399bit Privacy Policy

The data controller for all personal data processed through the 399bit Platform is 399bit. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Support team by email at [email protected]. Our support team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6). We aim to respond to all privacy-related enquiries within 5 business days.

399bit processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing required to open and manage your player account, process deposits and withdrawals, and provide access to games and betting markets.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, tax reporting obligations, and other applicable legal duties.
• Legitimate interests: Processing carried out to detect and prevent fraud, maintain platform security, improve our services, and communicate operationally important account information.
• Consent: Processing for which you have given your explicit consent, primarily the sending of promotional emails, SMS notifications, and personalised marketing communications. You may withdraw this consent at any time via your account settings or by emailing [email protected].

399bit uses the personal data we collect for the following purposes:

• To register and maintain your player account, verify your identity, and confirm your eligibility to use the Platform (minimum age 21).
• To process deposits, withdrawals, and payment reversals using your nominated payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Visa, Mastercard).
• To deliver the games, betting markets, live casino tables, Plinko, Dragon Fishing 2, slots, and cricket betting services available on the 399bit Platform.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other unlawful activity.
• To fulfil our responsible gaming obligations, including monitoring for signs of problem gambling and applying player-requested limits or exclusions.
• To communicate with you about your account, transactions, security alerts, and changes to our Terms & Conditions or Privacy Policy.
• To send promotional offers, bonus notifications, and seasonal campaigns (e.g., Eid promotions, BPL cricket offers, Pohela Boishakh events) — only where you have given explicit consent.
• To improve the Platform through analytics, performance monitoring, and user experience research.

399bit uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the 399bit website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly. These enable login sessions, security features, and payment processing flows. They cannot be disabled without preventing core Platform functionality.
• Performance cookies: Collect anonymised data about how players interact with the Platform — such as which pages are visited most frequently and where errors occur — to help us improve site performance and reliability.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming limits) to personalise your experience on return visits.
• Analytics cookies: Used by 399bit to understand aggregate user behaviour patterns. No individually identifiable data is shared with external analytics services.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 399bit Platform. We do not use third-party advertising cookies or allow external ad networks to place tracking technologies on our Platform.

399bit does not sell, rent, or trade your personal data to unaffiliated third parties. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Visa, and Mastercard receive only the data necessary to process your transaction. Each payment partner is bound by their own privacy obligations.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver and certify their game content. No personally identifiable information is shared with game studios beyond what is strictly required.
• Identity verification services: Third-party KYC providers may process identity documents you submit during account verification. These providers operate under strict data processing agreements with 399bit.
• Regulatory and law enforcement authorities: 399bit may disclose personal data to competent authorities where required by applicable law, court order, or in connection with the investigation of fraud or money laundering.
• Platform service providers: IT infrastructure, cloud hosting, email delivery, and analytics partners who process data on our behalf under binding data processing agreements that prohibit them from using your data for their own purposes.

399bit retains personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by applicable law. Our standard retention guidelines are as follows:

• Active player account data is retained for the lifetime of the account plus a minimum of 5 years after account closure to meet AML and regulatory obligations.
• Transaction and financial records are retained for a minimum of 7 years in line with standard financial record-keeping requirements.
• KYC identity documents are retained for 5 years following account closure or the completion of the business relationship.
• Support correspondence is retained for 3 years after the closure of the relevant case.
• Marketing consent records are retained until consent is withdrawn, plus 1 year thereafter as evidence of the consent.
• Technical logs (IP addresses, session data) are retained for up to 12 months for security and fraud investigation purposes, then deleted or anonymised.

When personal data is no longer required, 399bit securely deletes or anonymises it in accordance with our internal data disposal procedures.

As a player on the 399bit Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 5 business days and will not charge a fee for handling reasonable requests.

• Right of access: You may request a copy of all personal data 399bit holds about you, along with details of the purposes for which it is processed and the categories of data held.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to restrict processing: In certain circumstances, you may request that we limit the processing of your data while a dispute or investigation is ongoing.
• Right to data portability: You may request a machine-readable export of the personal data you have provided to us directly, where processing is based on your consent or on a contract.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

399bit implements a layered approach to data security designed to protect personal and financial data against unauthorised access, loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 399bit servers.
• Encrypted storage of sensitive data at rest, including identity documents and payment references.
• Role-based access controls ensuring that only authorised 399bit personnel can access personal data, and only to the extent required for their role.
• Automated fraud and anomaly detection systems that monitor account activity in real time for suspicious behaviour.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Strict third-party vendor due diligence to ensure all partners who process data on our behalf maintain equivalent security standards.

Despite these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, 399bit will notify affected players and relevant authorities in accordance with applicable legal requirements. If you suspect any unauthorised access to your account, contact support immediately at [email protected].

The 399bit Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of an underage individual, we will delete that data immediately, close the associated account, and return any deposits made to the original payment source. If you believe an underage person has registered on 399bit, please notify us immediately at [email protected]. Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms.

399bit reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via email and/or via an in-platform notification prior to the changes taking effect. The effective date at the top of this policy will be updated to reflect the date of the latest revision. We encourage you to review this policy periodically. Your continued use of the 399bit Platform following notification of any changes constitutes your acceptance of the revised policy. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting support.