3999bd Privacy Policy

3999bd ("we", "our", "us") operates the online casino and sports betting platform accessible at https://3999bd.biz (the "Platform"). This Privacy Policy sets out in clear terms how we collect, use, store, share, and protect personal data relating to users of the Platform ("you", "your").

This policy applies to all users who visit the Platform, register an account, deposit funds, place bets, participate in promotions, or contact our customer support team. It covers data collected through the website, any associated mobile-optimised interfaces, and all communication channels operated by 3999bd.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. Together, these documents form the complete framework governing your relationship with 3999bd. By continuing to use the Platform, you confirm your acceptance of this policy as currently in force.

For the purposes of applicable data protection law, 3999bd is the data controller responsible for the personal data collected through the Platform. As data controller, 3999bd determines the purposes and means by which your personal data is processed.

If you have questions about how your data is handled, or if you wish to exercise any of the rights described in Section 9 of this policy, you may contact our Data Protection team using the details provided in Section 14. We aim to acknowledge all data-related requests within 48 hours and to resolve them within five (5) business days.

3999bd collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

3999bd collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make deposits or withdrawals, contact support, or participate in promotions, you provide data to us directly.
• Automatically: When you visit or use the Platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. See Section 10 for full details on cookies.
• From payment processors: When you make a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment partners may share transaction reference data with us to confirm and reconcile payments.
• From identity verification providers: Where we use third-party KYC (Know Your Customer) services to verify the documents you submit, those providers may share verification outcomes and risk scores with us.
• From fraud prevention services: We may receive data from third-party fraud detection tools that help us identify suspicious account activity, protect Platform integrity, and prevent money laundering.

We process your personal data only where we have a lawful basis to do so. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Where we rely on consent as our legal basis — for example, for marketing communications — you may withdraw that consent at any time by contacting our support team or updating your account communication preferences.

3999bd does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transactional data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services receive copies of the identity documents you submit in order to verify their authenticity and confirm your identity.
• Fraud prevention and security providers: Specialist services may receive technical data such as IP addresses, device identifiers, and behavioural signals to assess fraud risk.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier to facilitate game delivery and session management. They do not receive your full name or contact details.
• IT infrastructure and cloud providers: Hosting and database providers that store Platform data on our behalf, subject to strict data processing agreements.
• Law enforcement and regulatory bodies: We may disclose personal data where required to do so by applicable law, court order, or legitimate request from a competent authority. In such cases, we will disclose only the minimum data necessary to comply with the request.

All third parties with whom we share data are required to process that data in accordance with applicable data protection law and our instructions. We do not permit any third party to use your data for their own independent purposes.

Some of the third parties described in Section 6 may be located in, or operate infrastructure in, countries outside Bangladesh. Where personal data is transferred internationally, 3999bd takes appropriate steps to ensure that such transfers are subject to adequate protections, including data processing agreements that incorporate appropriate contractual safeguards.

By using the 3999bd Platform, you acknowledge that your personal data may be transferred to and stored on servers located outside Bangladesh. In all such cases, we implement measures to ensure your data receives a level of protection consistent with this Privacy Policy.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in line with standard financial record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for a period of three (3) years from the date of the interaction.
• Technical and usage logs: Retained for up to twelve (12) months from collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to evidence that we acted on your preference.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

Subject to applicable law, you have the following rights in relation to your personal data held by 3999bd:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations that require us to retain it.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of the data you provided to us in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interest, including direct marketing. Where you object to direct marketing, we will cease such communications immediately.

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected]. We may need to verify your identity before processing your request. We will respond within five (5) business days.

3999bd uses cookies and similar tracking technologies to operate the Platform, remember your preferences, monitor performance, and detect fraudulent activity. The following categories of cookies are used on the Platform:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, last visited game categories, and display options. Disabling these cookies may reduce Platform personalisation.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including pages visited, session duration, and error events. This data helps us improve Platform performance and user experience.
• Security and fraud detection cookies: Used to identify unusual behaviour patterns that may indicate fraudulent activity, account compromise, or automated bot traffic.

Most web browsers allow you to control cookies through their settings. However, disabling strictly necessary cookies will affect your ability to use core features of the Platform, including logging into your account. For detailed information on managing cookies in your specific browser, refer to your browser's help documentation.

The 3999bd Platform is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered an account on the Platform or provided personal data to us, please notify our support team immediately so that appropriate action can be taken.

Where 3999bd identifies or is notified that an account is held by a person under the age of 18, that account will be closed without delay, all associated funds will be handled in accordance with our Terms & Conditions, and any personal data collected in connection with that account will be deleted as soon as practicable.

Parents and guardians concerned about underage access to online gambling platforms are encouraged to make use of parental control tools available through internet service providers and device operating systems. Further guidance is available on our Responsible Gaming page.

3999bd takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 3999bd Platform is encrypted using SSL/TLS protocols, preventing interception in transit.
• Password hashing: User passwords are never stored in plain text. We use robust one-way hashing algorithms so that even internal personnel cannot read your password.
• Access controls: Access to systems containing personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and monitored.
• Firewalls and intrusion detection: Our server infrastructure is protected by firewalls and continuous intrusion detection monitoring to identify and respond to suspicious activity in real time.
• Regular security assessments: We conduct periodic reviews of our security practices and infrastructure to identify and address potential vulnerabilities.
• Data minimisation: We limit the personal data accessible to any individual system or team to the minimum required to perform their function.

While we take all reasonable steps to protect your personal data, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay and take immediate steps to contain and remediate the breach.

3999bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When we make material changes — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will provide notice via the Platform and, where possible, by email to your registered address, at least seven (7) days before the changes take effect.

For minor amendments, such as clarifications, corrections to typographical errors, or updated contact details, changes may take effect immediately upon publication. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following any update constitutes your acceptance of the revised policy as it stands at the time of your use.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 3999bd handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly through the Platform — average response time 2–5 minutes. This is the fastest way to reach our support and data protection teams.
• Email: [email protected] — for written data subject requests, please include "Privacy Request" in your subject line so we can route your message to the correct team promptly.

We are committed to resolving all privacy-related enquiries fairly, transparently, and within five (5) business days of receipt. For account security concerns or suspected unauthorised access, please use live chat for the fastest possible response.