Privacy Policy — 399bdt

1Introduction

399bdt is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at https://399bdt.vu. This Privacy Policy sets out in clear, formal terms how 399bdt collects, processes, stores, and protects your personal information in connection with your use of the platform.

This policy applies to all personal data collected through the 399bdt website, including data provided during account registration, identity verification (KYC), deposits and withdrawals, customer support interactions, and general use of the platform's features. It applies equally to all players accessing 399bdt from Bangladesh and any other permitted jurisdiction.

This Privacy Policy should be read in conjunction with 399bdt's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. Where there is any conflict between those documents and this Privacy Policy on matters specifically related to personal data, this Privacy Policy shall take precedence.

If you do not agree with the terms of this Privacy Policy, you must not register an account or continue to use the 399bdt platform. Continued use of the platform following the effective date of any update to this policy constitutes acceptance of the revised terms.

2Personal Data We Collect

399bdt collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we collect include the following:

2.1 Identity and Contact Data

• Full legal name;
• Date of birth;
• Residential address (including city, district, and postcode);
• Email address;
• Mobile phone number (where provided for OTP verification).

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of residential address documents;
• Selfie or live photograph where required for verification;
• Proof of ownership of payment methods used.

2.3 Financial Data

• Mobile financial service account identifiers (e.g., bKash, Nagad, Rocket, Upay registered numbers — stored only as references, not full credentials);
• Deposit and withdrawal transaction records;
• Account balance history;
• Bonus and promotional credit records.

2.4 Betting and Gaming Activity Data

• Betting history (sports bets, live casino sessions, slot game sessions);
• Wager amounts and outcomes;
• Bonus wagering activity;
• Session duration and frequency of play.

2.5 Technical and Device Data

• IP address;
• Device type, model, and operating system;
• Browser type and version;
• Session timestamps and login records;
• Cookie identifiers and similar tracking data (see Section 8).

2.6 Communications Data

• Records of live chat conversations with the 399bdt support team;
• Email correspondence with 399bdt;
• Complaint and dispute records.

3How We Collect Your Data

399bdt collects personal data through the following channels:

• Account Registration: Data provided directly by the player when creating an account, including name, date of birth, email, and contact details.
• KYC Verification: Documents and information submitted by the player in response to identity verification requests.
• Deposits and Withdrawals: Transaction data generated when the player uses bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, or any other accepted payment method.
• Platform Use: Technical and activity data collected automatically when the player accesses and interacts with the 399bdt platform, including via cookies and server logs.
• Customer Support: Information provided by the player when contacting 399bdt via live chat or email.
• Third-Party Sources: In limited circumstances, 399bdt may receive data about players from third-party fraud prevention services or identity verification partners for the purpose of KYC compliance and fraud detection.

4How We Use Your Personal Data

399bdt uses the personal data it collects for clearly defined, legitimate purposes. The table below summarises the primary purposes of processing and the categories of data involved:

399bdt will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5Legal Basis for Processing

399bdt processes personal data only where a valid legal basis exists. The legal bases on which 399bdt relies for processing player data are as follows:

• Contractual Necessity: Processing that is required to perform the contract between 399bdt and the player, including account registration, payment processing, and delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering checks, age verification, fraud reporting, and record-keeping requirements.
• Legitimate Interests: Processing carried out in pursuit of 399bdt's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by the player's rights and freedoms.
• Consent: Processing based on the player's freely given, specific, and informed consent — for example, for marketing communications. Players may withdraw consent at any time by contacting [email protected].

6Data Sharing & Disclosure

399bdt does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of recipients only to the extent necessary to fulfil the purposes described in this policy:

• Payment Processing Partners: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and card payment processors (Visa, Mastercard networks) receive transaction data necessary to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification services may receive document images and biometric data as required for compliance.
• Game Providers: Third-party game studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) receive session data necessary to deliver and record game outcomes.
• Fraud Prevention Services: Specialist fraud detection providers may receive technical and transaction data to identify and prevent fraudulent activity.
• Legal and Regulatory Authorities: 399bdt may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or valid legal process.
• Professional Advisers: Legal, financial, and compliance advisers acting on 399bdt's behalf may access personal data on a strictly confidential and need-to-know basis.

All third-party service providers who process personal data on behalf of 399bdt are required to implement appropriate technical and organisational security measures and to process data only in accordance with 399bdt's documented instructions.

7Payment Data

When a player deposits or withdraws funds using bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, the transaction is processed directly through the relevant payment provider's secure infrastructure. 399bdt retains only the transaction reference, amount, timestamp, and payment method identifier necessary for account balance management, dispute resolution, and regulatory record-keeping.

Players are responsible for ensuring that the payment accounts they use to deposit funds with 399bdt are registered in their own name. 399bdt may request confirmation of payment method ownership as part of KYC verification, particularly before processing withdrawal requests.

All monetary amounts on the 399bdt platform are denominated in Bangladeshi Taka (৳). Financial transaction records are retained in accordance with the data retention schedule described in Section 9 of this policy.

8Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on a player's device by their web browser when visiting the 399bdt platform. They allow the platform to recognise returning users, maintain session states, and gather analytics data to improve the user experience.

8.2 Types of Cookies Used by 399bdt

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, login state cookies, and security tokens. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember player preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform, which pages are visited most frequently, and where users encounter difficulties. This data helps 399bdt improve the platform over time.
• Security and Fraud Detection Cookies: Used to identify unusual device or behavioural patterns that may indicate fraudulent account access or automated bot activity.

8.3 Managing Cookies

Players may manage or disable non-essential cookies through their browser settings. Please note that disabling strictly necessary cookies will prevent the 399bdt platform from functioning correctly. Most modern browsers allow users to view, manage, and delete cookies through the browser's settings or preferences menu.

9Data Retention

399bdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The general retention principles applied by 399bdt are as follows:

• Active Account Data: Personal data associated with an active 399bdt account is retained for the duration of the account's active status.
• Closed Account Data: Following voluntary account closure or permanent account closure by 399bdt, personal and financial data is retained for a minimum period to satisfy legal and regulatory obligations, including anti-money laundering record-keeping requirements.
• KYC Documentation: Identity documents submitted for KYC purposes are retained for the period required by applicable compliance frameworks and are securely deleted thereafter.
• Communications Records: Customer support conversations, complaint records, and dispute correspondence are retained for a defined period following the resolution of the relevant matter.
• Technical Logs: Server logs and device data are retained for a shorter period consistent with their security and fraud prevention purpose.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

10Data Security

399bdt implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between the player's device and the 399bdt platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Automated fraud detection and anomalous activity monitoring systems;
• OTP (one-time password) verification for new device logins and sensitive account actions;
• Regular security reviews and vulnerability assessments of the platform infrastructure.

While 399bdt takes all reasonable steps to protect personal data, no internet-based platform can guarantee absolute security. Players are advised to use strong, unique passwords for their 399bdt account, to keep their credentials confidential, and to notify 399bdt immediately at [email protected] if they suspect any unauthorised access to their account.

11Your Rights Over Your Data

As a player whose personal data is processed by 399bdt, you hold the following rights in relation to your personal information:

• Right of Access: You may request a copy of the personal data that 399bdt holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you is corrected or completed.
• Right to Erasure: In certain circumstances, you may request that 399bdt deletes your personal data. This right does not apply where retention is required for legal compliance, fraud prevention, or ongoing dispute resolution.
• Right to Restrict Processing: You may request that 399bdt restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to the 399bdt data team at [email protected]. We will acknowledge your request promptly and aim to respond fully within a reasonable period. We may ask you to verify your identity before processing your request.

12Children's Privacy

399bdt does not knowingly collect personal data from individuals under the age of 18. If 399bdt becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately closed, any funds deposited will be returned to the payment source, and the associated personal data will be securely deleted.

Parents and guardians who have reason to believe that a minor in their care has registered an account with 399bdt should contact the support team immediately at [email protected]. 399bdt will act on such reports promptly and in accordance with this policy.

399bdt encourages parents and guardians to make use of parental control software and browser filtering tools to prevent underage individuals from accessing online gambling platforms.

13Third-Party Links

The 399bdt platform may, from time to time, contain references to third-party services such as game providers and payment processors. Where such third-party services have their own privacy policies, those policies govern the collection and processing of personal data by those third parties in connection with their own services.

399bdt is not responsible for the privacy practices of third-party game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) or payment service providers (including bKash, Nagad, Rocket, and Upay). Players are encouraged to review the privacy policies of these third parties where relevant.

399bdt does not control and is not responsible for the data practices of any third-party websites or services that may be linked to from external sources referencing the 399bdt platform.

14Policy Updates

399bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The date of the most recent update is displayed at the top of this document.

Where changes are material, 399bdt will notify registered players through a platform notification or by email to the address on file. Continued use of the 399bdt platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

399bdt recommends that players review this Privacy Policy periodically to remain informed of how their personal data is being handled. The most current version of this policy is always available at https://399bdt.vu/privacy-policy.

15Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 399bdt handles your personal data, please contact us using the details below. Our support and data team is available 24 hours a day, 7 days a week.

Email: [email protected]

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within a reasonable period. For requests to exercise your data rights as described in Section 11, we may ask you to verify your identity before processing your request.