games, seasonal offers (such as BPL, IPL, or Eid promotions), and platform updates. You may withdraw this consent at any time by contacting [email protected].
d99 does not use your personal data for automated decision-making or profiling in ways that produce significant legal effects. All account suspension or restriction decisions involving complex circumstances are reviewed by a human member of the d99 compliance team.
Data Sharing & Disclosure
d99 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only where strictly necessary for the operation of the platform, the fulfilment of our legal obligations, or the protection of player safety. The categories of third parties with whom data may be shared are described below.
3.1 Payment Service Providers
To process your deposits and withdrawals, we share necessary transaction data with our payment processing partners, including mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank). These partners receive only the minimum data required to complete the transaction and are contractually bound to process it securely and confidentially.
3.2 Identity Verification Partners
d99 may use third-party KYC service providers to verify the identity and age of players. Such providers receive your identity documents and relevant personal data solely for the purpose of verification and are prohibited from using it for any other purpose.
3.3 Game Software Providers
Games on the d99 platform are powered by licensed third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and game data for the purpose of game performance monitoring, fairness auditing, and technical support. They do not receive your full name, payment details, or contact information.
3.4 Law Enforcement & Regulatory Authorities
d99 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in response to a valid legal request. In such cases, d99 will disclose only the minimum data necessary to satisfy the legal requirement.
3.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of d99's business assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to this Privacy Policy prior to the change taking effect.
d99 will never share your personal data with third-party advertising networks, social media platforms, or data brokers. If you receive unsolicited marketing from a third party claiming an association with d99, please report it to us immediately at [email protected] so we can investigate.
Data Security
d99 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.
5.1 Technical Security Measures
- 256-bit SSL/TLS encryption on all data in transit between your device and d99's servers.
- Encrypted storage of sensitive data fields, including passwords (hashed with a secure one-way algorithm), identity document data, and payment identifiers.
- Firewalls and intrusion detection systems to monitor for and block unauthorised access attempts.
- Automated fraud detection that monitors login patterns, transaction behaviours, and session anomalies in real time.
- Regular security audits and penetration testing conducted by independent security professionals.
5.2 Organisational Security Measures
- Access to personal data within d99 is restricted to staff who require it to perform their specific job functions.
- All d99 staff who handle personal data receive data protection training and are bound by confidentiality agreements.
- Third-party vendors and payment partners are required to demonstrate adequate security standards before being granted access to any d99 player data.
5.3 Data Breach Response
In the unlikely event of a personal data breach that poses a risk to player rights and freedoms, d99 will take immediate steps to contain the breach, assess its scope, and notify affected players as promptly as practicable. d99 maintains an internal incident response plan specifically for data security events.
You can strengthen your own account security by using a unique, strong password for d99 that you do not use on any other website, enabling any available two-factor verification, and logging out after every session — particularly on shared or public devices.
Data Retention
d99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to different categories of data are summarised below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, AML compliance |
| Identity verification documents | 5 years after account closure | KYC regulatory requirements |
| Transaction records | 7 years | Financial record-keeping regulations |
| Gaming and betting history | 5 years | Dispute resolution, responsible gaming audits |
| Support communications | 3 years | Quality assurance, dispute evidence |
| Technical / session logs | 12 months | Security monitoring, fraud investigation |
| Marketing consent records | Until consent is withdrawn + 2 years | Compliance with consent obligations |
Once a retention period expires, d99 will securely delete or anonymise the relevant data so that it can no longer be associated with an identifiable individual. Where deletion is not immediately possible due to technical constraints, the data will be isolated and protected from any further processing until deletion can be completed.
Your Privacy Rights
As a d99 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request.
7.1 Right of Access
You have the right to request a copy of all personal data that d99 holds about you. Upon receiving a verified request, d99 will provide a complete summary of your data in a readable format within a reasonable timeframe.
7.2 Right to Rectification
If any personal data that d99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly through your account settings; for other data, contact support.
7.3 Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that d99 may be required to retain certain data for regulatory compliance purposes even following an erasure request, in which case we will explain the legal basis for retention.
7.4 Right to Data Portability
Where d99 processes your data on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format.
7.5 Right to Restrict Processing
In certain circumstances, you have the right to request that d99 restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while you have objected to processing and d99 is assessing the grounds for that objection.
7.6 Right to Withdraw Marketing Consent
If you have previously consented to receive marketing communications from d99, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.
d99 will respond to all valid privacy rights requests within 30 days of receipt. We may ask you to verify your identity before processing a request to ensure we are disclosing, amending, or deleting the correct account's data. There is no charge for exercising your privacy rights.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a complaint about how d99 has handled your personal data, please contact our dedicated privacy support channel.
8.1 How to Contact Us
Privacy enquiries and data subject requests should be directed to:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: "Privacy Request — [Your Account Username]"
- Response Time: d99 aims to acknowledge all privacy enquiries within 48 hours and resolve them within 30 days.
8.2 Updates to This Policy
d99 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised policy will be published on this page with an updated effective date. For significant changes that affect your rights or how your data is used, d99 will notify registered players via email prior to the change taking effect. Your continued use of the d99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
If you believe that d99 has processed your personal data in a manner that violates your privacy rights and we have not resolved your complaint to your satisfaction, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Your Data Is Safe at d99
Questions about your privacy, account data, or how d99 protects your information? Our support team is available 24/7. For adults aged 18 and above only.