pd99 Privacy Policy — Your Data, Protected
At pd99 we treat your personal information with the same care and discretion we expect you to bring to the platform. This policy explains exactly what we collect, why, and how it is kept safe.
Introduction
This Privacy Policy ("Policy") describes how pd99 ("pd99", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the pd99 platform at pd99.org, including all associated games, betting services, payment functions, and customer support channels. This Policy forms part of our Terms and Conditions and should be read alongside them.
By creating an account or using the pd99 platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the platform. We encourage all players to read this Policy carefully before registering, and to contact our support team if anything is unclear.
Information We Collect
pd99 collects only the personal data that is necessary to provide, operate, and improve the platform, to process payments, to verify identity, and to comply with applicable legal obligations. The categories of data we collect and the primary reason for collecting each are set out in the table below.
| Data Category | Primary Purpose |
|---|---|
| Identity data (name, date of birth, national ID or passport details) | Account registration, KYC age and identity verification, fraud prevention |
| Contact data (mobile number, email address) | Account access, security notifications, customer support communications, responsible gaming alerts |
| Financial data (payment method details, transaction history) | Deposit and withdrawal processing, fraud and money laundering detection, financial record keeping |
| Technical data (IP address, device type, browser, session data, cookie identifiers) | Platform security, fraud detection, service performance monitoring, regulatory compliance |
| Usage data (game history, bet records, session duration, responsible gaming tool usage) | Service provision, responsible gaming monitoring, platform improvement, dispute resolution |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data unless specifically required for a legally mandated verification process. We do not knowingly collect personal data from individuals under the age of 21. Where we discover that personal data has been collected from an underage individual, it will be deleted immediately.
How We Use Your Information
pd99 uses your personal data only for specified, explicit, and legitimate purposes. We do not process your data in ways that are incompatible with those purposes. The following describes the principal ways in which we use your information:
- To create and maintain your player account, verify your identity and age, and ensure that only eligible players access the platform in accordance with our Terms and Conditions.
- To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other supported payment methods, and to maintain accurate financial records as required by applicable law.
- To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, bonus abuse, and other prohibited conduct as described in our Terms and Conditions.
- To provide customer support in English and Bengali, respond to queries and complaints, and resolve disputes relating to games, payments, account access, and bonuses.
- To operate and administer responsible gaming tools including deposit limits, session time-outs, cooling-off periods, and self-exclusion requests, and to monitor usage patterns to identify players who may be experiencing gambling-related harm.
- To send you service-related communications including account security alerts, transaction confirmations, and updates to our Terms and Conditions or this Privacy Policy. We do not send unsolicited marketing communications without your explicit consent.
Legal Basis for Processing
pd99 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:
- Contractual necessity — processing is required to perform the contract between pd99 and the player (the Terms and Conditions), including account creation, payment processing, game access, and dispute resolution.
- Legal obligation — processing is necessary to comply with applicable law, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
- Legitimate interests — processing is necessary for pd99's legitimate business interests, including fraud detection, platform security, and service improvement, where those interests are not overridden by your rights and interests.
- Consent — for certain optional processing activities such as receiving promotional communications, you provide explicit consent, which you may withdraw at any time by contacting our support team without affecting the lawfulness of prior processing.
Sharing Your Information
pd99 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances, and only to the minimum extent necessary for the specified purpose:
- Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) to process deposits and withdrawals. These providers receive only the data necessary to complete the specific transaction.
- Game and technology providers (such as Pragmatic Play, Evolution Gaming, and other certified game studios) who supply the games and live casino infrastructure accessible on the pd99 platform. These providers operate under data processing agreements with pd99.
- Regulatory and law enforcement authorities, where pd99 is legally required to disclose personal data pursuant to a court order, subpoena, regulatory investigation, or other binding legal process. pd99 will inform you of such disclosure where permitted by law.
- Identity verification service providers who assist pd99 in confirming that players meet the eligibility criteria set out in the Terms and Conditions, including age verification and document authentication services.
Cookies and Tracking Technologies
pd99 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. A cookie is a small text file that is placed on your device when you visit the platform. The following types of cookies are used:
- Essential cookies — strictly necessary for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your language preference. These cannot be disabled without breaking core platform functionality.
- Functional cookies — used to remember your preferences and settings, such as your chosen language, responsible gaming limits, and display preferences. These improve usability but are not essential for core functions.
- Analytics cookies — used to collect anonymised information about how players use the platform, including which pages are visited, how long sessions last, and which features are used most. This data helps us improve the platform. No personally identifiable information is included in analytics data.
- Security cookies — used to identify and prevent security threats, including session hijacking, cross-site request forgery, and automated bot activity. These are essential and cannot be disabled.
You can manage cookie preferences through your mobile browser settings. Note that disabling non-essential cookies may affect certain platform features. pd99 does not use cookies to track your browsing activity outside of the pd99 platform, and we do not use third-party advertising cookies.
Data Security
pd99 implements technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security infrastructure includes SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting internal access to personal data on a need-to-know basis, and regular security assessments of the platform and its underlying infrastructure.
While pd99 uses commercially reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a significant risk to your rights or interests, pd99 will notify affected players within a reasonable timeframe and take all necessary steps to contain and remediate the breach.
Data Retention
pd99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting, and dispute resolution requirements. The following principles govern our retention practices:
- Active account data — retained for the full duration of your account relationship with pd99, and for a minimum of five years following account closure, to satisfy financial record-keeping and anti-money laundering obligations.
- Transaction records — retained for a minimum of seven years from the date of the transaction in accordance with applicable financial regulations, regardless of whether the account remains active.
- Marketing consent data — retained for as long as the consent remains valid and for a reasonable period following withdrawal of consent, to demonstrate compliance and respond to any complaint relating to the use of that data.
Your Rights
Subject to applicable law, you have the following rights in relation to your personal data held by pd99. To exercise any of these rights, please contact our support team. We will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing any request.
- Right of access — you may request a copy of the personal data pd99 holds about you, along with information about how it is used and with whom it has been shared.
- Right to rectification — if any personal data pd99 holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
- Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to pd99's legal retention obligations.
- Right to restriction — you may request that pd99 restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
- Right to data portability — where processing is carried out by automated means on the basis of your consent or a contract, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to object — you may object to processing of your personal data where it is based on legitimate interests, including profiling. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
To exercise any of the above rights, please contact [email protected] with the subject line "Data Rights Request" and a brief description of your request. We will acknowledge your request within 48 hours and aim to respond in full within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days with notice.
Children's Privacy
The pd99 platform is strictly intended for adults aged 21 and above. pd99 does not knowingly collect, store, or process personal data from individuals under the age of 21. If pd99 becomes aware that personal data has been provided by or on behalf of an individual under the age of 21, that data will be deleted promptly, the associated account will be closed, and any deposited funds will be returned to the payment source.
Third-Party Services
The pd99 platform integrates with certain third-party services to deliver its full functionality. These include certified game providers, live dealer studios, payment processors, and technical infrastructure providers. Where pd99 shares your data with these providers, it does so under contractual data processing agreements that require the third party to: process your data only for the specified purpose; implement appropriate security measures; not disclose your data to further third parties without pd99's consent; and delete or return your data when the processing purpose has been fulfilled.
- pd99 is not responsible for the privacy practices of independent third-party websites or services that may be accessible via links on the platform. Players are encouraged to read the privacy policies of any third-party service they use in connection with the pd99 platform.
- Where a third-party service provider is located outside Bangladesh, pd99 ensures that appropriate safeguards are in place for any international transfer of personal data, including contractual data transfer mechanisms that provide an equivalent level of protection to that required under applicable Bangladeshi law.
- pd99 conducts periodic reviews of its third-party service providers to ensure that they continue to meet our data protection standards. Providers who fail to maintain adequate standards are removed from the platform.
Changes to This Policy
pd99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, applicable law, or operational requirements. The most current version of this Policy will always be available at pd99.org/privacy-policy. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.
Where changes to this Policy are material — for example, where we begin processing your personal data for a new purpose, or where we share your data with a new category of third party — pd99 will make reasonable efforts to notify registered players via their registered contact details before the change takes effect. Continued use of the platform following notification of a material change constitutes acceptance of the updated Policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pd99 handles your personal data, please contact our support team. All data-related queries are handled by our dedicated support staff who are trained in data protection matters and available 24 hours a day, 7 days a week, in both English and Bengali.