399b Privacy Policy

This Privacy Policy ("Policy") governs how 399b ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of users ("Member", "User", "you") who access or use the 399b online casino and sports betting platform at 399b.io and any associated mobile applications or related services.

399b is committed to handling your personal data with the highest standards of care, transparency, and security. We process personal data only for legitimate, specified purposes and retain it only for as long as is necessary to fulfil those purposes or comply with applicable legal obligations.

This Policy should be read alongside the 399b Terms & Conditions, which form part of the overall agreement between you and 399b. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

This Policy is written in English and applies to all members accessing 399b from Bangladesh or any other jurisdiction where the platform is available. The English-language version is the legally binding version; any translated summaries are provided for convenience only.

399b collects personal data in several categories depending on your level of engagement with the platform. The table below summarises the categories of data we collect and the specific data points within each category:

We do not collect full payment card numbers, CVV codes, or internet banking credentials. Financial transactions are processed through secure third-party payment gateways, and 399b receives only the minimum data necessary to reconcile transactions on our platform.

399b collects personal data through a number of channels. Understanding these collection points helps you make informed decisions about the information you share with us:

• Registration Form: When you create your 399b account, you voluntarily provide identity and contact data including your name, date of birth, email address, and mobile number.
• KYC Verification: When you submit identity documents for account verification, we collect scans or photographs of your NID, passport, or driving licence and any supporting proof-of-address documents.
• Deposit & Withdrawal Transactions: Each financial transaction generates a record that includes the payment method used, the amount transacted, and a timestamp. This data is captured automatically by our payment processing systems.
• Platform Interaction: As you navigate 399b, we automatically collect technical data including your IP address, device type, browser, session duration, pages visited, and game interactions through server logs and analytics tools.
• Cookies & Tracking Technologies: We use cookies and similar technologies to maintain your session, remember preferences, and gather aggregated analytics data. See Section 8 for full details.
• Customer Support Channels: When you contact us via live chat or email, the content of those communications is stored as part of your account record for quality assurance and dispute resolution purposes.
• Third-Party Verification Services: We may receive supplementary identity or fraud-risk data from third-party KYC and AML screening providers to fulfil our compliance obligations.

399b processes your personal data only for specific, legitimate purposes. The table below maps each processing purpose to the data categories used and the legal basis on which the processing is conducted:

399b does not use automated decision-making or profiling in ways that produce significant legal or similarly significant effects on members without human review. Where algorithmic tools are used for fraud detection or responsible gaming monitoring, flagged accounts are reviewed by a member of the 399b compliance team before any restrictive action is taken.

399b does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card payment processors receive the minimum personal and financial data required to authorise and complete transactions on your behalf.
• KYC & AML Service Providers: Third-party identity verification and anti-money laundering screening partners receive identity and compliance data solely for the purpose of fulfilling our legal verification obligations.
• Game Content Providers: Game studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive a pseudonymous session identifier and bet data to operate their game engines within the 399b platform. They do not receive your name, contact details, or financial data.
• IT Infrastructure Providers: Our hosting, cloud storage, and cybersecurity partners process data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to 399b.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement, financial intelligence units, or regulatory bodies where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or serious harm.
• Business Transfers: In the event of a merger, acquisition, or sale of 399b assets, your data may be transferred to the successor entity. You will be notified of any such transfer and any material change to how your data is processed as a result.

399b retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or audit requirements. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on 399b.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming & Bet History: Retained for a minimum of three (3) years following account closure for dispute resolution and responsible gaming audit purposes.
• Customer Support Communications: Retained for two (2) years following the closure of each support interaction.
• Technical Logs (IP, session data): Retained for twelve (12) months on a rolling basis for security monitoring and fraud prevention.
• Marketing Communication Preferences: Retained until you withdraw consent or close your account. Opt-out records are retained indefinitely to honour your preference.

When data is no longer required under the applicable retention schedule, it is securely deleted or anonymised so that it can no longer be associated with your identity. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

399b implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. The key security measures in place include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the 399b platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Our SSL certificate is validated and regularly renewed.
• Password Hashing: Account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms with per-account salting to protect password data at rest.
• Two-Factor Authentication (OTP): New device logins trigger an OTP verification step sent to your registered mobile number or email address, preventing unauthorised account access even if your password is compromised.
• Access Controls: Internal access to member personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality agreements and regular security training.
• Infrastructure Security: Our servers are hosted in secure data centres with physical access controls, 24/7 monitoring, redundant power systems, and regular penetration testing by independent security auditors.
• Data Breach Response: In the event of a data breach that poses a risk to your rights or freedoms, 399b will notify affected members promptly with details of the nature of the breach, the data involved, and the steps being taken to mitigate harm.

While 399b takes all reasonable technical and organisational precautions to secure your data, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 399b account, enable OTP on all devices, and contact our support team immediately if you suspect any unauthorised activity on your account.

399b uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a website. The cookies used by 399b fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These cookies maintain your login session, enforce security measures such as OTP verification state, and remember your language and display preferences. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences across sessions, such as your preferred deposit method, game filters, and notification settings. These enhance your experience but are not strictly necessary.
• Analytics Cookies: Used to collect aggregated, anonymised data about how members use the platform — which pages are visited most, where users spend time, and how navigation flows through the site. This data helps us improve platform design and performance. Analytics data is not linked to your individual identity.
• Security Cookies: Used to detect and prevent fraud, bot activity, and suspicious login patterns. These work in conjunction with our fraud detection systems and are considered strictly necessary for platform security.

399b does not use third-party advertising cookies or cross-site behavioural tracking cookies. We do not share cookie-derived data with advertising networks or data brokers.

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. For functional and analytics cookies, disabling them will reduce platform personalisation but will not prevent you from using 399b.

As a 399b member, you have a number of rights in relation to the personal data we hold about you. 399b is committed to honouring these rights promptly and transparently. Your rights include:

• Right of Access: You have the right to request a copy of all personal data that 399b holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account information (name, email, address) can be updated directly from your account settings; identity document corrections require a support request.
• Right to Erasure: You may request deletion of your personal data subject to certain conditions. Note that data subject to mandatory retention requirements (e.g., KYC records and transaction logs retained under AML law) cannot be deleted until the applicable retention period expires, even upon account closure.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold or object to our use of it.
• Right to Data Portability: You may request that we provide your personal data in a portable, structured format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your data where 399b relies on legitimate interest as the legal basis. You also have the absolute right to opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact the 399b support team via live chat (available 24/7) or by emailing [email protected]. We may need to verify your identity before processing a data request. We aim to respond to all data rights requests within 30 calendar days.

During the registration process, 399b collects date of birth information and uses it to verify that all members meet the minimum age requirement of 21 years. KYC identity verification provides a secondary check by confirming the date of birth against official government-issued documents.

If you are a parent or guardian and have reason to believe that a minor under your care has registered on 399b without authorisation, please contact us immediately at [email protected] so that we can investigate and take appropriate action including account closure and data removal.

399b reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When we make material changes to this Policy, we will notify active members via email and/or a prominent notice on the 399b platform at least 14 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the 399b platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

If you disagree with any changes to this Privacy Policy, you may close your account by contacting the 399b support team. Outstanding balances will be returned to your verified withdrawal method in accordance with the withdrawal procedures described in the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 399b has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated compliance team.

• Email: [email protected] — use the subject line "Privacy Enquiry" for faster routing to the compliance team.
• Live Chat: Available 24 hours a day, 7 days a week directly on the 399b platform. For data rights requests, our live chat team will escalate your request to the compliance team within one business day.
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days.
• Complaints: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or financial regulatory authority in your jurisdiction.

399b takes all privacy complaints seriously. We commit to investigating every complaint fairly and transparently, and to providing a clear written response explaining our findings and any action taken. We view member trust as fundamental to the 399b platform and treat the handling of personal data accordingly.