399db Privacy Policy

Introduction

399db ("we", "us", "our") operates the online casino and sports betting platform accessible at https://399db.io (the "Platform"). We are committed to protecting and respecting the privacy of every individual who interacts with our Platform, whether as a registered player, a visitor, or a prospective user.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 399db. It describes the categories of data we collect, the purposes for which we use that data, the circumstances under which we may share it with third parties, the measures we take to keep it secure, and the rights you have in relation to your own personal information.

This Privacy Policy should be read alongside our Terms & Conditions, which are available at /terms-conditions and are incorporated herein by reference. By registering an account, making a deposit, or otherwise using any part of the 399db Platform, you confirm that you have read, understood, and accepted this Privacy Policy in full.

Data We Collect

399db collects personal data from you in the following categories and through the following means:

2.1 Data You Provide Directly

When you register an account or interact with our Platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and a copy of your government-issued identification document (National ID card, passport, or driving licence) when required for KYC verification.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi).
• Account Credentials: Username and encrypted password. We do not store passwords in plain text under any circumstances.
• Financial Data: Payment method details, including the mobile wallet account number (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used for deposits and withdrawals, as well as transaction history and deposit/withdrawal amounts in Bangladeshi Taka (BDT).
• Verification Documents: Copies of identity documents, proof-of-address documents, and proof-of-payment-method ownership submitted during the KYC process.
• Communications Data: The content of any messages you send to our support team via email or live chat, including the nature of your query, the time of contact, and any follow-up correspondence.

2.2 Data Collected Automatically

When you access the 399db Platform, we automatically collect certain technical and behavioural data through server logs, cookies, and similar tracking technologies:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited on the Platform, games played, betting markets accessed, session duration, clickstream data, search queries within the Platform, and features used.
• Gaming Activity Data: Bet history, game outcomes, wager amounts, win/loss records, bonus usage, and responsible gaming tool activations (such as deposit limit settings or self-exclusion requests).
• Location Data: General geographic location inferred from your IP address, used to confirm compliance with our eligible territory requirements. We do not collect precise GPS-level location data.

2.3 Data from Third Parties

In certain circumstances, 399db may receive personal data about you from third-party sources, including:

• Identity verification service providers used to authenticate the documents you submit during KYC.
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status and ownership of transactions.
• Fraud detection and anti-money-laundering screening services that cross-reference data against publicly available watchlists or databases.
• Game Providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who may share technical session data relevant to a dispute or technical issue you have reported.

How We Use Your Data

399db uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create and maintain your 399db player account, verify your identity at registration, and manage your account settings and preferences.
• Service Delivery: To provide you with access to our casino games, sports betting markets (including cricket, BPL, IPL, T20 World Cup, and Bangladesh Tigers matches), arcade games, slots, and all other features of the 399db Platform.
• Payment Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to verify transaction authenticity, and to maintain accurate financial records of all activity on your account.
• Identity Verification (KYC): To verify your age (minimum 21 years), identity, residential address, and payment method ownership in accordance with our responsible gaming and anti-money-laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other forms of prohibited conduct on the Platform.
• Responsible Gaming: To monitor your gaming activity for signs of problematic behaviour, to enforce deposit limits and self-exclusion requests you have activated, and to comply with our responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve complaints, investigate disputes relating to game outcomes or transactions, and provide ongoing assistance through our 24/7 support team.
• Marketing Communications: To send you promotional offers, bonus notifications, game announcements, and seasonal promotions (such as Eid, Pohela Boishakh, and Victory Day specials) where you have opted in to receive such communications. You may withdraw your consent at any time by contacting our support team.
• Platform Improvement: To analyse usage patterns, identify technical issues, optimise the user experience, and develop new features based on aggregated behavioural data.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records required by applicable law.

Legal Basis for Processing

399db processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the 399db Platform, process your transactions, and deliver the services you have registered to use. This legal basis applies to account management, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with a legal obligation applicable to 399db, including identity verification (KYC), anti-money-laundering checks, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of 399db or a third party, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, provided those interests are not overridden by your own privacy interests or fundamental rights.
• Consent: Where processing is based on your consent — principally for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing

399db does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may, however, share your personal data with the following categories of third parties where necessary to deliver our services or fulfil our legal obligations:

5.1 Payment Service Providers

We share the minimum necessary financial data with payment processors — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to authenticate and process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently responsible for the data they hold.

5.2 Identity Verification Partners

To fulfil our KYC obligations, we share identity documents and personal data with accredited third-party identity verification service providers. These providers are contractually bound to process your data only for the purpose of identity verification on behalf of 399db and are prohibited from retaining or using your data for any other purpose.

5.3 Game Providers

Game Providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical and session data (such as a player identifier and session token) to facilitate gameplay. These providers do not receive your full identity or financial data unless it is strictly necessary to investigate a dispute relating to a specific game round.

5.4 Legal and Regulatory Authorities

399db may disclose personal data to governmental or regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. In such cases, we will disclose only the minimum data necessary to comply with the relevant obligation.

5.5 Business Transfers

In the event that 399db undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity prior to any transfer taking effect.

Cookies & Tracking Technologies

399db uses cookies and similar tracking technologies on the Platform to improve your experience, maintain your session, analyse usage patterns, and deliver relevant content. The following categories of cookies are in use:

Essential cookies cannot be disabled as they are required for the Platform to function correctly. You may manage your preferences for functional and analytics cookies by contacting our support team. Please note that disabling certain cookies may affect the functionality and performance of the Platform.

Data Retention

399db retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, including compliance with legal, accounting, and reporting obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of your account and for a minimum of five years following permanent account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five years from the date of the transaction to satisfy financial record-keeping obligations and to support dispute resolution.
• KYC Verification Documents: Retained for the duration of your account and for a minimum of five years following account closure. These documents may be retained for longer periods where required by a specific legal obligation or ongoing investigation.
• Gaming Activity Data: Retained for a minimum of three years following the relevant session or bet, used for dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Support Communications: Retained for a minimum of two years from the date of the last communication, used for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to the minimum retention periods above where other legal bases apply.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised in a manner that prevents re-identification.

Data Security

399db implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 399db Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Password Hashing: Account passwords are stored exclusively as cryptographic hashes using a strong hashing algorithm. Plain-text passwords are never stored on 399db servers.
• Access Controls: Access to personal data stored on 399db systems is restricted to authorised personnel on a strict need-to-know basis. All internal access to player data is logged and subject to regular audit.
• Intrusion Detection: 399db employs automated monitoring systems to detect and respond to unusual access patterns, failed login attempts, and other indicators of unauthorised access or attack.
• Secure Data Storage: Player data is stored on servers protected by physical and logical access controls, including firewall protection, encryption at rest, and regular security patching.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 399db will notify affected players and take immediate remedial action in accordance with our incident response procedures.

While 399db takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect unauthorised access to your account.

Your Rights

As a player on the 399db Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link).

• Right of Access: You have the right to request a copy of the personal data that 399db holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data we hold about you be corrected or completed without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request that 399db delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal obligation to retain certain data for minimum periods as described in Section 7.
• Right to Restriction of Processing: You have the right to request that 399db restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects on you, unless such automated processing is necessary for the performance of a contract or is based on your explicit consent.

399db will respond to all rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before actioning a rights request to ensure that we do not disclose or modify data in response to a fraudulent request.

Third-Party Services

The 399db Platform integrates third-party services to deliver games, process payments, and support our operations. These third-party services operate under their own independent privacy policies, and 399db is not responsible for the data practices of these providers. We encourage you to review the privacy policies of any third-party service with which you interact in connection with your use of the 399db Platform.

Third-party Game Providers whose software is available on the 399db Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may collect limited technical session data as part of the game delivery process. This data is used solely to facilitate the delivery of the game experience and is governed by each provider's own data processing terms.

Payment service providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — process transaction data in accordance with their own privacy policies and applicable financial data protection regulations. 399db does not store full card numbers or complete mobile wallet account credentials on its own servers; this sensitive data is handled directly by the relevant payment processor using their own secure infrastructure.

The 399db Platform does not embed third-party social media tracking pixels, advertising networks, or data brokers. We do not share player data with social media platforms or third-party advertisers for targeted advertising purposes.

Children & Minors

The 399db Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21 years of age, you must not access, register on, or use any part of the 399db Platform.

If 399db becomes aware, or has reasonable grounds to suspect, that personal data has been collected from a person under the age of 21, we will take immediate steps to verify the age of the relevant account holder. Where the account holder is found to be under 21, we will close the account immediately, permanently delete the associated personal data to the extent permitted by our legal retention obligations, and withhold any balance in accordance with our responsible gaming and terms and conditions obligations.

If you have reason to believe that a person under the age of 21 has registered an account on the 399db Platform, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action without delay.

Policy Updates

399db reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform. When material changes are made to this Privacy Policy, we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address associated with your account.

The effective date of the current version of this Privacy Policy is displayed at the top of this page and in the "Last updated" notice. We encourage you to review this Privacy Policy periodically to stay informed about how 399db is protecting your personal data.

Your continued use of the 399db Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any update to this Privacy Policy, you must cease using the Platform and contact our support team to close your account prior to the effective date of the update.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 399db processes your personal data, please contact our dedicated privacy support team using the following details:

• Support Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including public holidays
• Response Time: We aim to respond to all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6)

For requests to exercise your data subject rights — including access, rectification, erasure, restriction, portability, or objection — please clearly state the nature of your request and include sufficient information to allow us to verify your identity before processing your request. We will acknowledge receipt of your request within five business days and provide a substantive response within 30 days.