399dat Privacy Policy

When you create a 399dat account, we collect the following information:

• Full legal name as it appears on your National ID Card (NID)
• Date of birth (to verify you are 21 years of age or older)
• Bangladeshi mobile phone number registered with your MFS wallet
• Email address (for account notifications and support communications)
• Username and encrypted password

Providing accurate registration data is a condition of using the Platform. Inaccurate information may result in account suspension or the withholding of withdrawal funds pending identity verification.

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, we may request the following documents at any point during your account lifecycle:

• A copy of your National ID Card (NID) or passport
• A recent utility bill, bank statement, or other proof of address
• A screenshot or confirmation of your registered MFS wallet (bKash, Nagad, Rocket, or Upay)
• A selfie photograph for liveness verification purposes

Identity documents are stored securely and used exclusively for verification purposes. They will not be shared with third parties except where required by law or to prevent fraud.

Every deposit, withdrawal, bonus credit, and game stake associated with your account is recorded as part of your transaction history. This includes the amount, timestamp, payment method reference, and transaction status. This data is retained for audit, fraud prevention, and dispute resolution purposes. Your full MFS wallet number is masked in stored records — only the last four digits are retained for reference.

When you access the 399dat Platform, our systems automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent, clickstream data, and session duration
• Game activity logs (games played, bet amounts, win/loss outcomes)
• Referral source (the URL from which you arrived at the Platform)

This technical data is used to improve Platform performance, detect unusual account activity, and personalise your experience. It does not, on its own, identify you as an individual unless combined with your registration data.

When you contact 399dat support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments you provide. This data is used to resolve your query, improve support quality, and maintain a record of commitments made to you. Support communications are stored securely and are accessible only to authorised 399dat staff.

Cookies are small text files placed on your device by a website when you visit it. 399dat uses cookies and similar tracking technologies (such as local storage and session tokens) to keep you logged in between sessions, remember your preferences, and collect anonymised analytics data about how the Platform is used. Cookies do not contain your full personal data and cannot execute code or deliver malware.

• Essential cookies: Required for the Platform to function correctly, including session management, login state, and security tokens. These cannot be disabled without breaking Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about page views, session durations, and feature usage. This data helps us improve the Platform experience.
• Preference cookies: Store your language, display, and notification preferences so you do not need to re-enter them on each visit.
• Security cookies: Help us detect and prevent fraudulent activity, bot access, and brute-force login attempts.

You can control non-essential cookies through your device's browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please be aware that disabling essential cookies will prevent you from logging in and using core Platform features. Detailed instructions for managing cookies are available in your browser's help documentation.

To process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, we share the minimum necessary transaction data with these mobile financial services (MFS) providers. Each MFS provider operates under its own privacy policy and regulatory framework. 399dat is not responsible for data handling practices by MFS providers once data has been transmitted to them for payment processing.

Our casino games are delivered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session tokens or game identifiers to facilitate game delivery and settle game rounds. They do not receive your full name, NID details, or payment information unless specifically required to resolve a game dispute.

399dat may disclose your personal data to competent authorities, law enforcement agencies, or courts of law where we are required to do so by applicable law, court order, or regulatory instruction. We will, where legally permissible, notify you of such a disclosure request promptly and prior to compliance.

To protect the integrity of the Platform and our player community, 399dat may share limited data — such as device fingerprints, IP addresses, and transaction patterns — with fraud prevention and identity verification partners. These partners are contractually bound to use such data only for the purpose of fraud detection and may not retain or use it for any other purpose.

While your 399dat account is active, we retain all personal data associated with it for the purposes described in this Policy. Transaction records and game activity logs are retained for the full duration of your account's active life and for a minimum period after account closure as specified below.

Following the closure of your 399dat account — whether at your request, due to a breach of our Terms & Conditions, or for any other reason — we will retain your personal data for a minimum period necessary to fulfil our legal obligations, resolve any outstanding disputes, and maintain financial audit records. After this period, your personal data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual.

Where a Player has requested self-exclusion under our Responsible Gaming policy, we retain sufficient identifying data — including name, mobile number, email address, and device identifiers — to enforce the self-exclusion and prevent re-registration during the exclusion period. This data is not used for any other purpose during the exclusion period.

You have the right to request a copy of the personal data that 399dat holds about you. We will provide this in a clear, readable format. We may ask you to verify your identity before fulfilling the request to protect against unauthorised disclosure.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some information directly within your account settings; for other fields, please contact support.

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent is the legal basis), or where you object to processing and there is no overriding legitimate interest. Note that we may be required to retain certain data by law even after a deletion request — in such cases we will explain what data is retained and why.

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and we are considering whether our legitimate interests override your objection.

Where processing is based on your consent or the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.

399dat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered Players via in-platform notification or email. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the 399dat Platform after the effective date of any amendment to this Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and contact support to arrange account closure. Closed accounts will be handled in accordance with the data retention provisions in Section 6.