Your Privacy Matters

3999ba operates the online casino and sports betting platform accessible at https://3999ba.vip. For the purposes of this Privacy Policy, 3999ba acts as the data controller in respect of all personal information collected from players using our platform. If you have any questions about this policy or about how your data is handled, you may contact us at [email protected].

This Privacy Policy applies to all personal data collected through: (a) registration and use of your 3999ba account; (b) financial transactions processed via bKash, Nagad, Rocket, Upay, Visa, or Mastercard; (c) your use of the 3999ba website, mobile browser experience, and any associated services; and (d) any communications you send to our support team. It does not cover third-party websites linked to or from our platform.

• Full legal name — as provided at registration and confirmed during KYC verification.
• Date of birth — collected to verify that you meet the 21+ age requirement.
• Residential address — your address within Bangladesh (city, district, postal code).
• Mobile phone number — the number linked to your bKash, Nagad, or Rocket account used for deposits and withdrawals.
• Email address — used for account notifications, password resets, and support correspondence.

To comply with our Know Your Customer (KYC) obligations, we may collect copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Valid Bangladesh passport.
• Driver's licence or other government-issued photo identification.

These documents are used exclusively for identity and age verification and are not used for any other purpose.

We collect records of deposits and withdrawals processed through bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This includes transaction reference numbers, amounts in BDT (৳), timestamps, and the mobile wallet number or card type associated with each transaction. We do not store full card numbers or full mobile banking PINs — these are handled directly by the respective payment processors.

• IP address — used for geographic verification and fraud prevention.
• Device information — device type, operating system, browser type and version.
• Session data — pages visited, time spent on platform, games played, bets placed.
• Login timestamps — date and time of each account access, used for security monitoring.

When you contact 3999ba support via email or live chat, we retain records of those communications, including the content of your messages, any attachments you send, and the resolution provided. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.

The majority of personal data we hold is provided directly by you during the account registration process, during KYC verification, when you initiate financial transactions, or when you contact our support team. You are responsible for ensuring the accuracy of the information you provide.

When you access the 3999ba platform, certain technical data is collected automatically through cookies, web server logs, and similar technologies. This includes your IP address, browser type, device model, and browsing behaviour on the 3999ba website. This data is collected for security, performance optimisation, and fraud detection purposes.

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the relevant payment processor transmits a transaction confirmation to 3999ba containing the transaction reference number, amount in BDT, timestamp, and partial mobile number identifier. We do not receive your full mobile banking credentials from these processors.

To process your financial transactions, 3999ba shares the minimum necessary data (transaction amount in BDT, your registered mobile number or partial card details) with our payment partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These processors operate under their own privacy policies and are independently responsible for data protection within their systems.

Games delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may require a player session token to be passed from 3999ba to the relevant provider to launch the game. No personally identifiable information beyond a hashed session identifier is shared with game providers.

3999ba does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. Any data sharing arrangement described in this section is limited strictly to the purpose for which it is undertaken.

Cookies are small text files stored on your device when you visit the 3999ba website. They help us remember your session, maintain login state, and understand how players interact with our platform so we can improve the experience for users across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and the rest of Bangladesh.

• Essential cookies: Required for the platform to function. These include session cookies that maintain your logged-in state and security tokens that prevent cross-site request forgery.
• Analytics cookies: Help us understand which pages and games are most popular, how long sessions last, and where users encounter difficulties. Data collected is aggregated and anonymised.
• Preference cookies: Store user settings such as notification preferences and responsible gaming limits you have set within your account.

You may configure your browser to block or delete cookies at any time. However, please be aware that disabling essential cookies will impair your ability to use the 3999ba platform — in particular, session management and login functionality depend on essential cookies. Instructions for managing cookies are available in your browser's help documentation.

3999ba retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the lifetime of your account plus 5 years following account closure.
• Financial transaction records: Retained for a minimum of 5 years in accordance with anti-money laundering obligations.
• KYC documents: Retained for 5 years after the end of the business relationship.
• Support communications: Retained for 2 years from the date of last correspondence.
• Session and technical logs: Retained for 12 months from the date of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. If you request deletion of your data before the retention period has expired, we will assess your request and, where permitted by law, comply with it within 30 days.

3999ba implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit, hashed password storage, firewall protection, and access controls limiting data access to authorised personnel only.

In the unlikely event of a data security incident that may affect your personal information, 3999ba will notify affected players promptly via the email address registered on their account. We will describe the nature of the incident, the categories of data involved, the likely consequences, and the steps we have taken to address it.

You have the right to request a copy of all personal data that 3999ba holds about you. We will provide this information within 30 days of receiving a valid request.

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please contact support or update your details directly within your account settings.

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to our legal obligations to retain certain data (see Section 7).

You may ask us to restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.

3999ba reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will update the effective date shown at the top of this page and, where the changes significantly affect your rights or how we use your data, we will notify you via the email address registered on your account. Continued use of the 3999ba platform after the updated policy takes effect constitutes your acceptance of the revised terms.

We recommend that all players review this Privacy Policy periodically — at minimum each time you notice the effective date has changed. The most current version of this policy is always available at https://3999ba.vip/privacy-policy.