dd99 Privacy Policy

dd99 is an online betting and casino platform operating at dd99.io, offering sports betting, live casino games, slot games, and related services primarily to players in Bangladesh. References to "dd99", "we", "us", or "our" throughout this Privacy Policy refer to the dd99 platform and its operating entity.

dd99 acts as the data controller in respect of personal data collected through the dd99 platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to handle your data only in accordance with our instructions and applicable data protection standards.

dd99 collects and processes the following categories of personal data in the course of providing its services to registered players and site visitors:

We do not intentionally collect any special category personal data (such as health data, biometric data, or data relating to criminal convictions) unless specifically required for a regulatory compliance purpose, in which case we will notify you separately and obtain any required consent.

dd99 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide actively when you complete the dd99 registration form, submit a Know Your Customer (KYC) verification request, make a deposit or withdrawal, contact our support team, or update your account profile.
• Automated Collection: Technical and usage data collected automatically by our systems when you visit dd99.io, log into your account, browse game categories, or interact with any feature of the platform. This data is collected via server logs, session management tools, and analytics software.
• Cookies and Similar Technologies: Data collected via cookies, pixel tags, and local storage objects placed on your device when you visit dd99.io. Please see Section 7 of this policy for full details of our cookie practices.
• Payment Providers: Transaction confirmation data received from our payment processing partners (bKash, Nagad, Rocket, Upay, and bank transfer services) following a deposit or withdrawal instruction. dd99 does not receive or store full payment account credentials — only confirmation references and account identifiers necessary for matching transactions.
• Game Providers: Aggregate game activity data received from our third-party game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) relating to game rounds played, outcomes, and RTP performance as it applies to your account.
• Fraud Prevention and Compliance Screening: In certain circumstances, identity and risk-related data received from third-party anti-fraud and compliance screening services as part of our obligations to prevent financial crime.

dd99 processes your personal data for the following specific purposes. Each purpose is linked to a lawful basis, which is described in full in Section 5 of this policy.

• Account Creation and Management: To register and maintain your dd99 player account, authenticate your identity at login, and manage your account settings and preferences.
• Service Delivery: To provide access to sports betting markets, live casino games, slot games, and all other features of the dd99 platform that you choose to use.
• Payment Processing: To process deposit and withdrawal transactions via your selected payment method, reconcile transaction records, and investigate any payment queries or disputes.
• Identity Verification (KYC): To verify your age (21+), identity, and the ownership of your payment methods as required by our responsible gambling obligations and anti-money laundering (AML) controls.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multiple account registration, bonus abuse, money laundering, and other conduct prohibited under our Terms & Conditions.
• Responsible Gambling: To monitor account activity for signs of problem gambling, enforce self-exclusion and deposit limit requests, and fulfil our duty of care to players who have indicated they may be experiencing gambling-related harm.
• Customer Support: To respond to your support requests, resolve account queries, and maintain a record of communications necessary for ongoing case management.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and cooperate with investigations related to fraud or financial crime.
• Platform Improvement: To analyse usage patterns and player behaviour on the dd99 platform in order to improve the user experience, optimise game offerings, and fix technical issues.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign communications where you have provided consent to receive such communications from dd99.

dd99 processes your personal data on the following legal bases, as appropriate to each processing purpose described in Section 4:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to provide you with a dd99 account and deliver the betting, casino, and payment services you have requested. This covers account creation, service delivery, and payment processing.
• Legal Obligation: Processing that is required in order for dd99 to comply with applicable legal and regulatory requirements. This covers identity verification (KYC/AML), fraud prevention reporting, and cooperation with lawful authority requests.
• Legitimate Interests: Processing that is necessary for dd99's legitimate business interests, where those interests are not overridden by your rights and interests. This covers fraud detection and security monitoring, responsible gambling safeguards, platform analytics, and service improvement activities. We conduct a balancing assessment before relying on this basis for any processing activity.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent. This applies to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of any prior processing.

dd99 does not sell your personal data. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: We share the financial data necessary to process your deposit and withdrawal transactions with our payment partners (bKash, Nagad, Rocket, Upay, and affiliated banking institutions). Each payment partner processes your data under their own privacy policy and applicable financial regulation.
• Game Studios and Software Providers: Your account identifier and game activity data are shared with our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to the extent required to operate the games you play on the dd99 platform and to resolve any game-related disputes.
• Identity Verification and AML Screening Services: Identity documents and related data may be shared with third-party KYC and AML compliance service providers for the purpose of verifying your identity, checking sanctions lists, and fulfilling our anti-money laundering obligations.
• Fraud Prevention and Security Services: Technical and account data may be shared with third-party fraud prevention and cybersecurity service providers to detect and prevent fraudulent activity on the dd99 platform.
• Analytics and Platform Performance Services: Aggregated and anonymised usage and technical data may be shared with analytics service providers to support platform monitoring and improvement. Where possible, data shared for analytics purposes is anonymised or pseudonymised before sharing.
• Legal and Regulatory Authorities: dd99 will disclose personal data to competent legal and regulatory authorities where required to do so by law, court order, or other binding legal process, or where we reasonably believe that disclosure is necessary to prevent imminent harm or criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the dd99 business, player data may be transferred to the acquiring entity as part of the transaction. We will notify affected players in advance of any such transfer where we are legally permitted to do so.

All third-party service providers engaged by dd99 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with dd99's documented instructions.

dd99 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, understand how you use the platform, and deliver relevant content.

You can control cookie settings through your web browser. Most modern browsers allow you to refuse or delete cookies via the browser's settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in and using the dd99 platform. Disabling functional cookies may cause certain preference settings to reset between sessions.

dd99 does not use cross-site tracking cookies that follow you across third-party websites unrelated to the dd99 platform.

dd99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered dd99 account plus a minimum period of five (5) years following account closure. This extended retention period reflects our AML and financial record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial compliance requirements.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years following the completion of the relevant verification process, or five (5) years following account closure, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the relevant support interaction, unless a longer retention period is required due to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of your account and for three (3) years following withdrawal of consent, as evidence of the consent status applicable at any given time.
• Technical and Usage Data: Typically retained for up to thirteen (13) months in identifiable form, after which data is aggregated and anonymised for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Where data cannot be immediately deleted due to system constraints, it will be placed in a restricted, non-operational state until deletion is possible.

As a dd99 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of Access: You have the right to request a copy of the personal data that dd99 holds about you, along with information about how we use it. We will provide this in a clear and portable format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data held by dd99 is inaccurate or incomplete, you have the right to request that we correct or complete it. Certain corrections may require supporting documentation for verification purposes.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is not absolute — we may be required to retain certain data for legal compliance purposes as described in Section 8.
• Right to Restriction of Processing: In certain circumstances you may request that dd99 restrict the processing of your personal data — for example, while the accuracy of the data is being contested or a legitimate interests objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of dd99's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The dd99 platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts.

If dd99 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with our responsible gaming procedures and applicable legal requirements.

If you are a parent or guardian and believe that your child may have accessed the dd99 platform, please contact our support team immediately at [email protected]. We will investigate promptly and take all appropriate action.

dd99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data in transit between your browser or app and dd99's servers is encrypted using SSL/TLS protocols. Our platform enforces HTTPS across all pages and connections.
• Password Security: Account passwords are stored in hashed, salted form using industry-standard cryptographic algorithms. dd99 staff cannot view your password in plain text.
• Access Controls: Access to systems containing personal data is restricted to authorised dd99 personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly when no longer required.
• Two-Factor Authentication: dd99 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of protection against unauthorised access.
• Intrusion Detection and Monitoring: Our platform is monitored continuously for suspicious activity, intrusion attempts, and anomalous account behaviour. Security incidents are investigated and addressed promptly.
• Vendor Security Standards: All third-party service providers who process personal data on dd99's behalf are required to maintain security standards consistent with those described in this policy and to notify dd99 promptly of any security incidents affecting our player data.

Despite our comprehensive security measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dd99 will notify affected players in accordance with applicable legal requirements.

dd99 reserves the right to update or amend this Privacy Policy at any time. We may make changes to reflect updates in applicable law, changes to our data processing activities, or improvements to how we communicate our privacy practices to you.

Where a material change is made to this Privacy Policy — meaning a change that meaningfully affects your rights or the way we process your personal data — we will notify registered players via the email address associated with their dd99 account, or via a prominent notice displayed on the platform, at least 7 days before the change takes effect. Minor amendments, such as typographical corrections or clarifications that do not alter the substantive effect of any provision, may be made without prior notification.

The effective date and last updated date at the top of this document will always reflect the date of the most recent version. We encourage you to review this Privacy Policy periodically to stay informed of how dd99 protects your personal data. Your continued use of the dd99 platform following the publication of any amended version of this policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way dd99 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] — use subject line "Privacy Enquiry" for the fastest routing to our data protection team.
• Live Chat: Available 24/7 in English via the dd99 platform. For data rights requests, please follow up in writing via email so that we have a verifiable record of your request.
• Support Hours: 00:00 – 23:59 Bangladesh Standard Time (BST, UTC+6), every day of the year.

For formal data subject rights requests (access, erasure, portability, rectification, obj ection, restriction), please email [email protected] with the subject line "Data Rights Request", your registered dd99 username, and a clear description of the right you wish to exercise. We may ask for proof of identity before processing your request to ensure we do not disclose or alter data belonging to another individual.