Privacy Policy — How 399dt Protects Your Data

1 Who We Are

This Privacy Policy is issued by 399dt, the operator of the online betting and casino platform available at 399dt.io (the "Platform"). Throughout this document, references to "399dt", "we", "us", or "our" refer to the operator of the 399dt platform. References to "you" or "your" refer to any individual who accesses, browses, registers on, or interacts with the Platform in any capacity.

399dt is the data controller in respect of the personal data described in this policy, meaning we determine the purposes for which and the means by which your personal data is processed. If you have any questions about how your data is handled, you may contact us at any time using the details provided in Section 15 of this policy.

2 What Data We Collect

399dt collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we may hold about you:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless you voluntarily provide such information in support correspondence and it is directly relevant to resolving your query.

3 How We Collect Your Data

399dt collects personal data through the following means:

3.1 Direct Submission

The majority of data we hold is provided directly by you when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion. You are in control of what you provide at each of these points.

3.2 Automated Collection

When you visit and interact with the 399dt platform, we automatically collect technical and usage data through server logs, session cookies, and similar technologies. This includes your IP address, the pages you navigate to, the games you open, how long your session lasts, and the device and browser you are using. This data is collected to maintain platform security and to monitor for unusual or potentially harmful behaviour.

3.3 Third-Party Sources

In limited circumstances, 399dt may receive data about you from third-party sources, including:

• Payment service providers (e.g., bKash, Nagad) confirming transaction status;
• Identity verification services used during the KYC process;
• Fraud prevention and anti-money laundering screening services;
• Game providers (e.g., Pragmatic Play, Evolution Gaming) reporting game session outcomes for dispute resolution purposes.

Any data received from these third parties is handled in accordance with this Privacy Policy and is used only for the purposes for which it was obtained.

4 Legal Basis for Processing

399dt processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is required to fulfil our obligations to you under the 399dt Terms & Conditions — including creating and managing your account, processing deposits and withdrawals, and settling wagers.
• Legal Obligation: Certain processing activities are required by law, including identity verification under anti-money laundering regulations, retention of financial records, and cooperation with lawful requests from competent authorities.
• Legitimate Interests: Where we determine that a processing activity serves a legitimate interest of 399dt (such as fraud detection, platform security, or service improvement) and that interest is not overridden by your privacy rights, we may process data on this basis.
• Consent: Where processing is not required by contract or law and is not covered by legitimate interests, we will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 How We Use Your Data

399dt uses the personal data we collect for the following purposes:

• Creating, maintaining, and administering your 399dt account;
• Verifying your identity and age to comply with responsible gaming requirements (21+ only) and anti-money laundering obligations;
• Processing deposits via bKash, Nagad, Rocket, Upay, and other supported payment methods, and processing withdrawal requests to your registered payment account;
• Detecting and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct as defined in the Terms & Conditions;
• Providing customer support and resolving disputes or complaints;
• Sending you transactional communications (e.g., deposit confirmations, withdrawal notifications, account alerts) — these communications are necessary for the operation of your account and cannot be opted out of while your account is active;
• Monitoring your wagering patterns to identify indicators of problem gambling and to offer responsible gaming interventions where appropriate;
• Improving the quality, functionality, and security of the 399dt platform through analysis of usage data;
• Complying with lawful requests from competent authorities, courts, or regulators.

6 Data Sharing and Disclosure

399dt does not sell or rent your personal data to any third party. We may share your data in limited circumstances with the following categories of recipients, strictly for the purposes described:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary financial data with your chosen payment provider (e.g., bKash, Nagad, Rocket, Upay, or card processors). This data sharing is strictly limited to what is required to complete the transaction.

6.2 Identity Verification Partners

To complete the KYC process, we may share your identity documents and personal details with accredited third-party verification services. These partners are contractually bound to handle your data securely and to use it only for identity verification purposes.

6.3 Game Content Providers

Where you play games hosted by third-party providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, limited technical session data (such as a session token and stake amount) is shared with those providers to deliver the game. These providers operate under their own data protection frameworks and are contractually prohibited from using your data for any purpose beyond delivering the game session.

6.4 Legal and Regulatory Authorities

399dt may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of 399dt or third parties, or where disclosure is required in connection with the investigation of suspected financial crime or match-fixing.

6.5 Business Transfers

In the event that 399dt undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices applicable following the transfer.

7 International Data Transfers

The 399dt platform serves players primarily located in Bangladesh. Your data is stored on servers that maintain appropriate technical and organisational security measures. Where data is transferred to or accessed from locations outside Bangladesh — for example, in connection with game providers or identity verification partners based in other countries — 399dt takes reasonable steps to ensure that such transfers are subject to appropriate contractual safeguards and that the receiving party maintains a standard of data protection consistent with this policy.

8 Data Retention

399dt retains your personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account's active status and for a minimum of five years following permanent account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC Documentation: Retained for the duration of the account and for five years post-closure, or longer if required by a specific legal obligation.
• Support Communications: Retained for two years from the date of the last communication, to support dispute resolution and service improvement.
• Technical and Usage Data: Session logs and technical data are retained for up to 12 months for security and fraud monitoring purposes, then deleted or anonymised.

Upon expiry of the relevant retention period, your personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9 Cookies and Tracking Technologies

The 399dt platform uses cookies and similar session-management technologies to deliver a functional and secure user experience. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and language/preference cookies. These cookies do not collect personal data for marketing purposes and cannot be disabled without impairing the basic functionality of the Platform.

9.2 Analytics Cookies

399dt may use first-party analytics to understand how players navigate the Platform — such as which pages are visited most frequently and where errors occur. This data is aggregated and anonymised wherever possible and is used solely to improve the Platform experience. We do not use third-party analytics platforms that track your behaviour across external websites.

9.3 What We Do Not Use

399dt does not use advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology designed to build a behavioural profile of you for the purpose of showing you targeted advertising on other websites.

Most browsers allow you to control cookies through their settings. Blocking strictly necessary cookies may prevent the Platform from functioning correctly. Blocking analytics cookies will not affect your ability to use the Platform.

10 Security of Your Data

399dt implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 399dt platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Access controls that restrict internal access to personal data to authorised personnel only, on a need-to-know basis;
• Regular security assessments and vulnerability testing of platform infrastructure;
• Multi-factor authentication options for player accounts;
• Automated fraud detection and anomaly monitoring systems operating continuously.

While 399dt takes all reasonable steps to protect your data, no system is entirely immune to risk. In the unlikely event of a data breach that poses a risk to your rights, 399dt will notify affected players promptly and will take all necessary remediation steps without undue delay.

11 Your Privacy Rights

As a 399dt player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your registered account details and a description of your request. We will acknowledge your request within 2 business days and aim to respond in full within 14 business days.

• Right of Access: You may request a copy of all personal data that 399dt holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal record-keeping obligations, which may require us to retain certain data even after an erasure request.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes. We will honour marketing opt-outs immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

12 Children's Privacy

The 399dt platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or place any wager on the 399dt platform.

If 399dt becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the payment source, subject to applicable fraud and AML checks. If you believe a minor has registered on the Platform, please report this immediately to [email protected].

13 Third-Party Links

The 399dt platform does not contain links to third-party websites for commercial or referral purposes. Any references to external brands, payment providers, or game studios within the Platform's content are made in an informational context only. 399dt is not responsible for the privacy practices of any third-party organisation, including payment providers such as bKash and Nagad, whose own privacy policies govern the data they collect in connection with your transactions.

We recommend reviewing the privacy policy of any payment provider or third-party service you use in connection with your 399dt account.

14 Changes to This Policy

399dt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the nature of the Platform. When material changes are made, we will notify registered players via email and display a prominent notice on the Platform. The "Effective Date" at the top of this document will be updated to reflect the date on which the revised policy takes effect.

Your continued use of the 399dt platform following the notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised policy, you must cease using the Platform and may request account closure by contacting [email protected].

15 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 399dt handles your personal data, please contact our support team using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Platform: 399dt.io

When submitting a privacy-related request, please include your registered username and Account ID so that we can locate your record efficiently. Please do not include your password or full payment card details in any correspondence.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. 399dt takes all privacy complaints seriously and is committed to resolving them fairly and promptly.

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all prior versions of this document.