Privacy Policy
At jd999, protecting your personal data is a core responsibility. This Privacy Policy explains exactly what information we collect from players in Bangladesh, how we use it, who we share it with, and the rights you hold over your own data.
How jd999 Protects Your Privacy
Six core principles that define our approach to personal data handling.
Encrypted Data Storage
All personal data stored on jd999 servers is protected by industry-standard AES-256 encryption. SSL/TLS protocols secure every connection between your device and our platform, ensuring your information remains private in transit and at rest.
No Unauthorised Sharing
jd999 never sells, rents, or trades your personal information to third-party marketers. Data is shared only with strictly necessary service partners — payment processors, fraud prevention providers, and identity verification services — under binding confidentiality agreements.
Your Data Rights
Registered jd999 players have the right to access, correct, and request deletion of their personal data. You may also request a portable copy of your data or object to certain processing activities by contacting our support team at any time.
Identity Verification (KYC)
jd999 collects identity documents solely to fulfil Know Your Customer obligations, verify that players are aged 21 or above, and comply with anti-money-laundering requirements. KYC documents are stored securely and never used for any purpose beyond these specific obligations.
Transparent Cookie Use
jd999 uses cookies and similar tracking technologies only to maintain session state, measure platform performance, and personalise your experience. We do not deploy third-party advertising cookies. You can manage cookie preferences through your browser settings at any time.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Account data is deleted or anonymised within ninety (90) days of verified account closure, unless a legal hold applies.
1 Introduction
jd999 ("jd999", "we", "us", "our") is committed to protecting the privacy and security of all personal data it processes in connection with the operation of the jd999 online betting and casino platform at https://jd999.io (the "Platform"). This Privacy Policy ("Policy") explains who we are, what personal data we collect, why we collect it, how we use it, and the rights available to you as a data subject.
This Policy applies to all individuals who access or use the Platform, including registered account holders, prospective players who browse the website without registering, and any person who contacts jd999 through any support channel. By accessing the Platform, you acknowledge that you have read and understood this Policy.
This Policy must be read alongside the jd999 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall take precedence.
Age Restriction: The jd999 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that data has been collected from a minor, we will take immediate steps to delete it.
2 Data We Collect
jd999 collects personal data in the following categories:
2.1 Identity & Contact Data
- Full legal name as it appears on official government-issued identification
- Date of birth (used to verify that you are aged 21 or above)
- Residential address, including division, district, and upazila within Bangladesh
- Mobile phone number registered to a Bangladeshi network (Grameenphone, Robi, Banglalink, Teletalk, or Airtel)
- Email address used for account communications
- Copies of government-issued identification documents (National Identity Card, passport, or driving licence) collected during the KYC process
2.2 Financial Data
- bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
- Bank account details where bank transfer is used as a deposit or withdrawal method (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other supported institutions)
- Transaction history including deposit amounts, withdrawal amounts, and dates, denominated in Bangladeshi Taka (৳)
2.3 Account & Activity Data
- Username and account reference number
- Login timestamps and session durations
- Betting history: stake amounts, markets selected (cricket, football, kabaddi, slots, live casino), and settlement outcomes
- Game play records: games launched, rounds played, and results
- Bonus and promotion participation records
- Responsible gaming tool settings (deposit limits, session reminders, cooling-off periods, self-exclusion status)
2.4 Technical & Device Data
- IP address at the time of each login and transaction
- Device type, operating system, and browser version
- Geolocation data derived from IP address (country and region level only)
- Cookies and similar session identifiers (see Section 6)
2.5 Communications Data
- Records of all communications between you and the jd999 support team, whether via live chat, email, or any other support channel
- Feedback and survey responses voluntarily submitted through the Platform
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity & Contact | Name, DOB, NID, mobile number | Account creation, KYC, age verification |
| Financial | bKash number, transaction history | Payment processing, fraud prevention |
| Account & Activity | Bets placed, game history, login times | Service delivery, responsible gaming monitoring |
| Technical & Device | IP address, browser type, cookies | Security, fraud detection, platform optimisation |
| Communications | Live chat transcripts, support emails | Customer support, dispute resolution |
3 How We Collect Your Data
jd999 collects personal data through the following means:
3.1 Directly From You
The majority of personal data we hold is provided directly by you during account registration, the KYC verification process, deposit and withdrawal transactions, completion of responsible gaming settings, and any direct communications with the jd999 support team. You are always informed at the point of collection what data is required and why.
3.2 Automatically Through Platform Use
When you access the jd999 website or mobile platform, certain technical data is collected automatically by our systems. This includes your IP address, browser characteristics, device identifiers, and session activity data. This data is collected through server logs, cookies, and similar technologies to maintain session security, detect fraudulent access patterns, and monitor platform performance.
3.3 From Third-Party Service Providers
In specific circumstances, jd999 may receive personal data about you from third-party identity verification services, fraud screening providers, and payment processors. This occurs only where necessary to verify your identity, process a financial transaction, or investigate a suspected fraud event. Third parties who provide data to jd999 are contractually required to have a lawful basis for sharing that data with us.
4 Purpose & Legal Basis for Processing
jd999 processes your personal data only where there is a clearly defined purpose and a valid legal basis for doing so. The table below sets out the principal processing activities, their stated purposes, and the corresponding legal basis:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration | Creating and managing your jd999 account | Performance of a contract |
| Age & identity verification | Confirming you are 21+ and who you say you are | Legal obligation (KYC / AML compliance) |
| Payment processing | Facilitating deposits and withdrawals via bKash, Nagad, etc. | Performance of a contract |
| Fraud & security monitoring | Detecting and preventing fraudulent activity | Legitimate interests |
| Responsible gaming monitoring | Identifying problem gambling indicators, applying player protections | Legal obligation / legitimate interests |
| Customer support | Resolving queries, complaints, and disputes | Performance of a contract / legitimate interests |
| Marketing communications | Sending promotional offers and platform updates | Consent (opt-in only) |
| Platform analytics | Improving website performance and user experience | Legitimate interests |
Marketing Opt-Out: If you have previously consented to receive marketing communications from jd999, you may withdraw that consent at any time by contacting the support team or updating your Account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
5 Sharing Your Personal Data
jd999 does not sell, rent, or trade personal data to any third party for commercial purposes. Data is shared externally only in the limited circumstances described below, and always subject to appropriate data protection safeguards.
5.1 Payment Service Providers
To process deposits and withdrawals, jd999 shares necessary financial and identity data with payment processors including bKash, Nagad, Rocket, Upay, and partner banking institutions. These providers receive only the minimum data required to execute the transaction and are prohibited from using it for any other purpose.
5.2 Identity Verification & Fraud Prevention
jd999 works with specialist KYC and anti-fraud service providers to verify player identities and detect suspicious activity. These providers may process your identity documents, device fingerprints, and IP data on behalf of jd999 under strict contractual data processing agreements.
5.3 Game Content Providers
Third-party game studios including Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data — such as game round identifiers and stake information — to deliver game content and settle outcomes. These providers do not receive your personally identifiable information.
5.4 Legal & Regulatory Disclosures
jd999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a court order, or where jd999 has a good-faith belief that such disclosure is necessary to prevent or investigate illegal activity, including fraud and money laundering.
5.5 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of jd999's assets, personal data held by jd999 may be transferred to the acquiring entity. Affected players will be notified by email prior to any such transfer, and their data will remain subject to this Policy or a policy offering equivalent or greater protections.
6 Cookies & Tracking Technologies
The jd999 Platform uses cookies and similar technologies to provide a functional, secure, and personalised experience. The following categories of cookies are in use:
6.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They maintain your login session, store your language and currency preferences, and enable the shopping cart and cashier functions to operate correctly. You cannot opt out of strictly necessary cookies while using the Platform.
6.2 Performance & Analytics Cookies
These cookies collect anonymised data about how visitors use the Platform — pages visited, time spent on each page, and error messages encountered. This data is used exclusively to improve platform performance and user experience. No personally identifiable information is included in analytics data.
6.3 Functional Cookies
Functional cookies remember choices you make on the Platform, such as your preferred notification settings and responsible gaming dashboard configuration. They enhance your experience by providing a more personalised interface.
6.4 Managing Cookies
You can control and delete cookies through your browser settings at any time. Please be aware that disabling certain categories of cookies may impair the functionality of the jd999 Platform, including the ability to maintain a logged-in session or access the cashier.
7 Data Security
jd999 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
- TLS/SSL Encryption: All data transmitted between your device and the jd999 Platform is encrypted using TLS 1.3 or equivalent protocols.
- AES-256 Encryption at Rest: Sensitive data stored on jd999 servers — including identity documents and financial records — is encrypted using AES-256 symmetric encryption.
- Access Controls: Strict role-based access controls limit access to personal data to only those members of the jd999 team who have a documented operational need to access it.
- Multi-Factor Authentication: Administrative access to jd999 systems that contain personal data requires multi-factor authentication.
- Penetration Testing: jd999 conducts regular third-party penetration testing and vulnerability assessments of its Platform infrastructure.
- Incident Response: jd999 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in risk to your rights and freedoms, affected players will be notified within seventy-two (72) hours of jd999 becoming aware of the breach.
Your Role in Security: While jd999 takes comprehensive technical precautions, the security of your Account also depends on the strength of your password and the confidentiality of your login credentials. Never share your jd999 password or OTP with anyone, including individuals who claim to be jd999 staff. jd999 will never ask you for your password.
8 Data Retention
jd999 retains personal data only for as long as necessary to fulfil the stated purpose of collection, or as required by applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML / KYC record-keeping) |
| KYC identity documents | 5 years post account closure or last transaction | Anti-money-laundering regulatory requirements |
| Transaction records | 5 years from transaction date | Financial regulatory compliance |
| Betting & game history | 2 years from the date of each bet/game round | Dispute resolution, responsible gaming monitoring |
| Support communications | 3 years from the date of last communication | Dispute resolution, quality assurance |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical / device logs | 12 months from collection | Security monitoring, fraud investigation |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual. Where a legal hold or active dispute prevents deletion, data will be flagged and isolated until the hold is lifted.
9 Your Rights Over Your Personal Data
As a jd999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the jd999 support team via live chat or at [email protected] with a clear description of your request. jd999 will respond within thirty (30) calendar days.
- Right of Access: You may request a copy of all personal data that jd999 holds about you, together with information about how it is used and to whom it has been disclosed.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated at any time.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that legal obligations (such as AML record-keeping requirements) may prevent full erasure in some cases, in which case we will explain what data must be retained and for how long.
- Right to Restrict Processing: You may request that jd999 restrict the processing of your data while a rectification or erasure request is being assessed, or where you have objected to processing and a determination has not yet been reached.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request a copy of your personal data in a structured, machine-readable format.
- Right to Object: You may object at any time to the processing of your personal data where that processing is based on legitimate interests. You may also withdraw marketing consent at any time without affecting your Account status.
- Right Not to Be Subject to Automated Decision-Making: jd999 does not make solely automated decisions that produce legal or similarly significant effects on players without human review. If you believe an automated decision has affected you, please contact support for a manual review.
Response Timeframe: jd999 aims to respond to all data subject requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it within the initial thirty-day period.
10 Children & Minors
Strict Age Policy: The jd999 Platform is strictly prohibited for use by individuals under the age of 21. jd999 does not knowingly collect, use, or retain any personal data from individuals below this age threshold.
During the account registration process, jd999 requires a declaration of age and collects date of birth information. This data is cross-referenced against identity documents during the KYC process. Where jd999 discovers or has reason to believe that an account has been registered by an individual under 21 years of age, the account will be suspended immediately, all funds will be returned to the original payment source (less any applicable reversal fees), and all personal data associated with that account will be permanently deleted within thirty (30) days of identification.
Parents or guardians who believe that a minor in their care has registered a jd999 account are encouraged to contact the support team immediately via live chat or at [email protected] so that remedial action can be taken without delay.
11 International Data Transfers
jd999 operates as an international online gaming platform and, in the course of providing its services, may transfer personal data to servers or service providers located outside of Bangladesh. Such transfers occur only where necessary to deliver the services described in this Policy — for example, where a game content provider's servers are located in a different jurisdiction, or where an identity verification partner processes KYC data from a data centre outside Bangladesh.
Whenever personal data is transferred internationally, jd999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or higher than, the protections described in this Policy. These safeguards include contractual data processing agreements, data transfer clauses, and, where applicable, adequacy assessments of the recipient jurisdiction's data protection framework.
12 Third-Party Links
The jd999 Platform may contain references to or integrations with third-party services, including game content providers and payment processors. While jd999 exercises care in selecting its service partners, we do not control the privacy practices of third-party platforms and cannot accept responsibility for their data handling.
This Privacy Policy applies solely to personal data processed by jd999 in connection with the jd999 Platform. If you access any third-party service through the Platform, we encourage you to review the privacy policy of that service directly.
13 Changes to This Privacy Policy
jd999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made to this Policy, jd999 will notify registered players by email at least fourteen (14) days before the changes take effect. The updated Policy will also be published on this page with a revised "Last Updated" date at the top.
Your continued use of the jd999 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your account and cease using the Platform before the revised Policy takes effect. Account closure requests can be submitted via the jd999 support team.
We recommend reviewing this Privacy Policy periodically to stay informed about how jd999 protects your personal data. Previous versions of this Policy are available upon request by contacting [email protected].
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way jd999 handles your personal data, please contact the jd999 Data Support team through any of the following channels:
- Email: [email protected] — include "Privacy Request" in the subject line
- Live Chat: Available 24/7 via the jd999 Platform — typical response within 2–5 minutes
- Response Time: Written requests acknowledged within 3 business days; full responses within 30 calendar days
- Coverage: Serving players across all divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh
All privacy-related communications with jd999 are handled in strict confidence. Please do not include sensitive financial information such as full mobile wallet numbers, bank account numbers, or passwords in any communication with our support team.
Questions About Your Privacy?
Our support team is available around the clock to help with any data or privacy queries. You can also explore our FAQ page or review our Responsible Gaming commitments.