Privacy Policy — How dh999 Collects, Uses, and Protects Your Data

1. Data Controller Information

For the purposes of this Privacy Policy, dh999 — the operator of the online casino and sports betting platform accessible at https://dh999.bet — acts as the data controller in respect of all personal data collected from users of the platform. As data controller, dh999 is responsible for determining the purposes and means by which your personal data is processed.

All data-related enquiries, subject access requests, deletion requests, and complaints should be directed to the dh999 data protection contact at [email protected]. Please include "Privacy Request" in the subject line of your email to ensure prompt routing to the appropriate team.

This policy applies to all personal data collected through the dh999 website, mobile-optimised browser interface, and any related communications including promotional emails, support correspondence, and push notifications sent by dh999.

2. Information We Collect

dh999 collects personal data from you through several channels: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and identity verification agencies.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access and use the dh999 platform, certain technical information is recorded automatically by our servers and analytics systems. This information is used for platform security, fraud detection, service optimisation, and responsible gaming monitoring.

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers.
• Usage Data: Pages visited, games played, bet amounts, session start and end times, features accessed, errors encountered.
• Location Data: Approximate geographic location derived from your IP address, used solely for fraud prevention and access control purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 5 of this policy.
• Transaction Logs: Detailed records of all deposits, withdrawals, bets placed, bonuses claimed, and account balance changes.

2.3 Information from Third Parties

dh999 may receive personal data about you from third-party sources including payment processors (such as bKash, Nagad, and Rocket), identity verification service providers, fraud detection agencies, and credit reference bureaus where applicable. This information is used solely to verify your identity, confirm payment ownership, and comply with anti-money-laundering obligations.

3. How We Use Your Data

dh999 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are: (a) performance of a contract — processing necessary to operate your dh999 account and deliver the services you have requested; (b) legal obligation — processing necessary to comply with applicable law, including anti-money-laundering and identity verification requirements; (c) legitimate interests — processing in furtherance of dh999's legitimate business interests, including fraud prevention and platform security, where those interests are not overridden by your privacy rights; and (d) consent — where you have given explicit, freely given, informed consent for a specific processing activity.

The following table sets out the primary purposes for which dh999 processes personal data and the legal basis for each purpose:

4. Sharing and Disclosure of Personal Data

dh999 does not sell your personal data. We do not share your personal data with third parties for their own independent marketing purposes. We may disclose your personal data to the following categories of recipient strictly as necessary to deliver our services or comply with our legal obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and other payment partners receive the minimum personal and financial data required to authenticate and process your deposit or withdrawal transaction.
• Identity Verification Providers: Third-party KYC and age verification agencies receive identity document data and biometric reference data solely for the purpose of verifying your identity and age in connection with your dh999 account.
• Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session token to facilitate gameplay. They do not receive your full name, contact details, or payment data.
• Fraud Prevention and AML Agencies: Where required for anti-fraud or anti-money-laundering screening, we may share relevant transaction and identity data with specialist third-party agencies operating in this field.
• IT and Infrastructure Providers: Cloud hosting, data centre, and security service providers who process data on our behalf under strict data processing agreements that prohibit any independent use of your data.
• Law Enforcement and Regulatory Authorities: Where we are required by applicable law, court order, or lawful authority to disclose personal data, we will do so to the minimum extent required and will endeavour to notify you where legally permitted.

All third-party recipients of personal data from dh999 are contractually obligated to process that data only for the specified purpose, to maintain appropriate security standards, and to delete or return the data upon termination of the relevant service relationship.

5. Cookies and Tracking Technologies

dh999 uses cookies and similar tracking technologies (including local storage and session storage) on its platform. Cookies are small text files placed on your device that help the platform remember your preferences, maintain your logged-in session, and collect usage analytics that allow us to improve the platform experience for players in Bangladesh and elsewhere.

5.1 Types of Cookies Used by dh999

5.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is placed. Note that disabling strictly necessary cookies will impair your ability to log in and use the dh999 platform. For full instructions on managing cookies in your specific browser, refer to your browser's help documentation.

dh999 does not currently respond to "Do Not Track" (DNT) browser signals because no universally accepted standard for DNT compliance exists. However, you may manage your cookie and marketing communication preferences directly through your dh999 account settings or by contacting [email protected].

6. Data Retention

dh999 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where deletion is not immediately possible due to technical constraints (for example, data held in encrypted backup archives), the data will be isolated from further active processing until deletion is completed.

7. Your Privacy Rights

As a dh999 user, you have a number of rights in relation to the personal data we hold about you. To exercise any of the rights described below, please submit a written request to [email protected] with the subject line "Privacy Request — [Right Name]". We will respond within 30 days of receiving a valid, verified request. We may need to verify your identity before processing your request.

8. Data Security Measures

dh999 takes data security seriously and maintains a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes the following controls:

• Encryption in Transit: All data transmitted between your browser and the dh999 platform is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this encryption is active during your session.
• Encryption at Rest: Sensitive personal data stored in dh999 databases is encrypted at rest using AES-256 encryption. This ensures that even in the unlikely event of unauthorised database access, individual data records remain unreadable without the correct decryption keys.
• Password Hashing: Account passwords are never stored in plain text. dh999 uses a one-way cryptographic hashing algorithm with per-user salt values, meaning passwords cannot be recovered even by dh999 staff.
• Access Controls: Access to personal data held in dh999 systems is granted on a strict need-to-know basis. Staff members who do not require access to personal data to perform their role are not granted it. Access rights are reviewed periodically.
• Intrusion Detection and Monitoring: dh999 operates continuous real-time monitoring of its platform infrastructure. Anomalous access patterns, login attempts, and transaction behaviours trigger automated security alerts for immediate review by our security operations team.
• Penetration Testing: dh999 conducts periodic third-party penetration testing and security audits of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, dh999 will notify affected users and the relevant authority within the timeframes required by applicable law.

9. Third-Party Services

The dh999 platform integrates with a number of third-party service providers — including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and identity verification agencies — whose services are necessary for the operation of your dh999 account.

Each of these third-party providers operates under its own privacy policy and data protection framework. dh999 is not responsible for the privacy practices of these third parties beyond the contractual obligations they have accepted as data processors acting on our behalf. Where a third party acts as an independent data controller in respect of any of your personal data, their own privacy policy governs that processing.

dh999 does not endorse, and is not responsible for, the privacy practices or content of any third-party website that may be referenced in a promotional context. All URLs on the dh999 platform lead to internal pages on the dh999 domain; no outbound links to third-party websites are included in platform content.

10. Changes to This Privacy Policy

dh999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The effective date at the top of this policy will be updated whenever a revision is published.

Where changes are material — for example, where we introduce a new processing purpose, change our data retention periods significantly, or add a new category of third-party recipient — dh999 will provide advance notice to registered users via the email address held on their account. In all cases, the current version of this Privacy Policy will be accessible at https://dh999.bet/privacy-policy.

Your continued use of the dh999 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with a material change to this policy, please contact us at [email protected] to discuss your options, including account closure and data deletion.

11. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way dh999 handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your registered dh999 username or the email address associated with your account, a clear description of your request or concern, and any relevant dates or transaction references where applicable. This information helps us locate your account records and respond accurately.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. dh999 will cooperate fully with any lawful investigation by a competent supervisory authority.