de99 Privacy Policy
How We Collect, Use & Protect Your Data

This Privacy Policy (hereinafter referred to as "the Policy") describes how de99 (hereinafter referred to as "de99", "the Platform", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals (hereinafter referred to as "you", "the Player", or "the User") who access or use the de99 website at https://de99.io and any associated services, including sports betting, live casino, slot games, and customer support.

This Policy forms part of the de99 Terms & Conditions, which constitute the binding agreement between you and de99. By registering an account on de99 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and accepted the terms of this Policy.

This Policy applies exclusively to data collected and processed by de99 through the de99 Platform. It does not apply to any third-party websites, services, or game providers that may be accessible through or referenced on the Platform — those entities maintain their own separate privacy policies.

de99 collects personal data in the following categories. The specific data collected in each category depends on the services you use and the actions you take on the Platform:

de99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

de99 collects personal data through the following methods:

• Direct Submission: Data you actively provide when registering an account, completing a KYC verification, making a deposit or withdrawal, submitting a support request, or responding to a survey or promotional offer.
• Automatic Collection: Technical and usage data collected automatically as you interact with the de99 website — including via cookies, session tracking technologies, server logs, and analytics tools. See Section 7 for full details on cookies.
• Third-Party Sources: de99 may receive data about you from identity verification service providers, payment processors (such as bKash, Nagad, Rocket, and partner banks), fraud prevention services, and publicly available sources — where doing so is lawful and necessary for compliance purposes.
• Device and Browser Signals: Your device's IP address, browser fingerprint, and connection metadata are captured automatically when you access the Platform to support security monitoring and fraud detection.

de99 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your de99 player account, including processing deposits, withdrawals, and bonus allocations.
• Identity Verification (KYC): To verify your identity, confirm you are aged 21 or above, and ensure that all payment accounts used are registered in your own name — as required to protect players and maintain platform integrity.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple-account creation, and other conduct prohibited under the de99 Terms & Conditions.
• Service Delivery: To provide access to all features of the Platform, including sports betting markets (cricket BPL, IPL, T20 World Cup, Bangladesh Tigers), live casino games, and slot titles from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Ezugi.
• Customer Support: To respond to your enquiries, resolve disputes, and provide ongoing 24/7 English-language support across all time zones relevant to Bangladesh Standard Time (BST, UTC+6).
• Promotions & Communications: To send you promotional offers, bonus notifications, and service updates via your registered email — but only where you have not opted out of such communications. You may unsubscribe at any time by contacting [email protected].
• Legal & Compliance Obligations: To comply with applicable legal and regulatory obligations including anti-money laundering (AML) requirements, responding to lawful requests from law enforcement, and maintaining records required under financial compliance frameworks.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the overall quality, performance, and design of the de99 Platform.
• Responsible Gaming: To monitor betting patterns and account activity for signs of problem gambling, and to support player-activated responsible gaming tools such as deposit limits, session limits, and self-exclusion requests.

de99 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or as required by applicable law.

de99 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to fulfil de99's obligations to you under the Terms & Conditions — for example, processing a withdrawal to your bKash account or crediting a bonus to your balance.
• Legitimate Interests: Processing that de99 has a legitimate business interest in carrying out and where that interest is not overridden by your rights — for example, fraud detection, security monitoring, and platform analytics.
• Legal Obligation: Processing that de99 is required to perform to comply with applicable laws — for example, retaining transaction records for anti-money laundering compliance or sharing data with law enforcement in response to a valid legal order.
• Consent: Processing that relies on your explicit opt-in — for example, sending you promotional email communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

de99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. de99 may share your personal data with the following categories of recipients only to the extent strictly necessary:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposits and withdrawals securely in Bangladeshi Taka (BDT).
• Identity Verification Providers: Third-party KYC and AML service providers engaged by de99 to verify player identities and screen for sanctions or politically exposed person (PEP) status.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other certified providers — limited technical data (such as a session token and account ID) is shared to facilitate game sessions. These providers do not receive your full personal profile.
• Fraud Prevention Services: Third-party risk and fraud analytics providers engaged to help detect suspicious account activity, bonus abuse, and potential money laundering.
• Law Enforcement & Regulators: Where de99 is legally compelled to disclose data in response to a court order, regulatory investigation, or lawful authority request, de99 will comply with such requests and, where legally permitted, will notify the affected player.
• Professional Advisors: Legal counsel, auditors, and financial advisors engaged by de99 under strict confidentiality obligations.

de99 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how players interact with the site. The following cookie categories are used:

Strictly necessary cookies cannot be disabled, as they are essential for the Platform to function securely. You may control the use of functional and analytics cookies through your browser settings. Note that disabling certain cookies may affect the performance of the Platform and your overall player experience.

de99 does not use third-party advertising or retargeting cookies. No cookie data from de99 is shared with advertising networks or social media platforms for the purpose of serving targeted advertisements.

de99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on the Platform, plus a minimum of 5 years following permanent account closure — in line with standard financial record-keeping and AML compliance requirements.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction.
• KYC & Verification Documents: Identity and payment verification documents are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Communications: Support tickets, live chat transcripts, and email correspondence are retained for a minimum of 2 years from the date of the last communication in each case.
• Marketing Preferences & Consent Records: Records of marketing consents and opt-outs are retained for the lifetime of the account to ensure compliance with your stated preferences.
• Technical / Log Data: Server logs and session data are retained for up to 12 months for security monitoring and fraud detection purposes, after which they are anonymised or deleted.

Upon the expiry of the applicable retention period, de99 will securely delete or permanently anonymise personal data so that it can no longer be attributed to you as an individual. Where deletion is not immediately possible due to technical constraints (for example, backup storage cycles), the data will be isolated from further processing until deletion is completed.

de99 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to:

• Encryption in Transit: All data exchanged between your browser or device and the de99 Platform is encrypted using 256-bit SSL/TLS encryption. The de99 website is accessible only via HTTPS.
• Encryption at Rest: Sensitive personal data and financial records stored within de99's systems are encrypted at rest using industry-standard encryption algorithms.
• Password Security: Player passwords are processed using industry-standard one-way cryptographic hashing algorithms (such as bcrypt). de99 staff cannot access your password in plain text at any time.
• Access Controls: Access to systems containing personal data is restricted to authorised de99 staff who require it for their specific role. All staff access is logged, and privileged access is subject to multi-factor authentication.
• Network Security: de99's infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring designed to identify and respond to potential threats in real time.
• Penetration Testing: de99 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: de99 maintains a formal security incident response plan. In the event of a data breach that poses a risk to your rights, de99 will notify affected players and relevant authorities in accordance with applicable obligations.

As a player on de99, you have the following rights in relation to the personal data that de99 holds about you. To exercise any of these rights, please contact de99 support at [email protected] with your registered username and a clear description of your request:

• Right of Access: You have the right to request a copy of the personal data that de99 holds about you. de99 will provide this in a clear, readable format within a reasonable timeframe.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. de99 will update your records promptly upon receipt of a valid correction request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to legal retention obligations described in Section 8.
• Right to Restriction of Processing: You may request that de99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or a deletion request is under review.
• Right to Data Portability: Where de99 processes your personal data based on your consent or contractual necessity, and the processing is carried out by automated means, you may request that de99 provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to de99's processing of your personal data where that processing is based on legitimate interests. de99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where de99 processes your data based on your consent (for example, for promotional communications), you may withdraw that consent at any time by contacting [email protected] or following the unsubscribe instructions in any marketing email.

de99 will respond to all data rights requests within 30 calendar days of receipt. Where the request is complex or de99 receives a high volume of requests, the response period may be extended by a further 30 days, and de99 will notify you of the extension within the initial 30-day period. de99 will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

de99 is strictly an adult platform. The de99 Platform is not intended for, directed at, or designed to attract individuals under the age of 21. de99 does not knowingly collect personal data from any person under 21 years of age.

During account registration, all players are required to confirm that they are aged 21 or above. de99 may request supporting age verification documentation — including a government-issued national ID card, birth certificate, or passport — at any point during a player's use of the Platform.

If de99 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, de99 will:

• Immediately suspend the relevant account.
• Void all active bets and forfeit any bonus balances in the account.
• Assess whether any deposits made can be refunded in accordance with the Terms & Conditions.
• Permanently delete all personal data associated with the underage account from de99's systems as soon as practicable.

If you are a parent or guardian and believe that your child has registered an account on de99 or submitted personal data to de99, please contact [email protected] immediately so that de99 can investigate and take appropriate action without delay.

The de99 Platform may contain references to or integrations with third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — whose game engines are hosted and operated by those providers on their own infrastructure. While de99 takes steps to work only with reputable, certified providers, de99 does not control and is not responsible for the privacy practices of these third-party providers.

When you launch a game session on de99, a limited set of technical session data — such as an anonymised session token and your account currency — is passed to the relevant game provider solely for the purpose of facilitating the game session. Game providers do not receive your full personal profile, your payment account details, or your identity documents.

de99 strongly recommends that you review the privacy policies of any third-party game providers whose content you access through the Platform. de99 accepts no liability for the data handling practices of third-party providers operating their own independent systems.

de99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or the services offered on the Platform. The effective date displayed at the top of this Policy will be updated each time a new version is published.

Where de99 makes a material change to this Policy — meaning a change that affects how your personal data is collected, used, or shared in a way that is less favourable to you than the prior version — de99 will provide you with at least 14 calendar days' advance notice of the change via:

• A notification email sent to your registered de99 email address; and
• A prominent notice displayed on the de99 Platform homepage and account dashboard upon your next login.

Your continued use of the de99 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request permanent account closure by contacting [email protected] before the effective date of the changes.

For non-material changes — such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact details — de99 may update the Policy without advance notice, though the effective date will always be updated to reflect the most recent revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which de99 handles your personal data, please contact the de99 support team through the following channel. de99's support team is available 24 hours a day, 7 days a week, including all public holidays in Bangladesh.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: de99 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days.

When submitting a data rights request or privacy enquiry, please include your registered de99 username, the email address associated with your account, and a clear description of your request or concern. This will allow de99's team to locate your records and process your request as efficiently as possible.

For information about responsible gaming tools including deposit limits, session reminders, and self-exclusion, please visit the Responsible Gaming page. For general platform questions, visit the FAQ section.