3999ba Privacy
Policy

Section 1

Information We Collect

When you register and use the 3999ba platform, we collect certain categories of personal information. The type and volume of data we collect depends on how you interact with the platform — for example, whether you are simply browsing, registering an account, making a deposit, or contacting our support team. Below is a full breakdown of the categories of information we may collect.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is necessary for standard identity verification purposes. We do not knowingly collect personal information from individuals under the age of 18. If we discover that a minor has submitted personal data to us, we will delete that data promptly and close the associated account.

Section 2

How We Use Your Information

3999ba uses the personal information we collect for specific, clearly defined purposes. We do not use your data in any manner that is inconsistent with the purposes stated at the time of collection. The primary purposes for which we process personal data are set out below.

• Account management: To create, maintain, verify, and manage your 3999ba player account, including processing your registration, updating your profile details, and enforcing the one-account-per-player rule.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Financial data is passed to our payment processing partners solely for the purpose of completing the relevant transaction.
• Identity verification (KYC): To comply with anti-money laundering (AML) obligations by verifying your identity before processing large withdrawals or where unusual transaction patterns are detected.
• Platform personalisation: To personalise your experience on 3999ba — for example, surfacing game recommendations based on your play history, or presenting promotions relevant to sports events you follow (such as BPL, IPL, or T20 World Cup).
• Responsible gaming monitoring: To monitor gaming behaviour for signs of problem gambling, apply deposit limits and self-exclusion restrictions, and support players who request intervention through the tools available on the Responsible Gaming page.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of communications for quality assurance and training purposes.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and enforce our terms where necessary.
• Service improvement: To analyse aggregated, anonymised usage data in order to improve the 3999ba platform, identify technical issues, and develop new features that serve our Bangladeshi player base.
• Marketing communications: To send you promotional offers, bonus alerts, and seasonal promotions (such as Eid or Pohela Boishakh specials) where you have opted in to receive such communications. You may opt out at any time.

Section 3

Sharing & Disclosure of Data

3999ba does not sell, rent, or trade your personal information to any third party for commercial purposes. We may, however, share your data with a limited set of trusted partners and service providers who assist us in operating the platform. In every case, data sharing is governed by strict contractual obligations that require the recipient to protect your information and use it only for the stated purpose.

• Payment partners: Relevant financial data is shared with payment processors (including bKash, Nagad, Rocket, Upay, and card processors) solely to facilitate the completion of deposit and withdrawal transactions you have initiated.
• Game providers: Your account identifier and session data may be passed to third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to load and operate their games within the 3999ba platform. These providers do not receive your full personal profile.
• Identity verification services: Where KYC verification is required, your identity documents may be shared with accredited third-party verification service providers. These providers are contractually bound to process your data only for identity verification purposes.
• IT and hosting providers: Our platform infrastructure and data storage are managed by trusted hosting and technology partners. These providers operate under strict data processing agreements and do not have independent access to your personal data.
• Fraud and security services: Aggregated technical data (such as IP addresses and device fingerprints) may be shared with security service providers to detect and prevent fraudulent activity and protect the integrity of the 3999ba platform.
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies, or other competent authorities where we are legally required to do so by a valid court order, subpoena, or equivalent legal instrument. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 3999ba business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

In all cases where we share data with third parties, we require those parties to maintain appropriate technical and organisational security measures. We do not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

Section 4

Cookies & Tracking Technologies

3999ba uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and collect aggregated analytics data. A cookie is a small text file stored on your device by your web browser when you visit the 3999ba website. Cookies do not contain executable code and cannot access other data stored on your device.

You can manage, restrict, or delete cookies through your web browser's privacy or settings menu. Note that disabling essential and security cookies will impair your ability to log in and use core features of the 3999ba platform. Disabling analytics or functional cookies will not affect your access to games or account features, but may reduce the personalisation of your experience.

3999ba does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in behavioural advertising networks, and we do not share cookie data with any external advertising platform.

Section 5

Data Retention & Storage

3999ba retains your personal data for as long as your account remains active and for a defined period after account closure. Our retention periods are set in accordance with applicable legal obligations and legitimate business requirements, including anti-money laundering record-keeping obligations.

• Active account data: Personal and financial data associated with your active 3999ba account is retained for the full duration of the account's operation, plus a minimum of five years after the date of account closure.
• Transaction records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• Identity verification documents: KYC documents (national ID, passport copies, utility bills) are retained for five years from the date of submission or the date of account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence with our support team are retained for two years from the date of the communication, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing data: If you have opted in to receive marketing communications, we retain your marketing preferences and communications history until you opt out or request deletion, plus a six-month reconciliation period.
• Analytics data: Anonymised, aggregated analytics data with no personally identifiable information may be retained indefinitely for platform improvement purposes.

After the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised. All data stored by 3999ba is held on servers with appropriate physical and technical security measures, including access controls, encryption at rest, and regular security audits.

Section 6

Your Rights Over Your Data

As a player on the 3999ba platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We aim to acknowledge all data-subject requests within 48 hours and resolve them within 30 days.

• Right of access: You have the right to request a copy of all personal data that 3999ba holds about you. We will provide this in a structured, readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to erasure: You may request that we delete your personal data. We will comply where there is no overriding legal obligation or legitimate business reason to retain the data (for example, AML record-keeping obligations may require us to retain certain transaction data even after account closure).
• Right to restrict processing: You may ask us to suspend the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, so that you can transfer it to another service provider if you choose.
• Right to object to marketing: You have the right to object at any time to our processing of your personal data for direct marketing purposes. If you object, we will stop sending you marketing communications promptly.
• Right to withdraw consent: Where we rely on your consent to process personal data (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Section 7

Security Measures We Apply

3999ba takes the security of your personal data seriously. We apply a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no online system can guarantee absolute security, the measures we have in place reflect industry best practice for online gaming platforms.

• SSL/TLS encryption in transit: All data transmitted between your device and 3999ba servers is encrypted using industry-standard SSL/TLS protocols. This prevents interception of your data during transmission.
• Encryption at rest: Sensitive personal data and financial records stored on our servers are encrypted at rest, ensuring that even in the event of an unauthorised access attempt, the data cannot be read without the appropriate decryption keys.
• Access controls: Access to personal data within 3999ba's systems is restricted to authorised personnel who require it to perform their job function. Access is governed by role-based permissions and is subject to regular review and audit.
• Two-factor authentication (2FA): 3999ba offers optional two-factor authentication for player accounts. We strongly encourage all players to enable 2FA as an additional layer of account security against unauthorised login attempts.
• Fraud detection systems: 3999ba operates automated fraud detection and monitoring systems that flag unusual account behaviour, suspicious transaction patterns, and potential security threats in real time.
• Regular security reviews: Our platform and data storage infrastructure undergo periodic security assessments to identify and address potential vulnerabilities. Payment and data handling procedures are reviewed regularly to maintain their integrity.
• Staff training: All 3999ba team members with access to personal data receive data protection and security training. We operate clear internal policies on data handling, incident reporting, and breach response.

In the unlikely event of a data security breach that affects your personal information, 3999ba will notify affected players promptly and take immediate steps to contain and remediate the breach. Where required, we will also notify relevant authorities in accordance with applicable legal obligations.

Section 8

Changes to This Privacy Policy

3999ba may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal obligations, or the regulatory environment applicable to online gaming and data protection. When we make a material change to this Privacy Policy, we will update the "Last updated" date at the top of this page and, where the change is significant, notify registered players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to remain informed about how 3999ba collects, uses, and protects your personal information. If you continue to use the 3999ba platform after a revised Privacy Policy has been published, you are acknowledging the updated terms. If you do not agree with any change to this Privacy Policy, you should contact our support team to discuss your options, including requesting account closure.

This Privacy Policy applies exclusively to personal data processed in connection with your use of the 3999ba platform at https://3999ba.app. It does not govern data practices of third-party game providers, payment processors, or any other external website that may be referenced. 3999ba is not responsible for the privacy practices of any third-party services.