399d Privacy Policy

Introduction

399d ("we", "us", "the Platform") is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect information about you when you access or use the 399d website at https://399d.bio and any services or features available through the Platform.

By registering an account, accessing the Platform, or using any of its features or services, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately. This Policy should be read alongside the 399d Terms and Conditions, which together govern your use of the Platform.

Information We Collect

399d collects personal data from you directly when you register, deposit, play, or contact our support team, as well as automatically through your use of the Platform. The categories of personal data we collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data unless specifically required by applicable law or regulation. Where we are required by law to collect specific categories of sensitive data, we will notify you separately before doing so.

How We Use Your Information

399d uses the personal data it collects for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal data are:

• Account creation and management: To register your player account, verify your identity through KYC procedures, maintain your account settings, and communicate account-related information to you.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to provide access to all gaming services on the Platform; and to administer bonus offers and promotional rewards.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, identity theft, and other prohibited activities; to enforce our Terms and Conditions; and to protect the integrity of the Platform.
• Responsible gaming: To monitor gaming activity for signs of problem gambling; to administer self-exclusion requests, deposit limits, and session reminders; and to fulfil our duty of care obligations under applicable responsible gaming standards.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance related to your account or the Platform's services.
• Marketing communications: Where you have given us consent, to send you promotional offers, bonus notifications, and updates about new games and features on the Platform. You may withdraw this consent at any time by contacting our support team.

Legal Basis for Processing

399d processes your personal data only where a valid legal basis exists. Depending on the nature of the data and the purpose of processing, the applicable legal basis will be one or more of the following:

• Contractual necessity: Processing is necessary for the performance of the contract between you and 399d — specifically, to operate and administer your player account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which 399d is subject — including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and fraud prevention regulations.
• Legitimate interests: Processing is necessary for the purposes of the legitimate interests pursued by 399d — including fraud detection, platform security, responsible gaming monitoring, and improving the overall quality of the service we provide.
• Consent: Where you have given us your explicit consent to process your data for a specific purpose — for example, to receive marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Sharing of Your Information

399d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved:

• Payment processors and financial service providers: We share relevant financial data with our authorised payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals securely.
• Game providers and technology partners: We share technical and behavioural data with game providers (such as Pragmatic Play, Evolution Gaming, and Spribe) and platform technology vendors solely to deliver game content and platform functionality.
• Regulatory and law enforcement authorities: We may share personal data with government agencies, regulators, and law enforcement bodies where we are legally required to do so — for example, to comply with anti-money laundering obligations or in response to a lawful court order.
• Professional advisers: We may share personal data with our legal advisers, auditors, and compliance consultants on a strictly need-to-know basis where necessary for the administration of the Platform.

Payment Data and Financial Information

399d supports local Bangladeshi payment methods including bKash, Nagad, Rocket, and Upay, as well as international card payments via Visa and Mastercard. When you make a deposit or withdrawal, your payment details are transmitted directly to our authorised payment processors using SSL-encrypted connections. 399d does not store your full card numbers, mobile banking PINs, or full payment account credentials on our servers. We retain only the minimum necessary financial reference data — such as masked account identifiers and transaction reference numbers — required to administer your account and comply with our financial record-keeping obligations.

All payment processors used by 399d are required to maintain industry-standard security certifications. 399d is not liable for any data breach or loss occurring on a third-party payment processor's systems, provided that we have taken all reasonable steps to select and monitor compliant processors.

Cookies and Tracking Technologies

399d uses cookies and similar tracking technologies to operate the Platform, improve your experience, and gather analytical information about how the Platform is used. Cookies are small text files placed on your device when you access the Platform. The categories of cookies we use are as follows:

• Essential cookies: Required for the Platform to function correctly. They enable core features such as session management, account authentication, and security functions. These cookies cannot be disabled without disrupting your use of the Platform.
• Analytics cookies: Used to collect aggregated, anonymised information about how visitors use the Platform — such as pages visited, time spent on each page, and navigation paths. This information helps us identify areas for improvement.
• Functional cookies: Enable enhanced functionality and personalisation, such as remembering your language preferences, display settings, and recent gaming activity. Disabling these cookies may affect the quality of your experience on the Platform.
• Session cookies: Temporary cookies that expire when you close your browser. They are used to maintain your logged-in state during a single browsing session and are deleted automatically when the session ends.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may limit your ability to use some features of the Platform. By continuing to use the Platform without adjusting your cookie settings, you consent to our use of cookies as described in this Policy.

Data Retention

399d retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. In practice, this means that account data and transaction records are retained for a minimum period of five years following account closure, in accordance with anti-money laundering and financial record-keeping regulations. Behavioural data collected for responsible gaming purposes is retained for the duration of the account plus a further two years. Data collected solely for marketing purposes is deleted promptly upon withdrawal of your consent.

When personal data is no longer required, 399d will securely delete or anonymise it in accordance with industry best practice. Where complete deletion is not technically possible — for example, where data is stored in backup archives — 399d will isolate the data from active processing and ensure it is deleted at the earliest technically feasible opportunity.

Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data that 399d holds about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within a reasonable timeframe and will not charge a fee for exercising your rights in ordinary circumstances.

• Right of access: You have the right to request a copy of the personal data that 399d holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that 399d holds about you.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies.
• Right to restriction of processing: You have the right to request that 399d restricts the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where it is based on legitimate interests, including profiling. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

Please note that some of these rights are not absolute and may be subject to limitations under applicable law — for example, where retention of data is required to comply with a legal obligation or to establish, exercise, or defend a legal claim. 399d will notify you if it is unable to fulfil a request and will explain the reason for the limitation.

Data Security

399d implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, secure server infrastructure hosted in certified data centres, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security assessments and penetration testing, and multi-factor authentication for administrative access to Platform systems.

While 399d takes all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 399d will notify you without undue delay and will take all necessary steps to mitigate the impact of the breach.

Children's Privacy

The 399d Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data from our systems and close the associated account. If you are a parent or guardian and believe that a minor has registered on the Platform using your details or their own, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Changes to This Privacy Policy

399d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made to this Policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending an email to the registered email address associated with each account.

The date of the most recent update to this Policy is always displayed at the top of this page. Your continued use of the Platform after any update takes effect constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Contact and Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 399d processes your personal data, please contact our support team. Our team handles all data protection enquiries with care and will acknowledge your request promptly. We aim to resolve all data-related requests within 30 days of receipt.

Email: [email protected]