3999d Privacy Policy

1Introduction and Scope

This Policy is issued by 3999d and governs the collection, use, storage, and disclosure of personal data of individuals who interact with the Platform. It is intended to be read in conjunction with the 3999d Terms and Conditions, which are incorporated herein by reference. In the event of any inconsistency between this Policy and the Terms and Conditions regarding the handling of personal data, this Policy shall prevail.

3999d processes personal data only for legitimate, specified, and lawful purposes. We do not process personal data in a manner that is incompatible with those purposes. We take reasonable steps to ensure that the data we hold is accurate, up to date, and limited to what is necessary for the purposes described in this Policy.

2Information We Collect

We collect personal data that you provide directly to us when you register an account, complete identity verification, make deposits or withdrawals, contact support, or participate in promotions. This includes:

• Identity data: full name, date of birth, gender, nationality, and a copy of a government-issued identity document (National ID or passport).
• Contact data: mobile phone number, email address, and residential address in Bangladesh.
• Financial data: payment method details (bKash wallet number, Nagad number, Rocket number, Upay number, or masked card details for Visa/Mastercard), transaction history, and account balance records.
• Account data: username, hashed password, account preferences, responsible gaming settings, and communication preferences.
• Communications data: records of support chats, emails, and any other correspondence between you and 3999d.

We also collect data automatically when you use the Platform, including:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network carrier.
• Usage data: pages visited, games played, bets placed, time spent on each section of the Platform, and navigation path through the site.
• Session data: login timestamps, session duration, and logout events, used to detect suspicious access patterns and to maintain account security.
• Cookie data: first-party cookies set by 3999d for session management and platform functionality. See Section 7 of this Policy for full details.

3How We Use Your Information

3999d processes your personal data for the following purposes:

• Account creation and management: to create and maintain your player account, verify your identity, process KYC documentation, and manage your account settings and preferences.
• Transaction processing: to process deposits made via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, and to process withdrawal requests to your registered payment method.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct, and to maintain the security of the Platform.
• Regulatory compliance: to meet our obligations under applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and any lawful request from a competent regulatory authority.
• Customer support: to respond to your enquiries, process complaints, and provide assistance via our 24/7 English and Bangla support channels.
• Marketing and promotions: to send you promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receive such communications, or where we have a legitimate interest in contacting you about our services. You may opt out at any time by contacting [email protected].

4Legal Basis for Processing

The specific legal bases on which 3999d relies to process your personal data are:

• Contract performance: processing necessary to provide the services you have requested, including account management, gameplay, and payment processing.
• Legal obligation: processing required to comply with applicable laws, including identity verification, age checks, AML record-keeping, and responding to lawful regulatory requests.
• Legitimate interests: processing necessary to pursue 3999d's legitimate interests in preventing fraud, maintaining platform security, improving the Platform, and communicating relevant offers to existing players — provided these interests are not overridden by your rights.
• Consent: where we send you direct marketing communications or set non-essential cookies, we do so only on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5Sharing Your Information

3999d does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum financial data necessary to process your transactions. These providers are bound by their own privacy and data security obligations.
• Identity verification providers: third-party KYC and identity verification services that help us confirm the age and identity of players, as required by law.
• Game software providers: providers such as Pragmatic Play, Evolution Gaming, Spribe, and others may receive your player identifier and gameplay data to facilitate game delivery and resolve game-related disputes.
• Regulatory and law enforcement authorities: we may be required to disclose personal data to regulators, tax authorities, law enforcement agencies, or courts where required or permitted by applicable law.

All third-party service providers who receive your personal data on our behalf are required to keep it confidential, to use it only for the purpose for which it was disclosed, and to maintain appropriate technical and organisational measures to protect it. We do not allow our service providers to use your personal data for their own marketing purposes.

6Payment Data and Financial Information

3999d does not store full payment card numbers or mobile banking PINs on its servers. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the respective payment provider's secure gateway. For card transactions via Visa or Mastercard, only a masked card reference (last four digits and card type) is retained by 3999d for transaction reconciliation purposes. Full card data is processed exclusively by our PCI-DSS compliant card processing partner and is never stored on 3999d's servers.

All financial transaction records are retained for a minimum of five years from the date of the transaction, in compliance with applicable financial record-keeping requirements. This retention period may be extended where required by law or where the records are relevant to an ongoing investigation or legal proceeding.

7Cookies and Tracking Technologies

3999d uses cookies and similar technologies on 3999d.org to ensure the Platform functions correctly and to improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: these are essential for the Platform to function. They enable session management, login authentication, security checks, and payment flow continuity. These cookies cannot be disabled without impairing the functionality of the Platform.
• Functional cookies: these remember your preferences (such as language, responsible gaming limits, and notification settings) so you do not have to re-enter them on every visit. These cookies are first-party and do not track you across other websites.
• Analytics cookies: 3999d may use internal analytics tools to understand how players navigate the Platform, which games are most popular, and where technical issues occur. This data is aggregated and anonymised wherever possible and is used only to improve the Platform.

You can manage cookie preferences through your device's browser settings. Disabling strictly necessary cookies may prevent certain features of the Platform from working correctly. 3999d does not use third-party advertising cookies or cross-site behavioural tracking cookies.

8Data Retention

3999d retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are: active account data is retained for the lifetime of your account plus five years after account closure; KYC and identity verification documents are retained for five years from the date of account closure or the date of the last transaction, whichever is later; transaction records are retained for a minimum of five years from the date of the transaction; support communications are retained for three years from the date of the last interaction.

When your personal data is no longer required, we will securely delete or anonymise it in accordance with our internal data disposal procedures. Where complete deletion is not immediately technically feasible (for example, data held in encrypted backup archives), we will isolate the data from further processing until deletion is possible.

9Data Security

3999d implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform, ensuring that your login credentials, session tokens, and payment details cannot be intercepted in transit.
• Encrypted storage of sensitive data at rest, including hashed passwords and identity document references, using industry-standard encryption algorithms.
• Access controls ensuring that only authorised 3999d personnel can access player personal data, on a strict need-to-know basis, with all access events logged for audit purposes.
• Regular security reviews and vulnerability assessments of Platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, 3999d will notify affected players and take all reasonable steps to mitigate the impact of the breach as quickly as possible.

10Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by 3999d. To exercise any of these rights, contact us at [email protected] with your registered mobile number and a description of your request:

• Right of access: you may request a copy of the personal data we hold about you and information about how we process it.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: in certain circumstances, you may request that we delete your personal data. This right is subject to our legal obligations to retain data (for example, AML record-keeping requirements) and will not apply where retention is necessary to comply with a legal obligation.
• Right to restriction of processing: you may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is pending resolution.
• Right to data portability: where processing is based on your consent or on a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

11Third-Party Services and Links

The Platform integrates with third-party game providers (such as Pragmatic Play and Evolution Gaming) and payment processors. These third parties operate under their own privacy policies and data practices, which are independent of 3999d. We are not responsible for the privacy practices of any third-party service whose software or APIs are integrated into the Platform. We recommend reviewing the privacy policies of any third-party providers whose services you use through the Platform. 3999d does not include links to external websites and does not link to third-party gambling platforms.

12International Data Transfers

3999d primarily processes and stores personal data within secure server infrastructure. Some of our third-party service providers (including game software providers and identity verification partners) may be located outside Bangladesh and may process your personal data in their own jurisdictions. Where such transfers occur, 3999d takes reasonable steps to ensure that appropriate safeguards are in place to protect your data, consistent with the purposes described in this Policy.

3999d does not transfer personal data to countries that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards. If you require further information about the specific safeguards applied to any cross-border data transfer, please contact us at [email protected].

13Changes to This Privacy Policy

3999d reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the Platform and, where appropriate, by sending a notification to the mobile number or email address associated with your account. The effective date of the current version of this Policy is shown at the top of this page.

Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must stop using the Platform and may request closure of your account by contacting [email protected].

14Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the 3999d data support team. We are available 24/7 in both English and Bangla and will respond to all data-related enquiries within 30 days.

Email (plain text, not a link):

[email protected]