01 Introduction
Welcome to dg99. Our privacy policy explains what personal data we collect when you use dg99.bar, why we collect it, and how it is used and kept secure.
Dg99 believes your privacy is a fundamental right. We operate with full transparency and take complete responsibility for your data. This privacy policy applies to all services, apps, and websites under the dg99 platform.
Continued use of dg99 constitutes your acceptance of this privacy policy. If you have any objections, please contact our support team.
Our privacy policy is built in compliance with international data protection regulations (GDPR) and local laws. dg99 never sells your data to third parties. We use data solely to improve our services and meet legal obligations.
02 What data we collect
We collect certain necessary information when you register and use the dg99 platform. This data is used to manage your account, verify your identity, and improve our services.
Information Provided Directly
- Identity-Related: Full name, date of birth, nationality.
- Communication-Related: Email address, mobile number, current address.
- Verification Documents: Copy of national ID, passport, or other government-issued identification (as part of the KYC process).
- Financial Information: Payment method details (bKash/Nagad number, bank account — full details are not stored).
- Account Information: Username, password (encrypted).
Automatically Collected Information
- Device Information: IP address, browser type, operating system, device ID.
- Usage Data: Login time and date, pages visited, gaming history.
- Location Data: Approximate location (IP-based), not precise GPS coordinates.
- Cookies & Tracking: Session cookies, performance cookies (details below).
dg99 collects only the minimum data needed to provide its services. We never request or store unnecessary personal information.
Data Received from Third Parties
- Transaction confirmation data received from payment processors.
- KYC results from identity verification services.
- Risk assessment data from fraud detection services.
03 How Your Data Is Used
Dg99 uses your data only for specific, legitimate purposes. We never sell your information to marketing or advertising companies.
| Purpose of Use |
Data Type |
Legal Basis |
| Account Creation & Management |
Name, email, mobile |
Contract Performance |
| Identity Verification (KYC) |
ID document, photo |
Legal Obligation |
| Payment Processing |
Financial Information |
Contract Performance |
| Fraud Prevention |
IP, Device, Transactions |
Legitimate Interest |
| Customer Support |
Contact Information |
Contract Performance |
| Promotional Offers |
Email, preferences |
Consent |
| Legal Reporting |
Transaction History |
Legal Obligation |
You can unsubscribe from promotional emails at any time. However, important service-related communications cannot be disabled, as they are part of account management.
04 Who Your Data Is Shared With
Dg99 never sells your data to third parties. In certain circumstances, limited information may be shared with trusted partners.
Who We May Share Your Data With
- Payment Providers: Solely for processing transactions with bKash, Nagad, Rocket, and bank partners.
- KYC Verification Provider: Limited data shared to confirm identity as required by regulations.
- Cloud Service Provider: For storing data on secure servers.
- Law Enforcement: Required by court order or legal investigation.
- Anti-Fraud Service: To detect and prevent fraudulent activity.
dg99 never sells your data to ad networks, data brokers, or marketing companies. This is an absolute and unchanging commitment in our privacy policy.
International Data Transfers
In some cases, your data may be stored on servers outside Bangladesh. When this occurs, we ensure the destination country maintains adequate data protection standards and that GDPR-compliant agreements (Standard Contractual Clauses) are in place.
05 Security Measures
Dg99 follows the highest industry standards to protect your data. Our multi-layered security system guards your information against any unauthorized access.
- SSL/TLS Encryption: All data transmitted via our website and app is secured with 256-bit SSL.
- Password Hashing: Your password is hashed using the bcrypt algorithm — no one can view it directly.
- Firewall & DDoS Protection: Advanced server-level firewall and intrusion prevention systems.
- Regular Security Audits: Regular cybersecurity audits conducted by independent third parties.
- Two-Factor Authentication (2FA): Enable 2FA on your account for an extra layer of security.
- Access Control: Only authorized personnel can access data on a need-to-know basis.
- Server Monitoring: 24/7 system monitoring with automated alert systems.
Full payment card or bank account numbers are never stored on dg99 servers. We comply with PCI DSS standards, the highest international benchmark for financial data security.
Response to Data Breaches
In the event of a data breach, dg99 will notify the relevant authorities within 72 hours and inform affected members as promptly as possible. We will conduct a full investigation into every incident and take the necessary steps to prevent recurrence.
06 Cookie Policy
Dg99 uses cookies to enhance your experience on the platform. Cookies are small text files stored in your browser that help recognize you on future visits.
What cookies we use
- Essential Cookies: To maintain login sessions and store security tokens. The site cannot function properly without these.
- Performance Cookies: Used to track page load speed and errors — all data is anonymized.
- Functional Cookies: To remember your language preference, settings, and layout.
- Analytics Cookies: To understand which sections of the site are most popular — fully anonymized data.
You can disable or clear cookies from your browser settings at any time. Note that disabling essential cookies may affect login and certain features.
Cookie Duration
- Session Cookies: Deleted automatically when the browser is closed.
- Persistent Cookies: Stored for up to 12 months.
07 Your Rights
Every dg99 member has specific rights over their own data. We fully respect and uphold those rights.
Right to Access Your Data
You may request to know what data we hold about you.
Right to Rectification
You may request corrections to any inaccurate or outdated information.
Right to Erasure
Under certain conditions, you may request that your data be deleted.
Right to Restrict Processing
In certain circumstances, you may request that the use of your data be restricted.
Data Portability
The right to receive your data in a machine-readable format.
Right to Object
You may object to marketing communications or specific uses of your data.
To exercise any of the rights above, email us at
[email protected]. We will respond within 30 days.
08 How Long We Retain Your Data
Dg99 does not retain your data longer than necessary. Retention periods vary depending on the type of information.
| Data Type |
Retention Period |
Reason |
| Account Information |
Duration of active account + 5 years |
Legal Obligation |
| Transaction History |
7 Years |
Financial Regulations |
| KYC Documents |
5 Years |
AML Regulations |
| Customer Support Records |
3 Years |
Dispute Resolution |
| Log Files |
12 Months |
Security Monitoring |
| Marketing Preferences |
Until consent is withdrawn |
Consent-Based |
After the retention period, data is securely deleted or anonymized. The deletion process follows NIST SP 800-88 guidelines.
09 Minor Protection
Dg99 strictly prohibits anyone under 18 from using the platform. We take extra care to protect the privacy of minors.
- Age is verified at the time of registration.
- We do not knowingly collect data from minors.
- If a member is found to be under 18, their account will be immediately suspended and their data deleted.
- If a parent requests the deletion of their child's data, we act promptly.
If you know of a minor using dg99, please notify us immediately.
10 Policy Changes
Dg99 may update this privacy policy when necessary. For significant changes, members will be notified by email or through an in-platform notification.
- The date of any changes will always be noted at the top of the page.
- At least 15 days' notice will be given before any significant changes take effect.
- Continued use of the platform after changes have been made will be considered acceptance of the updated policy.
Visit this page regularly to stay up to date with our latest policy. For any questions, contact us at
[email protected].
Frequently FAQ
Frequently Asked Questions About the Privacy Policy
No, dg99 never sells your personal data to third parties. We only share limited information with trusted partners for the purposes of providing our services, meeting legal obligations, and preventing fraud.
Even after account closure, transaction and KYC data must be retained for a set period (typically 5–7 years) in accordance with financial regulations and AML laws. Once that period ends, the data is securely deleted.
Send an email to
[email protected] with the subject line "Data Access Request". After verifying your identity, we will send you a full summary of the data we hold on you within 30 days.
Yes. Click the "Unsubscribe" link at the bottom of any promotional email, or contact support to opt out. Please note that essential account-related notifications cannot be disabled.
dg99 does not store full card numbers or bank account details. All payment processing fully complies with PCI DSS standards. For transactions via bKash, Nagad, or Rocket, only the last few digits of the mobile number are stored.