td99 Privacy Policy

td99 ("we", "us", "our", "the Platform") operates the online betting and casino website accessible at td99.io. td99 provides sports betting markets — with a strong focus on cricket including BPL, IPL, and T20 World Cup fixtures — alongside live casino games, slots, keno, and crash games to players based in Bangladesh.

For the purposes of data protection, td99 acts as the data controller in respect of the personal information you provide when registering and using the Platform. This means td99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

If you have any questions about this Privacy Policy or wish to exercise your data rights, you may contact us at any time. Our contact details are provided in Section 14 of this document.

td99 collects personal data across several categories depending on how you interact with the Platform. The data we may collect about you includes, but is not limited to, the following:

• Identity and Verification Data: Your full legal name, date of birth, nationality, and copies of government-issued identity documents such as a national identity card or passport. This information is collected as part of our mandatory Know Your Customer (KYC) verification process, which is required before withdrawals can be processed and is essential for confirming that all players are aged 21 or above.
• Contact Information: Your email address, mobile phone number, and residential address. This data is used to communicate with you regarding your account, send transaction confirmations, and respond to support enquiries.
• Financial and Payment Data: Details of the payment methods you use to deposit and withdraw funds, including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account details where applicable. td99 does not store full payment credentials on its own servers; payment transactions are handled via secure third-party payment processors.
• Technical and Device Data: Your IP address, device identifiers, browser type and version, operating system, screen resolution, and access timestamps. This data is collected automatically when you visit the td99 website and is used for security monitoring and fraud prevention.
• Behavioural and Usage Data: Information about how you use the Platform, including which games you play, how long your sessions last, the size and frequency of your bets, and the pages you visit. This data helps td99 monitor for responsible gaming concerns and improve the overall platform experience.
• Support and Communications Data: Records of any communications you have with the td99 customer support team, including live chat transcripts and email correspondence.

td99 collects your personal data through the following channels:

• Direct interactions: Data you provide when you register a td99 account, complete identity verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion.
• Automated technologies: Data collected automatically as you navigate the Platform, including cookies, server logs, and similar tracking technologies as described in Section 7.
• Third-party sources: In some circumstances, td99 may receive data about you from third parties, including payment processors confirming transaction status, identity verification service providers confirming document authenticity, and fraud prevention agencies flagging suspicious account activity.

td99 does not purchase personal data from data brokers, marketing lists, or any other commercial third-party data supplier. All data collected by td99 is directly related to your use of the td99 platform and the services we provide.

td99 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and td99 when you register an account, including identity verification, payment processing, and account management.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations and age verification requirements for gambling services.
• Legitimate interests: Processing carried out in td99's legitimate interests, such as fraud prevention, platform security, abuse detection, and improving the overall service, where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out with your express consent, primarily in connection with marketing communications and optional personalisation features. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

td99 uses the personal data it collects for the following specific purposes:

• To create, manage, and maintain your td99 player account.
• To verify your identity and confirm that you meet the minimum age requirement of 21 years.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported payment methods.
• To detect and prevent fraud, money laundering, collusion, and other prohibited activities on the Platform.
• To monitor player activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and to enforce account restrictions, cooling-off periods, or self-exclusion requests.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and responses to support enquiries.
• To send you promotional communications, bonus offers, and platform updates where you have opted in to receive such communications.
• To analyse aggregate, anonymised usage data to improve the performance, design, and features of the td99 platform.
• To comply with legal, regulatory, and law enforcement obligations where applicable.

td99 will not use your personal data for any purpose that is incompatible with the purposes set out in this section without first notifying you and, where required, obtaining your consent.

td99 does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary to deliver the td99 service or to comply with legal obligations:

• Payment processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners are provided with the minimum data necessary to process your deposit and withdrawal transactions securely.
• Identity verification providers: Third-party KYC service providers may receive copies of identity documents you submit for the purpose of verifying their authenticity. These providers are contractually bound to process your data solely for verification purposes.
• Game software providers: Casino and sports betting software providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games through the td99 platform.
• Fraud and security agencies: In cases of suspected fraud, money laundering, or other illegal activity, td99 may share relevant account and transaction data with fraud prevention agencies and, where legally required, with law enforcement authorities.
• Legal and regulatory authorities: td99 will disclose personal data to government bodies, courts, or regulators when required to do so by applicable law or valid legal process.

All third-party service providers who receive your personal data from td99 are required to implement appropriate technical and organisational security measures and to process that data only for the purposes specified by td99.

td99 uses cookies and similar technologies — including local storage objects and session identifiers — to operate the Platform effectively. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and analytics cookies: Used to collect anonymised information about how players interact with the td99 website — such as which pages are visited most frequently and whether any pages generate errors — in order to improve platform performance and user experience.
• Functional cookies: Used to remember your preferences, such as your language settings or display configuration, so that you do not need to re-enter them on each visit.

td99 does not use cookies for third-party behavioural advertising. You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of the td99 platform.

td99 retains your personal data for as long as your account remains active and for a reasonable period thereafter, in accordance with the following principles:

• Active accounts: Personal data associated with an active td99 player account is retained for the full duration of the account relationship to enable ongoing service delivery, account management, and support.
• Closed accounts: Following the closure of a td99 account — whether at your request or initiated by td99 — we will retain your personal data for a minimum period of five years from the date of closure. This retention is required to comply with anti-money laundering laws, to resolve any outstanding disputes, and to respond to regulatory enquiries.
• Financial transaction records: Records of deposits, withdrawals, and betting activity are retained for a minimum of seven years to satisfy financial record-keeping obligations.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years following the resolution of the relevant support interaction.

Where personal data is no longer required for any legitimate purpose, td99 will securely delete or anonymise that data. Anonymised, aggregate data that cannot be linked back to any individual player may be retained indefinitely for analytical purposes.

td99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your browser or device and the td99 servers.
• Secure, access-controlled server environments with restricted physical and logical access limited to authorised personnel only.
• Regular security assessments and vulnerability testing of the td99 platform infrastructure.
• Multi-factor authentication requirements for internal system access by td99 staff.
• Comprehensive incident response procedures in the event of a data breach, including notification protocols for affected players where legally required.

While td99 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. Players are reminded that they also have a responsibility to protect their account credentials by using a strong, unique password and not sharing their td99 login details with any other person.

As a registered td99 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the td99 support team via live chat or email:

• Right of access: You have the right to request a copy of the personal data td99 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to legal and regulatory retention obligations — for example, td99 cannot delete transaction records that it is required to retain under anti-money laundering law.
• Right to restrict processing: You may request that td99 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where td99 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to the processing of your personal data where td99 relies on legitimate interests as its legal basis, unless td99 can demonstrate compelling legitimate grounds that override your interests.

td99 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case td99 will notify you of the extension and the reasons for it.

The td99 platform is strictly for adults aged 21 years and above. td99 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If td99 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor in your care has registered on the td99 platform or submitted personal data without your knowledge, please contact the td99 support team immediately so that we can take appropriate action. td99 takes underage gambling extremely seriously and cooperates with all reasonable requests to identify and remove underage accounts.

The td99 platform may contain links to third-party websites or services — for example, links to payment provider portals or game studio information pages. td99 is not responsible for the privacy practices or content of any third-party website. This Privacy Policy applies solely to data processed by td99 in connection with the td99 platform at td99.io.

Players are encouraged to review the privacy policies of any third-party websites they visit independently of the td99 platform. td99 does not endorse, guarantee, or accept responsibility for the data handling practices of any external site or service.

td99 may update this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, td99 will notify registered players via the email address associated with their account prior to the changes taking effect. A notice may also be displayed on the td99 platform for a period following the update.

The most current version of the td99 Privacy Policy will always be accessible at td99.io/privacy-policy. The effective date at the top of the document indicates when the current version was last updated. Your continued use of the td99 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of those changes. If you do not agree to the revised terms, you should cease using the Platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way td99 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the td99 platform (Bangladesh Standard Time, UTC+6). Live chat is the fastest way to reach the td99 support team for urgent data or account-related matters.
• Email: [email protected] — plain text address, not a clickable link. td99 aims to respond to all written privacy enquiries within 48 hours on standard business days.

When contacting td99 to exercise a data right, please provide your registered account email address and a clear description of your request so that we can locate your records and process your request efficiently. td99 may need to verify your identity before fulfilling any data access, correction, or deletion request in order to protect your data from unauthorised third-party requests.