Privacy Policy — dbt999 Data Protection

1 Introduction

Welcome to dbt999 ("the Platform", "we", "us", "our"), an online gaming and sports betting service operated at dbt999.vip and directed primarily at adult players located in Bangladesh. This Privacy Policy ("Policy") describes how dbt999 collects, uses, stores, shares, and protects personal data relating to individuals who visit, register on, or otherwise interact with the Platform.

By accessing the dbt999 Platform, creating a registered account, or making use of any service offered through dbt999.vip, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

This Policy should be read alongside the dbt999 Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference and form part of the overall agreement governing your use of the Platform. In the event of any conflict between this Policy and those documents, this Policy shall prevail in respect of matters relating specifically to personal data and privacy.

2 Data We Collect

dbt999 collects personal data in several ways: directly from you when you register an account or interact with the Platform, automatically through your use of the Platform, and in limited circumstances from third-party sources for the purpose of identity verification. The categories of personal data we collect are as follows:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth, collected to verify that you are aged 18 or above;
• Mobile phone number registered in Bangladesh (used for account verification, two-factor authentication, and communications);
• Email address, where provided, used for account notifications and correspondence;
• Username and encrypted password credential.

2.2 Know Your Customer (KYC) and Verification Data

• Copy or image of a government-issued photo identification document (National ID card, passport, or driving licence);
• Proof of address documentation (utility bill, bank statement, or equivalent dated within 90 days);
• Proof of payment method ownership — for example, a screenshot or confirmation of ownership of the bKash, Nagad, or Rocket account used for deposits and withdrawals.

2.3 Financial Transaction Data

• Records of all deposits made to your dbt999 account, including date, amount in BDT, and the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank);
• Records of all withdrawal requests, including amount, destination payment method, processing status, and completion date;
• Mobile wallet account numbers or bank account identifiers associated with your verified payment methods.

2.4 Gaming and Betting Activity Data

• Full record of all bets placed through the dbt999 sportsbook, including market selection, stake amount, odds accepted, and settlement outcome;
• Full record of all casino game sessions, including game title, provider, session start and end times, stakes, and results;
• Bonus and promotion history, including bonuses claimed, wagering progress, and bonus settlement outcomes.

2.5 Technical and Device Data

• IP address at the time of each login and transaction;
• Device type, operating system, and browser or application version used to access the Platform;
• Session timestamps, page view history, and navigation patterns within the Platform;
• Cookie identifiers and similar tracking technologies (see Section 6 for full details).

2.6 Communications Data

• Content of any messages sent to dbt999 support via email, live chat, or any other communication channel;
• Records of any responsible gaming requests, self-exclusion applications, or deposit limit changes submitted by you.

The following table summarises the primary categories of data collected, the source of that data, and the primary purpose for which it is collected:

3 How We Use Your Data

dbt999 uses the personal data collected from you for the following specific purposes. We process your data only to the extent necessary for each identified purpose and do not use it for any purpose incompatible with those listed below:

• Account management: To create, maintain, and administer your registered dbt999 account, including verifying your identity and eligibility at the time of registration and on an ongoing basis;
• Service delivery: To process your deposits and withdrawals in BDT, settle your sports bets and casino game results, and deliver the gaming and betting services you have requested;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other forms of Platform abuse, including the use of automated systems to identify irregular betting or account activity patterns;
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, to action any deposit limits, cooling-off periods, or self-exclusion requests you submit, and to comply with our responsible gaming obligations;
• Customer support: To respond to your queries, complaints, and requests for assistance submitted via [email protected] or any other support channel;
• Legal and regulatory compliance: To comply with applicable legal obligations, including record-keeping requirements, cooperation with law enforcement agencies, and responses to lawful information requests;
• Platform improvement: To analyse aggregated usage data to understand how players interact with the Platform, identify performance issues, and improve the overall user experience — this analysis uses anonymised or pseudonymised data wherever possible;
• Communications: To send you account-related notifications (e.g., deposit confirmations, withdrawal status updates, security alerts) and, where you have opted in, promotional communications about bonuses, offers, and upcoming events relevant to the Bangladesh market (e.g., BPL season promotions, Eid bonus offers).

dbt999 does not use your personal data for automated individual decision-making in a manner that produces legal or similarly significant effects on you, except where such automated processing is used solely for fraud detection and account security purposes — in which case you have the right to request human review of any automated decision that adversely affects your account.

4 Legal Basis for Processing

dbt999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our obligations under the dbt999 Terms & Conditions, including account creation, payment processing, and service delivery. Without this processing, dbt999 cannot provide its services to you;
• Legitimate interests: Processing carried out for the legitimate business interests of dbt999, including fraud prevention, platform security, responsible gaming monitoring, and general service improvement, where those interests are not overridden by your rights and interests;
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, and cooperation with lawful requests from enforcement authorities;
• Consent: Where we rely on your consent as the basis for processing (for example, for the sending of optional marketing and promotional communications), you may withdraw that consent at any time by contacting dbt999 support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

dbt999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: We share transaction-related data with the payment providers you use (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) solely to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards;
• Game providers: We share limited session data with third-party game suppliers (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and others) as required for the delivery of their games through the dbt999 Platform. No more data is shared than is technically necessary for game delivery and fair-play auditing;
• Identity verification services: We may engage third-party KYC and identity verification services to assist in verifying the identity documents you provide. These services process your data under strict confidentiality obligations and are not permitted to use your data for any purpose other than verification on our behalf;
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where we reasonably believe that disclosure is necessary to prevent fraud, protect the safety of individuals, or protect the rights and property of dbt999;
• Business transfers: In the event of a merger, acquisition, or transfer of the dbt999 business or assets, your personal data may be transferred to the acquiring entity. In such circumstances, dbt999 will provide reasonable notice to affected users and will ensure that the acquiring entity is bound by obligations no less protective than those in this Policy.

6 Cookies & Tracking Technologies

dbt999 uses cookies and similar tracking technologies (collectively "cookies") to operate and improve the Platform. Cookies are small data files stored on your device by your browser when you visit dbt999.vip. They allow the Platform to recognise your device across sessions and to deliver a consistent, personalised experience.

The following categories of cookies are used on dbt999:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state across pages, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing the functionality of the Platform;
• Functional cookies: These cookies remember your preferences and settings, such as your preferred language, display options, and notification preferences, so that you do not need to re-enter them on each visit;
• Performance and analytics cookies: These cookies collect anonymised or aggregated information about how visitors use the Platform — which pages are visited most often, where errors occur, and how users navigate between sections. This data is used internally to improve the Platform and is not used to identify individual users;
• Session integrity cookies: These cookies record short-duration session identifiers used to correlate your activity during a single visit for security and fraud-detection purposes. They are automatically deleted when you close your browser session.

dbt999 does not use third-party advertising or behavioural tracking cookies. No cookie data collected by dbt999 is sold or shared with advertising networks or data brokers.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive alerts before cookies are stored. Please note that disabling strictly necessary cookies will impair your ability to log in and use the core features of the Platform.

7 Data Retention

dbt999 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable legal obligations. The following retention periods apply as general guidelines:

• Active account data: All personal data associated with an active dbt999 account is retained for the duration of the account's active status;
• Post-closure account data: Following the closure of a dbt999 account, core identity and transaction records are retained for a minimum period of five (5) years from the date of closure for the purposes of anti-money laundering compliance, dispute resolution, and legal record-keeping obligations;
• KYC and verification documents: Identity documents and verification records are retained for a minimum of five (5) years from the date of submission, consistent with standard anti-money laundering record-keeping requirements;
• Gaming and betting records: Individual game session and bet records are retained for a minimum of three (3) years from the date of the relevant event, after which they may be aggregated or anonymised;
• Support communications: Records of customer support correspondence are retained for a minimum of two (2) years from the date of the last communication in the relevant thread;
• Technical and device logs: IP address logs and device access records are retained for up to twelve (12) months from collection, unless retained for longer in connection with a specific fraud or security investigation.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to any identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical analysis.

8 Data Security

dbt999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the dbt999 Platform is encrypted in transit using industry-standard SSL/TLS protocols. This protects your login credentials, payment information, and personal data from interception during transmission;
• Encrypted data storage: Sensitive personal data stored on dbt999 servers — including identity documents and payment method details — is encrypted at rest using strong encryption standards;
• Access controls: Access to personal data within dbt999's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific categories of personal data are permitted to access that data, and all such access is logged and audited;
• Two-factor authentication: dbt999 supports two-factor authentication for player accounts. We strongly recommend that all registered players enable this feature to provide an additional layer of protection against unauthorised account access;
• Fraud detection systems: dbt999 operates automated monitoring systems that analyse account activity patterns to detect suspicious behaviour, including unusual login locations, atypical transaction patterns, and indicators of account compromise. These systems operate continuously and flag anomalies for human review;
• Regular security reviews: dbt999 conducts periodic internal reviews of its data handling practices and security infrastructure to identify and remediate potential vulnerabilities.

While dbt999 takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed to be entirely secure. If you have reason to believe that your account security has been compromised, you must contact dbt999 support immediately at [email protected] so that appropriate protective action can be taken without delay.

9 Your Data Rights

As a data subject, you have the following rights in relation to the personal data that dbt999 holds about you. These rights may be exercised at any time by contacting the dbt999 support team at [email protected] with a clear description of your request:

dbt999 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window. dbt999 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Please note that certain rights are subject to exceptions. In particular, the right to erasure does not apply where retention of the relevant data is required to comply with a legal obligation (for example, anti-money laundering record-keeping obligations under applicable law) or where the data is necessary for the establishment, exercise, or defence of legal claims.

10 Children & Minors

The dbt999 Platform is strictly intended for adults aged 18 years and above. dbt999 does not knowingly collect, process, or store personal data relating to any person under the age of 18. Age verification is a mandatory component of the account registration process, and dbt999 reserves the right to require documentary proof of age from any registered player at any time.

If dbt999 becomes aware that personal data has been collected from or in relation to a person under the age of 18, we will take immediate steps to delete that data and to permanently close the associated account. Any balances held in such an account will be forfeit.

Parents and guardians are encouraged to take proactive steps to prevent minors from accessing online gaming platforms, including the use of parental control software and internet filtering tools. If you have reason to believe that a minor has registered an account on dbt999, please contact us immediately at [email protected] so that the matter can be investigated and the account closed without delay.

11 Third-Party Links

The dbt999 Platform may contain references to third-party game providers, payment services, and other entities whose names and services are mentioned within the context of the dbt999 offering. In certain contexts, the Platform may include links to the websites or interfaces of these third parties (for example, game provider help pages or payment provider support resources).

dbt999 is not responsible for the privacy practices or the content of any third-party website or service. Any personal data you provide directly to a third party — such as when using a bKash or Nagad interface to process a payment — is subject to that party's own privacy policy and is outside dbt999's control. We encourage you to review the privacy policies of any third-party services you use in connection with your dbt999 account.

12 Policy Updates

dbt999 reserves the right to update or revise this Privacy Policy at any time. Where a material change is made to the Policy — for example, a change to the categories of data collected, the purposes for which data is processed, or the third parties with whom data is shared — dbt999 will provide reasonable notice to registered players by posting the updated Policy on this page and, where appropriate, by notifying players via their registered mobile number or email address.

The "Last Updated" date at the top of this document indicates when the current version of the Policy came into effect. Your continued use of the dbt999 Platform following the posting of an updated Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request the withdrawal of any available account balance before closing your account by contacting [email protected].

Archived versions of previous Privacy Policies are available on request from the dbt999 support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way dbt999 handles your personal data, please contact the dbt999 Data Support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

You may reach us by email at: [email protected] (plain text — not a clickable link). Please include the subject line "Privacy Query" and your registered account username in your message so that we can respond efficiently. Our team aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 10 business days.

For responsible gaming concerns, self-exclusion requests, or deposit limit adjustments, please visit the dbt999 Responsible Gaming page where self-service tools are available at any time.