db3999 Privacy Policy

When you visit db3999.app, create a player account, make a deposit, place a wager, or contact our support team, db3999 collects certain categories of personal information. The type of information collected depends on how you interact with the platform. Below is a comprehensive breakdown of the data categories we collect and the circumstances under which each category is gathered.

Account Registration Data

When you register a player account on db3999, you are required to provide your full legal name, a valid Bangladesh mobile phone number, date of birth, and your preferred payment method (for example, your bKash or Nagad registered mobile number). This information is collected at the point of registration and is used to create and verify your account identity.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, db3999 may at any time request documentary evidence of your identity and address. Acceptable documents include a valid Bangladesh National Identity Card (NID), passport, or birth certificate. Where KYC documents are submitted, db3999 retains copies securely for the duration required by applicable anti-money-laundering regulations. KYC data is used exclusively for identity verification and fraud prevention purposes.

Financial Transaction Data

db3999 records all deposit and withdrawal transactions associated with your account. This includes the transaction amount in Bangladeshi Taka (৳), the date and time of the transaction, the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), and the transaction reference number provided by your payment provider. db3999 does not store full card numbers or mobile banking PINs on its systems at any point.

Gameplay & Betting Activity Data

db3999 records all betting and gaming activity conducted through your account. This includes the games played, wagers placed, odds accepted, bet outcomes, bonus credits used, and session duration. This data is used to manage your account balance, settle bets accurately, calculate bonus wagering progress, and identify any irregular activity that may indicate fraud or terms abuse.

Device & Technical Data

When you access db3999.app, our servers automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, screen resolution, device type (mobile or desktop), and the referring URL from which you arrived at db3999.app. This technical data is used for platform security, fraud detection, geographic compliance checks, and performance optimisation.

Customer Support Communications

When you contact the db3999 support team — whether by live chat, email, or any other channel — we retain a record of your communications including the content of messages, the date and time of contact, and the resolution reached. These records are used to resolve your query, maintain support quality standards, and as a reference in the event of a subsequent dispute.

db3999 does not share your personal data with third parties except in the limited circumstances described in this section. Where data is shared with a third-party service provider, db3999 ensures that appropriate data processing agreements are in place and that the provider is required to handle your data only for the specific purpose for which it was shared.

Payment Service Providers

To process deposits and withdrawals, db3999 shares transaction data with the payment service providers you use — including bKash, Nagad, Rocket, Upay, and the card networks Visa and Mastercard. The data shared is limited to the transaction amount, your registered payment identifier (such as your bKash mobile number), and the transaction reference. Payment providers operate under their own privacy policies and data protection frameworks, which db3999 recommends you review independently.

Game Content Providers

The casino and slot games available on db3999 are provided by third-party game studios including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi, among others. These providers may receive your account identifier and session token in order to load game content securely and record game outcomes for settlement purposes. Game providers do not receive your full name, NID details, or payment information.

Identity Verification Services

Where db3999 uses a third-party identity verification service to assist with KYC document review, the minimum necessary data is shared solely for the purpose of completing the verification check. Identity verification providers are required under contract to treat your data with the same level of confidentiality as db3999.

Legal & Regulatory Authorities

db3999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities when required to do so by law, court order, or other legal process. In such cases, db3999 will disclose only the specific data requested and will, where legally permitted, notify you that a disclosure request has been received.

Business Transfers

In the event that db3999 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, db3999 will provide advance notice and ensure that the acquiring entity is bound by data protection obligations no less stringent than those described in this policy.

db3999 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures

All data in transit between your device and db3999.app is encrypted using 256-bit TLS (Transport Layer Security). Stored data is encrypted at rest using industry-standard encryption. Access to personal data within the db3999 organisation is restricted on a strict need-to-know basis. Staff who require access to player data to perform their duties are subject to confidentiality agreements and regular data security training. Administrative access to backend systems is protected by multi-factor authentication.

Payment Security

Payment processing on db3999 is handled through PCI-DSS (Payment Card Industry Data Security Standard) compliant infrastructure. Full card numbers are never stored on db3999 servers. bKash and Nagad transaction credentials are transmitted directly to the respective payment provider via encrypted API connections and are not retained by db3999 beyond the transaction confirmation stage.

Incident Response

In the unlikely event of a data security incident that affects your personal information, db3999 maintains an incident response procedure that includes containment, assessment, notification, and remediation steps. Where a security breach is likely to result in a high risk to your rights or interests, db3999 will notify affected account holders promptly via the email address registered to their account, describing the nature of the incident and the steps being taken to address it.

Data Retention Schedule

Once a retention period has elapsed, db3999 securely deletes or irreversibly anonymises the relevant data. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical purposes.

The db3999 platform is strictly intended for adults aged 18 years and above. db3999 does not knowingly collect personal data from individuals under the age of 18. Account registration requires a date of birth, and where the provided date of birth indicates that an applicant is under 18, the registration will not be completed.

If db3999 discovers that personal data has been collected from an individual who was under 18 at the time of registration, that account will be closed immediately, all associated data will be deleted (subject to any overriding legal retention obligations), and any funds held in the account will be returned to the originating payment method where technically possible. Winnings generated while the account was held by a minor will be forfeited.

If you are a parent or guardian and believe that your child has registered an account on db3999.app, please contact our support team immediately. We treat reports of underage account access as a priority matter and will investigate and respond within 48 hours of receiving your report.

db3999 recommends that parents and guardians install appropriate parental control or content filtering software on shared devices to prevent minors from accessing online gambling platforms. Several free and paid parental control solutions are available that can restrict access to gambling-related websites at the network or device level.