How dj999 Collects, Uses, and Protects Your Personal Data

Automated Decision-Making: dj999 uses automated systems for fraud scoring and responsible gaming risk assessment. These systems analyse patterns in account data to flag unusual activity for manual review by our compliance team. Fully automated decisions that produce significant legal or financial effects on a player — such as account suspension — are always reviewed by a human compliance officer before being actioned. You have the right to request human review of any automated decision that affects your account.

Profiling: dj999 conducts limited profiling of player behaviour for the purpose of responsible gaming monitoring and fraud detection. Profiling data is not used to make marketing decisions about individual players without explicit consent. Aggregate, anonymised profiling data may be used to improve the platform experience for all users — for example, to understand which game categories are most popular among players in Dhaka, Chittagong, or Sylhet and to stock the game lobby accordingly.

Marketing Communications: If you have opted in to receive promotional communications, dj999 may use your email address and mobile number to send you information about bonuses, seasonal promotions (including BPL cricket season offers, Eid promotions, and Pohela Boishakh events), and new game launches. You may withdraw consent for marketing at any time via your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

International Data Transfers: dj999 primarily processes player data within server infrastructure serving the Bangladesh market. Where data is processed by a third-party partner whose infrastructure is located outside Bangladesh, dj999 ensures that appropriate safeguards — such as contractual data protection clauses — are in place to protect your data to a standard equivalent to that described in this policy. You may request details of the safeguards applicable to any specific international transfer by contacting [email protected].

What is a Cookie? A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits and to maintain state across pages — for example, keeping you logged in as you navigate from the game lobby to your account page. Cookies do not contain executable code and cannot directly harm your device.

Essential / Strictly Necessary Cookies: These cookies are required for the dj999 platform to function. They include session authentication cookies (which keep you logged in), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies (which route your requests to the correct server). Essential cookies cannot be disabled without breaking core platform functionality. They do not require your consent under any applicable privacy framework because they are necessary for the service you have requested.

Functional / Preference Cookies: These cookies remember choices you have made on the platform, such as your preferred game category, display language (English), or notification preferences. Disabling these cookies will not prevent you from using dj999 but will mean your preferences are not saved between sessions.

Analytics Cookies: dj999 uses first-party analytics to understand how players interact with the platform — which game categories are most visited, where players drop off during the deposit flow, and which support articles resolve queries without escalation. This data is collected in aggregate and pseudonymised form. dj999 does not use Google Analytics or any third-party analytics service that transmits your data to an external platform.

Security Cookies: Short-lived cookies are used to detect and prevent automated login attempts, bot activity, and session hijacking. These operate silently in the background and are essential to the integrity of the dj999 security framework.

Managing Cookies: You can manage or delete cookies via your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear all cookies on exit. Be aware that blocking essential cookies will prevent you from logging in to your dj999 account. dj999 does not currently respond to browser-level Do Not Track (DNT) signals, as no universal standard for DNT has been established.

Post-Closure Retention: When a dj999 account is closed — whether voluntarily by the player or by the platform — personal data is not immediately deleted. Certain categories of data are retained for the periods specified above, primarily to satisfy anti-money laundering (AML) legal obligations, to resolve any outstanding disputes, and to honour self-exclusion commitments. During the post-closure retention period, your data is archived and access is restricted to compliance personnel with a documented need to access it.

Deletion After Retention Period: Once the applicable retention period has expired and there is no ongoing legal or regulatory reason to retain the data, dj999 securely deletes or anonymises the data. Secure deletion means the data is permanently removed from active systems and backup storage in a manner that makes recovery impossible. Anonymised data — from which all identifying information has been removed — may be retained indefinitely for statistical and platform-improvement purposes, as it no longer constitutes personal data.

Self-Exclusion Records: Where a player has entered a self-exclusion period via the Responsible Gaming tools, dj999 retains a record of that self-exclusion for the full exclusion period plus an additional 5 years, even if the player requests account deletion. This is to prevent dj999 from re-opening access to a player who has self-excluded, which would be contrary to our responsible gaming obligations.

Two-Factor Authentication (2FA): dj999 supports two-factor authentication for player accounts. When 2FA is enabled, a one-time verification code is sent to your registered mobile number each time a login is detected from an unrecognised device. We strongly recommend that all players enable 2FA via their account security settings to provide an additional layer of protection against unauthorised account access.

Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, dj999 will take immediate steps to contain the breach, assess the scope and impact, and notify affected players without undue delay. Notification will be sent to the registered email address on file and will include a description of the nature of the breach, the categories and approximate number of players affected, the likely consequences, and the measures dj999 has taken or proposes to take to address the breach.

Staff Training: All dj999 personnel who handle personal data undergo mandatory privacy and data security training as part of their onboarding and on an annual basis thereafter. Training covers the requirements of this policy, recognition of phishing and social engineering attacks, correct data handling procedures, and the protocol for reporting a suspected data breach to the designated data protection lead.

Your Responsibility: While dj999 takes all reasonable technical and organisational measures to protect your data, you also play a role in keeping your account secure. You are responsible for keeping your login credentials confidential, for logging out of your account when using shared or public devices, and for notifying dj999 support immediately if you suspect your account has been accessed without your authorisation.

How to Submit a Request: To exercise any of the rights described above, contact the dj999 support team via live chat (available 24/7) or send a written request to [email protected]. Please include your registered email address, your username, a description of the right you wish to exercise, and — where relevant — the specific data categories or processing activities your request relates to. We will acknowledge receipt of your request within 3 business days (Bangladesh Standard Time) and provide a full response within 30 days. Where a request is complex or involves a large volume of data, the response period may be extended by a further 30 days, in which case we will notify you before the initial deadline expires.

Identity Verification for Requests: To protect your privacy and prevent unauthorised data subject requests, dj999 may ask you to verify your identity before processing a request. Acceptable verification methods include confirming the mobile number and email address registered to the account, or providing a one-time verification code sent to your registered number. We will not process a data subject request on behalf of a third party unless we receive documented proof of authority to act on the data subject's behalf.

Complaints: If you are dissatisfied with how dj999 has handled your personal data or responded to a data subject request, you have the right to lodge a complaint. In the first instance, please contact the dj999 support team so we have an opportunity to resolve the matter. If the matter remains unresolved, you may escalate your complaint to the relevant data protection authority in your jurisdiction.