bdt399 Privacy
Policy

bdt399 collects personal data through several channels: directly from you during the account registration and verification process, automatically through your use of the platform, and occasionally from trusted third-party identity and payment verification services. The categories of personal data we may collect include the following:

Identity & Contact Information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the minimum age requirement of 18 years).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode.
• Email address used to create and access your bdt399 account.
• Mobile phone number, including those registered with bKash, Nagad, or Rocket.
• Copies of government-issued ID documents (National ID card, passport, or driving licence) submitted during Know Your Customer (KYC) verification.

Financial & Transaction Information:

• Transaction history including deposits, withdrawals, bet amounts, and game session values in Bangladeshi Taka (৳).
• Payment method identifiers (e.g., the mobile number associated with your bKash or Nagad account, or the last four digits of a Visa or Mastercard).
• Records of any bonuses claimed, wagering activity, and promotion participation.

Technical & Usage Data:

• IP address and approximate geolocation at the time of login and transaction.
• Device type, operating system, and browser information.
• Session timestamps, pages visited within the bdt399 platform, game history, and sports betting activity logs.
• Cookie identifiers and session tokens (see Section 4 for full details).

Communications Data:

• The content of any messages you send to bdt399 via our support channels, including email correspondence sent to [email protected].
• Records of any responsible gaming interactions, including deposit limit requests, self-exclusion applications, and session reminder settings.

bdt399 uses the personal data we collect for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The specific purposes for which we process your personal data are as follows:

bdt399 does not use automated decision-making or profiling that produces legal or similarly significant effects on players, except where required by law (for example, automated age verification checks during registration). Where automated processing is used for responsible gaming risk-scoring, players may request human review of any decision that affects their account access.

If you have opted in to receive promotional communications from bdt399 — such as information about seasonal bonuses during Eid, BPL cricket promotions, or Pohela Boishakh special offers — you may withdraw your consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

bdt399 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We only share your personal data where it is strictly necessary for the delivery of our services, compliance with legal obligations, or the protection of our platform's security. The limited circumstances in which data may be shared are set out below:

• Payment Service Providers: Transaction data is shared with your chosen payment processor (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to facilitate deposit and withdrawal processing. Each of these providers operates under their own privacy policy and data protection framework.
• Identity Verification Partners: During KYC verification, your identity documents may be processed by a certified third-party verification service operating under strict data processing agreements with bdt399. These partners may not use your data for any purpose beyond the specific verification task.
• Game Studio Providers: Game session data (such as bet amounts and game round outcomes) is shared with the relevant certified game studio (e.g., Pragmatic Play, Evolution Gaming, Spribe) to facilitate gameplay, calculate results, and process winnings. Personal identity data is not shared with game studios beyond what is strictly necessary.
• Legal & Regulatory Disclosure: bdt399 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or where we have a genuine good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to individuals.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bdt399's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account.

bdt399 uses cookies and similar tracking technologies to operate certain essential platform functions, maintain your login session, and understand aggregate platform usage patterns. We do not use cookies to serve third-party behavioural advertising or to track your activity across unrelated websites.

Types of cookies used on the bdt399 platform:

You may control cookie settings through your browser. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to view, delete, and block cookies. Please note that disabling strictly necessary cookies will impair core platform functionality and may prevent you from logging in to your bdt399 account. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

bdt399 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal obligations. The following retention periods apply as general guidance:

• Active account data (name, contact details, KYC documents): Retained for the duration of the active account relationship plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of the transaction.
• Support correspondence: Retained for 2 years from the date of the most recent message in a support thread.
• Analytics and usage data: Retained in anonymised or aggregated form for up to 24 months; raw session logs are deleted after 12 months.
• Marketing consent records: Retained for 3 years from the date of consent, or until withdrawal of consent, whichever is earlier.

Where a legal investigation, dispute, or regulatory inquiry is ongoing at the time a retention period would otherwise expire, bdt399 will preserve the relevant data until the matter is fully resolved.

Security Measures:

bdt399 employs a layered set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bdt399 infrastructure.
• AES-256 encryption for sensitive data at rest, including stored KYC documents and financial records.
• Role-based access controls ensuring that only authorised bdt399 personnel with a genuine business need can access personal account data.
• Regular internal security audits and vulnerability assessments of platform infrastructure.
• Two-factor authentication options available to all registered bdt399 players to protect account access.
• Segregated payment processing so that raw payment credentials (card numbers, mobile wallet PINs) are never stored on bdt399 servers — these are handled exclusively within the respective payment provider's PCI-DSS compliant environment.

As a bdt399 player, you hold a set of rights with respect to the personal data we process about you. bdt399 is committed to honouring these rights in a timely and transparent manner. The rights available to you are as follows:

• Right of Access: You may request a copy of all personal data that bdt399 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor details such as a misspelled address can often be updated directly within your bdt399 account settings; more significant corrections (e.g., legal name changes) require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data. bdt399 will comply with erasure requests except where retention is required by legal obligation (e.g., AML record-keeping requirements). Where full deletion is not possible due to a legal hold, we will inform you of the specific reason and the applicable retention period.
• Right to Restriction of Processing: You may request that bdt399 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that bdt399 transfer your data directly to another service provider in a structured format, where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is based on bdt399's legitimate interests, including any profiling carried out for fraud detection purposes. bdt399 will assess whether our legitimate interests override your objection on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., receiving promotional emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account email address. bdt399 may need to verify your identity before processing the request. We target a response time of 30 days; complex requests may take up to 60 days, in which case we will inform you of the extension.

The bdt399 platform integrates with a range of trusted third-party services to deliver its full range of casino, sports betting, and payment features. Each of these third parties operates under its own privacy policy and data protection framework. bdt399 enters into data processing agreements with all third-party providers that handle personal data on our behalf, requiring them to process data only on bdt399's documented instructions and to maintain appropriate security standards.

Categories of third-party providers engaged by bdt399 include:

• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Big Time Gaming, and Yggdrasil supply the games available on the bdt399 platform. Game session data (bet amounts, round outcomes, RTP records) is transmitted to the relevant studio to facilitate gameplay. These studios are independently certified and undergo regular RNG audits.
• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard process financial transactions on the bdt399 platform. Transaction reference data is shared with these providers to enable payment processing and reconciliation. bdt399 does not store raw payment credentials.
• Identity Verification Services: Third-party KYC providers may process copies of your identification documents and perform automated identity checks. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the specific verification task assigned by bdt399.
• Hosting & Infrastructure Providers: bdt399's platform is hosted on secure cloud infrastructure. Our infrastructure providers process server-level data (including IP logs) as part of providing hosting services and are contractually bound to protect that data.
• Anti-Fraud & Security Tools: bdt399 uses third-party fraud detection and cybersecurity tools that process device fingerprints, IP addresses, and behavioural signals to identify suspicious activity. These tools operate under data processing agreements with bdt399.

bdt399 does not integrate third-party social media plugins, external comment systems, or advertising networks that would allow those third parties to independently collect data about your behaviour on the bdt399 platform without your knowledge.

Links to third-party payment provider websites (e.g., the bKash or Nagad apps) may be referenced for player guidance. Once you leave the bdt399 platform and interact with a third-party service directly, that service's own privacy policy governs the handling of your data. bdt399 is not responsible for the privacy practices of third-party platforms.

bdt399 reserves the right to update or revise this Privacy Policy at any time. We will publish the updated version on this page with a revised "Last Updated" date. Where changes are material — for example, where we introduce a new category of data processing or change how we share data with third parties — we will notify registered players via the email address on file at least 14 days before the change takes effect.

Your continued use of the bdt399 platform after a Privacy Policy update constitutes your acknowledgment of the revised policy. If you do not agree with a material change to this Privacy Policy, you may close your account before the change takes effect by contacting our support team.

This Privacy Policy is governed by and construed in accordance with applicable data protection principles. It was last reviewed and updated in January 2026 and supersedes all previous versions of the bdt399 Privacy Policy.

For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data bdt399 holds about you, please contact our dedicated data protection point of contact:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response Target: Within 6 hours for general enquiries; within 30 days for formal data rights requests
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)