Privacy Policy — 3999b Data Protection

Information We Collect

3999b collects personal information from players at the point of registration, during account verification, and through normal use of the platform. The categories of personal data we collect, and the circumstances in which we collect them, are described below.

Identity and Contact Data — collected during account registration:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are 18 years of age or older).
• Email address used for account communications, promotional notifications (where opted in), and security alerts.
• Mobile phone number, where provided, for two-factor authentication and support contact.
• Residential address in Bangladesh (city, district, postal code), used for account verification and AML compliance.

Identity Verification Documents — collected during KYC review:

• National Identity Card (NID) scan or photograph.
• Passport copy, where NID is unavailable or insufficient.
• Bank statement or mobile banking statement to confirm source of funds, where required.
• Selfie or live facial image where identity document verification requires biometric confirmation.

Financial and Transaction Data — collected during deposits and withdrawals:

• Mobile banking account identifiers (e.g., bKash or Nagad registered number) — stored as a reference identifier only; PINs are never collected.
• Transaction reference numbers and timestamps for all deposits and withdrawals.
• Running account balance and wagering history, maintained for AML audit and dispute resolution purposes.

Technical and Usage Data — collected automatically during platform use:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, and game interactions — used for platform analytics and fraud detection.
• Referral source (e.g., which page or campaign directed you to 3999b), used for internal marketing attribution only.

How We Use Your Data

3999b processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those disclosed in this Privacy Policy. The following table summarises each processing purpose, the legal basis on which it rests, and the categories of data involved.

3999b does not use automated decision-making or profiling that produces legal or similarly significant effects on players, except where required to fulfil AML obligations or to enforce the platform's responsible gaming measures. Where automated decisions are made in these contexts, players have the right to request human review of the decision by contacting the support team.

Data Sharing and Disclosure

3999b does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited, specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment Service Providers — When you initiate a deposit or withdrawal, transaction-relevant data (such as your mobile banking reference number or card token) is shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay, DBBL, Visa, Mastercard) solely for the purpose of processing that specific transaction. Payment providers operate under their own data protection policies, which we encourage you to review.

Game Content Providers — 3999b's casino games are supplied by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised session identifiers and game result data as part of normal game operation. They do not receive your name, NID, or payment details.

Identity Verification Partners — KYC document verification may be facilitated by a third-party identity verification service. Documents submitted for verification are processed under a strict data processing agreement that prohibits the partner from using your data for any purpose other than the specific verification task instructed by 3999b.

Legal and Regulatory Authorities — 3999b may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other government authorities when required to do so by applicable law, by a lawful court order, or in connection with a genuine investigation into fraud, money laundering, or other criminal activity. In such cases, 3999b will disclose only the minimum data required.

Cross-Border Data Transfers — Some third-party service providers engaged by 3999b may process data outside of Bangladesh. Where such transfers occur, 3999b ensures that appropriate contractual and technical safeguards are in place to protect your data to a standard equivalent to that described in this Policy. You may request details of any active cross-border data transfer arrangements by contacting [email protected] (plain text — not a link).

Cookies and Tracking Technologies

3999b uses cookies and similar tracking technologies to maintain the functionality of the platform, ensure the security of user sessions, and gather anonymised analytics data that helps us improve the player experience. This section explains the types of cookies we use and how you can manage them.

Strictly Necessary Cookies — These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and the prevention of fraudulent logins. Without these cookies, the 3999b website cannot operate correctly. These cookies cannot be disabled without impairing core platform functionality.

Functional Cookies — These cookies remember your preferences (such as your preferred language, last-visited game category, and display settings) to provide a more personalised experience on subsequent visits. Disabling functional cookies may reduce the personalisation of your platform experience but will not prevent you from accessing the platform.

Analytics Cookies — 3999b uses first-party analytics tools to understand aggregate platform usage patterns, including which pages are most visited, how players navigate between game categories, and where technical errors most commonly occur. This data is aggregated and anonymised — it is not used to identify individual players and is not shared with third-party advertisers.

Managing Cookies — You may control and delete cookies through your web browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your 3999b account and using the platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

3999b's cookie practices do not constitute the use of personal data for advertising profiling. No cookie data collected by 3999b is combined with external data sources to build advertising profiles of individual players.

Data Retention

3999b retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or audit obligations. The following retention periods apply to the principal categories of data held by 3999b:

• Account registration data — retained for the duration of your active account plus a minimum of five (5) years from the date of account closure, in accordance with standard AML and fraud prevention obligations.
• KYC identity documents — retained for a minimum of five (5) years from the date of verification, or longer if required by a specific legal obligation or ongoing investigation.
• Transaction records — all deposit and withdrawal records are retained for a minimum of seven (7) years from the date of the transaction to satisfy financial record-keeping and AML audit requirements.
• Customer support correspondence — retained for three (3) years from the date of the most recent interaction, or for the duration of any active dispute to which the correspondence relates.
• Marketing consent records — retained for as long as your marketing consent is active, plus two (2) years following any withdrawal of consent, to maintain evidence of the consent history.
• Analytics data (anonymised) — retained indefinitely in aggregated, anonymised form. Individual session data is anonymised within 90 days of collection.

Your Privacy Rights

As a player whose personal data is processed by 3999b, you hold the following rights in respect of your data. These rights may be exercised at any time by submitting a written request to [email protected] (plain text — not a link). 3999b will acknowledge your request within 5 business days and respond substantively within 30 days of receipt.

1. Right of Access — You have the right to request a copy of all personal data held by 3999b in relation to your account. This includes your registration details, KYC records, transaction history, and support correspondence.
2. Right to Rectification — If any personal data held by 3999b is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (e.g., changes to your registered name) may require supporting documentation.
3. Right to Erasure — You may request the deletion of your personal data. This right is subject to override by applicable legal retention obligations, including AML and financial record-keeping requirements. Where deletion is not immediately possible, 3999b will explain the applicable retention period and confirm when deletion will occur.
4. Right to Restriction of Processing — You may request that 3999b restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interest pending determination of that objection.
5. Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) where technically feasible. This right applies to data you have actively provided to 3999b and that is processed on the basis of contractual necessity or consent.
6. Right to Object — You have the right to object to the processing of your personal data where that processing is based on 3999b's legitimate interests. Upon receipt of a valid objection, 3999b will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent — Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Security Measures

3999b implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS) — All data transmitted between your browser or mobile app and the 3999b platform is encrypted using current TLS standards. This protects your login credentials, payment details, and personal information from interception during transmission.
• Data-at-rest encryption — Sensitive data stored on 3999b's servers, including KYC documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access controls — Access to personal data within 3999b's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access to sensitive data is logged and auditable.
• Two-factor authentication (2FA) — 3999b supports two-factor authentication on player accounts. Enabling 2FA significantly reduces the risk of unauthorised account access in the event that your password is compromised. Players in Bangladesh are strongly encouraged to enable 2FA via their account security settings.
• Intrusion detection and monitoring — 3999b's infrastructure is monitored continuously for anomalous access patterns, potential intrusion attempts, and unusual transaction activity. Security incidents are triaged and responded to in accordance with a documented incident response procedure.
• Third-party security assessments — 3999b's platform undergoes periodic security assessments to identify and remediate vulnerabilities in line with responsible disclosure practices.

Despite the robust safeguards described above, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 3999b will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

Policy Updates and Contact

3999b reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, the introduction of new platform features, changes in applicable law, or feedback from players and regulators. The date on which this Policy was most recently updated is displayed at the top of the document.

Where an update to this Privacy Policy involves a material change to how your data is processed — particularly where a new processing purpose is introduced, or where data is to be shared with a new category of third party — 3999b will notify registered players via the email address on file before the change takes effect. Continued use of the 3999b platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

The most current version of this Privacy Policy is always available at 3999b.app/privacy-policy. We recommend bookmarking this page and reviewing it periodically, particularly when you receive a notification of an update from 3999b.

This Privacy Policy is written in English and governs the relationship between 3999b and all players accessing the platform from Bangladesh and internationally. In the event that a translation of this document is produced for informational purposes, the English-language version shall remain the definitive and legally controlling version in all circumstances.

By continuing to use the 3999b platform, you confirm that you have read and understood this Privacy Policy in full and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue your use of the platform and contact [email protected] (plain text — not a link) to arrange account closure.