sd999 Privacy Policy — Your Data, Your Rights

Our Privacy Commitments

sd999 is committed to handling personal data responsibly. The four principles below summarise how we approach privacy for every player on the platform.

Who We Are

sd999 operates the online gaming platform accessible at sd999.ws, providing sports betting, live casino, slots, crash games, fish shooting games and related services to players in Bangladesh. For the purposes of this Privacy Policy, sd999 is the data controller — meaning we are the entity responsible for deciding how and why your personal data is collected and processed. If you have any questions about this policy or about how your data is handled, you may contact us using the details provided in Section 13 of this document.

Information We Collect

sd999 collects personal information only to the extent necessary to provide and improve its services. The following table outlines the categories of data we collect, along with the reason each category is required.

sd999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers beyond what is required for mandatory KYC verification. Where we ask for KYC documents, the data is used only for the stated verification purpose and is not retained beyond the period required by our compliance obligations.

How We Use Your Information

sd999 uses the personal data collected from you for the following purposes. We will not use your data for any purpose that is incompatible with the reasons listed below without first obtaining your explicit consent.

• Account management: to create, maintain and secure your sd999 account, process login sessions, and enable account recovery when requested.
• Transaction processing: to handle deposits made via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to process withdrawal requests accurately and promptly.
• Regulatory compliance: to meet our anti-money laundering (AML) obligations, conduct KYC verification, and maintain the financial records required by applicable regulations.
• Fraud prevention and security: to monitor account activity for signs of unauthorised access, fraudulent transactions, bonus abuse or any other prohibited activity as defined in our Terms and Conditions.
• Service improvement: to analyse aggregate, anonymised usage patterns to improve the platform's performance, navigation, and game offering for players in Bangladesh.
• Communications: to send account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and — where you have opted in — promotional communications about bonuses and offers.

sd999 does not use personal data for automated profiling that produces legal or similarly significant effects on individual players without a manual review stage. Decisions with significant consequences — such as account suspension for suspected fraud — are reviewed by a member of our compliance team before being finalised.

Legal Basis for Processing

sd999 processes personal data only where there is a valid legal basis for doing so. The legal bases we rely on include:

• Contractual necessity: processing your registration data, transaction history and account information is necessary to perform the contract between you and sd999 when you create an account and use our services.
• Legal obligation: processing for KYC and AML compliance is required by applicable law and cannot be opted out of. We are required to retain certain financial records for specified periods.
• Legitimate interests: fraud detection, security monitoring, platform improvement and responsible gaming enforcement are activities we carry out in the legitimate interests of sd999 and its users, provided those interests do not override your fundamental rights and freedoms.
• Consent: for optional promotional communications, we rely on your consent at the point of opt-in. You may withdraw consent for promotional communications at any time by contacting sd999 support.

Sharing of Your Information

sd999 does not sell, rent or trade personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose:

• Payment processors: your transaction data is shared with the payment service providers (such as bKash, Nagad and Rocket) necessary to process your deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes.
• Game providers: certain gameplay data (such as bet amounts, game outcomes and session durations) is transmitted to our licensed game providers (such as Pragmatic Play, Evolution Gaming and Spribe) as part of the technical operation of those games. This is governed by data processing agreements with each provider.
• Legal and regulatory authorities: sd999 will disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, a valid court order, or a legitimate regulatory request. We will notify you of such disclosure where legally permissible.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of sd999's business, personal data held by sd999 may be transferred to the acquiring entity. Affected users will be notified in advance where this is possible.

Cookies and Tracking Technologies

sd999 uses cookies and similar tracking technologies on sd999.ws to support the technical operation of the platform and to improve the user experience. The types of cookies we use fall into three categories:

• Strictly necessary cookies: these cookies are essential for the platform to function. They enable login session management, maintain your account security, and ensure your cart and wallet balances are preserved between pages. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
• Analytics cookies: these cookies collect anonymised data about how players navigate sd999.ws — which pages are visited most frequently, where users encounter errors, and which device types are most common. This data helps us improve platform performance. Analytics cookies do not identify you personally.
• Preference cookies: these cookies remember your account preferences — such as your chosen language, notification settings and responsible gaming tool configurations — so you do not need to reset them each time you log in.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and performance of the sd999 platform on your device.

Data Retention

sd999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide: account registration data and transaction history are retained for the duration of your account's active status plus a minimum of five years following account closure, in line with standard financial record-keeping obligations. KYC documents are retained for the period required by applicable anti-money laundering regulations. Device and technical log data is retained for a maximum of 12 months from the date of collection, after which it is anonymised or deleted. Promotional communication preferences and opt-in records are retained for as long as your account is active or until you withdraw consent, whichever is earlier.

When data is no longer required for any of the above purposes, sd999 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised aggregate data (data from which all personal identifiers have been removed) may be retained indefinitely for platform analytics and improvement purposes.

Data Security

sd999 implements technical and organisational measures appropriate to the level of risk associated with the personal data it holds. Our security measures include SSL/TLS encryption for all data transmitted between your device and sd999.ws; encrypted storage of sensitive account credentials; strict role-based access controls limiting which members of the sd999 team can access personal data; regular internal security reviews; and automated monitoring systems designed to detect and respond to unauthorised access attempts in real time.

No system of data security can guarantee absolute protection against all threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sd999 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach as quickly as possible. You are also responsible for keeping your account password confidential and for logging out of the platform when using shared devices.

Your Data Rights

As a user of sd999, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact sd999 support with the subject line "Privacy Request" and we will respond within a reasonable timeframe.

• Right of access: you may request a copy of the personal data sd999 holds about you, including details of how it is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: in certain circumstances, you may request that we delete the personal data we hold about you. This right is subject to our legal obligations — for example, we cannot delete transaction records that we are required by law to retain.
• Right to restrict processing: you may request that we limit the way we use your personal data while a rectification or erasure request is being considered.
• Right to withdraw consent: where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

sd999 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will inform you of the extension and the reason for it. There is no charge for exercising your data rights, except in cases of manifestly unfounded or excessive requests.

Children and Minors

sd999 does not knowingly collect personal data from any person under the age of 21. The platform is strictly for adults aged 21 and above. If sd999 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor may have registered an account with sd999, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

Third-Party Links

sd999.ws may from time to time contain references to or from third-party services, including licensed game providers and payment processors. This Privacy Policy applies only to the sd999 platform. sd999 is not responsible for the privacy practices of any third-party services accessed via our platform. We encourage you to review the privacy policies of any third-party services you use in connection with your sd999 account, particularly payment providers such as bKash, Nagad and Rocket, as their data handling practices are governed by their own policies and not by this document.

Changes to This Privacy Policy

sd999 reserves the right to update this Privacy Policy at any time. When we make material changes — that is, changes that significantly affect how we collect or use your personal data — we will notify registered users by displaying a prominent notice on the platform or by sending a notification to the mobile number associated with your account, prior to the changes taking effect. The updated policy will be published on this page with a revised effective date.

Your continued use of sd999 following the publication of any amendment to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting our support team.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to how sd999 handles your personal data, please contact our support team. All privacy-related communications are handled in English. Our team is available 24 hours a day, 7 days a week. Please include "Privacy Request" in your message subject to ensure your enquiry is directed to the correct team member.