da99 Privacy Policy — How We Protect Your Personal Data

1. Introduction

da99 is committed to protecting the privacy of every player who accesses or registers on our platform. This Privacy Policy explains in clear, plain English how da99 collects, uses, stores, discloses, and protects personal data relating to players based primarily in Bangladesh and any other individuals who interact with the da99 platform.

This Policy should be read alongside da99's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions regarding data processing matters, this Privacy Policy shall prevail.

We recognise that trust is the foundation of any long-term relationship between a betting platform and its players. Our approach to data privacy reflects that understanding — we treat your personal information with the same care and discretion we would want applied to our own.

2. Data Controller

For the purposes of this Privacy Policy, da99 (operating via https://da99.io) acts as the data controller in respect of personal data collected from players and visitors to the platform. As data controller, da99 determines the purposes and means by which personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the da99 data protection contact point:

Email: [email protected] (plain text — this is not a clickable link)

da99 aims to respond to all data-related requests within 30 calendar days of receipt. Complex requests may require up to 60 days; in such cases, da99 will notify you of the extension and the reason for it within the initial 30-day window.

3. Data We Collect

da99 collects the following categories of personal data, grouped by type:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — da99 is strictly 21+ only)
• Nationality and country of residence
• National Identity Card (NID) number, passport number, or other government-issued identification number where provided for verification purposes
• Profile photograph where submitted for identity verification

3.2 Contact Data

• Email address
• Mobile phone number registered in Bangladesh
• Residential address including district, city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere), and postal code

3.3 Financial Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposits and withdrawals
• Bank account details where bank transfer is used (account number, bank name, branch name)
• Partial card numbers (last four digits only) where card payment is used — da99 does not store full card numbers
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Betting and Gaming Activity Data

• Betting history across all sportsbook markets including cricket (BPL, T20, IPL), rugby, and other sports
• Casino game history including slots titles played, live casino sessions, and Hi-Lo game records
• Win/loss records and account balance history
• Bonus and promotion usage history
• Session duration and frequency of play — used in part for responsible gaming monitoring

3.5 Technical and Device Data

• IP address at registration and at each login
• Device type (desktop, mobile, tablet) and operating system
• Browser type and version
• Time zone setting and language preference
• Pages visited on the platform, click-stream data, and session duration

3.6 Communications Data

• Contents of customer support interactions (live chat transcripts, email correspondence, support ticket records)
• Survey responses and feedback submitted voluntarily by players
• Marketing preference records (whether you have opted in to or out of promotional communications)

4. How We Collect Data

da99 collects personal data through the following channels:

• Direct collection: Information you provide when creating an account, completing identity verification, making deposits or withdrawals, contacting support, or responding to surveys.
• Automated collection: Technical and device data collected automatically when you access the platform, via server logs, session cookies, and analytics tools.
• Third-party sources: Identity verification data returned by our verification service providers (where you have submitted documents for verification), fraud-prevention data from security data partners, and payment confirmation data from payment processors including bKash, Nagad, Rocket, Upay, and banking partners.

5. How We Use Your Data

da99 uses personal data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age and identity verification (21+ compliance)	Identity, Contact
Processing deposits and withdrawals	Financial, Identity
Providing betting and gaming services	Gaming Activity, Financial
Customer support and dispute resolution	Identity, Contact, Communications, Gaming Activity
Fraud detection and prevention	Identity, Financial, Technical, Gaming Activity
Anti-money-laundering (AML) compliance	Identity, Financial, Gaming Activity
Responsible gaming monitoring and intervention	Gaming Activity, Financial, Communications
Platform analytics and service improvement	Technical, Gaming Activity
Promotional and marketing communications (with consent)	Contact, Communications

6. Legal Basis for Processing

da99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between da99 and the player — including account management, payment processing, and delivering betting and gaming services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering obligations, age verification requirements, and record-keeping requirements under applicable Bangladeshi law.
• Legitimate interests: Processing necessary for da99's legitimate business interests, including fraud prevention, platform security, and improving our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Data

da99 does not sell personal data. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in Section 5:

• Identity verification providers: Third-party services that verify the authenticity of identity documents submitted during the KYC (Know Your Customer) process.
• Payment processors: bKash, Nagad, Rocket, Upay, banking partners, and card-processing intermediaries, to the extent necessary to process your deposit and withdrawal transactions.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers necessary to deliver their game content within the da99 platform. These providers do not receive your full identity or financial data.
• Fraud prevention and security partners: Specialist data services used to detect and prevent fraudulent account activity, bonus abuse, and financial crime.
• Legal and regulatory authorities: Where da99 is required by law, court order, or regulatory direction to disclose player data, we will comply with such requirements. Where legally permissible, da99 will notify the affected player of such disclosure.
• Professional advisers: Legal counsel, auditors, and accountants acting under binding confidentiality obligations, where such disclosure is necessary for the operation of the business.

All third-party recipients of personal data are contractually required to implement appropriate data security measures and to process personal data only for the purposes for which it was shared.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by the da99 platform when you visit. They allow the platform to recognise your device, maintain your session, remember your preferences, and gather anonymised analytics data about how players use the platform.

8.2 Types of Cookies Used by da99

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the platform.
• Functional cookies: Store your preferences such as language settings, display preferences, and time-zone selection so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data is used exclusively to improve the platform experience. da99 does not share analytics data with advertising networks.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your logged-in state during a single session.

8.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into or using the da99 platform. Disabling functional cookies may affect the convenience of your experience but will not prevent access to core platform features.

9. Data Retention

da99 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the duration of the account's active status plus five years following account closure, to meet anti-money-laundering and regulatory record-keeping obligations.
• Identity verification documents: Retained for five years following account closure or the last verified transaction, whichever is later.
• Transaction records: Retained for seven years following the date of the transaction, consistent with financial record-keeping best practices.
• Customer support records: Retained for three years following the closure of the support interaction, unless the interaction forms part of an ongoing dispute, in which case records are retained until the dispute is fully resolved plus two years.
• Technical and analytics data: Anonymised and aggregated after 12 months; raw IP and device logs are retained for no more than 24 months.
• Marketing preference records: Retained for the duration of your account and for two years following account closure, to maintain a record of your consent or opt-out status.

10. Data Security

da99 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data exchanged between your device and da99 servers is encrypted using 256-bit TLS/SSL protocols.
• Encryption at rest: Sensitive personal data including identity documents and financial details are encrypted at rest in da99's databases using industry-standard encryption algorithms.
• Access controls: Internal access to player personal data is governed by role-based access controls. Staff are granted access only to the data categories necessary for their specific job function.
• Two-factor authentication: da99's internal systems use multi-factor authentication for all staff accounts with access to player data.
• Penetration testing: da99 engages third-party security specialists to conduct regular penetration tests and vulnerability assessments of the platform.
• Incident response: da99 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to players, da99 will notify affected players and relevant authorities within the timeframes required by applicable law.

11. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by da99:

• Right of access: You may request a copy of the personal data da99 holds about you. da99 will provide this information in a clear, structured format within 30 days of a verified request.
• Right to rectification: If any personal data da99 holds about you is inaccurate or incomplete, you may request that it be corrected. Basic account details such as contact information can be updated by contacting da99 support directly.
• Right to erasure: In certain circumstances — including where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies — you may request that da99 delete your personal data. Note that da99 is not able to delete data it is required to retain under applicable AML and regulatory obligations.
• Right to restriction: You may request that da99 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data while da99 verifies it.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a machine-readable format.
• Right to withdraw consent: Where da99 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.
• Right to object: You may object to the processing of your personal data where da99 relies on legitimate interests as its legal basis, provided your objection is grounded in your particular situation. da99 will consider your objection and will cease the relevant processing unless it has compelling legitimate grounds that override your interests.

To exercise any of the above rights, contact da99 support at [email protected] with a clear description of your request and sufficient information to verify your identity. da99 will respond within 30 calendar days. No fee is charged for exercising these rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

12. Minors

The da99 platform is strictly for individuals aged 21 years and above. da99 does not knowingly collect personal data from individuals under the age of 21. If da99 becomes aware that personal data has been collected from an individual below the minimum age, that account will be immediately suspended, all associated data will be deleted to the extent legally permissible, and any associated funds will be dealt with in accordance with da99's Terms & Conditions.

If you are a parent or guardian and believe that a minor has created a da99 account or provided personal information to da99, please contact [email protected] immediately so that the appropriate action can be taken without delay.

13. International Data Transfers

da99's primary server infrastructure is located in data centres serving the South and South-East Asia region. However, some of da99's third-party service providers — including game content providers and fraud-prevention partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to processors or sub-processors located outside Bangladesh, da99 ensures that appropriate safeguards are in place. These safeguards include contractual data processing agreements with standard data protection clauses, and da99 conducts due diligence on all international third-party processors to confirm their data security standards are equivalent to or exceed those required under applicable Bangladeshi law.

14. Policy Amendments

da99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the platform. Material changes to this Policy will be communicated to registered players via email to the address on file, with a minimum of 14 days' notice before the amended Policy takes effect.

The version date at the top of this document will be updated to reflect the date on which the current version became effective. We encourage players to review this Policy periodically. Your continued use of the platform after the effective date of an updated Policy constitutes your acknowledgement of the changes.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data da99 holds about you, please contact our data protection team. We are available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6).

Email: [email protected] (plain text — not a clickable link)

Please include "Privacy Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and understand the nature of your request. We aim to acknowledge all privacy-related correspondence within two business days and to resolve requests fully within 30 calendar days.