Privacy Policy – How 399 BDT Protects Your Data

399 BDT ("we", "us", "the Platform") is an online gaming and sports betting platform operated for players in Bangladesh. The platform is accessible at 399-bdt.vip and through the 399 BDT mobile application. For the purposes of this Privacy Policy, 399 BDT is the data controller — meaning we are responsible for deciding how and why your personal data is processed.

If you have any questions about how 399 BDT handles your personal data, or if you want to exercise any of your data rights, you can contact us at any time using the details in the Contact Us section at the bottom of this policy.

399 BDT collects personal data in three main ways: information you provide directly when registering or using the platform, information generated automatically when you use the platform, and information received from third-party service providers such as payment processors.

399 BDT does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law for responsible gaming purposes (for example, if you self-exclude and provide a reason).

399 BDT uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the reasons it was collected. The main purposes for which 399 BDT processes your data are:

• Account management: Creating and maintaining your 399 BDT account, verifying your identity, and managing your profile settings.
• Payment processing: Processing deposits and withdrawals through bKash, Nagad, Rocket, and bank transfer. Verifying that payment methods are registered in your name.
• Game delivery: Providing access to all games on 399 BDT including Kalaka Bingo, Mega Fishing, Monster Plinko, Boxing, and the Lottery.
• Bonus and promotion management: Tracking wagering requirements, applying bonuses, and managing VIP Club points and tier status.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, and terms violations. Monitoring for suspicious account behaviour.
• Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Platform improvement: Analysing usage patterns to improve the 399 BDT platform, fix bugs, and develop new features.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling and applying responsible gaming tools where appropriate.

399 BDT does not use your data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law.

Every time 399 BDT processes your personal data, we do so on one of the following legal bases:

• Contract performance: Processing that is necessary to provide the 399 BDT service you have signed up for — including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, such as KYC identity verification, AML transaction monitoring, and age verification.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, and improving the 399 BDT service, where these interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, for optional marketing communications — you can withdraw that consent at any time by contacting support or updating your account preferences.

399 BDT does not sell your personal data. We share data only where it is necessary to deliver the service, comply with the law, or protect the platform and its players. The categories of third parties with whom 399 BDT may share your data are:

• Payment processors: bKash, Nagad, Rocket, and banking partners — to process your deposits and withdrawals. These providers handle your financial data under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC services used to verify your identity before your first withdrawal. These providers are bound by strict data processing agreements.
• Game providers: Where games on 399 BDT are provided by third-party studios, limited technical data may be shared to deliver the game experience. No personally identifiable information is shared beyond what is necessary.
• Legal and regulatory authorities: Where required by law, court order, or regulatory requirement, 399 BDT may disclose your data to relevant authorities. We will notify you of such disclosures where legally permitted to do so.
• Fraud prevention services: Shared data with fraud detection partners to protect the platform and all players from fraudulent activity.

All third parties with whom 399 BDT shares data are required to handle that data securely and in accordance with applicable data protection laws. We do not permit third parties to use your data for their own marketing purposes.

399 BDT uses cookies and similar tracking technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain viruses and cannot access other files on your device.

The types of cookies used by 399 BDT are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
• Analytics cookies: Help 399 BDT understand how players use the platform — which pages are visited most, where players drop off, and how features are used. This data is aggregated and anonymised.

399 BDT does not use third-party advertising cookies or tracking pixels from social media platforms. You can manage cookie settings through your browser. Note that disabling essential cookies will affect your ability to use the platform.

399 BDT takes the security of your personal data seriously. We have implemented technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your device and 399 BDT servers is encrypted using TLS 1.3.
• Encryption at rest: Personal data stored on 399 BDT servers is encrypted using AES-256.
• Access controls: Access to personal data within 399 BDT is restricted to staff who need it to perform their job. All access is logged and audited.
• Payment security: Financial data is handled by PCI-DSS compliant payment processors. 399 BDT does not store full payment account numbers on its own servers.
• Two-factor authentication: Available for all player accounts and strongly recommended. Adds an extra layer of protection beyond your password.
• Regular security reviews: 399 BDT conducts regular security assessments to identify and address vulnerabilities.

Despite these measures, no system is completely immune to security risks. If you suspect that your 399 BDT account has been compromised, contact support immediately and change your password.

399 BDT retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained for longer periods for statistical and analytical purposes.

As a player on 399 BDT, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 399 BDT support team with your request.

399 BDT is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register on 399 BDT or attempt to use any part of the platform.

If 399 BDT becomes aware that personal data has been collected from a person under 18, that account will be closed immediately, all data will be deleted, and any deposited funds will be returned to the original payment method after verification. If you believe a minor has registered on 399 BDT, please contact us immediately at [email protected].

399 BDT may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects when the policy was most recently revised. We encourage you to review this policy periodically. Continued use of 399 BDT after the effective date of any changes constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 399 BDT handles your personal data, please get in touch:

• Live Chat: Available 24/7 via the chat icon on any page of the 399 BDT platform. Fastest response for urgent data concerns.
• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so we can route your message correctly.

399 BDT aims to respond to all privacy-related enquiries within 5 business days. Data rights requests will be acknowledged within 72 hours and fully responded to within 30 days.