d7999 Privacy Policy: How We Handle Your Data
At d7999, your privacy is not an afterthought — it is a core operating principle. This Privacy Policy explains in plain, precise language exactly what personal data we collect from players across Bangladesh, why we collect it, how it is used, who it may be shared with, and the rights you hold over your own information.
Please Read Carefully: By creating an account on d7999 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the d7999 Platform immediately and contact us at [email protected] to arrange account closure.
This Privacy Policy ("Policy") applies to all users of the d7999 Platform accessible at https://d7999.app, including registered account holders, visitors who browse the Platform without registering, and any individual who contacts d7999's customer support team. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the complete framework governing your relationship with d7999.
d7999 serves players across Bangladesh — including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — and we are committed to ensuring that the personal data of every player is handled with the highest standards of care, security, and transparency. We do not sell your personal data to third parties for their own marketing purposes under any circumstances.
Data Minimisation
d7999 collects only the personal data strictly necessary to operate the Platform, verify player identity, process payments, and comply with applicable legal obligations. We do not collect data speculatively or beyond what is required.
No Data Sales
Your personal information is never sold, rented, or traded to third-party advertisers, data brokers, or marketing companies. Any data sharing that does occur is limited to operational partners under strict contractual obligations.
SSL Encryption
All data transmitted between your browser and the d7999 Platform is protected using industry-standard SSL/TLS encryption. Financial data associated with bKash, Nagad, Rocket, Visa, and Mastercard transactions is handled through encrypted channels only.
Your Rights Respected
d7999 upholds your right to access, correct, delete, and restrict the processing of your personal data. Requests are handled within 30 days of receipt via our support team at [email protected].
Transparent Cookie Use
d7999 uses cookies and similar technologies solely to maintain session security, analyse aggregate platform performance, and remember your language and display preferences. We do not deploy cross-site tracking cookies.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. We do not hold data indefinitely without cause.
01 Information We Collect
d7999 collects personal data from you in three principal ways: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party partners who help us deliver our services. The categories of personal data we process are set out in detail below.
| Data Category | Specific Data Points | Source & Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, NID or passport number | Provided by you during registration or KYC verification. Used to confirm you are aged 18 or above and to prevent duplicate accounts. |
| Contact Data | Email address, mobile phone number, residential address (city, district, division) | Provided by you at registration. Used for account communications, deposit/withdrawal notifications, and support correspondence. |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account references, Visa / Mastercard partial card data (last 4 digits), transaction history, deposit and withdrawal amounts in BDT | Provided by you when initiating transactions. Used to process deposits and withdrawals and to conduct anti-money-laundering checks. |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Collected automatically when you access the Platform. Used for security monitoring, fraud detection, and platform performance analysis. |
| Usage Data | Pages visited, games played, bet amounts, session duration, bonus offers viewed and claimed, support tickets raised | Collected automatically via server logs and analytics tools. Used to improve Platform functionality and personalise the user experience. |
| Communications Data | Content of emails, live chat transcripts, and support tickets exchanged between you and d7999 | Recorded when you contact our support team. Used to resolve disputes, improve support quality, and maintain an audit trail. |
| KYC Documents | Scanned copies of NID, passport, driving licence, and proof of address documents | Submitted by you in response to a KYC verification request. Retained for regulatory compliance and fraud prevention purposes. |
Sensitive Data: d7999 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. If you voluntarily disclose such information during a support interaction, it will not be stored beyond the resolution of that specific interaction unless legally required.
02 How We Use Your Data
d7999 uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which d7999 processes personal data are as follows:
- Account Creation and Management: To register your account, verify your identity and age, maintain your account profile, and communicate essential account information such as password reset instructions and security alerts.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, and to reconcile transaction records in your account balance.
- Regulatory Compliance and KYC: To fulfil our obligations under anti-money laundering (AML) frameworks, Know Your Customer (KYC) requirements, and any applicable offshore gaming regulatory requirements, including identity verification and transaction monitoring.
- Responsible Gaming: To monitor gaming patterns and identify potential indicators of problem gambling behaviour, to enforce self-exclusion requests and deposit limits, and to send responsible gaming reminders in accordance with our Responsible Gaming policy.
- Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain a record of support interactions for quality assurance and audit purposes.
- Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, money laundering, and other prohibited activities using IP monitoring, device fingerprinting, and behavioural analysis tools.
- Platform Improvement: To analyse aggregated usage data and identify opportunities to improve the performance, reliability, and user experience of the d7999 Platform, including game loading times, navigation design, and payment flow efficiency.
- Personalisation: To display game recommendations, promotional offers, and content that is relevant to your gaming history and preferences, where you have not opted out of personalised communications.
- Legal Obligations: To comply with any applicable court orders, regulatory investigations, or lawful requests from competent authorities requiring the disclosure of personal data.
d7999 will not use your personal data for automated individual decision-making that produces significant legal effects — such as permanent account bans — without human review. Where automated tools flag an account for potential fraud or bonus abuse, the decision to suspend or close the account is subject to manual review by a member of the d7999 compliance team.
03 Legal Basis for Processing
d7999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:
Contractual Necessity
Processing your Identity Data, Contact Data, and Financial Data is necessary to perform the contract we have with you (the Terms & Conditions). Without this processing, we cannot operate your account, process your transactions, or provide access to Platform games.
Your Consent
Where we send you personalised promotional communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time by contacting [email protected] or adjusting your communication preferences in your account settings.
Legal Obligation
Certain processing activities — particularly KYC verification, AML transaction monitoring, and retention of financial records — are carried out because d7999 is legally required to do so under applicable offshore gaming and financial regulations.
Legitimate Interests
d7999 processes Technical Data and Usage Data on the basis of legitimate interests — specifically, our interest in operating a secure, high-performance, and fraud-resistant gaming platform. We have assessed that this processing does not override your fundamental privacy rights.
04 Data Sharing & Disclosure
d7999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only where strictly necessary for the operation of the Platform, and only with the categories of recipient described below. All third-party recipients are subject to contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to d7999.
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. Each provider operates under its own privacy policy and applicable financial regulation.
- Game Technology Providers: Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session identifiers to facilitate game loading and bet settlement. These providers do not receive your full identity or financial data.
- Identity Verification Services: Where d7999 engages a third-party KYC verification service to authenticate documents submitted during the verification process, your identity documents will be shared with that provider solely for the purpose of verification. The provider is contractually prohibited from retaining or repurposing your documents.
- IT Infrastructure and Cloud Providers: d7999's Platform is hosted on secure cloud infrastructure. Hosting and database providers may have access to encrypted data as a technical necessity of service delivery. They are bound by strict data processing agreements and do not have permission to access or process your data for their own purposes.
- Analytics Providers: Aggregated, anonymised usage data may be processed by analytics tools to help d7999 understand Platform performance trends. No personally identifiable information is included in analytics datasets shared with third-party tools.
- Legal and Regulatory Authorities: d7999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of d7999, its users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of all or a material portion of d7999's business assets, personal data held by d7999 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and the acquiring entity will be required to honour the terms of this Privacy Policy.
06 Data Retention
d7999 retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to each category of personal data:
- Account Identity and Contact Data: Retained for the duration of your active account relationship with d7999, plus a minimum of 5 years following account closure. This retention period supports our obligations to investigate potential fraud or disputes that may arise after account closure.
- Financial Transaction Data: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping obligations applicable to offshore gaming operators. This includes deposit records, withdrawal records, and bonus credit/debit histories.
- KYC Documents: Retained for the duration of your active account, plus a minimum of 5 years following account closure, or longer where required by anti-money laundering obligations.
- Customer Support Communications: Retained for 3 years from the date of the support interaction, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved and the standard post-closure period has elapsed.
- Technical and Usage Data: Server logs and raw usage data are retained for up to 13 months from the date of collection for security analysis and Platform improvement purposes. After this period, data is either deleted or anonymised permanently.
- Responsible Gaming Records: Records of self-exclusion requests, deposit limit settings, and cooling-off periods are retained for a minimum of 7 years to ensure that re-registration requests can be checked against prior exclusion history.
At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised. d7999 conducts periodic data retention audits to ensure that data is not held beyond its required retention period. If you have questions about how long specific data about you has been retained, please contact [email protected].
07 Your Privacy Rights
As a user of the d7999 Platform, you hold a number of rights with respect to the personal data we hold about you. d7999 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account username and a clear description of the right you wish to exercise.
Right of Access
Request a copy of all personal data d7999 holds about you, including the purposes for which it is processed and the categories of recipients with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you, such as an incorrect address or misspelled name.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Right to Restriction
Request that we restrict processing of your data — for example, while you contest the accuracy of data we hold about you or while a complaint is under review.
Right to Portability
Request a machine-readable export of personal data you have provided to us, where processing is based on your consent or contractual necessity.
Right to Object
Object to processing of your data for direct marketing purposes or for processing based on d7999's legitimate interests, where your rights override those interests.
Withdraw Consent
Where processing is based on your consent (e.g., promotional emails), withdraw that consent at any time without affecting the lawfulness of prior processing.
Automated Decision Rights
Request human review of any significant decision made about your account through automated means, including fraud flags and account restriction decisions.
d7999 aims to respond to all privacy rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for submitting a privacy rights request unless a request is manifestly unfounded, repetitive, or excessive — in which case d7999 reserves the right to charge a reasonable administrative fee or decline to act on the request.
08 Data Security Measures
d7999 implements a layered, defence-in-depth approach to data security, combining technical, administrative, and physical safeguards to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security architecture includes the following measures:
- TLS/SSL Encryption: All data transmitted between your browser and the d7999 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser confirms this encryption is active during your session.
- At-Rest Encryption: Sensitive data fields stored in d7999's databases — including financial data and KYC document files — are encrypted at rest using AES-256 encryption. Database access is restricted to authorised infrastructure personnel only.
- Access Controls: Access to personal data within d7999's internal systems is restricted on a need-to-know basis. Staff members are granted the minimum level of data access necessary to perform their specific job functions. Access logs are maintained and reviewed regularly.
- Intrusion Detection: d7999's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents. Automated alerts trigger immediate investigation of anomalous activity.
- Vulnerability Management: d7999 conducts periodic security assessments to identify and remediate vulnerabilities in the Platform's codebase and infrastructure. Critical patches are applied on an expedited basis. Dependency libraries are maintained and updated regularly.
- Data Breach Response: d7999 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, affected users will be notified without undue delay, and d7999 will take immediate steps to contain the breach and prevent further exposure.
- Password Security: User account passwords are stored using industry-standard one-way hashing algorithms with salting. d7999 staff cannot view your password in plain text. You are strongly encouraged to use a unique, complex password for your d7999 account and to enable any available two-factor authentication options.
- Third-Party Security Standards: All third-party service providers who process personal data on behalf of d7999 are required to demonstrate adequate security standards as a condition of their engagement. This includes payment processors, KYC providers, and cloud infrastructure partners.
Your Role in Security: While d7999 takes extensive measures to protect your data, account security also depends on your own practices. Do not share your d7999 login credentials with any other person. Do not access your d7999 account from shared or public computers. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately so we can take protective action, including a forced password reset and account session termination.
09 Third-Party Game Providers
The d7999 Platform integrates games and live casino content developed and operated by licensed third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game on d7999, certain technical data — such as your session token, game round ID, bet amount, and win/loss outcome — is transmitted to the relevant game provider's servers in order to render the game and record the result.
This technical data exchange is necessary for the game to function and for accurate bet settlement. The game providers receive pseudonymised session identifiers rather than your full name, email address, or financial account details. Each game provider operates under their own privacy policy and is subject to licensing obligations imposed by their respective gaming regulatory authorities.
RNG Certification: All games available on d7999 use certified Random Number Generation (RNG) systems. Game outcomes are determined independently by the game provider's certified RNG and cannot be influenced by d7999 or by any individual player. This means that while game session data is shared with providers for settlement purposes, the integrity and fairness of game outcomes is independently verified and not subject to manipulation by either party.
d7999 is not responsible for the privacy practices of third-party game providers once data has been transmitted to their systems in the course of normal game play. We recommend reviewing the privacy policies of the individual game studios if you require detailed information about how they handle session data. Links to the game providers' official websites are not provided here in accordance with our no-external-link policy, but their privacy documentation is publicly available on their respective platforms.
Payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard similarly operate under their own independent privacy frameworks. When you initiate a deposit or withdrawal, you are subject to the privacy policy of the payment method you select in addition to this d7999 Privacy Policy. d7999 is not responsible for data handling practices that occur within the payment provider's own systems following the handoff of a transaction.
10 Policy Updates & Contact
d7999 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to our Platform and services. The "Last Updated" date displayed at the top of this page will be revised whenever a change is made.
Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — d7999 will notify registered users via the email address on their account at least 14 days before the revised Policy takes effect. For minor clarificatory changes, the updated Policy will take effect immediately upon publication without prior notice.
Your continued use of the d7999 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and contact us to arrange account closure before the effective date of the revision.
Privacy Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or d7999's data processing practices, please contact our support team. We aim to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6).
Data Controller
d7999 operates as an offshore online gaming platform. The entity responsible for the processing of personal data collected through https://d7999.app is the operator of d7999. For the purposes of this Policy, d7999 acts as the data controller in respect of personal data you provide directly to the Platform.
Players in Bangladesh: d7999 acknowledges that users accessing the Platform from Bangladesh do so under their own initiative and at their own legal responsibility. d7999 does not represent that the Platform is lawfully accessible in Bangladesh and makes no warranty to that effect. If you have concerns about data privacy in the context of your local jurisdiction, we encourage you to seek independent legal advice. d7999 remains committed to upholding the privacy rights described in this Policy regardless of your geographic location.
Your Data Is Safe — Now Let's Play
Now that you understand how d7999 protects your personal information, dive into the full range of games and betting options our Platform has to offer. For further questions, our FAQ page covers the most common player queries.
For responsible gaming tools and self-exclusion options, visit our Responsible Gaming page. 18+ only. Please play responsibly.