Privacy Policy

How We Protect You

These six principles guide every data decision at 399bey. The full legal text follows in the sections below.

Full Policy

1. Who We Are

399bey operates the online casino and sports betting platform available at 399bey.app. We are the data controller responsible for the personal data collected through the platform. If you have any questions about this Policy or how your data is handled, please contact our support team using the details in Section 14 of this Policy.

2. Personal Data We Collect

We collect personal data in the following categories:

• Registration data: Full legal name, date of birth, residential address, email address, and phone number provided when you create an account.
• Identity verification (KYC) data: Copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence; and proof-of-address documents such as utility bills or bank statements.
• Financial data: Payment method details including bKash account number, Nagad account number, Rocket wallet reference, Upay details, and masked card data for Visa or Mastercard transactions. Full card numbers are never stored on our servers; they are handled by our payment processing partners.
• Transaction data: Records of all deposits, withdrawals, bonuses, wagers placed, and game outcomes associated with your account.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, time zone, and screen resolution collected automatically when you access the platform.
• Usage data: Pages visited, features used, session duration, clickstream data, and game interaction patterns collected via cookies and server logs.
• Communications data: Content of messages you send to our support team, including live chat transcripts, emails, and any attachments you provide.
• Responsible gaming data: Self-exclusion status, deposit limits, loss limits, and session time settings that you configure in your account.

3. How We Collect Your Data

We collect personal data through the following means:

• Directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically via cookies, web beacons, server logs, and similar tracking technologies when you browse the platform.
• From third-party service providers such as payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks) who confirm transaction statuses, and identity verification services that assist with KYC checks.
• From fraud prevention and compliance partners who may share risk signals or sanctions screening results with us to protect the integrity of the platform.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, and provide access to games and betting markets as described in our Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and other applicable legal duties — including the retention of financial transaction records for the legally required period.
• Legitimate interests: Processing carried out to detect and prevent fraud, protect the security of our platform, prevent underage gambling, and improve our services based on aggregated usage analysis — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting our support team.

5. How We Use Your Data

Your personal data is used for the following purposes:

• Creating, verifying, and maintaining your 399bey account.
• Processing deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Performing identity and age verification to confirm you are 21 years of age or older and are an eligible player.
• Providing customer support and responding to queries, complaints, and responsible gaming requests.
• Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct.
• Complying with AML, KYC, and other applicable legal and regulatory obligations.
• Administering bonuses, promotions, and loyalty rewards in accordance with their stated terms.
• Analysing platform usage to improve game selection, performance, and the overall user experience.
• Sending transactional communications such as deposit confirmations, withdrawal updates, and security alerts.
• Sending promotional communications where you have consented to receive them.

6. Sharing Your Personal Data

399bey does not sell or rent your personal data. We may share data with the following categories of third parties strictly on a need-to-know basis:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners receive the minimum data necessary to authorise and settle your transactions.
• Identity verification providers: Third-party KYC services that help us verify the authenticity of identity documents and confirm your age and address.
• Fraud prevention services: Risk intelligence providers that help us detect unusual account activity, identify potential money laundering, and screen against international sanctions lists.
• IT infrastructure providers: Cloud hosting, database, and security service providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other competent authorities in Bangladesh where we are required by law to disclose information.

All third-party service providers are contractually required to handle your data securely, to use it only for the specific purpose for which it was shared, and to comply with applicable data protection standards.

7. Cookies & Tracking Technologies

399bey uses cookies and similar technologies to operate and improve the platform. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that prevent cross-site request forgery. These cannot be disabled without disrupting core account functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and responsible gaming tool configurations so you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the platform — which game categories are most visited, where users exit the funnel, and how long sessions last. This data is used internally to improve the platform and is not shared with advertising networks.

You can manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging into your account or using core platform features.

8. Data Security

We apply a layered security approach to protect your personal data. Measures in place include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, bcrypt hashing for all stored passwords, strict role-based access controls so that only authorised personnel can access personal data, regular security audits and penetration testing, and automated monitoring for unusual access patterns or data exfiltration attempts. Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, 399bey will notify affected users as required by applicable law.

9. Data Retention

We retain your personal data for as long as your account remains active and for a period thereafter as required by applicable legal obligations. Specific retention periods include:

• Account and KYC records: Retained for the duration of your account and for a minimum of five years after account closure, in line with standard AML compliance requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction.
• Communications with support: Retained for a minimum of two years from the date of the last communication.
• Usage and analytics data: Anonymised and aggregated after 12 months; raw logs deleted after 90 days.
• Marketing consent records: Retained for as long as you remain opted in, plus 12 months after opt-out to demonstrate compliance.

10. Your Data Rights

You have the following rights in relation to the personal data we hold about you:

• Right of access: Request a copy of the personal data we hold about you, free of charge, within a reasonable timeframe.
• Right to rectification: Request correction of inaccurate or incomplete personal data in your account.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any overriding legal retention obligations.
• Right to restriction: Request that we restrict processing of your data in certain circumstances, for example while a dispute about its accuracy is resolved.
• Right to data portability: Request a structured, machine-readable copy of the personal data you have provided to us.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days of receiving a verified request. We may need to confirm your identity before processing a data rights request.

11. Underage Users

The 399bey platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the KYC process for all new accounts. If we discover that personal data has been collected from a user who is under 21, we will immediately close the account, delete the associated data to the extent permitted by law, and withhold any funds pending further review. Parents or guardians who believe their child may have accessed the platform should contact us immediately at [email protected].

12. International Data Transfers

Some of our third-party service providers — including cloud infrastructure and KYC verification partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, we ensure that appropriate contractual safeguards are in place, including data processing agreements that impose equivalent data protection obligations on the receiving party. We do not transfer your data to jurisdictions with materially lower data protection standards without putting appropriate safeguards in place.

13. Updates to This Policy

399bey may update this Privacy Policy periodically to reflect changes in our data practices, service offerings, or applicable law. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact Us

For any privacy-related queries, data rights requests, or concerns about how your personal data is handled, please contact our support team. We are available 24 hours a day, 7 days a week, every day of the year including all Bangladeshi public holidays.

Support Email: [email protected]

Response target: within 30 days for formal data rights requests; within 24 hours for general privacy enquiries.

Related Pages

These pages complement our Privacy Policy and form part of the full legal and responsible gaming framework at 399bey.