Privacy Policy for xd999 — Protecting Your Personal Data in Bangladesh

1. Data We Collect

xd999 collects personal data only to the extent necessary to operate a safe, fair, and legally compliant online gaming platform. The categories of personal data we collect, and the contexts in which we collect them, are described in the table below.

1.1 Data You Provide Directly

The majority of personal data xd999 holds about you is information you have provided voluntarily — during account registration, when completing identity verification, when contacting our support team, or when updating your account profile. Providing accurate and complete information is a condition of using the xd999 platform, as set out in our Terms & Conditions.

1.2 Data Collected Automatically

When you access the xd999 website, certain technical and usage data is collected automatically through standard web technologies including server logs, session tracking, and analytics tools. This data is used to ensure platform stability, detect suspicious activity, and improve user experience. It does not identify you by name without being combined with other data held in your account record.

1.3 Data from Third Parties

xd999 may receive limited personal data about you from third-party sources in the following circumstances: payment providers (such as bKash or Nagad) confirming the status of a transaction; identity verification services confirming document authenticity; and fraud-prevention databases confirming whether an account is flagged for suspicious activity. Data received from third parties is handled with the same level of care as data you provide directly.

2. How We Use Your Data

xd999 processes your personal data on one or more of the following legal bases: performance of a contract (operating your account and delivering services), compliance with a legal obligation (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security, service improvement), and consent (marketing communications, where applicable).

The specific purposes for which xd999 uses your personal data are as follows:

• Account Management: Creating, maintaining, and securing your xd999 account, including processing login requests, managing passwords, and handling account closure.
• Identity Verification: Verifying that you meet the minimum age requirement of 18 years and confirming your identity in compliance with Know Your Customer (KYC) obligations.
• Payment Processing: Processing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and Bangladeshi bank partners; investigating and resolving payment disputes.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, and abuse of the xd999 platform or its bonus systems.
• Responsible Gaming: Monitoring gameplay patterns to identify potential signs of problem gambling, applying self-exclusion periods, and enforcing deposit and session limits set by the Player.
• Customer Support: Responding to your enquiries, resolving complaints, and providing assistance through live chat, email, and other support channels.
• Service Improvement: Analysing aggregated usage data to improve platform performance, fix technical issues, and develop new features or game offerings.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have not opted out of such communications. You may unsubscribe at any time by contacting [email protected].
• Legal Compliance: Meeting obligations imposed by applicable laws and regulations, including responding to lawful requests from regulatory or law enforcement authorities.

3. Data Sharing & Third Parties

xd999 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

3.1 Service Providers

xd999 works with a carefully selected group of third-party service providers who assist in operating the platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners), identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and analytics platforms. All service providers are contractually bound to process your data solely for the purposes of delivering services to xd999, and to maintain appropriate security standards.

3.2 Game Providers

To deliver casino and sportsbook products, xd999 integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming. These providers may receive limited technical data (such as a player session token or anonymised player identifier) necessary to deliver their games within the xd999 platform. Full identity or financial data is not shared with game providers.

3.3 Legal & Regulatory Disclosure

xd999 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid legal process, or to protect the rights, property, or safety of xd999, its players, or the public. xd999 will notify affected players of such disclosures where permitted by law.

3.4 Business Transfers

In the event that xd999 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by xd999 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such change and of any material change to this Privacy Policy that results from the transfer.

4. Cookies & Tracking Technologies

The xd999 website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

4.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and game display settings. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Collect anonymised data about how players use the xd999 platform — which pages are visited most frequently, where sessions end, and how features are used. This data helps xd999 improve the platform over time. Analytics cookies do not identify you personally.
• Marketing Cookies: Used to deliver relevant promotional content within the xd999 platform to players who have opted in to marketing communications. xd999 does not use third-party advertising networks or retargeting services.

4.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will affect your ability to use key features of the xd999 platform, including maintaining an active login session. For specific guidance on managing cookies in your browser, refer to your browser's help documentation.

5. Data Retention

xd999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytics purposes.

6. Your Privacy Rights

As an xd999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact xd999 at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data xd999 holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data held by xd999 is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances you may request that xd999 delete your personal data. This right is subject to our legal retention obligations — data that must be kept for regulatory compliance cannot be deleted on request.
• Right to Restriction of Processing: You may request that xd999 temporarily suspend certain processing activities while a data accuracy dispute is resolved, or while an objection to processing is considered.
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you have provided to xd999 directly.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though xd999 may be entitled to continue processing if it can demonstrate compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Security Measures

xd999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit TLS/SSL encryption across all pages of the xd999 platform, ensuring data in transit cannot be intercepted.
• Encrypted storage of sensitive data at rest, including identity documents and financial records, using industry-standard encryption algorithms.
• Role-based access controls limiting staff access to personal data to only those employees whose job functions require it.
• Regular security audits and vulnerability assessments of the xd999 platform and its underlying infrastructure.
• Multi-factor authentication requirements for all administrative systems that process player data.
• Incident response procedures that enable xd999 to identify, contain, and report data security incidents in a timely manner.

While xd999 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their xd999 accounts and to contact [email protected] immediately if they suspect any unauthorised access to their account.

8. Policy Updates & Contact

xd999 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or the services we offer. Material changes to this Policy will be communicated to registered players via the contact details held on their account, no less than 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised with each update.

Continued use of the xd999 platform following notification of a Policy update constitutes acceptance of the revised Policy. Players who do not accept a revised Policy should close their account and cease use of the platform before the revised Policy takes effect.

8.1 Contact for Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data xd999 holds about you, please contact our dedicated privacy team. All privacy-related correspondence should be directed to:

Email: [email protected] — please use the subject line "Privacy Enquiry" for prompt routing to the appropriate team member. We aim to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 days.