Your Privacy Matters at db999

Introduction

db999 ("we", "us", "our", or "the Platform") operates the online casino and sports betting website at https://db999.lat, offering a range of gaming and wagering services to adult players across Bangladesh. This Privacy Policy describes how db999 collects, stores, uses, discloses, and protects personal data obtained from players and visitors in connection with the use of our platform and services.

We recognise that privacy is a fundamental right. Our approach to data protection is grounded in transparency — we collect only what is necessary, use it only for the purposes described in this policy, and retain it only for as long as is required. We do not use your data to enrich third-party advertising networks, and we do not sell personal information to any party.

This Privacy Policy should be read alongside the db999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you have any questions about this policy, please contact our support team at [email protected] before using the platform.

Information We Collect

db999 collects personal data through several channels: directly from you when you register an account, indirectly through your use of the platform, and from third-party verification and payment service providers. The categories of information we collect are outlined below.

2.1 Account Registration Data

When you create a db999 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city and district within Bangladesh)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, which may be triggered at account creation or before processing a withdrawal, we may request:

• National Identity Card (NID) number and a copy of the NID document
• Passport or other government-issued identification
• Proof of address (utility bill, bank statement, or similar document)
• Selfie photograph for facial verification purposes

2.3 Financial Transaction Data

All financial transactions are processed in Bangladeshi Taka (BDT). We collect:

• Deposit and withdrawal amounts, dates, and reference numbers
• Payment method details (e.g., bKash mobile number, Nagad account reference, Rocket number, Upay reference, Visa or Mastercard last-four digits)
• Transaction history associated with your account

db999 does not store full card numbers or full mobile banking PINs. Payment data is handled by PCI-DSS compliant third-party payment processors.

2.4 Gameplay & Behavioural Data

When you use the db999 platform, we automatically collect data about your activity, including:

• Games played, bets placed, wager amounts, and outcomes
• Session start and end times, session duration, and session frequency
• Sports markets browsed, betting slips created, and bet settlement history
• Bonus offers claimed, wagering progress, and promotional interactions

2.5 Technical & Device Data

When you access the platform, our servers and analytics systems automatically log:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Referral URL (if you arrived at db999 via a link)
• Pages visited, time on page, and navigation path
• Cookie identifiers and session tokens (see Section 6)

How We Use Your Information

db999 uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with the original purpose for which it was collected without obtaining your prior consent.

• Account Management: To create, maintain, and administer your player account, including authentication, account security, and support interactions.
• Identity Verification: To verify your identity and age in compliance with our KYC obligations, preventing underage gambling and identity fraud.
• Payment Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
• Service Delivery: To operate and deliver the gaming and sports betting services you have signed up for, including personalising game recommendations and displaying relevant offers.
• Responsible Gaming: To monitor gameplay patterns, identify potential problem gambling indicators, and apply responsible gaming tools such as deposit limits, session limits, and self-exclusion as described in our Responsible Gaming Policy.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct as described in our Terms & Conditions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — only where you have consented or where we have a legitimate interest. You may opt out at any time.
• Legal Compliance: To comply with applicable legal obligations, including retaining financial records, responding to lawful requests from law enforcement agencies, and fulfilling anti-money-laundering (AML) reporting requirements.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the overall performance, design, and feature set of the db999 platform.

Legal Basis for Processing

db999 processes your personal data on the following legal grounds depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the player agreement between you and db999, including account creation, payment processing, game delivery, and support services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, AML transaction monitoring, and financial record retention.
• Legitimate Interests: Processing carried out for db999's legitimate business interests where those interests are not overridden by your data protection rights, including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics.
• Consent: Processing based on your explicit consent, such as sending you marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Sharing Your Information

db999 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this policy:

• Payment Processors: Regulated payment service providers that process your deposits and withdrawals, including the operators of bKash, Nagad, Rocket, and Upay mobile financial services, as well as card network processors for Visa and Mastercard transactions. These providers process your data only to the extent necessary to complete the transaction.
• KYC & Identity Verification Partners: Third-party KYC service providers that assist in verifying your identity and age as part of our compliance obligations. These providers are contractually bound to handle your data confidentially and securely.
• Fraud Prevention & AML Agencies: Specialist fraud prevention and anti-money-laundering service providers that help db999 detect and prevent financial crime. Data shared with these agencies may be used to protect db999 and other platforms from fraudulent activity.
• Technology & Infrastructure Providers: Cloud hosting, content delivery network (CDN), and cybersecurity vendors who provide the underlying infrastructure on which the db999 platform operates. These providers act as data processors and are bound by data processing agreements.
• Game Content Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens) to deliver their games within the db999 platform. They do not receive your full personal profile.
• Law Enforcement & Regulatory Bodies: Where required by law, court order, or lawful authority, db999 may disclose your personal data to law enforcement agencies, government bodies, or regulatory authorities operating within Bangladesh or internationally.

All third-party partners with whom db999 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions and applicable data protection obligations.

Cookies & Tracking Technologies

db999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session security, and understand how players interact with our services. The categories of cookies we use are as follows:

• Essential Cookies: These are strictly necessary for the platform to function. They enable core features such as account login sessions, security tokens, and shopping cart functionality within the cashier. You cannot opt out of essential cookies without disabling the platform entirely.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-visited game category — to personalise your experience on return visits.
• Analytics Cookies: We use anonymised analytics cookies to understand aggregate player behaviour on the platform. This data helps us identify popular features, diagnose technical issues, and improve the platform experience. Individual-level data from analytics cookies is not shared with third parties for marketing purposes.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and session hijacking. These cookies are a key component of our platform security infrastructure.

You may manage cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect the personalisation features of the platform but will not prevent you from accessing core gaming and betting services.

Data Retention

db999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with db999, plus a minimum of five years following account closure, in accordance with financial record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of the transaction, in compliance with anti-money-laundering regulations.
• KYC Documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable law or an ongoing investigation.
• Gameplay & Betting Logs: Retained for up to two years as operational records used to resolve disputes, verify bet outcomes, and support responsible gaming monitoring.
• Support Communications: Retained for up to two years to support quality assurance, dispute resolution, and training.
• Marketing Consent Records: Retained for the duration of your account, as evidence of consent status.

Upon expiry of the applicable retention period, your data is securely deleted or anonymised in accordance with our internal data destruction procedures. Where an account has been closed voluntarily, we will delete or anonymise personal data that is not subject to a legal retention obligation within 90 days of the account closure date.

Data Security

db999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and our servers is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Password Hashing: Player account passwords are never stored in plain text. All passwords are hashed using a modern cryptographic hashing algorithm with individual salts, ensuring that even in the event of a data breach, your password cannot be recovered from stored data.
• Access Controls: Access to systems that hold personal data is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls, multi-factor authentication for administrative accounts, and comprehensive audit logging are in place.
• Intrusion Detection: Our infrastructure is monitored around the clock using automated intrusion detection and prevention systems that identify and respond to suspicious activity in real time.
• Regular Security Audits: db999 conducts periodic security audits and vulnerability assessments to identify and remediate potential weaknesses in our technical infrastructure before they can be exploited.
• Data Breach Response: In the event of a security incident that affects your personal data, db999 will notify affected players promptly and take immediate corrective action to contain the breach, assess its scope, and prevent recurrence.

While db999 takes all reasonable steps to protect your data, no system connected to the internet can guarantee absolute security. We encourage all players to use strong, unique passwords for their db999 accounts and to enable any additional account security features available in their account settings.

Your Rights

As a player on the db999 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "DATA RIGHTS REQUEST".

• Right of Access: You have the right to request a copy of the personal data that db999 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Players may update certain account details directly through their account settings.
• Right to Erasure: Subject to legal retention requirements, you may request that db999 delete your personal data. We will honour erasure requests within 30 days, except where retention is required by law or where the data is needed to defend against an active legal claim.
• Right to Restrict Processing: You may request that db999 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. db999 will cease processing for direct marketing purposes immediately upon receipt of an objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

db999 will acknowledge all data rights requests within five business days and provide a substantive response within 30 calendar days. If a request is complex or if we receive a high volume of requests, we may extend this period by a further 30 days with prior notification.

Children & Minors

The db999 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the db999 registration process, and KYC procedures are in place to confirm the age of players before withdrawals are permitted.

If db999 discovers that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data, and return any deposited funds to the originating payment method after completing any required verification.

Parents and guardians who believe that a minor has registered on the db999 platform should contact us immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly on any such report.

Third-Party Services

The db999 platform integrates with a number of third-party services to deliver a complete gaming experience. These include game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and technical infrastructure providers. Each of these third parties operates under its own privacy policy and data protection practices.

db999 is not responsible for the privacy practices of third-party game studios or payment providers. When you interact with a third-party game interface embedded in the db999 platform, that provider may collect limited technical data (such as session identifiers) necessary to deliver and log the game. db999 ensures that all embedded third-party providers are reputable, licensed entities that operate under data protection obligations consistent with our own standards.

The db999 platform does not contain links to external websites for advertising or promotional purposes. All links within the platform point to internal db999 pages only.

Policy Updates

db999 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy — changes that affect the nature of data we collect, the purposes for which we use it, or the rights available to you — we will update the "Last Updated" date at the top of this page and notify registered players via their account email address with at least 14 days' advance notice before the changes take effect.

For minor, non-material updates (such as corrections of typographical errors or clarifications that do not alter the substance of the policy), we will update this page without sending a separate notification. We encourage all players to review this Privacy Policy periodically to remain informed of how db999 handles their personal data.

Your continued use of the db999 platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you should cease using the platform and contact [email protected] to arrange account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by db999, please contact our Data Support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "DATA RIGHTS REQUEST"
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days

We take every data-related enquiry seriously and commit to handling all requests with care, professionalism, and within the timeframes stated above. Your trust is the foundation of our relationship, and protecting your privacy is central to how db999 operates.