dhk999 Privacy Policy

1 Information You Provide Directly

When you register an account, use platform features, or contact our support team, you provide us with personal data that we collect and process. This includes:

• Registration data: Full legal name, date of birth, gender, residential address (including district, division, and postal code within Bangladesh), email address, and mobile phone number.
• Identity verification data: Copies of government-issued photo ID (National Identity Card, passport), proof of address documents, and selfie photographs submitted for KYC purposes.
• Payment data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and card information (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored by dhk999; payment card data is tokenised by our PCI-DSS compliant payment processors.
• Communications data: Messages, emails, and live chat transcripts exchanged between you and dhk999 support staff.
• Preference data: Language preferences, responsible gaming limit settings, and notification preferences you configure in your account settings.

2 Data Collected Automatically

When you access and use the dhk999 platform, certain data is collected automatically by our systems:

• Technical data: IP address, device type, device operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths through the platform.
• Transaction data: Records of all deposits, withdrawals, wagers placed, bonuses credited and redeemed, and account balance history.
• Cookie and session data: Session tokens, authentication cookies, and analytical tracking identifiers (see Section 7 — Cookies for full details).
• Geolocation data: Approximate city-level location data derived from your IP address, used for fraud detection and responsible gaming compliance.

3 Data from Third Parties

In certain circumstances, dhk999 may receive personal data about you from third parties. This includes identity verification results returned by our KYC service provider, fraud risk scores provided by payment processors, and publicly available information used to comply with anti-money laundering screening requirements. dhk999 applies the same data protection standards to third-party sourced data as it does to data you provide directly.

dhk999 processes your personal data only for legitimate, defined purposes. The primary purposes for which we use your data are set out below, together with the legal basis for each type of processing:

1 Third-Party Service Providers

dhk999 shares personal data with a limited number of third-party service providers who assist in operating the platform. These providers are bound by data processing agreements and may only use personal data for the specific purpose for which it was shared. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard processing partners — receive transaction data and payment identifiers necessary to complete your deposits and withdrawals.
• KYC and identity verification providers: Receive copies of identity documents to perform age and identity verification checks on our behalf.
• Certified game studio partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised player session identifiers to provide game services. They do not receive your full personal profile.
• Platform analytics providers: Receive anonymised, aggregated usage data for platform performance analysis. No individually identifiable data is shared for this purpose.
• Cloud infrastructure and hosting providers: Store and process platform data in secure, access-controlled server environments.

2 Legal Disclosures

dhk999 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. We will notify you of such disclosures where legally permitted to do so.

3 Business Transfers

In the event that dhk999 undergoes a merger, acquisition, or sale of substantially all its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data in the hands of the new entity prior to the transfer taking effect.

dhk999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account data and transaction records: Retained for a minimum of 5 years following account closure to satisfy financial record-keeping obligations.
• KYC identity documents: Retained for a minimum of 5 years following account closure, in line with anti-money laundering record retention requirements.
• Support communications: Retained for 2 years following the resolution of the relevant query, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your account plus 1 year, as evidence of consent or withdrawal of consent.
• Technical and usage logs: Retained for 12 months on a rolling basis, unless a specific event (e.g., a fraud investigation) requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

As a dhk999 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request", along with proof of your identity.

• Right of access: You may request a copy of the personal data dhk999 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: Subject to legal retention obligations, you may request that dhk999 delete your personal data. Note that we cannot delete data we are legally required to retain (e.g., transaction records held for anti-money laundering compliance).
• Right to restrict processing: You may request that dhk999 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is under review.
• Right to data portability: You may request a copy of data you have provided to dhk999 in a commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.
• Right to object: You may object to processing of your personal data where that processing is based on dhk999's legitimate interests.

dhk999 implements a layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest in our database infrastructure.
• Role-based access controls ensuring that staff can only access personal data relevant to their specific job function.
• Comprehensive access logging and audit trails for all access to KYC documents and financial records.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Two-factor authentication enforced for all dhk999 staff accessing internal systems containing personal data.
• Formal data breach response procedures, including notification to affected players within 72 hours of a confirmed breach where there is a risk of harm.

While we take all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact support immediately at [email protected].

1 Types of Cookies We Use

dhk999 uses the following categories of cookies when you access the platform:

• Strictly necessary cookies: Required for core platform functionality including maintaining your login session, remembering your language preference, and protecting against cross-site request forgery attacks. These cookies cannot be disabled without impairing your use of the platform.
• Analytical cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively to improve the platform. No individual player is identifiable from this data.
• Responsible gaming cookies: Store your session start time and active responsible gaming settings (e.g., session time limits) to enable real-time enforcement of the limits you have set.

2 Managing Cookies

You may manage or disable cookies through your browser's privacy or settings menu. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and Samsung Internet. Please note that disabling strictly necessary cookies will prevent you from logging in to your dhk999 account and using core platform features.

dhk999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and all accounts are subject to KYC age verification. If dhk999 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data associated with the minor will be securely deleted, and any deposits made will be returned via the original payment method subject to verification.

If you believe a minor has registered on dhk999, please contact our support team immediately at [email protected] with the subject line "Minor Account Report".

dhk999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the dhk999 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the platform and contact support to arrange account closure and data deletion.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dhk999 handles your personal data, please reach out to our Data Protection team: