Privacy Policy —
How d0999 Protects Your Data

When you interact with the d0999 platform, we may collect the following categories of personal data. The specific data collected depends on how you use d0999 — for example, a user who registers an account provides more data than one who only browses the website.

1.1 Registration & Identity Data

When you create a d0999 account, we collect the information you provide during the registration process, which includes:

• Full legal name
• Date of birth (used to verify that you are at least 18 years of age)
• Email address
• Mobile phone number (typically your bKash- or Nagad-registered number)
• Username and password (password is stored in hashed form and never in plain text)
• Preferred currency (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering requirements and to verify your age and identity, d0999 may request and retain copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid passport (biographical data page)
• Driving licence
• Recent utility bill or bank statement as proof of address (issued within the past three months)
• Selfie or live photo taken at the time of verification (where required)

1.3 Financial Transaction Data

When you deposit or withdraw funds on d0999, we collect and retain the following financial data:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet number or masked card number associated with the transaction
• Transaction amounts in BDT
• Transaction reference numbers and timestamps
• Account balance history relevant to your d0999 account

d0999 does not store full card numbers. Card transactions are processed through PCI-DSS-compliant payment gateways, and only tokenised references are retained on d0999 systems.

1.4 Gameplay & Activity Data

As part of normal platform operation, d0999 automatically records the following gameplay and activity data:

• Games played, bet amounts, game outcomes, and session durations
• Sports bets placed, markets selected, odds accepted, and settlement results
• Bonus offers claimed and wagering progress
• Login timestamps, IP addresses, and approximate geographic location at the time of login
• Device type, operating system, browser type, and version

1.5 Communications Data

If you contact d0999 via email, live chat, or any other support channel, we retain a record of those communications — including the content of your messages and any attachments — for a period of up to five years, to enable us to respond to follow-up queries, resolve disputes, and maintain an accurate audit trail.

1.6 Data Collected Automatically

Like most websites, d0999.vip automatically collects certain technical data when you visit, including your IP address, referring URL, pages visited, time spent on each page, and click-path data. This data is collected through cookies and similar tracking technologies, which are described in detail in the Cookies section of this policy.

d0999 does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each stated purpose.

Payment Service Providers

To process your deposits and withdrawals in BDT, d0999 shares relevant transaction data with our payment service partners, including bKash, Nagad, Rocket, Upay, and the card processing gateway used for Visa and Mastercard transactions. These providers receive only the data necessary to complete the specific transaction and are contractually prohibited from using that data for any other purpose.

Game Providers

When you play a game supplied by a third-party studio — such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, or Microgaming — your player identifier and session data are shared with that provider's platform to enable gameplay, record results, and calculate payouts. Game providers are not provided with your full personal profile (name, NID, etc.) — only the minimum data needed to run the game session.

Identity Verification Partners

Where d0999 uses a third-party KYC or identity verification service to confirm your age and identity, your submitted documents and personal details will be shared with that provider for the purpose of verification only. The provider is not authorised to retain your data beyond the verification process.

Legal and Regulatory Disclosure

d0999 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are required to do so by applicable law, by a court order, or in connection with a lawful investigation into suspected criminal activity, including fraud or money laundering. In such cases, d0999 will disclose only the minimum data required to comply with the legal obligation.

Business Transfers

In the event that d0999 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your d0999 account, and any acquiring entity will be bound by the terms of this Privacy Policy with respect to your data.

Data We Do Not Share

d0999 will never share your personal data with:

• Advertisers or advertising networks for targeted advertising purposes
• Data brokers or list aggregators
• Social media platforms for profiling purposes
• Any third party for purposes beyond those described in this policy without your explicit prior consent

d0999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. No online platform can guarantee absolute security, but d0999 applies industry best practices across all systems that handle player data.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and d0999.vip is encrypted using TLS 1.2 or higher. The padlock icon in your browser address bar confirms this encryption is active.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm before storage. Even d0999 system administrators cannot read your password.
• Two-Factor Authentication (2FA): d0999 supports two-factor authentication for player accounts. We strongly recommend enabling 2FA to add a second layer of protection to your login process.
• Tokenised Payment Data: Card payment data is tokenised by our PCI-DSS-certified payment gateway. Full card numbers are never stored on d0999 infrastructure.
• Access Controls: Access to systems containing personal data is strictly limited to authorised d0999 personnel on a need-to-know basis. Access logs are maintained and reviewed regularly.
• Intrusion Detection: d0999 systems are monitored around the clock for unusual access patterns, brute-force login attempts, and other indicators of compromise.

Organisational Safeguards

• All d0999 staff with access to personal data are trained in data protection principles and are bound by confidentiality obligations.
• Third-party vendors who process data on d0999's behalf are vetted for security compliance before engagement and are bound by data processing agreements.
• d0999 conducts periodic internal reviews of data handling practices and security controls.

Your Responsibilities

Account security is a shared responsibility. You are responsible for keeping your d0999 login credentials confidential, using a strong and unique password, enabling 2FA where available, and logging out of your account on any shared or public device. d0999 will never ask you for your password via email, live chat, SMS, or any other channel. If you receive any such request claiming to be from d0999, do not respond and report it immediately to [email protected].

Data Breach Response

In the unlikely event of a data breach that affects your personal information, d0999 will take immediate containment action, assess the scope and severity of the breach, and notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — where the breach is likely to result in a risk to your rights and interests.

As a d0999 player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". d0999 will respond to all valid requests within 30 days.

Right of Access

You have the right to request a copy of all personal data that d0999 holds about you. Upon a verified request, we will provide you with a structured summary of your data in a commonly used, machine-readable format. The first copy is provided free of charge. For subsequent requests within a 12-month period, d0999 reserves the right to charge a reasonable administrative fee.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered mobile number has changed or your name was entered incorrectly during registration, contact [email protected] and we will update your records promptly after verifying your identity.

Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that d0999 may be required by law to retain certain categories of data (such as financial transaction records) for specified periods even after a deletion request, as described in the Data Retention section above. In such cases, d0999 will delete all data that is not subject to a legal retention obligation and will inform you of any data that must be retained and the reason why.

Right to Restriction of Processing

You have the right to request that d0999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while a complaint about d0999's use of your data is under investigation. During a restriction, d0999 will continue to store your data but will not carry out any further processing of it beyond storage.

Right to Data Portability

Where d0999 processes your personal data on the basis of your consent or on the basis of a contract with you, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider. Contact [email protected] to submit a data portability request.

Right to Object to Marketing

You have the right to object at any time to d0999 processing your personal data for direct marketing purposes. If you exercise this right, d0999 will cease processing your data for marketing purposes immediately and will not resume unless you provide fresh consent. This right is absolute and cannot be overridden by d0999's legitimate interests.

Right to Withdraw Consent

Where d0999 processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw consent, contact [email protected] with the subject line "Consent Withdrawal".

---