sd999 Privacy
Policy

When you interact with the sd999 platform — whether by browsing as a guest, registering an Account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. The specific data collected depends on the nature of your interaction with sd999. Below is a clear breakdown of the categories of information we may collect and the circumstances in which each arises.

sd999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data as part of the standard registration or gaming process. Where responsible gaming self-assessments are voluntarily completed by a Player, any health-related information disclosed is treated with additional confidentiality protections and used solely for the purpose of administering responsible gaming support.

sd999 processes your personal data only for clearly defined and legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following sets out the principal purposes for which sd999 processes personal data and the lawful basis for each:

• Account Registration and Management: We use your identity data and contact data to create and maintain your sd999 Account, verify your identity, and provide you with access to the Platform's full range of features including sports betting, casino gaming, and payment services.
• Payment Processing: We use your financial data and transaction data to process deposits received via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to your registered payment method. All payment data is handled with the highest level of security.
• KYC and Fraud Prevention: We use your identity data and verification documents to fulfil our obligations under applicable anti-money-laundering requirements. This includes verifying that Players are who they claim to be, that they are aged 18 or above, and that payment methods belong to the account holder.
• Customer Support: We use your contact data and communications data to respond to support enquiries, resolve disputes, and provide assistance with account-related matters. Support interactions are conducted via email and WhatsApp and may be recorded for quality and training purposes.
• Platform Improvement: We use technical data and usage data in aggregated and anonymised form to understand how players use sd999, identify areas for improvement, optimise game library curation, and enhance the overall user experience for our Bangladesh player community.
• Responsible Gaming: We use transaction data and usage data to monitor for signs of problem gambling behaviour. Where such indicators are detected, sd999 may proactively reach out to the Player with information about responsible gaming tools and support resources. This processing is carried out in the Player's legitimate interest and in fulfilment of our responsible gaming commitments.
• Marketing Communications: With your consent, we may use your contact data to send you information about promotions, bonuses, new game releases, and seasonal offers relevant to Bangladesh players. You may withdraw your consent to marketing communications at any time by contacting [email protected] or updating your Account preferences.
• Legal Compliance: We may process and retain your personal data as required to comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

sd999 does not use automated decision-making processes that produce legal or similarly significant effects on Players without human review. Where automated tools are used to flag accounts for fraud or responsible gaming review, a qualified member of the sd999 team will conduct a manual assessment before any action is taken.

sd999 does not sell, rent, or otherwise commercially exploit your personal data. We share personal data with third parties only where strictly necessary to operate the Platform and deliver the services you have requested, or where required by law. All third-party data processors engaged by sd999 are bound by contractual data protection obligations that are no less stringent than our own internal standards.

The categories of third parties with whom sd999 may share personal data are as follows:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card processing partners receive transaction data necessary to process your deposits and withdrawals. These providers operate their own privacy policies governing their handling of financial data.
• Identity Verification Providers: sd999 may use third-party KYC verification services to authenticate your identity and age. These providers receive only the minimum data required to perform the verification check and are contractually prohibited from using it for any other purpose.
• Game Studio Providers: When you play casino games supplied by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your session data is necessarily shared with those providers to facilitate gameplay. Game providers are independent data controllers with respect to data processed within their game engines.
• Analytics Providers: sd999 uses analytics tools to understand platform usage patterns. Where possible, analytics data is processed in anonymised or aggregated form. Where any analytics provider processes personal data, they do so as a data processor under binding contractual terms.
• Legal and Regulatory Authorities: sd999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a court order, or a lawful regulatory directive. We will notify the affected Player of any such disclosure where legally permissible.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of sd999's business assets, Player personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any material change to the data controller responsible for their personal data in advance of any such transfer taking effect.

sd999 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to deliver a consistent, personalised, and technically robust experience across the Platform. This section explains what cookies are, which types sd999 uses, and how you can manage your cookie preferences.

A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits, remember your preferences, keep you logged in securely, and understand how you use the site. sd999 uses the following categories of cookies:

You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will impair the functionality of the sd999 Platform and may prevent you from accessing your Account or completing transactions. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

sd999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following retention principles apply across all categories of personal data held by sd999:

• Active Accounts: Personal data associated with an active sd999 Account is retained for the full duration of the Account's active status. This includes identity data, contact data, transaction records, and KYC documentation.
• Closed Accounts: Following the closure of a Player's Account — whether by the Player's own request or by sd999 — we retain personal data for a minimum period of five (5) years from the date of closure. This retention period reflects our obligations under applicable anti-money-laundering requirements and standard financial record-keeping norms.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years to satisfy financial record-keeping obligations and to enable the resolution of any retrospective disputes.
• Marketing Data: If you withdraw your consent to receive marketing communications, your contact data will be removed from our active marketing lists within 30 days of receiving your opt-out request. We retain a record of your opt-out preference to ensure we do not inadvertently contact you again in the future.
• Support Communications: Customer support chat transcripts and email records are retained for a minimum of two (2) years from the date of the interaction to enable ongoing dispute resolution and quality assurance.
• Anonymised Analytics Data: Usage and technical data that has been fully anonymised (such that it cannot be re-identified) may be retained indefinitely for statistical and product development purposes.

When personal data reaches the end of its applicable retention period, sd999 securely deletes or anonymises it. Secure deletion involves the permanent removal of data from active systems and the overwriting or physical destruction of any backup media containing that data.

Protecting the personal and financial data of our Bangladesh players is a core operational priority at sd999. We have implemented a comprehensive set of technical and organisational security measures to guard against unauthorised access, accidental loss, destruction, or disclosure of personal data. Key security controls include:

• Transport Layer Security: All data transmitted between your browser or mobile device and the sd999 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Server-Side Encryption: Personal data stored in sd999's databases is encrypted at rest using strong symmetric encryption standards. Encryption keys are managed separately from encrypted data and are subject to regular rotation protocols.
• Access Controls: Access to Player personal data is restricted to authorised sd999 staff on a strict need-to-know basis. Role-based access controls are enforced across all internal systems. Privileged access is subject to multi-factor authentication and regular access reviews.
• Security Audits: sd999 conducts regular internal security reviews and vulnerability assessments. Any identified vulnerabilities are prioritised and remediated promptly in accordance with our internal security response protocols.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to Players, sd999 will notify affected individuals and take immediate corrective action to contain the breach and prevent recurrence. Notifications will be issued via the contact details registered on the affected Account.
• Two-Factor Authentication: sd999 provides two-factor authentication (2FA) via SMS OTP to all registered Players. We strongly encourage all Bangladesh players to enable 2FA to significantly reduce the risk of unauthorised Account access.

While sd999 takes every reasonable measure to secure your personal data, no internet-based system can guarantee absolute security. Players are responsible for maintaining the security of their own devices and login credentials. If you suspect your Account has been compromised, please contact sd999 support immediately at [email protected].

As a Player on sd999, you have a number of rights with respect to the personal data we hold about you. sd999 is committed to honouring these rights promptly and transparently. The following rights are available to all registered Players:

• Right of Access: You have the right to request a copy of the personal data that sd999 holds about you. Upon receiving a valid access request, we will provide you with a summary of the data held and the purposes for which it is processed, within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details — such as your contact email or phone number — directly via your Account profile settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other lawful basis exists), or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations as described in Section 5.
• Right to Restrict Processing: You have the right to request that sd999 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on sd999's legitimate interests, though we may be able to demonstrate compelling grounds that override your objection in specific cases.
• Right to Data Portability: Where sd999 processes your personal data on the basis of your consent or the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.
• Right to Withdraw Consent: Where sd999 processes your data on the basis of consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact sd999's privacy team at [email protected]. We will acknowledge your request promptly and aim to respond in full within 30 days. In certain complex cases, we may require up to 60 days; if this applies, we will notify you of the extended timeline. We may ask you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised person.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how sd999 has handled your personal data, please contact our privacy team using the details below. We are committed to addressing all privacy-related enquiries fairly, thoroughly, and promptly.

Email: [email protected]
WhatsApp: +880 1700 000999
Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy enquiry, please include your registered Account username or email address and a clear description of your request or concern. Providing sufficient detail at the outset will help us respond to you as efficiently as possible.

sd999 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered Players via email or a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of sd999 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how sd999 is protecting your data.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all personal data collected by sd999 from Players in Bangladesh and elsewhere who access the sd999 Platform at sd999.bet.