dv999 Privacy Policy

Information We Collect

dv999 collects personal data from players in Bangladesh and other supported regions through several means: directly from you when you register or interact with the platform, automatically through your use of the website and games, and in limited cases from third-party verification and payment partners. The categories of data we collect are set out below.

Registration & Identity Data

When you create a dv999 account, we collect the following information to establish and verify your identity:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to confirm you meet the 18+ age requirement)
• Email address and mobile phone number
• Residential address (city, district, postal code)
• Username and encrypted password
• Nationality and country of residence

Identity Verification (KYC) Documents

In order to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, dv999 may request copies of the following documents at registration or prior to processing a withdrawal:

• National Identity Card (NID) — primary accepted document for Bangladeshi players
• Passport (photo page)
• Driver's licence
• Proof of address (utility bill, bank statement — dated within 3 months)
• Payment method verification (screenshot or photo of bKash/Nagad account, card front showing name)

Financial Transaction Data

To process deposits and withdrawals, we collect and retain the following financial information:

• Payment method identifiers (bKash number, Nagad number, Rocket number, Upay account, USDT wallet address, masked card number)
• Transaction amounts in BDT or USDT
• Transaction timestamps, reference numbers, and status records
• Deposit and withdrawal history associated with your account

Gameplay & Behavioural Data

As you use the dv999 platform, we automatically record data about your gaming activity to ensure fair play, detect fraud, and personalise your experience:

• Games played, bet amounts, win/loss records, and session durations
• Sports betting selections, stake amounts, and market preferences
• Bonus offers claimed and wagering progress
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

Technical & Device Data

We collect certain technical information automatically when you access dv999 from any device:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Referring URL and navigation path through the site
• Session start/end times and page interaction logs
• Cookie identifiers and local storage values (see Cookies section)

Communications Data

When you contact dv999 support or respond to a promotional communication, we retain records of that interaction including the content of messages, attachments provided, and the resolution outcome. This data is used for quality assurance, dispute resolution, and fraud prevention.

How We Use Your Data

dv999 processes your personal data for a number of clearly defined purposes, each of which is grounded in a legitimate legal basis. We do not use your data for any purpose that has not been identified in this policy. The primary purposes for which dv999 processes personal data are as follows:

Where dv999 relies on legitimate interest as the basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. You may request a copy of any such assessment by contacting [email protected].

Where processing is based on consent — such as marketing communications about promotions tied to Eid, Pohela Boishakh, BPL season, or IPL season — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Legal Basis for Processing

dv999 processes personal data only where a valid legal basis exists for doing so. The four primary legal bases on which dv999 relies are:

1. Contract Performance

The majority of data processing on the dv999 platform is necessary to perform the contract between dv999 and the player — that is, to provide the online casino and sports betting services you have signed up to use. This includes processing your registration, verifying your payment methods, crediting winnings to your account, and delivering bonus offers you have opted into. Without this processing, dv999 cannot fulfil its contractual obligations to you.

2. Legal Obligation

Certain processing activities are required by law, regardless of consent. These include KYC identity verification, AML transaction monitoring, age verification, responsible gaming record-keeping, and responding to lawful requests from competent authorities. dv999 cannot waive these obligations, and your continued use of the platform implies acceptance of this processing.

3. Legitimate Interest

Where processing is not strictly required by contract or law, dv999 may rely on legitimate interest — meaning dv999 has a genuine, proportionate business reason to process certain data, provided that reason does not disproportionately impact your privacy. Examples include fraud prevention, platform security monitoring, internal analytics, and communications about account activity such as deposit confirmations and withdrawal status updates.

4. Consent

For optional processing activities — in particular, sending promotional marketing communications about bonuses, seasonal offers, and new game launches — dv999 seeks your explicit consent at the point of registration and in subsequent preference centre interactions. You can withdraw consent at any time without affecting other aspects of your account or access to dv999 services.

Data Sharing & Third Parties

dv999 does not sell your personal data to third parties. Data is shared only where strictly necessary to provide platform services, comply with legal obligations, or protect the security and integrity of the platform. The categories of third parties with whom dv999 may share your data are detailed below.

Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, USDT, Visa, and Mastercard, dv999 must share transaction data (including your payment method identifier and transaction amount) with the relevant payment processor. These processors operate under their own privacy policies and are bound by contractual data protection obligations when processing data on dv999's behalf.

Game Content Providers

dv999 sources its games library from licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from these providers, limited technical data (such as a session token, your account currency, and your current balance relevant to the game) is transmitted to the provider's game servers. Game providers do not receive your name, NID number, or payment details.

KYC & Identity Verification Services

To fulfil its KYC obligations, dv999 may use third-party identity verification services that process the documents you submit (NID, passport, driver's licence) to confirm their authenticity. These services are bound by strict data processing agreements and may not use your verification data for any purpose other than identity verification on dv999's behalf.

Fraud Prevention & Security Services

dv999 employs third-party fraud detection and cybersecurity providers that analyse behavioural and technical data to identify suspicious activity, protect against account takeovers, and prevent money laundering. These providers process data strictly under dv999's instruction and do not retain your data beyond the period required for their analytical function.

Legal & Regulatory Authorities

dv999 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to a lawful request, court order, or statutory obligation. In such cases, dv999 will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify you of such disclosure.

Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of dv999's business assets, personal data held by dv999 may be transferred to the successor entity as part of that transaction. In such circumstances, dv999 will take all reasonable steps to ensure that your data continues to be processed in accordance with this Privacy Policy, and will notify registered players of any material change in data controller.

Cookies & Tracking Technologies

dv999 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform correctly, keep your session secure, analyse usage patterns, and — where you have consented — personalise your experience. The categories of cookies used by dv999 are as follows:

dv999 does not use third-party advertising cookies or cross-site behavioural tracking pixels. We do not participate in programmatic advertising networks or retargeting systems. Our analytics cookies collect only aggregated, anonymised data and are configured to respect user privacy.

Managing Cookies

You may manage optional cookies through your browser's built-in settings. Instructions for disabling or deleting cookies are available in your browser's help documentation. Please note that disabling strictly essential cookies will prevent you from logging in to your dv999 account, as these cookies are required to maintain your authenticated session. Disabling functional or analytics cookies will not affect your ability to access games or process transactions.

Data Retention

dv999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. The retention periods applicable to each category of data are set out below.

When the applicable retention period expires, dv999 will securely delete or anonymise your personal data in accordance with industry-standard data destruction procedures. Anonymised or aggregated data (from which you cannot be identified) may be retained indefinitely for analytical and business improvement purposes.

If you request account closure, dv999 will cease active processing of your data for platform purposes immediately. However, certain data must be retained for the mandatory retention periods described above to satisfy legal obligations — this data will be archived and access-controlled during the retention period and will not be used for marketing or personalisation.

Your Privacy Rights

dv999 respects your rights as a data subject. Regardless of your location in Bangladesh — whether you are based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh — you hold the following rights in relation to your personal data held by dv999. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of all personal data that dv999 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update basic account details directly within your dv999 account settings.
• Right to Erasure: You may request that dv999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing has been unlawful. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request during mandatory retention periods.
• Right to Restrict Processing: You may request that dv999 restrict the processing of your data while the accuracy of that data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your data in a portable format and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: Where dv999 relies on legitimate interest as the legal basis for processing, you have the right to object. dv999 will cease the relevant processing unless compelling legitimate grounds are demonstrated. You have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right Not to Be Subject to Automated Decision-Making: dv999 does not make legally significant decisions about players based solely on automated processing without human review. Where automated tools are used in fraud detection or responsible gaming monitoring, decisions that materially affect your account are reviewed by a member of our compliance team before action is taken.

Data Security Measures

dv999 implements a comprehensive, multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security posture is built on industry best practices and is reviewed and updated on a continuous basis. Key security measures include:

• TLS 1.3 Encryption in Transit: All data transmitted between your browser or device and the dv999 platform is encrypted using Transport Layer Security (TLS) version 1.3. Outdated protocols (TLS 1.0, TLS 1.1, SSLv3) are disabled.
• AES-256 Encryption at Rest: All personal data and financial records stored in dv999 databases are encrypted at rest using Advanced Encryption Standard (AES) with 256-bit keys. Database access is restricted to authorised systems and personnel only.
• Password Hashing: Player account passwords are never stored in plaintext. They are hashed using industry-standard one-way hashing algorithms with unique per-account salts. Even dv999 staff cannot retrieve your original password.
• Access Controls: Access to personal data within dv999 is governed by a strict role-based access control (RBAC) policy. Staff access to player data is granted on a need-to-know basis, logged, and audited regularly. No single individual has unrestricted access to the full data set.
• Intrusion Detection & Monitoring: dv999 operates 24/7 security monitoring systems that detect anomalous access patterns, brute-force login attempts, and other indicators of compromise. Alerts are reviewed by our security operations team in real time.
• Regular Security Audits: The dv999 platform undergoes regular security assessments including penetration testing and vulnerability scanning. Critical findings are remediated within defined SLA timelines.
• Data Breach Response: dv999 maintains a documented incident response plan. In the event of a personal data breach that poses a risk to player rights, affected players will be notified promptly with details of the breach, the data affected, and the steps taken to mitigate harm.

While dv999 invests significantly in platform security, no online service can guarantee absolute protection against all possible threats. You also play an important role in keeping your account secure — please use a strong, unique password for your dv999 account, enable any available two-factor authentication, and never share your login credentials with any other person. Contact [email protected] immediately if you suspect your account has been compromised.

International Data Transfers

dv999 operates as an online platform serving players in Bangladesh. Some of our third-party service providers — including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate infrastructure located outside of Bangladesh. As a result, certain categories of your personal data may be transferred to and processed in countries other than Bangladesh.

Where such international transfers occur, dv999 takes all reasonable contractual and technical steps to ensure that your data receives an equivalent level of protection to that which it would receive within Bangladesh. Specifically:

• All third-party processors who receive data outside Bangladesh are required to execute data processing agreements with dv999 that impose binding data protection obligations consistent with the standards described in this policy.
• Where data is transferred to providers in jurisdictions without an adequate data protection framework, dv999 implements appropriate safeguards such as standard contractual clauses or equivalent contractual protections.
• Game providers receive only the minimum data technically required to serve the game session (session token, balance, currency) and are contractually prohibited from using that data for any purpose other than game delivery.
• Payment processors such as bKash and Nagad are Bangladesh-domiciled entities and process transaction data within Bangladesh in accordance with Bangladesh Bank regulations.

If you have concerns about international data transfers relating to your account, please contact our support team at [email protected] and we will provide you with the specific details of the transfer and the safeguards in place.

Changes to This Policy

dv999 reserves the right to update, modify, or replace this Privacy Policy at any time. Reasons for amendment may include changes in applicable privacy legislation, updates to our data processing practices, new service offerings, changes to our third-party provider relationships, or feedback from players and regulators.

When material changes are made to this Privacy Policy, dv999 will take reasonable steps to inform registered players. Notification methods may include:

• A prominent notice displayed on the dv999 homepage or account dashboard for a period of at least 14 days following the update
• An email notification to your registered email address summarising the key changes
• An in-platform banner displayed upon your next login after the policy update

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how dv999 protects your data. Your continued use of the dv999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes made to this Privacy Policy, you are entitled to close your account and request deletion of your personal data (subject to mandatory retention obligations) by contacting [email protected]. We will process your account closure and data deletion request in accordance with the procedures described in the Your Privacy Rights section above.