Privacy Policy – How 399 bd Handles Your Data

399 bd collects personal data that is necessary to provide you with a safe, compliant, and personalised gaming experience. We collect data through three main channels: information you provide directly, information generated automatically by your use of the platform, and information received from third-party service providers (such as payment processors and KYC verification partners).

Information you provide directly:

• Full legal name, date of birth, and residential address (provided at registration).
• Email address and mobile phone number (used for account communications and two-factor authentication).
• Username and encrypted password (account credentials — passwords are hashed and never stored in plain text).
• Government-issued identity documents submitted for KYC verification (National ID card, passport, or birth certificate).
• Payment method details: bKash/Nagad/Rocket/Upay mobile numbers, bank account numbers, or card details (last four digits only — full card numbers are handled by the payment processor and never stored on 399 bd servers).
• Any information you provide when contacting our support team via live chat or email.

Information collected automatically:

• Device information: device type, operating system, browser type and version, screen resolution.
• Network information: IP address, approximate geolocation (country/city level), internet service provider.
• Session data: login timestamps, session duration, pages visited, features used, and actions taken within the platform.
• Betting and gaming activity: game history, bet amounts, win/loss records, bonus claims, and transaction history.
• Cookie and tracking data as described in Section 4 of this policy.

Information from third parties:

• Identity verification results from our KYC partner (pass/fail status, document authenticity flags).
• Transaction confirmation and status data from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks).
• Fraud and risk signals from industry-standard fraud detection services, used solely to protect the platform and its users.

We collect only the minimum data necessary for each stated purpose. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification.

399 bd processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those listed below. Every use of your data is supported by one of the following legal bases: contractual necessity (to provide the service you signed up for), legal obligation (to comply with applicable regulations), legitimate interest (to operate and improve our business securely), or your explicit consent (for optional communications).

We use your personal data to:

• Create and manage your account: Register your account, authenticate your identity, and maintain your player profile on the 399 bd platform.
• Process transactions: Facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard; confirm transaction status; and maintain accurate financial records.
• Verify your identity (KYC): Confirm that you meet the minimum age requirement of 18 years and that the identity information you have provided is accurate and genuine, in accordance with our obligations to maintain a safe platform.
• Provide customer support: Respond to your queries, resolve disputes, and maintain a record of your support interactions for quality assurance and training purposes.
• Deliver personalised experiences: Customise game recommendations, bonus offers, and platform notifications based on your gameplay preferences and history — only where you have not opted out of personalisation.
• Send transactional communications: Deliver account-related notifications such as deposit confirmations, withdrawal status updates, password reset emails, and important policy updates.
• Send promotional communications: Where you have opted in, send information about new games, seasonal promotions (such as Eid or Pohela Boishakh specials), bonus offers, and tournament invitations. You can opt out at any time.
• Prevent fraud and maintain security: Detect and investigate suspicious account activity, prevent bonus abuse, identify multi-accounting, and protect the platform from automated bots and other malicious actors.
• Support responsible gaming: Monitor gameplay patterns to identify potential problem gambling behaviours and deliver responsible gaming prompts or interventions where appropriate.
• Comply with legal obligations: Retain records as required by applicable law, respond to lawful requests from courts or regulatory authorities, and report suspicious financial activity where required.
• Improve the platform: Analyse aggregated, anonymised usage data to identify bugs, optimise performance, and develop new features that improve the player experience.

We will never use your data for automated profiling that produces legal or similarly significant effects on you without your explicit consent. We will never use your data to target you with third-party advertising on other websites or platforms.

399 bd does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only with carefully selected service providers and only to the extent necessary to deliver the services described in this policy. All third-party processors who handle personal data on our behalf are bound by strict data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to 399 bd.

Categories of third parties with whom we share data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive only the payment-specific data required to authorise and complete your transactions (e.g., your mobile number for mobile banking transactions, or masked card details for card payments). These providers operate under their own privacy policies and regulatory obligations.
• KYC verification partner: Your identity documents and verification data are shared with our regulated KYC service provider for the sole purpose of confirming your age and identity. This provider is contractually prohibited from using your documents for any other purpose.
• Game studio providers: Game data (bet amounts, game session identifiers) is shared with our game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to facilitate game delivery, RNG certification, and dispute resolution. These providers do not receive your name, address, or payment information.
• Fraud detection services: Anonymised or pseudonymised technical data (IP addresses, device fingerprints) may be shared with industry-standard fraud detection tools to identify and block malicious activity. This data cannot be used by those services to identify you personally.
• IT and infrastructure providers: Cloud hosting, CDN, and server infrastructure providers may process data on our behalf as part of platform operations. These providers are located in jurisdictions with strong data protection standards and are bound by data processing agreements.
• Legal and regulatory authorities: We will disclose personal data to courts, law enforcement agencies, or regulatory bodies when we are legally required to do so, or when we reasonably believe disclosure is necessary to protect the safety of our users or the integrity of the platform.

Where data is transferred to service providers outside Bangladesh, we take appropriate measures to ensure that your data receives an equivalent level of protection, including the use of standard contractual data processing clauses.

399 bd uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, and understand how players use our services so we can improve them. This section explains what cookies we use and how you can manage them.

Types of cookies used by 399 bd:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your preferred language, and ensure security features such as CSRF protection operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as interface settings, game display options, and notification preferences. Disabling them may reduce the personalisation of your experience but will not prevent you from using the platform.
• Analytical cookies: We use anonymised analytics tools to understand aggregate user behaviour — which features are most popular, where players encounter friction, and how platform performance can be improved. This data is processed in aggregated form and cannot be used to identify individual players.
• Session cookies: Temporary cookies that expire when you close your browser. These are used to maintain your game session state and shopping cart equivalents (e.g., active bonus selections).

399 bd does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts. We do not use cookies to track your browsing activity across other websites.

Managing cookies: You can manage or delete cookies through your browser settings at any time. Most browsers allow you to block cookies, delete existing cookies, or alert you when a new cookie is set. Please note that blocking strictly necessary cookies will prevent you from logging into your 399 bd account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

399 bd takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to prevent unauthorised access, accidental loss, destruction, or disclosure of your data.

Technical security measures in place at 399 bd include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, ensuring that your credentials, payment details, and gaming activity cannot be intercepted in transit.
• AES-256 encryption at rest for all stored sensitive data including identity documents, payment records, and account credentials.
• Password hashing: Account passwords are never stored in plain text. We use a one-way cryptographic hashing algorithm with a unique salt per account, meaning that even 399 bd staff cannot read your password.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA via their account settings for an additional layer of account security.
• Intrusion detection systems: Our infrastructure is monitored 24/7 for unusual access patterns, brute-force attempts, and other indicators of malicious activity.
• Regular security audits: The platform undergoes periodic security reviews, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff who handle personal data are required to complete data protection training and are bound by confidentiality obligations.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, 399 bd will notify affected users promptly and take all reasonable steps to contain the breach and prevent recurrence.

You also play an important role in keeping your account secure. Please use a strong, unique password for your 399 bd account, do not share your credentials with anyone, and contact support immediately via live chat if you suspect that your account has been accessed without your authorisation.

399 bd retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When your data reaches the end of its applicable retention period, it is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

If you request deletion of your account under Section 7 of this policy, we will process your request in accordance with the retention periods above. Some data cannot be deleted immediately where retention is required by law; in such cases, we will clearly explain which data must be retained and for how long.

As a 399 bd player, you have a number of rights regarding your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team via live chat in your account dashboard or by sending a written request to [email protected]. We aim to respond to all data rights requests within 72 hours.

• Right of access: You have the right to request a copy of the personal data that 399 bd holds about you, including what data we have, how we use it, and who we have shared it with.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account information directly from your account settings page.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. We will honour this request where the data is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires us to retain it. See Section 6 for retention periods that may apply.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications by following the unsubscribe instructions in any promotional email or by contacting support.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications or optional personalisation features), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Please note that exercising some of these rights — particularly erasure and restriction — may affect your ability to continue using the 399 bd platform, as some data processing is essential to the operation of your account. We will clearly inform you of any such consequences before acting on your request.

We will not charge a fee for processing legitimate data rights requests. However, if a request is manifestly unfounded or excessive (particularly if repetitive), we reserve the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

399 bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players via email or via a prominent notice within the platform dashboard at least 7 days before the changes take effect.

The effective date at the top of this document indicates when the current version of this policy was last revised. We encourage you to review this page periodically to stay informed about how we handle your personal data. Your continued use of the 399 bd platform after a policy update takes effect constitutes acceptance of the revised policy.

Previous versions of this Privacy Policy are archived and available upon request. If you would like to review a prior version, please contact us at the details below.

Data controller contact details:

• Platform: 399 bd (https://399-bd.app)
• Support email: [email protected] (plain text — not a clickable link)
• Response time: Within 4 hours during business hours (BST, UTC+6); within 24 hours at all other times.
• Preferred contact method: Live chat via your account dashboard for fastest response.

If you have a concern about how 399 bd handles your personal data and are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.