pd999 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by pd999 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "your", " the Player") who access or use the pd999 website at https://pd999.io and all associated services, including account registration, betting markets, casino games, payment processing, and customer support.

This Policy describes what personal data pd999 collects, the purposes for which it is processed, the legal bases that justify that processing, how long we retain it, with whom we share it, and what rights you hold as a data subject. By accessing the pd999 platform and creating an account, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the pd999 Terms & Conditions and any supplemental privacy notices that may be presented to you at specific points of data collection (for example, at the point of identity verification). In the event of a conflict between this Policy and a supplemental notice, the supplemental notice will prevail in respect of the specific processing activity it addresses.

2. Data Controller

pd999 is the data controller in respect of the personal data it collects from players and visitors to the platform. As data controller, pd999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how pd999 handles your personal data, or if you wish to exercise any of your data rights described in this Policy, please contact us at [email protected]. Our data team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6).

3. Information We Collect

pd999 collects the following categories of personal data:

3.1 Identity Data — including your full legal name, date of birth, gender, and copies of government-issued identification documents (such as a National ID card or passport) provided during account verification.

3.2 Contact Data — including your email address, mobile phone number, and residential address (city, district, and country).

3.3 Account Data — including your chosen username, encrypted password, account creation date, account status, login history, and device identifiers associated with your sessions.

3.4 Financial Data — including your deposit and withdrawal history, transaction amounts in BDT, payment method identifiers (for example, the registered mobile number associated with your bKash, Nagad, Rocket, or Upay account), and any information required to process or verify payments. pd999 does not store full payment credentials; payment transactions are handled by our payment processor partners.

3.5 Transactional Data — including details of every bet placed, game played, bonus claimed, and promotional offer accepted on the platform, along with associated timestamps and outcomes.

3.6 Technical Data — including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and pages visited within the platform.

3.7 Communications Data — including the content of messages you send to our customer support team via live chat, email, or any other channel, along with metadata about those communications.

3.8 Responsible Gaming Data — including any deposit limits, session limits, cooling-off periods, or self-exclusion requests you submit through the platform's responsible gaming tools.

4. How We Collect Your Data

pd999 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or submitting a responsible gaming request.
• Automated technologies: Technical and usage data collected automatically when you access the platform, via cookies, server logs, pixel tags, and similar tracking technologies described in Section 11 of this Policy.
• Third-party sources: Identity and address verification data received from our KYC (Know Your Customer) verification partners, fraud prevention services, and payment processors, where necessary to fulfill legal obligations or protect the integrity of the platform.
• Game and betting activity: Transactional data generated automatically as a result of your use of betting markets and casino games on the platform.

5. How We Use Your Data

pd999 uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account creation and management	Identity, Contact, Account
Identity and age verification (KYC)	Identity, Contact, Financial
Processing deposits and withdrawals	Financial, Account, Identity
Providing betting and casino game services	Account, Transactional, Technical
Customer support and dispute resolution	Identity, Account, Communications, Transactional
Fraud detection and platform security	Technical, Financial, Transactional, Account
Anti-money laundering (AML) compliance	Identity, Financial, Transactional
Responsible gaming monitoring and tools	Transactional, Responsible Gaming, Account
Platform analytics and performance improvement	Technical, Transactional
Sending transactional and account notices	Contact, Account
Sending promotional communications (where consented)	Contact, Transactional

pd999 does not use your personal data for automated decision-making that produces legal or similarly significant effects without appropriate human review, except where such processing is strictly necessary for fraud prevention or legal compliance, in which case you retain the right to request human review of the decision.

6. Legal Basis for Processing

pd999 processes personal data only where a lawful basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to create and maintain your account, execute bets, process payments, and provide the core services of the platform.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, tax reporting, and data retention requirements.
• Legitimate interests: Processing carried out to protect the security of the platform, detect and prevent fraud, conduct platform analytics, and improve our services — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes, such as sending promotional emails or push notifications, where we have obtained your prior, freely given, and informed consent. You may withdraw consent at any time by contacting [email protected] or via your account notification settings.

7. Sharing of Personal Data

pd999 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Identity verification providers: Third-party KYC services used to verify your identity and age in accordance with our legal obligations.
• Payment processors: Partners who facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels. These partners receive only the data necessary to execute and verify your transactions.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data to provide and improve their game services on our platform.
• Fraud and security services: Third-party providers who assist in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• IT and platform infrastructure providers: Cloud hosting, database, and technical service providers who store and process data on pd999's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, pd999 may disclose personal data to law enforcement or regulatory bodies.

All third-party service providers who process personal data on pd999's behalf are required to do so under contractual terms that impose confidentiality obligations and data security standards consistent with this Policy.

8. International Data Transfers

pd999 is operated as an online platform serving players primarily based in Bangladesh. Some of the third-party service providers with whom we share data may be located in or operate from jurisdictions outside Bangladesh. Where personal data is transferred to processors in other countries, pd999 ensures that appropriate safeguards are in place, including contractual obligations that require the recipient to protect your data to a standard consistent with this Policy.

By using the pd999 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh for the purposes described in this Policy.

9. Data Retention

pd999 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with pd999.
• Post-closure account data: Following the closure of your account, pd999 retains identity, financial, and transactional data for a minimum period of five (5) years to comply with anti-money laundering regulations and to resolve any outstanding disputes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication.
• Technical and log data: Typically retained for up to twelve (12) months, unless required for longer periods in connection with a fraud investigation or legal proceeding.
• Marketing consent records: Retained for as long as the consent is active, and for a reasonable period after withdrawal to demonstrate compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

10. Data Security

pd999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS) encryption for all data in transit between your device and the platform.
• Encryption of sensitive data at rest within our database infrastructure.
• One-way cryptographic hashing of account passwords — passwords are never stored in plain text and are never accessible to platform staff.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented operational need.
• Regular internal security reviews, vulnerability scanning, and penetration testing.
• Audit logging of all access to personal data by platform staff.
• Incident response procedures for detecting, assessing, and notifying affected players of any personal data breach within a reasonable timeframe.

While pd999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying pd999 immediately if you suspect your account has been compromised.

11. Cookies and Tracking Technologies

pd999 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the platform, maintain your session, and gather analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These cookies maintain your login session, remember your language and display preferences, and enable core security features. They cannot be disabled without significantly impairing your ability to use the platform.
• Analytical cookies: Used to collect anonymised data about how players interact with the platform, including page views, session durations, and navigation paths. This data helps pd999 identify areas for improvement.
• Functional cookies: Used to remember your preferences and personalise your experience, such as recalling your preferred game categories or display settings.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity validation.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the pd999 platform. pd999 does not use third-party advertising cookies to serve behavioural advertising to players outside the platform.

12. Your Data Rights

Subject to applicable law, you hold the following rights in respect of the personal data pd999 processes about you:

• Right of access: You may request a copy of the personal data pd999 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. Some data can be updated directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations — for example, we cannot erase financial transaction records that we are required by law to retain.
• Right to restrict processing: You may request that pd999 restrict the processing of your data in certain circumstances, for example while a correction request is under review.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. pd999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your registered username and a description of your request. pd999 will respond within 30 days. We may need to verify your identity before processing your request.

13. Protection of Minors

pd999 is strictly an adult platform. Access to and use of the platform is prohibited for individuals under the age of 21. pd999 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has created an account or provided personal data to pd999, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

14. Changes to This Policy

pd999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. Material updates will be communicated to registered players via a notice displayed on the platform or via the email address associated with your account, at least 14 days before the updated Policy takes effect.

The "Last updated" date displayed at the top of this document indicates when the most recent revision was made. Continued use of the platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should cease using the platform and request account closure.

15. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way pd999 handles your personal data, please contact our support team using the details below. All privacy-related correspondence should include your registered username and a clear description of your concern to enable prompt handling.

• General & Privacy Support: [email protected]
• Responsible Gaming: [email protected]
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)

pd999 aims to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 days. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.