Your Privacy Matters
at d4999

When you register for and use a d4999 account, we collect several categories of personal data. The specific data collected depends on how you interact with the platform. Below is a comprehensive overview of the data categories we process.

Registration and Identity Data

When you create a d4999 account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth — required for mandatory age verification (18+)
• Email address — used for account communications and password recovery
• Mobile phone number — used for SMS two-factor authentication and payment processing
• Residential address — collected during KYC verification
• Username and encrypted password — stored as a one-way cryptographic hash; d4999 staff cannot read your password in plain text

Identity Verification (KYC) Documents

Before processing your first withdrawal, d4999 is required to verify your identity. During this process we may collect copies or images of:

• National Identity Card (NID)
• Passport (bio-data page)
• Driving licence
• Proof of address (utility bill, bank statement, or mobile wallet statement dated within 90 days)

KYC documents are stored securely and are used only for identity verification, fraud prevention, and compliance with applicable regulations. They are never used for marketing purposes.

Financial and Transaction Data

d4999 records all financial transactions associated with your account, including:

• Deposit amounts, dates, times, and payment method references (e.g., bKash transaction IDs)
• Withdrawal requests, processing status, and destination payment method identifiers
• Bonus credits and wagering activity linked to promotional offers
• Account balance history

Gameplay and Behavioural Data

To operate the platform, resolve disputes, and monitor for fair play and responsible gaming concerns, d4999 records:

• Games played, bet amounts, results, and session durations
• Sports betting markets selected, odds accepted, and bet outcomes
• Time and frequency of platform logins
• Responsible gaming tool usage (deposit limits set, self-exclusion activations)

Technical and Device Data

When you access d4999, our servers automatically collect certain technical information:

Data Type	Purpose	Retention
IP address	Fraud detection, geographic restriction checks	12 months
Device type and OS	Platform optimisation and technical support	12 months
Browser type and version	Compatibility and error logging	6 months
Session timestamps	Security monitoring, responsible gaming oversight	24 months
Referral URL	Affiliate attribution and campaign analysis	6 months

d4999 processes your personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we process personal data are as follows:

Account Management and Service Delivery

Your registration data, contact details, and login credentials are used to create, maintain, and secure your d4999 player account. This is the core purpose for which data is collected and constitutes a contractual necessity — without this data, we cannot provide you with the d4999 service.

Payment Processing

Transaction data and payment method identifiers are processed to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Financial records are also retained to satisfy any applicable accounting and reporting obligations.

Identity Verification and Fraud Prevention

KYC documents and identity data are used to verify that you are who you say you are, that you meet the 18+ age requirement, and that your account is not being used for fraudulent, money-laundering, or other illicit purposes. This processing is necessary both for contractual performance and for compliance with applicable regulations.

Responsible Gaming Monitoring

Gameplay data and session behaviour are monitored by d4999's responsible gaming systems to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, d4999 may proactively reach out to the player to offer support tools including deposit limits, session time reminders, or self-exclusion options. This processing is carried out in the legitimate interests of player welfare.

Platform Security and Integrity

Technical data, IP addresses, and behavioural data are used to detect and prevent unauthorised account access, bot usage, collusion, bonus abuse, and other forms of platform misuse. Security monitoring operates continuously and is a core part of keeping d4999 fair and safe for all players.

Marketing Communications

With your explicit consent at registration (or subsequently via your account settings), d4999 may send you promotional emails or SMS messages about bonuses, new games, sports betting markets, and seasonal offers such as Eid specials or Pohela Boishakh promotions. You may withdraw your consent to marketing communications at any time without affecting the legality of processing carried out before withdrawal of consent.

d4999 does not sell, rent, or trade your personal data. We share your data only with the categories of third parties described below, and only to the extent strictly necessary for the specified purpose.

Game and Platform Technology Providers

d4999 integrates games and betting products from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session and gameplay data required to operate their game engines and RNG certification processes. They are contractually prohibited from using this data for any purpose other than delivering the game service to d4999.

Payment Processing Partners

To process deposits and withdrawals, d4999 shares necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, and card-processing networks. These providers process only the minimum data required to complete the transaction. Their own privacy policies govern how they handle data on their side of the transaction.

KYC and Identity Verification Services

d4999 may use third-party KYC verification platforms to assist in validating identity documents submitted by players. These platforms are bound by strict confidentiality and data-processing agreements and are not permitted to use your documents for any purpose beyond identity verification for d4999.

Legal and Regulatory Disclosure

d4999 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law or a lawful order. Such disclosures are made only to the extent required and are logged internally.

d4999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. A cookie is a small text file placed on your device by the d4999 web server when you visit the site.

Types of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login state, CSRF protection, load balancing	No — required for the site to function
Functional	Remembering language preference, display settings, last-visited game	Yes — via browser settings
Analytics	Aggregated usage statistics (page views, session duration, error rates) used to improve the platform	Yes — via browser settings
Affiliate / Referral	Tracking which affiliate partner referred you to d4999, used for commission attribution	Yes — via browser settings

Managing Cookies

You can control and delete cookies through your browser's settings. Disabling strictly necessary cookies will prevent you from logging in to d4999 and will disrupt normal platform functionality. Disabling analytics or functional cookies will not affect your ability to play games or process payments, but may result in a less personalised experience.

Please note that d4999 does not use third-party advertising or cross-site tracking cookies. Cookies on the d4999 platform are limited to first-party operational and analytics purposes.

d4999 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction.

Technical Safeguards

• SSL/TLS encryption on all data in transit between your device and d4999 servers
• AES-256 encryption for sensitive data fields stored at rest, including KYC documents and payment identifiers
• Bcrypt password hashing — your password is never stored in a recoverable form
• SMS two-factor authentication (2FA) available and encouraged for all player accounts
• Web Application Firewall (WAF) to block common attack vectors including SQL injection and cross-site scripting
• Continuous intrusion detection monitoring on all production infrastructure

Operational Safeguards

• Access to player personal data by d4999 staff is restricted on a strict need-to-know basis
• All staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements
• KYC document storage systems are access-logged — all views and downloads of identity documents are recorded
• Regular internal security reviews are conducted on data access patterns and system configurations

d4999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Contractual and regulatory compliance
KYC identity documents	Duration of account + 5 years after closure	Regulatory compliance and fraud prevention
Financial transaction records	Duration of account + 7 years after closure	Accounting and anti-money laundering obligations
Gameplay and betting history	Duration of account + 3 years after closure	Dispute resolution and responsible gaming audit
Technical / server logs	6–24 months (see Section 1 table)	Security monitoring and incident investigation
Marketing consent records	Duration of consent + 3 years	Proof of lawful marketing basis

When the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data (e.g., overall game popularity statistics) may be retained indefinitely as it no longer constitutes personal data.

As a d4999 player, you hold a number of rights over your personal data. d4999 is committed to respecting and facilitating these rights. To exercise any of the rights described below, please contact the d4999 support team at [email protected], clearly stating which right you wish to exercise and providing your registered account username or email address for identity verification purposes.

d4999 will respond to all data rights requests within 30 calendar days of receipt. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which d4999 handles your personal data, please contact us using the details below. d4999 is committed to resolving all privacy concerns fairly and promptly.

How to Contact Us

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly through the d4999 platform
• Response time: Within 3 minutes via live chat; within 24 hours via email for routine queries; within 30 days for formal data rights requests

Policy Updates

d4999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email to the address on record and display a prominent notice on the d4999 website for a minimum of 14 days following the change.

The "Last updated" date displayed at the top of this page reflects the date on which the current version of this Privacy Policy came into effect. We encourage you to review this page periodically. Continued use of the d4999 platform following notification of any update constitutes your acceptance of the revised Privacy Policy.