Privacy Policy — db9999 Platform

01 Introduction

db9999 is committed to protecting the privacy and personal data of every individual who uses our platform. We understand that the information you share with us is personal and sensitive, and we take our responsibility as a data controller with the utmost seriousness. This Privacy Policy has been prepared to give you a clear and comprehensive understanding of our data practices.

This policy applies to all users of the db9999 platform, including registered players, visitors who browse the site without registering, and individuals who contact our support team. It covers all personal information collected through the platform at db9999.win, through our customer support channels, and through any other interaction you have with us in connection with the db9999 service.

This Privacy Policy is to be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these documents set out the full framework governing your use of the db9999 platform and our obligations to you.

02 Information We Collect

db9999 collects personal information through several channels and for several distinct purposes. The categories of information we collect are described below.

2.1 Information You Provide Directly

When you register a player account, use our services, or contact our support team, you may provide us with the following categories of personal information:

• Identity data: Full legal name, date of birth, gender
• Contact data: Email address, mobile phone number, residential address
• Verification data: Government-issued ID documents (National ID card, passport, driving licence), proof of address, payment method ownership documents submitted as part of our KYC (Know Your Customer) process
• Account credentials: Username and encrypted password (we never store plain-text passwords)
• Financial data: Payment method details (bKash number, Nagad number, Rocket number, Upay number, Visa/Mastercard details as applicable), deposit and withdrawal transaction history
• Communications data: The content of messages you send to our support team via email or live chat

2.2 Information We Collect Automatically

When you access and use the db9999 platform, we automatically collect certain technical and behavioural data, including:

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution
• Usage data: Pages visited, time spent on each page, game sessions initiated, betting history, login timestamps, click patterns, and navigation paths through the platform
• Location data: Approximate geographic location derived from your IP address (we do not collect precise GPS location data)
• Cookie data: Session identifiers, preference settings, and analytics identifiers. See Section 7 for full details on our cookie use.

2.3 Information from Third Parties

In limited circumstances, we may receive personal information about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status and account ownership
• Identity verification service providers engaged to assist with KYC compliance
• Fraud prevention and anti-money laundering (AML) screening services

Any information received from third parties is handled in accordance with this Privacy Policy and is used only for the specific purposes for which it was obtained.

03 How We Use Your Information

db9999 uses the personal information we collect for the following purposes:

Purpose	Types of Data Used
Creating and managing your player account	Identity, contact, credentials
Processing deposits, withdrawals, and transactions	Financial, identity, contact
Verifying your identity and age (KYC compliance)	Identity, verification documents
Providing customer support and responding to queries	Identity, contact, communications
Detecting and preventing fraud, money laundering, and prohibited conduct	Identity, financial, device, usage
Enforcing our Terms & Conditions and Responsible Gaming obligations	Identity, usage, financial
Improving platform performance and user experience	Usage, device, cookie data
Sending service-related notifications (account alerts, transaction confirmations, security notices)	Identity, contact
Sending promotional communications where you have opted in	Identity, contact, usage
Complying with applicable legal and regulatory obligations	All applicable categories

04 Legal Basis for Processing

db9999 processes your personal information on the following legal bases:

• Contractual necessity: Processing your data is necessary to perform the contract between you and db9999 — specifically, to operate your player account, process transactions, provide gaming services, and handle support requests.
• Legal obligation: We are required to process certain personal data (particularly identity and financial data) to comply with applicable anti-money laundering laws, age verification requirements, and other regulatory obligations.
• Legitimate interests: We process usage and device data for fraud prevention, platform security, and service improvement, where our legitimate interests in operating a secure and reliable platform outweigh any privacy impact on users.
• Consent: We rely on your consent for optional data processing activities such as sending marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing already carried out.

05 Sharing Your Information

db9999 does not sell, rent, or trade your personal information. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

5.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the db9999 platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators), identity verification providers, fraud detection services, cloud hosting and infrastructure providers, and customer support software providers. All service providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

5.2 Legal and Regulatory Disclosure

We may disclose your personal information to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of db9999, its players, or third parties. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.

5.3 Business Transfers

In the event that db9999 undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its assets, player data may be transferred to the acquiring entity as part of that transaction. In any such case, we will take reasonable steps to ensure that the acquiring entity honours the privacy commitments made in this Privacy Policy.

5.4 No Third-Party Marketing

db9999 does not share your personal information with third parties for their own marketing or advertising purposes under any circumstances. Your contact details are never sold or provided to advertisers, data brokers, or marketing agencies.

06 Data Retention

db9999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your active player account relationship with db9999.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Support communications: Retained for up to three (3) years from the date of the communication, to enable us to reference interaction history in the event of a dispute.
• Usage and analytics data: Retained in aggregated or anonymised form indefinitely; identifiable usage logs are retained for up to twelve (12) months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised or aggregated data derived from personal information may be retained indefinitely for statistical and analytical purposes.

07 Cookies and Tracking Technologies

The db9999 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather basic analytical information about how players use the site.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your settings, and track certain interactions for operational and analytical purposes. Cookies do not contain executable code and cannot access other files on your device.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functionality — session management, login state, security tokens. The platform cannot function without these cookies.	Session / up to 24 hours
Functional	Remember user preferences such as language settings, last-visited game category, and notification dismissal state.	Up to 30 days
Analytical	Collect anonymised data about which pages are visited, how long sessions last, and which game categories are most popular. Used to improve the platform.	Up to 12 months

7.3 Managing Cookies

You may manage or disable cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the db9999 platform, as session management depends on these cookies functioning correctly. Disabling functional or analytical cookies will not affect your ability to place bets or make transactions.

08 Your Rights

As a user of the db9999 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being used and shared.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal data where there is no longer a legitimate reason for us to retain it. Please note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

09 Children's Privacy

The db9999 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, use, or store personal information from individuals under the age of 18. Our registration process includes an explicit age declaration step, and we may request age-verification documentation at any time as part of our KYC procedures.

10 Data Security

db9999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest, including payment method details and identity documents
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Regular security audits and vulnerability assessments of our platform infrastructure
• Secure password hashing using industry-standard algorithms; plain-text passwords are never stored
• Two-factor authentication (2FA) availability for all player accounts to provide an additional login security layer
• Automatic session timeout after a period of inactivity to reduce the risk of unauthorised access on shared devices

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users in accordance with our breach notification obligations.

11 International Data Transfers

db9999 operates as an international online gaming platform and may process or store personal data on servers located outside of Bangladesh. Where personal data is transferred to countries that may not provide the same level of data protection as applicable law in Bangladesh, we take appropriate safeguards to ensure that your data is protected to a standard equivalent to that required under this Privacy Policy.

These safeguards may include contractual clauses that require the receiving entity to treat personal data with the same level of care and security as described in this policy, or other transfer mechanisms appropriate to the circumstances of the transfer.

12 Third-Party Links

The db9999 platform may contain links to third-party websites, such as game provider portals or payment processor information pages. This Privacy Policy applies only to the db9999 platform and does not extend to any third-party websites you may access via links on our platform. We encourage you to review the privacy policies of any third-party websites before providing them with your personal information. db9999 is not responsible for the data practices of any third-party website.

13 Changes to This Privacy Policy

db9999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Revised" date displayed at the top of this page and, where the changes are significant, we will notify registered players via the email address associated with their account or through an in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the db9999 platform following the posting of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with any change, you must cease using the platform and may request account closure by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or your privacy rights, please contact the db9999 data protection team using the following details:

Please note that email addresses must be used as plain-text contact references only. All privacy-related requests must be submitted in writing via the email address above, and you may be asked to verify your identity before we fulfil any data access, correction, or deletion request.