xd999 Privacy Policy — Your Data, Protected

xd999 ("we", "us", "our") operates the online gaming platform accessible at https://xd999.ws (the "Platform"). As the data controller for all personal information collected through the Platform, xd999 takes its obligations in respect of data privacy seriously. This Privacy Policy has been prepared to inform you, as a user of the Platform, about the personal data we collect, the purposes for which we process it, the third parties with whom we may share it, and the rights available to you in respect of your personal data.

This Privacy Policy applies to all users of the Platform, including visitors who browse without registering, registered players, and former players whose data we continue to hold in accordance with our retention obligations. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Platform.

xd999 collects personal data in several ways: directly from you when you register or use the Platform, automatically through your use of the Platform, and from third parties where permitted by law. The categories of personal data we collect include:

• Identity and contact data: your full name, date of birth, username, email address, and Bangladesh mobile number. This information is collected at registration and may be supplemented by identity documentation (such as a National ID card or passport) provided during KYC verification.
• Financial data: payment method information (including bKash account numbers, Nagad account numbers, Rocket account numbers, and card details where applicable), transaction history, deposit amounts, withdrawal requests, and account balances. This data is required to process transactions, comply with anti-money laundering obligations, and investigate disputes.
• Technical and usage data: IP address, device identifier, browser type and version, operating system, time zone, login timestamps, pages visited, session duration, game history, and bet records. This data is collected automatically via server logs and platform analytics tools.
• Communication data: records of any communications between you and the xd999 support team, including live chat transcripts, email correspondence, and support ticket records. These records are retained to document the history of your account relationship with xd999 and to improve the quality of our support service.
• Responsible gaming data: records of any deposit limits, loss limits, self-exclusion requests, or reality-check settings applied to your account. This data is retained to ensure that responsible gaming tools function correctly and to evidence compliance with our responsible gaming obligations.

xd999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where such information is directly relevant to a responsible gaming assessment or is voluntarily provided by you in the context of a support interaction.

xd999 processes personal data only for specified, explicit, and legitimate purposes. The purposes for which we process your personal data are as follows:

• Account management: to create, maintain, and administer your xd999 player account, including verifying your identity, authenticating your login sessions, and managing your account preferences and settings.
• Transaction processing: to process deposits, withdrawals, and bonus credits; to reconcile transaction records; and to investigate and resolve disputes relating to financial transactions on your account.
• Legal and regulatory compliance: to fulfil obligations under applicable anti-money laundering legislation, to conduct KYC identity verification, to screen against sanctions lists, to report suspicious transactions to the relevant financial intelligence authorities, and to retain records as required by law.
• Customer support: to respond to your enquiries, complaints, and support requests; to maintain records of communications for quality assurance purposes; and to train support staff using anonymised interaction data.
• Responsible gaming: to monitor account activity for signs of problem gambling behaviour; to apply responsible gaming tools at your request; and to fulfil obligations to identify and protect vulnerable players.
• Platform improvement and analytics: to analyse usage patterns, game performance, and platform behaviour in aggregate and anonymised form in order to improve the quality and performance of the xd999 Platform. Individual player data is not sold or licensed to third parties for marketing or data analytics purposes.

xd999 processes personal data only where a lawful basis for processing exists. The legal bases on which xd999 relies are:

• Contractual necessity: processing that is necessary to perform the contract between xd999 and you as a registered player — including account creation, transaction processing, and the delivery of gaming services — is carried out on the basis of contractual necessity.
• Legal obligation: processing that is required to comply with legal and regulatory obligations — including anti-money laundering checks, KYC procedures, sanctions screening, and record retention requirements — is carried out on the basis of legal obligation.
• Legitimate interests: processing carried out to prevent fraud, detect and investigate prohibited conduct, maintain platform security, and conduct anonymised analytics is carried out on the basis of xd999's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: where xd999 relies on consent as the legal basis for processing — for example, in relation to the use of non-essential cookies or the sending of optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

xd999 does not sell your personal data to third parties. We may share your personal data in the following circumstances:

• Service providers: xd999 engages carefully vetted third-party service providers to assist in delivering the Platform, including payment processing partners (such as the operators of bKash, Nagad, and Rocket payment integrations), game content providers (such as Evolution Gaming and Pragmatic Play), identity verification services, cloud hosting providers, and customer support platform operators. These providers are contractually bound to process personal data only on xd999's instructions and in accordance with applicable data protection obligations.
• Legal and regulatory authorities: xd999 will disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, and financial intelligence units where required to do so by applicable law or where disclosure is necessary to protect the rights, property, or safety of xd999, its players, or third parties.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or substantially all of xd999's business or assets, personal data held about players may be transferred to the successor entity as part of that transaction, subject to equivalent data protection standards being maintained.
• Fraud prevention networks: xd999 may share data with recognised industry fraud prevention databases and services where there is a reasonable basis to suspect fraudulent activity, for the purpose of preventing fraud and protecting legitimate players.

xd999 requires all third parties that receive personal data to maintain appropriate technical and organisational security measures and to process the data only in accordance with xd999's documented instructions and the purposes for which it was shared.

The xd999 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. Cookies are small text files placed on your device by your browser when you visit the Platform. xd999 uses the following categories of cookies:

• Strictly necessary cookies: these are required for the Platform to function correctly and cannot be switched off. They include cookies used to maintain your login session, to remember your language preference, and to ensure that security features operate correctly. These cookies do not require your consent.
• Functional cookies: these cookies enable the Platform to remember your preferences and provide enhanced, personalised features. For example, they may remember your chosen language, your preferred game categories, or other customisation options you have selected. These cookies may be set by xd999 or by third-party providers whose services xd999 has added to the Platform.
• Analytics cookies: these cookies collect information about how players use the Platform — for example, which pages are visited most frequently and whether players encounter error messages — to help xd999 improve the performance and content of the Platform. The data collected by analytics cookies is aggregated and anonymised and does not identify individual users.

Most web browsers allow you to manage your cookie preferences via the browser settings menu. You can typically set your browser to refuse cookies, to alert you when cookies are being set, or to delete cookies already stored on your device. Please note that restricting certain categories of cookies may affect the functionality of the xd999 Platform — for example, disabling strictly necessary cookies will prevent you from logging into your account.

xd999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include: SSL/TLS encryption of all data transmitted between your device and the xd999 Platform; encryption of sensitive data fields at rest within our database infrastructure; strict access controls ensuring that personal data is accessible only to authorised personnel who require it for legitimate business purposes; regular penetration testing and vulnerability assessments of Platform infrastructure; and monitoring of system logs for anomalous access patterns that may indicate an attempted security breach.

While xd999 takes all reasonable steps to protect personal data, no internet-based system is entirely immune to security risks. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xd999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You can help protect your account by choosing a strong, unique password, not sharing your credentials with others, and contacting xd999 support immediately if you suspect any unauthorised access to your account.

xd999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. In practice, this means: account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction on the account, in order to comply with anti-money laundering record-keeping requirements; responsible gaming records are retained for a minimum of five (5) years from the date on which any relevant tool or restriction was applied; KYC documentation is retained for a minimum of five (5) years from the date of account closure; and support communication records are retained for two (2) years from the date of the relevant communication.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes without constituting the retention of personal data.

Subject to applicable law, you have the following rights in relation to the personal data that xd999 holds about you. To exercise any of these rights, please contact the xd999 support team. xd999 will respond to all valid rights requests within a reasonable timeframe and without charge, except where requests are manifestly unfounded or excessive.

To exercise any of the rights listed above, please contact the xd999 support team using the email address provided at the end of this Privacy Policy. xd999 may require you to verify your identity before acting on a rights request. xd999 will aim to respond to all valid requests within thirty (30) days of receipt, though this period may be extended by a further two months where the request is complex or where a large number of requests are received simultaneously.

The xd999 Platform integrates services provided by carefully selected third-party partners in order to deliver a complete gaming experience. These include live casino content providers such as Evolution Gaming and Pragmatic Play, whose games are streamed directly within the Platform environment; payment gateway operators that facilitate deposits and withdrawals via bKash, Nagad, Rocket, Visa, and Mastercard; and platform infrastructure providers including cloud hosting and content delivery services. Each of these third-party providers operates under its own privacy policy and data processing agreements, and xd999 conducts due diligence to ensure that they meet appropriate data protection standards.

Please be aware that when you use game features provided by third-party content providers, those providers may independently collect certain technical and gameplay data in accordance with their own privacy policies. xd999 recommends that you review the privacy policies of any significant third-party providers whose services you use via the Platform if you have concerns about how they handle your personal data.

The xd999 Platform is strictly intended for adults aged 21 years and above. xd999 does not knowingly collect personal data from individuals under the age of 21. If xd999 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be suspended pending further investigation. If you are a parent or guardian and believe that your child may have registered on the xd999 Platform, please contact the support team immediately at [email protected] so that appropriate action can be taken.

xd999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. The revised Privacy Policy will be posted on this page with an updated effective date. Where changes are material, xd999 will take reasonable steps to notify registered players, which may include sending a notification to the email address registered on your account.

Your continued use of the xd999 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised Privacy Policy, you must cease use of the Platform and may request the closure of your account in accordance with the procedures described in the Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that xd999 holds about you, please contact the xd999 data support team. All privacy-related enquiries will be handled promptly and with the utmost discretion. The support team is available 24 hours a day, 7 days a week.

Email: [email protected]