399ba Privacy Policy

1 Information We Collect

399ba collects personal information from you through several channels: directly when you register an account or contact our support team, automatically when you use our platform, and from third-party identity verification services when you complete the KYC process. The categories of data we collect are described below.

Information You Provide Directly

• Identity data: Full legal name, date of birth, gender, and nationality as they appear on your Bangladeshi National Identity Card (NID) or passport.
• Contact data: Email address, Bangladeshi mobile phone number, and residential address including district and division (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Account credentials: Username and hashed password. We never store your password in recoverable plain text.
• Financial data: Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay), bank account names and numbers for Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank transfers, and records of deposit and withdrawal transactions denominated in BDT.
• KYC documents: Scanned or photographed copies of your NID, passport, or other identity documents submitted for verification purposes.
• Communications data: Records of your interactions with 399ba's customer support team through email, live chat, or any other support channel.

Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, games launched, bets placed, session duration, click-path data, and feature interactions.
• Transaction data: A full log of all financial transactions on your account including deposits, withdrawals, wagers placed, winnings credited, and bonus activity.
• Geolocation data: Approximate location derived from your IP address, used to verify that you are accessing the platform from a permitted jurisdiction. We do not collect precise GPS location data.
• Cookie and tracker data: See the Cookies section below for a full description of tracking technologies used on the 399ba platform.

2 How We Use Your Data

399ba processes your personal data only for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary processing activities and the legal basis on which each is carried out.

Marketing Communications

399ba will only send you promotional communications — including bonus offers, free bet promotions, and seasonal campaign notifications — if you have explicitly opted in to receive them during registration or through your Account Settings. You may withdraw your marketing consent at any time by updating your communication preferences in your account or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

Automated Decision-Making

399ba uses automated systems for fraud screening, bonus abuse detection, and responsible gaming pattern monitoring. These systems may result in automated flags that are then reviewed by a human member of our compliance or support team before any action is taken on your account. We do not make legally significant decisions about your account through fully automated means without human review.

3 Data Sharing and Disclosure

399ba does not sell or rent your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

We engage carefully selected third-party service providers who process data on our behalf and under our instructions. These include KYC and identity verification partners, payment processing infrastructure providers, game software suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), cloud hosting and infrastructure providers, and fraud prevention and cybersecurity specialists. All third-party processors are contractually bound to apply data protection standards consistent with this policy and are prohibited from using your data for their own purposes.

Legal and Regulatory Disclosure

399ba may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, court order, or other legal process. We will endeavour to notify you of such disclosure where permitted to do so by law, though we may be legally prevented from doing so in certain circumstances.

Business Transfers

In the event that 399ba undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to the privacy terms governing your data prior to the transfer taking effect.

4 Cookies and Tracking Technologies

399ba uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and prevent fraud. A cookie is a small text file placed on your device when you visit the 399ba website. It does not contain executable code and cannot access other data on your device.

Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account state across page loads, and support security features such as CSRF protection. These cookies cannot be disabled without impairing the core functionality of the site.
• Functional cookies: These remember your preferences such as display language, preferred currency display, and notification settings. Disabling them will not prevent you from using the platform but may reduce convenience.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the 399ba platform, which games are most popular, and where technical issues may be occurring. This data is aggregated and cannot be used to identify you individually.
• Fraud prevention cookies: These track behavioural signals across your session to identify patterns consistent with automated bot activity, account sharing, or other prohibited conduct. They are necessary for platform security.

Cookie Retention

Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months — unless you delete them manually through your browser settings. You can configure your browser to refuse all cookies or to alert you when a cookie is being set. Please note that disabling strictly necessary cookies will prevent you from logging in to your 399ba account.

No Third-Party Advertising Cookies

399ba does not place third-party advertising or retargeting cookies on your device. We do not participate in programmatic advertising networks or allow external ad technology companies to track your behaviour across other websites through the 399ba platform.

5 Data Security and Retention

399ba takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

Technical Security Measures

• Encryption in transit: All data exchanged between your browser or device and the 399ba servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed without interruption.
• Encryption at rest: All personally identifiable information and financial records stored on 399ba servers are encrypted using AES-256 encryption.
• Access controls: Role-based access controls limit internal access to player data to authorised personnel only. All access to sensitive data is logged and audited.
• Penetration testing: 399ba engages independent security professionals to conduct regular penetration tests of our platform infrastructure.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players promptly and take immediate remedial action.

Data Retention Periods

399ba retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. As a general guide:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the most recent interaction.
• Marketing preference records: Retained until you withdraw consent, plus one year thereafter for audit purposes.
• Technical and usage logs: Retained for up to 12 months in identifiable form, then anonymised or deleted.

6 Your Privacy Rights

As a player on the 399ba platform, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing your request.

We will not charge a fee for exercising your rights in ordinary circumstances. If a request is manifestly unfounded, repetitive, or excessive, we may charge a reasonable administrative fee or decline to act on the request, in which case we will explain our reasons in writing.

7 Third-Party Services

The 399ba platform integrates with third-party services in order to deliver a complete gaming experience. These include game content providers, live streaming infrastructure, payment gateways, and security tools. While 399ba selects its third-party partners carefully and requires them to maintain appropriate data protection standards, their own privacy practices are governed by their respective privacy policies, over which 399ba has no direct control.

Game Providers

Games hosted on the 399ba platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, certain technical data (such as your session token, device type, and stake information) is shared with the relevant game provider in order to render the game and record the result. Game providers are contractually bound to use this data only for the purpose of game delivery and result settlement.

Payment Partners

Transaction data shared with payment partners — including bKash, Nagad, Rocket, Upay, and the banking partners listed in our Terms & Conditions — is limited to the information required to process the specific transaction. 399ba does not share your gaming history, account balance, or other player profile data with payment service providers beyond what is needed for transaction verification and fraud prevention.

Links to External Content

The 399ba website does not contain links to third-party websites. All content and navigation on the platform is internal. This Privacy Policy applies solely to data processed by 399ba and does not extend to any external platforms or services you may access independently.

8 Policy Updates and Contact

399ba reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify active account holders via the email address registered to their account at least 14 days before the changes take effect. The revised policy will always be published at this URL with an updated effective date.

Minor and Non-Material Changes

Corrections to typographical errors, clarifications of existing language that do not alter the substance of our commitments, or updates to contact information may be made without advance notice. The version number and effective date at the top of this document will be updated to reflect any such changes.

Continued Use Constitutes Acceptance

By continuing to use the 399ba platform after a revised Privacy Policy takes effect, you confirm your acceptance of the updated terms. If you do not agree with the revised policy, you should close your account and cease using the platform. Unspent verified balances will be returned to your registered payment method subject to completion of any outstanding KYC requirements.

How to Contact Us on Privacy Matters

For any question, concern, or request relating to this Privacy Policy or to the personal data 399ba holds about you, please reach our privacy support team at [email protected]. Our team aims to acknowledge all privacy-related enquiries within one business day and to resolve them within 30 calendar days, Bangladesh Standard Time (BST, UTC+6). Complex data subject access requests may take up to 45 days where justified, in which case we will inform you of the extended timeline and the reason for the delay.