di999 Privacy Policy — How We Protect Your Data

1. Introduction & Scope

di999 ("we", "us", "the platform") is committed to protecting the privacy and personal data of all individuals who interact with the di999.club website and its associated services. This Privacy Policy sets out, in a clear and formal manner, the categories of personal data we collect, the lawful bases on which we process that data, the purposes for which it is used, the circumstances under which it may be shared, and the rights available to you as a data subject.

This Privacy Policy applies to all users of the di999 platform, including registered players, individuals who browse the website without registering, and any person who contacts di999 through its support channels. It applies regardless of the device or browser used to access di999.club.

This Privacy Policy is to be read in conjunction with the di999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and govern related aspects of your use of the platform. In the event of any inconsistency between this Privacy Policy and any other di999 communication, this Privacy Policy shall take precedence with respect to data protection matters.

1.1 Policy Updates

di999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The most current version of this policy, together with its effective date, will always be published at di999.club/privacy-policy. Significant changes to this policy will be communicated to registered players via their registered email address. Continued use of the di999 platform following notification of an update constitutes acceptance of the revised Privacy Policy.

1.2 Contact for Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that di999 holds about you, please contact our support team at [email protected]. We aim to acknowledge all privacy-related enquiries within two business days and to resolve them within 30 calendar days.

2. Data We Collect

di999 collects personal data through several channels: directly from you when you register, verify your account, make deposits or withdrawals, use platform features, or contact support; automatically through your use of the website via cookies and technical logs; and in certain cases from third-party identity verification and payment processing providers.

2.1 Registration Data

When you create a di999 account, we collect the following information:

• Full legal name
• Date of birth (to verify that you are 18 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, district, and division within Bangladesh)
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect the following additional documents and information:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence)
• Selfie photograph or live verification image for identity confirmation
• Source of funds documentation where required for compliance purposes

2.3 Financial Transaction Data

When you make deposits or withdrawals, we collect and retain records of:

• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa/Mastercard)
• Account numbers or identifiers associated with the payment method (partially masked)
• Transaction amounts in Bangladeshi Taka (BDT/৳)
• Transaction timestamps and reference numbers
• Withdrawal destination details

2.4 Gameplay and Betting Data

di999 records details of your activity on the platform for the purpose of game integrity, dispute resolution, and responsible gaming monitoring. This includes bet amounts, game outcomes, session durations, and wagering history across all game categories including slots, live casino, cricket betting, and other sports markets.

2.5 Technical and Device Data

When you access di999.club, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session start and end times
• Pages visited and features used within the platform
• Referring URL (the website or source that directed you to di999.club)

2.6 Summary of Data Categories

3. How We Use Your Data

di999 processes your personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are set out below.

3.1 Account Management and Platform Operation

We use your registration and contact data to create and maintain your player account, verify your identity, process login authentication, manage your account preferences, and communicate essential service updates including changes to these policies, account status notifications, and transaction confirmations.

3.2 Financial Transaction Processing

Your financial and identity data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels. This includes communicating with third-party payment processors who need sufficient data to validate and execute transactions. Financial transaction records are retained for a minimum of seven years in accordance with anti-money laundering compliance requirements.

3.3 Identity Verification and Compliance

KYC data is processed to verify that you meet di999's age and eligibility requirements (18+ only), to comply with anti-money laundering (AML) obligations, to detect and prevent fraud, and to satisfy any legal or regulatory obligations that may apply to the operation of the di999 platform. In certain cases, KYC data may be shared with specialist third-party verification service providers acting as data processors under our instruction.

3.4 Responsible Gaming Monitoring

Gameplay and financial transaction data is used to monitor player behaviour for signs of problem gambling. This enables di999 to proactively offer responsible gaming tools, reach out to players displaying at-risk patterns, and enforce self-exclusion or account restrictions where requested or required. This processing is carried out in the legitimate interest of player welfare and the integrity of the platform.

3.5 Marketing and Promotional Communications

With your consent, we may use your contact data to send you information about di999 promotions, bonuses, new game releases, and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in every marketing email. Withdrawal of marketing consent does not affect your ability to use the di999 platform.

3.6 Platform Security and Fraud Prevention

Technical and gameplay data is used to detect and investigate fraudulent activity, multi-accounting, collusion, bonus abuse, and other violations of di999's Terms & Conditions. Security monitoring is conducted continuously using automated systems supplemented by manual review of flagged accounts.

4. Data Sharing & Third Parties

di999 does not sell, rent, or trade your personal data to any third party. However, in order to operate the platform effectively and comply with legal obligations, we share data with certain categories of third-party service providers and authorities in the circumstances described below.

4.1 Payment Processing Partners

To process your deposits and withdrawals, di999 shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, and banking institutions. These providers process your data only to the extent required to execute and verify the requested transactions and are bound by their own regulatory data protection obligations.

4.2 Identity Verification Providers

Where di999 uses a third-party KYC or identity verification service, your identity documents and supporting data are transmitted securely to that provider for verification purposes only. The provider is engaged under a data processing agreement that prohibits the use of your data for any purpose other than verification on di999's behalf.

4.3 Game Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player identifier (a non-personally identifiable token) and gameplay session data as part of game delivery and audit functionality. These providers do not receive your name, contact details, payment information, or any other directly identifying personal data.

4.4 Legal and Regulatory Disclosure

di999 may be required to disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where required by applicable law, a valid legal order, or a reasonable belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons. di999 will inform affected players of such disclosures where legally permitted to do so.

4.5 Business Transfers

In the event that di999 undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing that result from it, with a reasonable opportunity to close their account if they do not consent to the new arrangement.

5. Cookies & Tracking Technologies

di999 uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. This section explains the types of cookies we use, their purposes, and how you can control them.

5.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred language, login session status, and certain usage preferences. Cookies do not contain executable code and cannot be used to access other files on your device.

5.2 Types of Cookies Used by di999

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain security tokens, and enable core functionality such as account navigation and game loading. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, so that you do not need to re-enter them on each visit.
• Analytical Cookies: di999 uses anonymised, aggregated analytics data to understand how players navigate the platform, which features are most used, and where technical issues arise. This data is used solely to improve platform performance and does not identify individual players.
• Security Cookies: These cookies support our fraud detection and anti-cheating systems by tracking login patterns and flagging anomalous session behaviour for security review.

5.3 Third-Party Cookies

di999 does not deploy third-party advertising cookies or cross-site tracking pixels. Game content providers may set their own session-level cookies strictly within the game frame to maintain game state. These cookies expire at the end of the game session and do not track activity outside the di999 platform.

5.4 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will prevent certain platform functions from operating correctly. Instructions for managing cookies in popular browsers are available in the browser's help documentation.

6. Data Retention & Deletion

di999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The specific retention periods applicable to different categories of data are set out below.

6.1 Retention Periods

• Registration and Identity Data: Retained for the duration of the account relationship plus a minimum of five years following account closure, in accordance with AML and identity verification requirements.
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction, in line with financial compliance obligations.
• KYC Documents: Retained for the duration of the account relationship plus five years following closure. Documents are securely destroyed after this period unless a legal hold is in effect.
• Gameplay and Betting History: Retained for three years from the date of each session, primarily for dispute resolution purposes.
• Support Communications: Retained for two years from the date of the last interaction.
• Technical and Device Logs: Retained for 12 months from the date of collection, after which they are automatically purged from our systems.

6.2 Account Closure and Data Deletion

When you request the closure of your di999 account, we will begin the process of anonymising or deleting your personal data in accordance with the retention periods above. Where data must be retained for legal compliance reasons beyond the account closure date, it will be held in a restricted archive that is not accessible for operational purposes and will be deleted as soon as the relevant retention period expires.

7. Your Privacy Rights

As a player on the di999 platform, you have a number of rights in relation to the personal data we hold about you. di999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact [email protected].

7.1 Right of Access

You have the right to request a copy of all personal data that di999 holds about you. Upon receipt of a verified request, we will provide you with a structured summary of your data within 30 calendar days at no charge. In cases of manifestly unfounded or excessive requests, di999 reserves the right to charge a reasonable administrative fee.

7.2 Right to Rectification

If you believe that any personal data di999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. We will action verified rectification requests within 14 business days and will notify any third-party processors to whom the inaccurate data was shared.

7.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where the data has been processed unlawfully. This right is subject to di999's legal retention obligations — data that must be retained for AML or financial compliance purposes cannot be deleted before the end of the applicable retention period.

7.4 Right to Restrict Processing

You may request that di999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to deletion. During a restriction period, di999 will continue to store your data but will not actively process it except for specified limited purposes.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.

7.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, di999 will cease all marketing communications immediately and update your communication preferences accordingly. This will not affect any essential service communications related to your account.

8. Data Security Measures

di999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key measures currently in place are described below.

8.1 Encryption

All data transmitted between your device and di999.club is protected by 256-bit SSL/TLS encryption. This means that any data you submit — including login credentials, payment information, and personal details — is encrypted in transit and cannot be intercepted by third parties in readable form. All sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.

8.2 Access Controls

Access to personal data within di999's internal systems is restricted on a strict need-to-know basis. Only staff members whose roles require access to specific categories of player data are granted that access. All internal access is logged, audited, and subject to regular review. Administrative access requires multi-factor authentication.

8.3 Password Security

Player account passwords are stored as salted cryptographic hashes using a strong hashing algorithm. di999 does not have visibility of your password in plain text. If you forget your password, we cannot retrieve it — we can only issue a password reset through your verified email address. You are strongly encouraged to use a unique, strong password for your di999 account and to change it periodically.

8.4 Security Monitoring

di999 operates continuous automated monitoring of its platform for signs of security incidents, including unusual login patterns, mass data access attempts, and anomalous transaction behaviour. In the event of a confirmed data breach that is likely to result in a high risk to your rights and freedoms, di999 will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its effects.

8.5 Your Role in Security

While di999 takes every reasonable precaution to protect your data, the security of your account also depends on the measures you take to protect your own login credentials. We strongly recommend that you:

• Use a unique password for your di999 account that you do not use on any other platform
• Never share your password, PIN, or OTP codes with any other person — including anyone claiming to represent di999 support
• Log out of your account when using a shared or public device
• Report any suspected unauthorised access to your account immediately via [email protected] or Live Chat