dt99 Privacy Policy

1. Who We Are

dt99 is an online casino and sports betting platform serving adult players in Bangladesh. References to "dt99", "we", "us", and "our" throughout this Privacy Policy refer to the dt99 operating entity that controls the personal data you provide when you access or use the dt99 platform at dt99.io.

dt99 acts as the data controller in respect of the personal data collected through the platform. This means we determine the purposes for which and the manner in which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors under our instruction.

If you have any questions about how dt99 handles your personal data, you may contact our support team at any time. Contact details are provided in Section 14 of this policy.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by dt99 in connection with your use of the dt99 platform, including the website at dt99.io, any associated mobile interfaces, our customer support channels, and any communications we send to you by email or other means.

This policy applies to all registered players, prospective players who have initiated but not completed registration, and visitors to the dt99 website who have not registered an account. It does not apply to third-party websites or services that may be linked to from within the dt99 platform — those parties operate their own independent privacy policies for which dt99 accepts no responsibility.

3. Data We Collect

dt99 collects the following categories of personal data about you, depending on how you interact with the platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, National ID number, passport number	At registration and during KYC verification
Contact Data	Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet)	At registration and when you update your profile
Financial Data	bKash / Nagad / Rocket / Upay wallet number, transaction history, deposit and withdrawal amounts in BDT	When you make a deposit or request a withdrawal
KYC Documents	Scanned National ID, proof of address, payment method ownership screenshot	When KYC verification is requested
Usage Data	Games played, bets placed, session duration, login timestamps, device type, IP address, browser type	Automatically during each session on the platform
Communication Data	Live chat transcripts, email correspondence, support ticket content	When you contact our customer support team
Preference Data	Responsible gaming settings, marketing communication preferences, language preferences	When you configure your account settings

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where the collection of health-related information is strictly necessary in connection with a responsible gaming assessment and you have explicitly provided that information to us.

4. How We Collect Your Data

dt99 collects your personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account preferences.
• Automatically — through cookies, server logs, and similar tracking technologies that record your interactions with the platform during each session. See Section 8 for full details on our use of cookies.
• From third-party identity verification providers — when we conduct KYC checks, we may receive confirmation data from identity verification services to validate the documents you have submitted.
• From payment processors — bKash, Nagad, Rocket, and Upay may share transaction reference data with us to confirm that a deposit or withdrawal has been processed successfully.
• From fraud prevention services — we may receive risk-scoring data from third-party fraud detection providers to help us identify suspicious account activity.

5. Legal Basis for Processing

dt99 processes your personal data on the following legal bases:

• Contract performance — processing that is necessary to fulfil our contractual obligations to you under the dt99 Terms & Conditions, including operating your account, processing transactions, and delivering customer support.
• Legal obligation — processing required to comply with applicable legal and regulatory obligations, including identity verification, anti-money laundering checks, and record-keeping requirements.
• Legitimate interests — processing carried out for dt99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where those interests are not overridden by your rights and freedoms.
• Consent — where you have given explicit consent to a specific use of your data, such as receiving marketing communications from dt99. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting our support team.

6. How We Use Your Data

dt99 uses the personal data it collects for the following specific purposes:

• To create, verify, and manage your player account on the dt99 platform.
• To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay in Bangladeshi Taka (BDT).
• To conduct Know Your Customer (KYC) identity verification in accordance with our compliance obligations.
• To detect, investigate, and prevent fraud, money laundering, match-fixing, and other forms of abuse or prohibited conduct on the platform.
• To monitor your gaming activity and apply responsible gaming tools, including deposit limits, loss limits, and self-exclusion, where you have requested them or where we are required to apply them.
• To provide 24/7 English-language customer support via live chat and email.
• To send you service-related communications, including account notifications, transaction confirmations, and security alerts.
• To send you marketing communications about dt99 promotions, bonuses, and new features, where you have opted in to receive such communications. You may opt out at any time.
• To analyse platform usage patterns in order to improve the quality, performance, and security of the dt99 platform.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from government or regulatory authorities.

7. Data Sharing & Third Parties

dt99 does not sell, rent, or trade your personal data to third parties. We share your data only where it is necessary for the lawful operation of the platform, under the following circumstances:

• Payment processors — bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit or withdrawal transactions.
• Identity verification providers — third-party KYC services receive copies of your submitted identity documents solely for the purpose of verification. These providers are contractually required to handle your data securely and to use it only for the purposes for which it was shared.
• Fraud prevention and security services — we may share limited account and transaction data with fraud detection providers to identify and prevent suspicious activity.
• Game studios and software providers — Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other game providers may receive anonymised or pseudonymised gameplay data required to operate their game engines on our platform. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities — we will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of dt99, its players, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of dt99's business assets, your personal data may be transferred to the acquiring party. We will notify you of any such transfer and provide information about your rights in connection with it.

All third-party data processors engaged by dt99 are subject to contractual data processing agreements that require them to process your data only in accordance with our instructions and to maintain appropriate security standards.

8. Cookies & Tracking

dt99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players use the site. A cookie is a small text file placed on your device when you visit a website. Cookies cannot execute code or deliver viruses.

dt99 uses the following categories of cookies:

• Strictly necessary cookies — these are essential for the platform to function. They enable core features such as session management, account login, and security protections. These cookies cannot be disabled.
• Functional cookies — these remember your preferences (such as language settings and responsible gaming limits) so you do not have to re-enter them on each visit.
• Analytics cookies — these collect anonymised data about how players navigate and interact with the platform, helping us identify performance issues and improve the user experience.
• Security cookies — these help us detect and prevent fraudulent logins, bot activity, and other security threats.

dt99 does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertising networks. You may manage your cookie preferences through your browser settings, though disabling strictly necessary cookies may impair the functionality of the platform.

9. Data Retention

dt99 retains your personal data for as long as is necessary to fulfil the purposes outlined in this policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account plus a minimum of 5 years following account closure, to satisfy anti-money laundering and record-keeping obligations.
• Transaction and financial records — retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC documents — retained for the duration of your account plus a minimum of 5 years following account closure.
• Customer support communications — retained for 3 years from the date of the last communication, unless a longer period is required in connection with a dispute or legal proceeding.
• Usage and analytics data — retained in anonymised form for up to 3 years for platform improvement purposes. Non-anonymised usage data is retained for 12 months.
• Marketing preference records — retained for the duration of your account, or until you withdraw consent, whichever is earlier.

When the applicable retention period expires, data is securely deleted or irreversibly anonymised. In exceptional circumstances — for example, where data is required in connection with ongoing litigation — retention may be extended until the matter is resolved.

10. Your Rights

You have the following rights in respect of the personal data that dt99 holds about you. To exercise any of these rights, please contact our support team using the details in Section 14. We will respond to all valid requests within 30 days, and will notify you if we require additional time to process a complex request.

• Right of access — you have the right to request a copy of the personal data we hold about you, together with information about how and why we process it.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most contact and preference data directly from your account settings.
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other legal basis for processing applies. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to restriction — you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability — where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object — you have the right to object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11. Data Security

dt99 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the dt99 platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls that limit access to personal data to authorised personnel who require it for legitimate operational purposes.
• Regular internal security audits and penetration testing to identify and remediate vulnerabilities.
• Multi-factor authentication for access to internal systems that hold personal data.
• A formal data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

While dt99 takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely secure. You also play an important role in keeping your data safe — please maintain the confidentiality of your dt99 login credentials and contact our support team immediately if you suspect that your account has been compromised.

12. Children & Minors

dt99 is strictly an adult platform. We do not knowingly collect or process personal data from any person under the age of 21. If you are under 21 years of age, you must not register an account, make a deposit, or use the dt99 platform in any way.

If dt99 becomes aware that personal data has been collected from a person under the age of 21 — whether through registration, KYC review, or any other means — that account will be closed immediately. Any balance in the account will be returned to the original payment source following identity verification. All associated personal data will be deleted except where retention is required for legal compliance purposes.

If you believe that a person under the age of 21 has registered an account on the dt99 platform, please contact our support team immediately so that we can investigate and take appropriate action.

13. Policy Updates

dt99 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the dt99 platform, at least 7 days before the revised policy takes effect.

The "Last Updated" date at the top of this policy reflects when the most recent changes were made. We encourage you to review this policy periodically so that you remain informed about how dt99 protects your personal data. Your continued use of the platform after the effective date of any update constitutes acceptance of the revised policy.

Where changes are required for legal or security reasons, we may implement them with immediate effect. In such cases, we will notify you as soon as reasonably practicable after the changes have been made.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data dt99 holds about you, please contact our team through any of the following channels:

dt99 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to your query or request, you may escalate the matter through our formal complaints procedure as described in the dt99 Terms & Conditions.