td999 Privacy Policy

1About This Policy

This Privacy Policy ("Policy") describes how td999 ("td999", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "player", "user") who register for or use the td999 online betting and casino platform accessible at td999.io, including all associated services, mobile interfaces, and customer support channels.

td999 is operated as an international online gaming platform serving players primarily located in Bangladesh. All services are provided in English, with financial transactions denominated in Bangladeshi Taka (৳). This Policy is drafted in English and governs how we handle data collected from players accessing td999 from Bangladesh and other permitted locations.

This Policy should be read alongside the td999 Terms and Conditions and our Responsible Gaming Policy, both of which are available on this website. Where any conflict exists between this Policy and another document, this Policy prevails in respect of personal data handling.

2Data We Collect

td999 collects personal data through various touchpoints during your use of the platform. The categories of data we collect are described in the table below.

2.1 Data You Provide Directly. Most of the personal data td999 holds about you is information you provide voluntarily during the registration process, when completing identity verification, when contacting our support team, or when submitting documentation at our request.

2.2 Data Collected Automatically. When you access the td999 platform, our servers automatically record certain technical information including your IP address, device identifiers, browser characteristics, and interaction logs. This data is used for security monitoring, fraud prevention, and service optimisation purposes.

2.3 Data from Third Parties. In limited circumstances, td999 may receive data about you from third-party sources, including payment providers (such as bKash, Nagad, and Rocket confirming transaction status) and identity verification service providers engaged to assist with our KYC process.

3How We Use Your Data

td999 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your td999 player account, including processing your registration details and maintaining accurate records;
• Identity Verification: To verify your age (confirming you are 21 or older), identity, and eligibility to use the platform, as required by our responsible gaming commitments;
• Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain transaction records;
• Service Delivery: To provide access to sports betting markets (including BPL cricket, IPL, T20 World Cup), live casino games, slot games, and all other td999 platform features;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited activities;
• Responsible Gaming: To monitor player behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our responsible gaming obligations;
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and accurate manner;
• Legal Compliance: To comply with applicable anti-money laundering (AML), fraud prevention, and other legal obligations applicable to td999's operations;
• Platform Improvement: To analyse how players use td999, identify technical issues, and improve the performance, usability, and content of our platform;
• Marketing Communications (with consent): To send you promotional offers, bonus announcements, and platform updates where you have opted in to receive such communications.

4Legal Basis for Processing

td999 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contract Performance: Processing is necessary to perform the contract between you and td999 — specifically, to provide you with access to the betting and casino services you have registered to use;
• Legal Obligation: Processing is required to comply with legal obligations applicable to td999, including identity verification, anti-money laundering checks, and record retention requirements;
• Legitimate Interests: Processing is necessary for td999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights and freedoms;
• Consent: For marketing communications and non-essential cookies, td999 processes your data on the basis of your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5Sharing Your Data

5.1 General Principle. td999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data sharing is limited to circumstances where it is necessary to deliver our services, comply with legal requirements, or protect the integrity of the platform.

5.2 Service Providers. td999 engages carefully selected third-party service providers who process personal data on our behalf under strict contractual terms. These include:

• Payment processing partners (bKash, Nagad, Rocket, Upay) — to facilitate deposits and withdrawals in ৳;
• Identity verification and KYC service providers — to assist with age and identity checks;
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — to the extent necessary to deliver game services and resolve game-related disputes;
• IT infrastructure and hosting providers — to maintain the technical operation of the td999 platform;
• Fraud detection and anti-money laundering analytics providers — to assist with security monitoring.

5.3 Legal Disclosures. td999 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of td999, its players, or third parties.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of td999's business operations, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled.

6Payment Data

6.1 Payment Method Data. When you make a deposit or request a withdrawal on td999, you provide payment method information such as your bKash mobile number, Nagad account number, Rocket number, or Upay account reference. This data is used solely to process the specific transaction and to verify that the payment method belongs to you.

6.2 PCI Compliance. td999 does not store full payment card details on its own servers. Where card payments are supported, payment card data is handled exclusively by PCI DSS-compliant payment processing partners. td999 receives only a transaction reference and confirmation status from the payment provider.

6.3 Transaction Records. td999 maintains records of all financial transactions — including deposit amounts, withdrawal amounts, and timestamps — for a minimum period required by applicable anti-money laundering regulations. These records may be reviewed in the context of fraud investigations or legal compliance checks.

6.4 Currency. All financial data on td999 is denominated in Bangladeshi Taka (৳ BDT). td999 does not process multi-currency transactions or maintain accounts in any currency other than BDT.

7Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. td999 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively, maintain your login session, remember your preferences, and analyse usage patterns.

7.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your td999 account during a browsing session. These cannot be disabled without breaking platform functionality;
• Preference Cookies: Remember your settings and preferences (such as language and display preferences) so you do not have to re-enter them each visit;
• Analytics Cookies: Help td999 understand how players navigate the platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is used in aggregate form to improve the platform;
• Security Cookies: Support fraud detection and authentication processes to protect your account from unauthorised access.

7.3 What We Do Not Use Cookies For. td999 does not use cookies to build advertising profiles, serve behavioural advertising, or share your browsing data with third-party advertising networks. We have no relationship with third-party ad platforms in respect of player data.

7.4 Managing Cookies. Most web browsers allow you to control cookie settings through the browser's settings or preferences menu. You can typically choose to block all cookies, accept only first-party cookies, or clear cookies already stored on your device. Please note that disabling strictly necessary cookies will prevent td999 from functioning correctly and may log you out of your account.

8Data Retention

8.1 Retention Principles. td999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. We regularly review the data we hold and securely delete or anonymise data that is no longer required.

8.2 Account Data. Personal data associated with your td999 account is retained for the duration of your account's active status and for a minimum of five (5) years following account closure. This retention period is required to fulfil anti-money laundering record-keeping obligations and to allow td999 to respond to any retrospective legal or regulatory enquiries.

8.3 Transaction Records. Financial transaction records, including deposit and withdrawal histories denominated in Bangladeshi Taka (৳), are retained for a minimum of five (5) years from the date of each transaction.

8.4 Support Communications. Customer support correspondence (emails, live chat transcripts) is retained for a period of two (2) years from the date of the interaction, unless the communication is directly relevant to an ongoing dispute or investigation.

8.5 Marketing Data. If you have consented to receive marketing communications, your contact information and marketing preferences are retained until you withdraw consent. Upon withdrawal of consent, we will cease sending marketing communications and remove you from our active marketing database, though records of the consent withdrawal itself may be retained for compliance purposes.

9Data Security

9.1 Technical Safeguards. td999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser or app and td999 servers;
• Encryption of sensitive personal data (including identity documents and payment references) at rest;
• Role-based access controls limiting which td999 staff members can access player personal data;
• Regular security assessments and vulnerability testing of the td999 platform;
• Monitoring of system access logs for anomalous or suspicious activity.

9.2 Organisational Safeguards. td999 staff who have access to player personal data are subject to confidentiality obligations and receive training on data protection responsibilities. Access to sensitive player data is granted on a need-to-know basis only.

9.3 Your Responsibilities. While td999 takes significant steps to protect your data, you also play an important role in maintaining the security of your account. You are responsible for keeping your td999 username and password confidential, using a strong and unique password, and logging out of your account when using a shared device. If you suspect your account has been compromised, contact [email protected] immediately.

9.4 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, td999 will take prompt steps to contain the breach, assess its impact, and notify affected players as soon as reasonably practicable, in accordance with applicable data protection requirements.

10Your Rights

As a player on the td999 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact td999 at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data td999 holds about you, along with information about how that data is being used;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. If your contact details change, please update them via your account settings or by contacting support;
• Right to Erasure: You have the right to request that td999 delete your personal data, subject to our legal retention obligations (for example, we are required to retain certain financial records regardless of an erasure request);
• Right to Restrict Processing: You have the right to request that td999 temporarily halt the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified;
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to td999 in a structured, commonly used, machine-readable format, and to request that we transfer this data to another service provider where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on td999's legitimate interests. If you object, td999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11Children's Privacy

11.1 Age Restriction. The td999 platform is strictly intended for adults aged 21 years and above. td999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The minimum age requirement of 21 is enforced through our account registration process and KYC identity verification procedures.

11.2 Underage Accounts. If td999 discovers or is notified that a registered account belongs to an individual under the age of 21, that account will be closed immediately, all funds will be returned to the originating payment method (less any bonuses claimed), and all associated personal data will be deleted as soon as practicable, subject to any legal obligations that require brief retention of records relating to the closure.

11.3 Reporting Underage Access. If you believe that an underage individual has registered or is using a td999 account, please report this to [email protected] immediately. td999 takes the protection of minors extremely seriously and will act promptly on all such reports.

12International Data Transfers

12.1 Cross-Border Processing. As an international online gaming platform, td999 may process and store personal data on servers or with service providers located outside of Bangladesh. Where personal data is transferred internationally, td999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy.

12.2 Game Provider Data. Some personal data (primarily technical and usage data related to game sessions) may be processed by game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose servers may be located in various international jurisdictions. These providers operate under contractual data protection obligations with td999.

12.3 Safeguards. Where td999 transfers personal data outside Bangladesh, we rely on contractual safeguards (such as data processing agreements incorporating standard contractual clauses) and the selection of providers who maintain internationally recognised security certifications, to ensure that your data remains protected regardless of where it is processed.

13Policy Updates

13.1 Right to Update. td999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The revised Policy will be published on this page with an updated "Last Updated" date at the top.

13.2 Notification of Material Changes. Where td999 makes a material change to this Policy — that is, a change that significantly affects how we use your personal data or the rights available to you — we will notify registered players via email or an in-platform notification prior to the change taking effect. For minor or clarificatory changes, publication on this page with an updated date is sufficient notice.

13.3 Continued Use. Your continued use of the td999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting [email protected].

14Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way td999 handles your personal data, please reach out to our dedicated support team using the contact details below. All privacy-related enquiries are handled in English and with strict confidentiality.

td999 is committed to resolving all privacy-related concerns promptly and transparently. If you submit a formal data rights request, we will acknowledge receipt within two (2) business days and provide a substantive response within thirty (30) days, or notify you if a longer period is required due to the complexity of the request.