Privacy Policy — dg99 Online Casino

dg99 operates Bangladesh's trusted online casino and sports betting platform at https://dg99.online. As part of delivering our services to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond, we necessarily collect and process certain personal data. We take this responsibility seriously.

This Privacy Policy sets out, in clear and plain English, exactly what data we collect from you, why we collect it, how long we keep it, who we may share it with, and what controls you have over your own information. We have written this policy to be transparent and straightforward — not to obscure our practices behind complex legal language.

dg99 acts as the data controller for all personal data collected through the dg99 platform. This means we are responsible for deciding how and why your data is processed, and we are accountable for ensuring that processing is conducted lawfully, fairly, and securely. If you have any questions about this Privacy Policy or our data practices at any time, please contact us at [email protected].

dg99 collects the following categories of personal data from players and platform visitors. We have organised these into logical groups to make it easy for you to understand exactly what information we hold:

We do not collect special category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, unless explicitly required by applicable law in a specific circumstance.

dg99 collects your personal data through the following methods:

• Direct collection: Data you provide voluntarily when you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal request, use live chat, or send an email to [email protected].
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you visit or interact with the dg99 platform. This includes your IP address, device identifiers, and behavioural patterns such as pages visited and games played.
• Payment partners: Transactional confirmation data received from regulated payment service providers including bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. This data is limited to what is necessary to confirm and reconcile transactions.
• KYC verification providers: Identity verification data may be cross-referenced against third-party identity verification services where required by our AML compliance obligations. These providers are bound by strict data processing agreements with dg99.
• Third-party game providers: Aggregate game performance data (such as RTP metrics and session outcomes) may be shared between dg99 and licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others for technical and regulatory purposes. This sharing does not include your personal identity data beyond what is necessary for session authentication.

dg99 processes your personal data only where we have a lawful basis to do so. The following table sets out the primary purposes for which we process your data and the corresponding legal basis for each:

• Account registration and management — necessary for the performance of the contract between you and dg99 (i.e., providing access to the platform and its services).
• Payment processing (deposits and withdrawals) — necessary for the performance of the contract and compliance with financial record-keeping obligations.
• KYC identity and age verification — necessary for compliance with our legal obligations under applicable anti-money laundering and age verification requirements. This processing is mandatory; failure to provide KYC data will result in withdrawal facilities being suspended.
• Fraud detection and security monitoring — necessary for our legitimate interests in protecting the dg99 platform and its players from fraudulent activity, unauthorised access, and financial crime.
• Responsible gaming monitoring — necessary for our legitimate interests and legal obligations in detecting signs of problem gambling behaviour, including review of deposit patterns, session durations, and self-exclusion compliance.
• Marketing communications — based on your explicit consent at the time of registration or subsequently updated through your account settings. You may withdraw consent for marketing communications at any time by contacting [email protected] or adjusting your account notification preferences.
• Platform improvement and analytics — necessary for our legitimate interests in understanding how the platform is used and improving game selection, navigation, and overall player experience. Analytics data is processed in aggregate form wherever possible.
• Legal and regulatory compliance — necessary for compliance with applicable laws, including responding to lawful requests from regulatory bodies and law enforcement authorities.

Where dg99 relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your privacy rights. You have the right to object to processing based on legitimate interests — see Section 9 for details of how to exercise this right.

dg99 does not sell or rent your personal data to any third party. We may share your data in the following circumstances only:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification partners: Specialist third-party providers engaged by dg99 to perform identity document verification, age checks, and sanctions screening. These providers are bound by data processing agreements and may only use your data for the specified verification purpose.
• Game technology providers: Licensed studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive session tokens and player identifiers necessary to deliver their games within the dg99 environment. Full personal identity data is not shared with game studios.
• IT and cloud infrastructure providers: dg99 uses secure cloud hosting and IT service providers to operate the platform. These providers process data on our behalf under strict contractual terms and have no independent right to use your data.
• Legal and regulatory authorities: dg99 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other official authorities where required by applicable law, court order, or where dg99 reasonably believes disclosure is necessary to prevent fraud, protect the rights of dg99 or third parties, or ensure platform integrity.
• Business transfers: In the event that dg99 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and/or a platform notice before any such transfer occurs.

In all cases where data is shared with third parties, dg99 ensures that appropriate contractual safeguards are in place to protect your data and that third parties are required to maintain confidentiality and security standards consistent with this Privacy Policy.

dg99 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, detect fraud, and understand how the platform is being used. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect aggregate, anonymised data about how players use the dg99 platform — which pages are visited most frequently, where players encounter errors, and how navigation flows are completed. This data is used exclusively to improve the platform experience.
• Functional cookies: Remember your platform preferences such as language settings, display preferences, and responsible gaming tool configurations (e.g., deposit limits you have set).

dg99 does not use third-party advertising cookies, retargeting pixels, social media tracking cookies, or any other cookies that track your activity across external websites. Your browsing behaviour outside of the dg99 platform is not monitored or collected by dg99.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the dg99 platform. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in your browser's help documentation.

dg99 implements a multi-layered security framework to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, ensuring that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Encryption at rest for sensitive stored data including KYC documents, payment account details, and identity records, using industry-standard encryption algorithms.
• Access controls: Personal data is accessible only to dg99 staff members who require it to perform their specific job functions. Access is governed by role-based permissions, and all access to sensitive data is logged and auditable.
• Penetration testing and security audits: The dg99 platform undergoes regular security assessments by qualified third-party professionals to identify and remediate potential vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): Available to all dg99 players as an additional layer of account security. dg99 strongly recommends enabling 2FA from within your account security settings.
• Incident response procedures: dg99 maintains a documented data breach response plan. In the event of a security incident that results in a risk to your personal data, dg99 will notify affected players and relevant authorities within the timeframes required by applicable law.

While dg99 takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their dg99 accounts and to enable two-factor authentication to maximise the security of their accounts.

dg99 retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by our legal, regulatory, and contractual obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure. This retention period is required by our AML compliance obligations and international gaming licence conditions.
• Financial and transaction records: Retained for a minimum of five (5) years following each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for five (5) years following the completion of the KYC process or account closure, whichever is later.
• Marketing preferences and consent records: Retained for as long as your account is active and for three (3) years following withdrawal of consent or account closure, to maintain an accurate record of your consent history.
• Technical and usage data (logs): Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which aggregate analytical data may be retained indefinitely in anonymised form.
• Support and communications data: Retained for three (3) years following the resolution of the relevant enquiry or complaint.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with dg99's data destruction procedures. Where anonymisation is not technically feasible, data is deleted from all systems and backup media within a reasonable timeframe following the expiry of the retention period.

As a dg99 player, you have the following rights in relation to the personal data we hold about you. These rights may be subject to certain conditions and exceptions under applicable law, but dg99 will always endeavour to fulfil your requests promptly and transparently:

• Right of access: You have the right to request a copy of the personal data dg99 holds about you (a "subject access request"). We will provide this within a reasonable timeframe and at no cost for standard requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your account profile settings.
• Right to erasure ("right to be forgotten"): You may request that dg99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to restriction of processing: You may request that dg99 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests.
• Right to object: You have the right to object at any time to processing of your data that is based on our legitimate interests, including profiling for responsible gaming purposes. You also have the absolute right to object to processing for direct marketing purposes.
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where dg99 processes your data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the dg99 privacy team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours (Bangladesh Standard Time, BST UTC+6) and provide a substantive response within 30 days. Where a request is particularly complex or we receive a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly.

The dg99 platform is strictly intended for adults aged 21 and above. dg99 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we apply technical and procedural controls to prevent underage access.

If dg99 becomes aware that personal data has been collected from an individual under 21 — whether through a fraudulent registration or any other means — we will immediately suspend the associated account, delete the personal data in question, and void any transactions completed by that account. Any funds deposited by an underage player will be returned to the payment source used, less any applicable processing fees charged by the payment service provider.

If you are a parent or guardian and believe that a minor in your care may have registered an account on dg99, please contact us immediately at [email protected]. We will act on all such reports as a matter of priority.

dg99 operates under an international offshore gaming licence and uses technology infrastructure and service providers that may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to, stored in, and processed in countries other than your country of residence.

Where personal data is transferred internationally, dg99 ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Standard contractual clauses approved by recognised data protection frameworks, incorporated into our agreements with international service providers.
• Transfers to recipients in countries that have been recognised as providing an adequate level of data protection by relevant regulatory bodies.
• Binding corporate rules or other approved transfer mechanisms where applicable.

You may request further details about the specific safeguards applied to international transfers of your personal data by contacting [email protected].

The dg99 platform may contain references to third-party game providers, payment partners, and other external services. While dg99 takes care to work only with reputable and regulated partners, we have no control over the privacy practices of external third-party websites or services that may be accessed through links on the dg99 platform.

This Privacy Policy applies solely to data collected and processed by dg99 through the dg99 platform at https://dg99.online. If you navigate to any third-party website or service through a link on our platform, you do so at your own risk and are subject to that third party's own privacy policy and terms. dg99 accepts no responsibility for the privacy practices of third-party sites and recommends that you review their privacy policies before providing any personal information.

dg99 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date at the top of this policy indicates when it was last revised.

Where changes to this Privacy Policy are material — meaning they substantially affect how we collect, use, or share your personal data — dg99 will notify registered players via the email address associated with their account and will display a prominent notice on the platform for a minimum of 14 days prior to the changes taking effect.

For minor updates such as typographical corrections, clarifications, or updates required to reflect new service partners, the revised policy will be published at https://dg99.online/privacy-policy without individual notification. We encourage you to review this page periodically so that you remain informed of our current data practices.

Your continued use of the dg99 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you must cease using the platform and contact [email protected] to request account closure and the withdrawal of any remaining balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or dg99's data processing practices, please contact us through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing to our privacy team.
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the chat widget on every page of the dg99 platform.
• Response time: All privacy-related enquiries are acknowledged within 48 hours and substantively responded to within 30 days (Bangladesh Standard Time, BST UTC+6).

For requests to exercise your data rights (access, rectification, erasure, portability, objection), please include your registered email address and account username in your message so that we can verify your identity and locate your records promptly. dg99 will never ask for your account password via email or live chat.