Privacy Policy – db999

01 Introduction

This Privacy Policy applies to all players, visitors, and users of the db999 platform, accessible at db999.bio. It describes how db999 collects, uses, stores, shares, and protects personal information in connection with the operation of its online casino and sports betting services targeting the Bangladesh market.

db999 is committed to handling your personal data responsibly and transparently. This policy has been written to be clear and accessible to all players, regardless of technical or legal background. We encourage you to read it in full before creating an account or providing any personal information to db999.

By accessing or using the db999 platform — including browsing the website, registering an account, making a deposit, or placing a bet — you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with this policy, you should not use the db999 platform.

This Privacy Policy should be read alongside the db999 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into this document.

02 Data We Collect

db999 collects two broad categories of personal data: information you provide directly to us, and information we collect automatically through your use of the platform.

Information you provide directly:

• Identity data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact data: Email address, mobile phone number, and residential address (city and district, such as Dhaka, Chittagong, Sylhet, or Khulna).
• Account credentials: Username and encrypted password. db999 does not store passwords in plaintext under any circumstances.
• Identity verification documents: Copies of government-issued National Identity Card (NID), passport, or driving licence submitted during KYC, and proof of payment method ownership where required.
• Financial data: Masked payment method identifiers (e.g., last four digits of a card, or the registered mobile number associated with a bKash, Nagad, or Rocket account). Full payment credentials are never stored by db999.
• Communications data: Records of messages sent to db999 support via live chat or email, including the content of those messages and any attachments.

Information collected automatically:

• Technical data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions on the db999 platform.
• Transaction data: Records of all deposits, withdrawals, bonus claims, wagers, and payouts associated with your account.
• Cookie and tracking data: Information collected via cookies and similar technologies, as described in Section 7 of this policy.

03 How We Collect Your Data

db999 collects personal data through the following channels and methods:

• Account registration: When you create a db999 account, you voluntarily provide identity and contact information via the registration form.
• KYC verification: When you submit identity documents to complete account verification before processing withdrawals above the applicable threshold.
• Deposits and withdrawals: When you initiate a financial transaction, our payment processing partners transmit masked transaction references to db999 for reconciliation purposes.
• Platform usage: db999's servers automatically record technical and usage data each time you access the platform, regardless of whether you are logged in.
• Customer support interactions: When you contact the db999 support team via live chat or email, the contents of those communications are logged and stored.
• Cookies and analytics tools: db999 uses first-party cookies and analytics software to understand how players interact with the platform. See Section 7 for full details.
• Fraud prevention partners: db999 may receive data about you from third-party fraud detection services in order to verify the legitimacy of your account activity and protect the platform from abuse.

04 Purpose of Data Processing

db999 processes personal data only for specific, documented purposes. The following table summarises the primary purposes for which each category of data is used:

• Account creation and management: Identity and contact data are used to create, maintain, and secure your db999 account, and to authenticate your identity each time you log in.
• Payment processing: Financial data and masked payment identifiers are used to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner bank channels.
• KYC and regulatory compliance: Identity documents are used to verify that Players meet the minimum age requirement of 18 years and to comply with applicable anti-money laundering (AML) obligations.
• Platform security and fraud prevention: Technical and usage data are used to detect and prevent unauthorised account access, cheating, bonus abuse, money laundering, and other prohibited activity as defined in the db999 Terms & Conditions.
• Customer support: Communications data is used to respond to your queries, resolve disputes, and improve the quality of db999's support services.
• Responsible gaming: Usage and transaction data are monitored to identify patterns associated with problem gambling behaviour, enabling db999 to offer appropriate responsible gaming interventions in accordance with its Responsible Gaming policy.
• Platform improvement: Aggregated, anonymised usage data is used to understand how players engage with the db999 platform and to guide product development decisions.
• Marketing communications: Where you have provided explicit consent, db999 may use your contact data to send you promotional offers, bonus notifications, and event updates. You may withdraw this consent at any time via your account settings or by contacting support.

05 Legal Basis for Processing

db999 processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to fulfil the contract between you and db999 — specifically, to create and maintain your account, process your transactions, and provide the gaming services you have requested.
• Legal obligation: db999 is required to collect and retain certain data — including identity verification documents and transaction records — to comply with applicable anti-money laundering, counter-terrorism financing, and financial reporting obligations.
• Legitimate interests: db999 processes technical and usage data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud prevention, platform security monitoring, and aggregate analytics.
• Consent: Where db999 sends you direct marketing communications or uses non-essential cookies, it does so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Data Sharing & Third Parties

db999 does not sell, rent, or trade personal data to third-party advertisers or data brokers. Personal data is shared with third parties only in the following limited and necessary circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banking institutions receive the minimum data necessary to authorise and process your financial transactions. These processors operate under their own privacy policies and are contractually bound to protect your data.
• Identity verification providers: Third-party KYC service providers may receive copies of your identity documents to perform automated or manual verification checks on behalf of db999.
• Fraud prevention services: db999 shares technical and behavioural data with fraud detection partners to identify and prevent abusive or fraudulent account activity across the platform.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session data (such as player ID and stake amounts) to facilitate game delivery, dispute resolution, and jackpot management.
• Legal and regulatory authorities: db999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, or when disclosure is necessary to protect the rights, property, or safety of db999, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of db999's business, personal data held by db999 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where legally required.

07 Cookies & Tracking Technologies

db999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device by your web browser when you visit db999. They help us remember your preferences, keep you logged in, and understand how you use the platform.

db999 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the db999 platform to function. They manage your login session, maintain account security, and enable core features such as the game lobby and deposit flow. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language settings, last visited game category, and display options — to improve your experience on return visits to db999.
• Analytics cookies: db999 uses first-party analytics tools to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify which features are most used, where players encounter difficulties, and how the platform can be improved. Individual player behaviour is not shared with third-party analytics providers.
• Security and fraud prevention cookies: These cookies record technical signals — such as device fingerprints and behavioural patterns — that help db999 detect and prevent unauthorised account access, bot activity, and other security threats.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the db999 platform. Disabling functional or analytics cookies will not prevent you from using the core betting and gaming features but may degrade your overall experience.

08 Data Retention

db999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law.

• Active account data: Identity, contact, and financial data associated with an active db999 account is retained for the full duration of the account's existence and for a period of five (5) years following account closure.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, in compliance with applicable anti-money laundering record-keeping requirements.
• Transaction records: Complete records of all deposits, withdrawals, bets, and payouts are retained for a minimum of five (5) years to support audit, dispute resolution, and regulatory compliance obligations.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, unless the subject matter of the communication is relevant to an ongoing dispute or investigation, in which case records are retained until the matter is resolved.
• Technical and usage data: Server logs and platform analytics data are retained for twelve (12) months in identifiable form before being anonymised or deleted.
• Marketing consent records: Records of your marketing consent preferences are retained for the duration of your account and for one (1) year following account closure.

When personal data is no longer required and no legal retention obligation applies, db999 securely deletes or anonymises the data using industry-standard data destruction procedures.

09 Security Measures

db999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between player devices and db999 servers.
• At-rest encryption for all databases containing personal data, identity documents, and financial records stored on db999 infrastructure.
• Access controls: Personal data is accessible only to db999 staff and contractors who have a legitimate operational need, and all access is logged and audited.
• Password hashing: Player passwords are stored using a strong, salted cryptographic hashing algorithm. db999 staff cannot view your plaintext password under any circumstances.
• Penetration testing: The db999 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: db999 maintains a documented data breach response procedure. In the event of a breach affecting player data, affected players will be notified without undue delay in accordance with applicable law.

10 Your Privacy Rights

As a db999 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the db999 support team via live chat or email at [email protected]. db999 will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days.

• Right of access: You have the right to request a copy of all personal data that db999 holds about you, together with information about how it is being used.
• Right to rectification: If any personal data that db999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data. db999 will comply where no legal retention obligation requires the data to be kept. Note that transaction and KYC records may be subject to mandatory retention periods as described in Section 8.
• Right to restrict processing: In certain circumstances — for example, while a rectification request is being assessed — you may request that db999 temporarily restrict the processing of your personal data.
• Right to data portability: You may request a copy of personal data you have provided to db999 in a structured, machine-readable format, where technically feasible.
• Right to withdraw consent: Where db999 processes your data on the basis of consent (such as for marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to the processing of your personal data where db999 relies on legitimate interests as the legal basis, if you believe your individual rights and interests override those legitimate interests in your specific circumstances.

11 Children's Privacy

db999 implements age verification measures during the registration process and conducts KYC checks to confirm that Players meet the minimum age requirement. If db999 discovers that a Player has provided false age information and is under 18, the account will be immediately suspended, all funds will be forfeited, and the matter may be referred to relevant authorities.

If you are a parent or guardian and believe that your child has registered an account on db999, please contact our support team immediately at [email protected]. We will investigate and, where confirmed, close the account and take appropriate action without delay.

12 Third-Party Links

The db999 platform may contain references to or descriptions of third-party services — such as payment providers (bKash, Nagad, Rocket) or game studios (Pragmatic Play, Evolution Gaming, NetEnt). While db999 takes care to only reference reputable partners, this Privacy Policy applies solely to data processed by db999 directly.

When you interact with a third-party payment gateway or game provider in connection with your db999 account, that third party's own privacy policy governs the data they collect and process. db999 is not responsible for the data practices of third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with your db999 account.

13 Changes to This Policy

db999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, db999 will:

• Update the "Last Updated" date at the top of this page.
• Display a notice on the db999 platform informing Players that the Privacy Policy has been updated.
• Where the changes are significant, send a notification to the email address registered on your account at least seven (7) days before the revised policy takes effect.

Your continued use of the db999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the revised terms, you should close your account and cease using the db999 platform prior to the effective date.

We recommend bookmarking this page and reviewing it periodically to stay informed about how db999 protects your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way db999 handles your personal data, please get in touch with our support team through any of the following channels:

• Live Chat: Available 24/7 directly on the db999 platform — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000999

Our support team operates on Bangladesh Standard Time (BST, UTC+6) and aims to respond to all email privacy enquiries within 24 hours. For data deletion, access, or rectification requests, please include "Privacy Request" in your message subject to help us route your query correctly.