d8999 Privacy Policy
At d8999, the privacy and security of your personal data is a core responsibility, not an afterthought. This Privacy Policy explains in plain terms exactly what data we collect, why we collect it, how we use it, and what rights you have over it as a registered player on the d8999 platform.
Privacy at a Glance
How d8999 Protects Your Data
These six principles summarise d8999's approach to data privacy. The full legal detail for each area is documented in the policy sections below.
Minimal Data Collection
d8999 collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with applicable legal obligations. We do not collect data for its own sake.
256-bit SSL Encryption
All data transmitted between your device and the d8999 platform is protected by 256-bit SSL encryption. Stored data is protected using industry-standard encryption at rest.
Your Rights, Respected
You have the right to access, correct, export, and request deletion of your personal data at any time. d8999 will respond to all verified data requests within a reasonable timeframe.
No Data Selling
d8999 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Your data is not a product.
Transparent Cookie Use
Cookies on the d8999 platform are used solely to maintain session state, improve platform performance, and support fraud prevention. No third-party advertising cookies are deployed.
Defined Retention Periods
Personal data is not kept indefinitely. d8999 applies defined retention periods to all data categories and securely deletes or anonymises data once the retention period expires.
Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Data Sharing
- 8. International Transfers
- 9. Data Retention
- 10. Cookies & Tracking
- 11. Data Security
- 12. Your Rights
- 13. Children's Privacy
- 14. Policy Changes
- 15. Contact Us
Your Privacy Matters: This Privacy Policy ("Policy") describes how d8999 ("we", "us", "our") collects, uses, stores, and protects the personal data of registered players and visitors to the d8999 platform at https://d8999.io. By creating an account or using our platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
1 Introduction
d8999 is committed to handling personal data with care, transparency, and respect. This Policy has been written to give you a clear and honest account of how personal data flows through the d8999 platform — from the moment you create an account to the time your data is deleted at the end of its defined retention period.
This Policy applies to all personal data collected from players registered on the d8999 platform, visitors who browse the d8999 website without registering, and any individual who contacts d8999 via support channels. It covers data collected through the website at https://d8999.io, through the platform's mobile-optimised interface, and through direct communications with the d8999 support team.
This Policy should be read alongside the d8999 Terms & Conditions, which govern the overall relationship between d8999 and its players. Defined terms used in this Policy carry the same meaning as in the Terms & Conditions unless otherwise stated.
2 Data Controller
For the purposes of applicable data protection law, d8999 is the data controller in respect of personal data collected from players and visitors on the d8999 platform. As data controller, d8999 determines the purposes for which personal data is processed and the means by which that processing is carried out.
All queries and requests relating to the processing of personal data should be directed to the d8999 Data Privacy team via the contact details set out in Section 15 of this Policy.
Data Contact: All data-related enquiries, subject access requests, and deletion requests should be submitted in writing to [email protected] with the subject line "Data Privacy Request". d8999 will acknowledge all data requests within 5 business days.
3 Personal Data We Collect
d8999 collects personal data in the categories described in the table below. We collect only what is necessary for the stated purpose and do not retain data beyond the applicable retention period.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Account communications, support, fraud alerts |
| Financial Data | bKash/Nagad/Rocket mobile wallet number, transaction IDs, deposit and withdrawal history | Payment processing, AML compliance, dispute resolution |
| Account Activity Data | Login timestamps, bet history, game session logs, bonus usage, balance history | Platform operation, responsible gaming monitoring, fraud detection |
| Device & Technical Data | IP address, browser type and version, operating system, device type, screen resolution | Security monitoring, fraud prevention, platform optimisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support delivery, quality assurance, complaint resolution |
| KYC Documents | Scanned/photographed National ID, passport, utility bill, bank statement, selfie verification | Identity verification, AML/KYC compliance, withdrawal authorisation |
Sensitive Data: d8999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the selfie/video verification required for KYC identity confirmation. If any such data is inadvertently included in documents you submit, it will be used only for verification purposes and not processed for any other purpose.
4 How We Collect Your Data
d8999 collects personal data through the following channels:
4.1 Direct Collection
Data you provide directly to d8999 when you create an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion. This is the primary source of personal data held by d8999.
4.2 Automated Collection
Technical and device data collected automatically as you interact with the d8999 platform, including IP address, session timestamps, page views, and click-stream data. This data is collected through server logs and browser technologies including cookies and local storage. See Section 10 for full details of cookie use.
4.3 Third-Party Sources
In limited circumstances, d8999 may receive personal data from third-party sources including:
- KYC Verification Providers: Identity verification results returned by third-party KYC/AML screening services used to validate the accuracy of documents submitted during account verification.
- Payment Processors: Transaction confirmation data returned by mobile financial service providers including bKash, Nagad, Rocket, and Upay when processing deposits and withdrawals.
- Fraud Prevention Services: Risk signals and fraud indicators from third-party fraud detection services used to protect the platform and its players.
5 How We Use Your Personal Data
d8999 uses personal data for the following purposes. Each processing activity is linked to a lawful basis described in Section 6.
- Account Management: Creating, maintaining, and administering your d8999 player account, including processing login sessions and account settings changes.
- Payment Processing: Receiving deposits and executing withdrawals via bKash, Nagad, Rocket, Upay, and any other payment method offered on the platform.
- Identity & Age Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity matches the registration details provided, in compliance with KYC obligations.
- Anti-Money Laundering (AML) Compliance: Monitoring transactions and account activity to detect and report suspicious financial activity as required by applicable law.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, collusion, and other prohibited conduct described in the Terms & Conditions.
- Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and applying voluntary or mandatory player protection measures where appropriate.
- Customer Support: Responding to support queries, resolving complaints, and providing assistance via live chat, email, or other support channels.
- Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, design, and feature set of the d8999 platform.
- Marketing Communications: Sending promotional communications about bonuses, new games, and platform features — only where you have provided consent to receive such communications and have not subsequently opted out.
- Legal Compliance: Meeting legal, regulatory, and law enforcement obligations including data retention requirements, court orders, and regulatory enquiries.
Marketing Opt-Out: You may opt out of marketing communications at any time by contacting d8999 support or updating your communication preferences in your account settings. Opting out of marketing does not affect service-related communications such as transaction confirmations, security alerts, and support responses.
6 Legal Basis for Processing
Every processing activity carried out by d8999 rests on one of the following lawful bases:
- Contract Performance: Processing that is necessary to deliver the services described in the d8999 Terms & Conditions — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the contract between d8999 and you as a registered player.
- Legal Obligation: Processing carried out to comply with applicable legal requirements — including KYC verification, AML monitoring, and data retention obligations — is based on d8999's legal obligations under applicable law.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of d8999's legitimate interests in operating a safe, fair, and functional platform. d8999 has assessed that these legitimate interests are not overridden by your data protection rights.
- Consent: Processing for marketing communications is based on your explicit consent, given at the time of registration or subsequently through your account communication preferences. You may withdraw consent at any time without affecting any other processing.
7 Data Sharing with Third Parties
d8999 does not sell, rent, or trade personal data to third parties. Personal data may be shared with the following categories of third party only where necessary and proportionate for the stated purpose:
- Payment Service Providers: bKash, Nagad, Rocket, and Upay, for the sole purpose of processing deposit and withdrawal transactions. These providers operate under their own privacy policies and data protection obligations.
- KYC and Identity Verification Providers: Third-party verification services used to validate identity documents submitted during the KYC process.
- Fraud Detection and Risk Management Services: Providers of fraud prevention and risk-scoring services used to protect the platform and its players from fraudulent activity.
- IT Infrastructure and Hosting Providers: Cloud hosting and infrastructure providers who store platform data under strict data processing agreements that prohibit independent use of the data.
- Legal and Regulatory Authorities: Law enforcement agencies, courts, regulators, and other government bodies where d8999 is legally required to disclose personal data by applicable law, court order, or regulatory directive.
- Professional Advisors: Legal counsel, auditors, and compliance advisors acting under professional confidentiality obligations, in connection with the operation and legal protection of the d8999 business.
All third-party service providers engaged by d8999 that process personal data on d8999's behalf are required to enter into appropriate data processing agreements and are prohibited from using d8999 player data for any purpose other than the specific service they provide.
8 International Data Transfers
The d8999 platform serves players primarily located in Bangladesh. Some of the third-party service providers used by d8999 may process personal data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, d8999 ensures that appropriate safeguards are in place to protect the data, including:
- Contractual protections through data processing agreements that impose obligations on recipient parties equivalent to those applied by d8999.
- Transfer only to service providers who maintain certifications or compliance programmes consistent with internationally recognised data protection standards.
- Limiting the scope of data transferred to the minimum necessary for the specific processing purpose.
By registering an account on the d8999 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh for the purposes described in this Policy, subject to the safeguards described above.
9 Data Retention
d8999 does not retain personal data indefinitely. Retention periods are determined by the purpose for which the data was collected and by applicable legal obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation (AML / KYC) |
| Financial Transaction Data | 7 years from transaction date | Legal obligation (financial records) |
| KYC Documents | 5 years after account closure | Legal obligation (AML compliance) |
| Account Activity Logs | 2 years from account closure | Legitimate interests (fraud, dispute resolution) |
| Support Communications | 3 years from last interaction | Legitimate interests (quality, disputes) |
| Technical / Device Data | 13 months on a rolling basis | Legitimate interests (security, fraud) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Legal obligation (consent records) |
At the end of the applicable retention period, personal data is either securely and permanently deleted or anonymised such that it can no longer be linked to an individual. Anonymised data may be retained for statistical and analytical purposes without limit.
10 Cookies & Tracking Technologies
10.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your browser across multiple pages or visits and to store limited information about your preferences or session state. d8999 uses cookies and similar browser-based storage technologies (such as local storage) exclusively for platform functionality and security purposes.
10.2 Cookies Used by d8999
- Session Cookies: Temporary cookies that maintain your authenticated session while you are logged in to your d8999 account. These are deleted automatically when you close your browser.
- Security Cookies: Cookies used to detect and prevent fraudulent access attempts, CSRF attacks, and other security threats. These are essential to platform security and cannot be disabled.
- Preference Cookies: Cookies that remember limited platform preferences such as your selected language or display settings, so you do not need to re-enter them on each visit.
- Analytics Cookies: Aggregated, anonymised cookies used to understand how players navigate the platform so that d8999 can improve the user experience. No personally identifiable information is extracted from these cookies.
10.3 No Third-Party Advertising Cookies
d8999 does not deploy third-party advertising or tracking cookies. No advertising network, social media platform, or data broker has access to cookies placed on your device during your use of the d8999 platform.
10.4 Cookie Management
Most browsers allow you to manage cookies through their settings, including options to block or delete cookies. Please be aware that disabling essential cookies (session and security cookies) will prevent you from logging in to your d8999 account. Instructions for managing cookies can be found in the help documentation of your browser.
11 Data Security
d8999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and the d8999 platform is encrypted using Transport Layer Security (TLS) with 256-bit AES encryption.
- Encryption at Rest: Sensitive personal data stored in d8999's systems — including KYC documents and financial data — is encrypted at rest.
- Access Controls: Access to personal data within d8999's systems is restricted on a strict need-to-know basis. Staff access to player data is logged, monitored, and subject to regular review.
- Two-Factor Authentication: Two-factor authentication is available for player accounts and is required for d8999 staff access to systems containing personal data.
- Vulnerability Monitoring: d8999's platform is subject to ongoing security monitoring, penetration testing, and vulnerability assessments to identify and remediate security weaknesses.
- Data Breach Response: d8999 maintains an incident response procedure for personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, d8999 will notify affected players without undue delay.
Your Responsibility: While d8999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. Never share your d8999 username or password with any third party. If you suspect your account has been compromised, contact d8999 support immediately via live chat.
12 Your Data Rights
As a data subject, you have the following rights in respect of your personal data held by d8999. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request", along with sufficient information to verify your identity.
Request a copy of all personal data d8999 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your d8999 account.
Request deletion of your personal data where there is no overriding legal obligation for d8999 to retain it.
Request an export of your personal data in a structured, commonly used, machine-readable format.
Request that d8999 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
Object to processing carried out on the basis of legitimate interests, including direct marketing communications, at any time.
d8999 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, d8999 may extend this period by a further 60 days and will notify you of the extension within the initial 30-day period. d8999 will not charge a fee for handling data rights requests except where requests are manifestly unfounded or excessive.
Identity Verification Required: To protect your data, d8999 must verify your identity before processing any data rights request. You will be asked to confirm details that only the account holder would know. d8999 will not action data requests from unverified third parties.
13 Children's Privacy
The d8999 platform is strictly intended for adults aged 21 years and older. d8999 does not knowingly collect personal data from any person under the age of 21. The platform employs age verification controls as part of the registration and KYC process to enforce this requirement.
If d8999 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, the data will be securely deleted, and the matter will be escalated in accordance with d8999's underage access procedure. Any funds deposited by an underage player will be handled in accordance with applicable law.
If you are a parent or guardian and believe that a minor in your care has registered an account on the d8999 platform, please contact us immediately at [email protected] so that we can take prompt action.
21+ Age Requirement: d8999 enforces a strict minimum age of 21 years for all registered players. This is not a suggestion — it is a hard requirement. Players found to be under 21 will have their accounts permanently closed and all associated data handled in accordance with this Policy and applicable law.
14 Changes to This Privacy Policy
d8999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this document will be updated to reflect the date on which any revised version comes into effect.
Where changes are material — meaning they significantly affect your rights or the way d8999 processes your data — d8999 will provide advance notice to registered players via email notification or a prominent on-platform notice prior to the changes taking effect. For minor or administrative updates, the revised Policy will be published on this page without separate notification.
Your continued use of the d8999 platform after the effective date of any updated version of this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.
d8999 recommends that all players review this Privacy Policy periodically to stay informed of how personal data is handled on the platform. Archived versions of this Policy are available on request by contacting the d8999 support team.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way d8999 handles your personal data, please contact the d8999 Data Privacy team using the details below. All privacy-related communications must be submitted in writing to allow for accurate processing and record-keeping.
Data Privacy Enquiries:
Email: [email protected] (plain text — not a clickable link)
Subject line: "Data Privacy Request" or "Privacy Policy Enquiry"
Live Support: Available 24/7 via live chat from your account dashboard
Response Time: d8999 acknowledges all data privacy requests within 5 business days and provides a substantive response within 30 calendar days
Support Hours: 24 hours a day, 7 days a week, with peak staffing during Bangladesh Standard Time (BST, UTC+6) evening hours
When contacting d8999 about a data privacy matter, please include your registered username, a clear description of your request or concern, and any relevant reference numbers from previous communications. This helps our team locate your account records and respond as efficiently as possible.
d8999 — https://d8999.io — [email protected] — For adults aged 21 and above only. Please gamble responsibly.
Explore d8999 With Confidence
Your data is protected. Your privacy is respected. Now discover everything d8999 has to offer — from live cricket betting to premium casino games and slots.