Privacy Policy — Your Data at 3999bt

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by 3999bt ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://3999bt.ws ("Platform"). This Policy applies to all personal data collected from individuals ("you", "Player", "User") who register an account, make a deposit, place a wager, or otherwise interact with the Platform.

3999bt is committed to handling personal data in a manner that is transparent, fair, and secure. We recognise that our Players in Bangladesh — including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — trust us with sensitive financial and identity information, and we do not take that responsibility lightly.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available via the links in the footer of this page.

2. Data Controller

For the purposes of this Policy, 3999bt acts as the data controller in respect of all personal data collected through the Platform. If you have any questions about how your data is processed, or wish to exercise any of your data rights, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Availability: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

We aim to acknowledge all data-related enquiries within one (1) Bangladesh Standard Time business day and to resolve them fully within five (5) Bangladesh Standard Time business days.

3. How We Collect Personal Data

We collect personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automated technologies: Data collected automatically when you use the Platform, including cookies, server logs, and session-tracking technologies that record your IP address, device identifiers, and gameplay activity.
• Payment processors: Confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank when processing your transactions. We receive only the data necessary to reconcile your account — we do not receive or store full payment card numbers.
• Identity verification providers: Where we engage a third-party KYC provider to verify your identity documents, that provider may share the outcome of the verification (approved / rejected / pending) along with the verified data points with us.
• Game providers: Aggregated session data shared by game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of reconciling wagers and winnings in your account.

4. Lawful Basis for Processing

3999bt processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing is necessary to provide you with the Services you have contracted for, including account management, deposit processing, game participation, and withdrawal execution.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering (AML) checks, age verification, and fraud prevention requirements.
• Legitimate interests: Processing is necessary for our legitimate business interests — for example, improving the Platform, detecting and preventing fraud, maintaining platform security, and analysing aggregate usage patterns — where those interests are not overridden by your privacy rights.
• Consent: Where we send you promotional communications (including offers related to BPL cricket fixtures, IPL season promotions, Eid bonuses, or Pohela Boishakh campaigns), we do so only with your prior consent. You may withdraw that consent at any time by contacting our support team.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Creating, maintaining, and managing your 3999bt Account.
• Verifying your identity and age (21+) during registration and at any subsequent point where verification is required.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment methods.
• Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct.
• Providing customer support and resolving disputes.
• Sending service-related communications, including account notifications, security alerts, and OTP codes.
• Sending promotional communications where you have given your consent, including details of bonuses, tournaments, and seasonal offers.
• Monitoring your gaming activity to identify signs of problem gambling and to fulfil our responsible gaming obligations.
• Improving the Platform and personalising your experience based on your gameplay preferences.
• Producing aggregated, anonymised analytics that help us understand how the Platform is used — these analytics contain no personally identifiable information.

6. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: To process your deposits and withdrawals, we share the minimum necessary data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks. These providers are bound by their own privacy and security obligations.
• Identity verification providers: To comply with KYC and AML requirements, we may share your identity documents with a third-party verification service. That provider processes data solely for the purpose of verification and is prohibited from using your data for any other purpose.
• Game providers: We share session and wager data with our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) solely to reconcile gameplay results and ensure accurate crediting of winnings.
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies, or other competent authorities where we are required to do so by law, court order, or in connection with the prevention or investigation of fraud and financial crime.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

In all cases where we engage third-party processors, we require them to handle your data in a manner consistent with this Policy and to implement appropriate technical and organisational security measures.

7. Cookies and Similar Technologies

3999bt uses cookies and similar browser-storage technologies to operate and improve the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Analytics cookies: Used to collect aggregate, anonymised data about how Players navigate the Platform — for example, which game categories are most visited and how long sessions last on average. This data does not identify you individually.
• Preference cookies: Store your display and notification preferences so that the Platform behaves consistently between sessions.

We do not use advertising cookies, retargeting pixels, or any third-party behavioural tracking technology that would share your browsing profile with external advertising networks.

Most mobile browsers allow you to control or delete cookies through the browser's settings menu. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or preference cookies will not affect your ability to play.

8. Data Retention

We retain your personal data for as long as your Account remains active. If your Account is closed — whether voluntarily or by 3999bt — we will retain the data required to comply with our legal obligations (including AML record-keeping requirements) for a period of five (5) years from the date of Account closure. Data that is no longer required for any legal or operational purpose is securely deleted or anonymised.

Gaming activity logs are retained for a minimum of two (2) years from the date of each session, to facilitate dispute resolution and to support our responsible gaming monitoring obligations.

Communications with our support team are retained for one (1) year following the resolution of the relevant ticket or enquiry, after which they are permanently deleted.

9. Data Security

3999bt implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data in transit is protected by TLS 1.3 encryption. There is no unencrypted HTTP pathway to the Platform.
• All passwords are stored using a strong, salted cryptographic hashing algorithm. We never store or transmit passwords in plain text.
• Access to personal data within our organisation is restricted to staff and contractors who genuinely need it to perform their role. Access is controlled by role-based permissions and reviewed regularly.
• Our servers and databases undergo regular security assessments and penetration testing.
• We maintain an incident response plan. In the event of a data breach that poses a material risk to your privacy, we will notify affected Players promptly and take all reasonable steps to mitigate the impact.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your 3999bt Account and to enable OTP verification on all logins.

10. Your Data Rights

As a Player on the 3999bt platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]:

11. Minors and Age Restrictions

The 3999bt Platform is strictly for adults aged 21 years or above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an Account has been registered by a minor, we will immediately suspend the Account, void any associated activity, and delete the personal data collected, retaining only the minimum information required to prevent future registration attempts by that individual.

If you are a parent or guardian and believe that a person under 21 in your care has registered on 3999bt, please contact our support team at [email protected] immediately so that we can take appropriate action.

12. Third-Party Services and Links

The 3999bt Platform does not contain links to third-party websites. All content and functionality on the Platform is provided directly by 3999bt or by our contracted game and payment partners operating within the Platform environment. This Privacy Policy applies solely to data processed by 3999bt and does not extend to data processed independently by our game providers or payment partners under their own privacy frameworks.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features available on the Platform. When a material change is made, we will notify registered Players via the email address or mobile number associated with their Account at least seven (7) days before the change takes effect.

The updated Policy will be published on this page with a revised Effective Date at the top. Continued use of the Platform following notification of a change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and contact our support team to arrange account closure.

14. Contact and Complaints

All privacy-related enquiries, data rights requests, and complaints should be directed to our support team:

• Email: [email protected]
• Availability: 24/7, Bangladesh Standard Time (UTC+6)
• Response time: Acknowledgement within 1 BST business day; full resolution within 5 BST business days

We take all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may seek further recourse through any competent authority or dispute resolution mechanism available to you under applicable law.