399ba Privacy
Policy

399ba ("we", "us", "our") operates the online casino and sports betting platform accessible at 399ba.io. In the course of providing our services to players in Bangladesh and other supported markets, we collect and process personal data about our users. This Privacy Policy sets out, in plain and formal English, exactly what data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to your personal information.

We take privacy seriously. Every aspect of our data handling practices — from the moment you first visit 399ba.io to the point at which you request account closure — is governed by this policy. Our internal data handling procedures are reviewed regularly to ensure they remain consistent with this published policy and with the standards applicable to responsible platform operators.

By creating a 399ba account or by continuing to use the 399ba platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with this policy, please cease using the platform and contact [email protected] to request account closure.

399ba collects the following categories of personal data from users of the platform. Not all data categories are collected from every user — the data we collect depends on how you interact with the platform and what services you use.

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion or support request. Such information is treated with the highest level of confidentiality and used only for the purpose for which it was provided.

399ba collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated technical collection: Data collected automatically when you access 399ba.io, including IP addresses, device identifiers, browser fingerprints, and session metadata gathered via server logs, cookies, and similar tracking technologies.
• Transaction systems: Data received from payment processing partners (such as bKash, Nagad, Rocket, and Upay) in connection with deposits and withdrawals processed through those services.
• Identity verification providers: Data received from third-party KYC and identity verification service providers engaged by 399ba to confirm the identity and age of account holders as required by our internal compliance procedures.
• Fraud prevention systems: Data collected or flagged by automated fraud detection and anti-money laundering monitoring systems operating across the platform.
• Customer communications: Data contained in emails, support tickets, live chat conversations, and any other written or recorded communication you initiate with 399ba.

399ba processes personal data for the following specific purposes. We do not process personal data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or establishing a fresh legal basis for the new processing activity.

• Account creation and management: To create, maintain, and administer your 399ba account, including processing registration information, authenticating your identity at login, and managing account settings and preferences.
• Service delivery: To provide you with access to the full range of 399ba products and services, including casino games, sports betting markets, live dealer tables, and all associated platform features.
• Payment processing: To process your deposit and withdrawal requests, reconcile transaction records, and communicate with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) on your behalf.
• Identity verification and compliance: To verify your age, identity, and eligibility to use the platform, and to fulfil our internal compliance obligations including anti-money laundering checks and responsible gaming assessments.
• Customer support: To respond to your support enquiries, investigate disputes, and resolve complaints relating to your account or any 399ba service.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, multi-accounting, and other security threats to the platform and its users.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion arrangements.
• Platform improvement: To analyse aggregated usage data, identify performance issues, test new features, and improve the overall quality and reliability of the 399ba platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time through your account notification settings or by contacting [email protected].

399ba processes your personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and 399ba — namely, to operate your account, process transactions, and deliver the services you have signed up to receive.
• Consent: Processing based on your freely given, informed, and specific consent, most commonly in the context of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without this affecting the lawfulness of prior processing.
• Legitimate interests: Processing carried out in pursuit of 399ba's legitimate business interests, including fraud prevention, platform security, abuse detection, and internal analytics — provided those interests are not overridden by your privacy rights.
• Legal obligation: Processing necessary to fulfil 399ba's obligations under applicable law, including identity verification requirements, anti-money laundering procedures, and the retention of transaction records.

399ba does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be shared with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and their respective payment gateway operators, solely for the purpose of processing your deposit and withdrawal transactions.
• Identity and KYC verification providers: Third-party services engaged by 399ba to verify the identity, age, and eligibility of account holders. These providers process identity documents and biographic data under strict contractual data processing agreements with 399ba.
• Fraud prevention and security services: Third-party fraud detection, anti-money laundering screening, and cybersecurity service providers who assist 399ba in maintaining the security and integrity of the platform.
• Game content providers: Software providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver game content and resolve technical issues.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, tax authorities, or courts of competent jurisdiction, where 399ba is required by applicable law or court order to disclose personal data.
• Professional advisers: Lawyers, auditors, accountants, and other professional advisers engaged by 399ba in connection with its business operations, subject to professional confidentiality obligations.

All third parties with whom 399ba shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than that for which it was disclosed. Where 399ba engages third-party data processors, it does so under written data processing agreements that bind those processors to appropriate technical and organisational security measures.

399ba retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or compliance obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active 399ba account is retained for the duration of the account relationship and for a defined period following account closure to enable the resolution of any post-closure disputes, regulatory enquiries, or legal claims.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum period in accordance with anti-money laundering record-keeping requirements applicable to online gaming platforms.
• Identity verification documents: Copies of identity documents collected during KYC verification are retained for the period required by applicable compliance frameworks and securely deleted thereafter.
• Support communications: Customer support correspondence is retained for a reasonable period following resolution of the relevant enquiry or dispute to support quality assurance, training, and dispute resolution processes.
• Marketing data: Where you have consented to receive marketing communications, your contact details and communication preferences are retained until you withdraw your consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing systems until deletion can be completed.

399ba implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or loss. Our security framework includes, but is not limited to, the following measures:

• SSL/TLS encryption: All data transmitted between your device and the 399ba platform is encrypted in transit using industry-standard SSL/TLS protocols. The padlock indicator in your browser confirms that your connection to 399ba.io is secured.
• Encryption at rest: Sensitive personal data stored on 399ba's servers, including financial information and identity documents, is encrypted at rest using robust encryption algorithms.
• Access controls: Access to personal data within 399ba's internal systems is restricted on a strict need-to-know basis. Personnel with data access privileges are subject to background checks and ongoing security training.
• Infrastructure security: 399ba's platform infrastructure is hosted in secure, access-controlled data centre environments with physical security measures, redundant systems, and regular security audits.
• Incident response: 399ba maintains a documented data breach response procedure. In the event of a security incident affecting personal data, affected users will be notified in accordance with applicable requirements.

While 399ba takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You play a critical role in your own account security by keeping your login credentials confidential and reporting any suspected unauthorised access to [email protected] immediately.

399ba uses cookies and similar tracking technologies on the 399ba.io platform. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies help us deliver a functional, personalised, and secure user experience. The categories of cookies used on 399ba.io are as follows:

• Strictly necessary cookies: These cookies are essential for the operation of the 399ba platform. They enable core functions such as session authentication, account security, and navigation. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your chosen language, display settings, and responsible gaming limit configurations — so that you do not need to reconfigure them on each visit.
• Analytical cookies: These cookies collect anonymised or aggregated data about how users interact with 399ba.io, including which pages are visited most frequently and how users navigate between sections. This information is used solely to improve the platform.
• Security and fraud prevention cookies: These cookies help 399ba's fraud detection systems identify suspicious activity, unusual access patterns, and potential account compromise attempts.

You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the 399ba platform. Note that strictly necessary cookies are exempt from consent requirements as they are technically essential to service delivery.

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to the personal data that 399ba holds about you. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to identify your account.

• Right of access: You have the right to request a copy of the personal data that 399ba holds about you, together with information about how that data is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 399ba be corrected or completed without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to 399ba's legal data retention obligations — certain data may be retained for compliance purposes even following an erasure request.
• Right to restriction of processing: You have the right to request that 399ba restrict its processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive the personal data you have provided to 399ba in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where 399ba processes your data on the basis of consent (most commonly for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of 399ba's legitimate interests. 399ba will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

399ba will respond to all valid rights requests within a reasonable time period. In some cases, 399ba may need to verify your identity before processing a rights request to ensure that personal data is not disclosed to, or actioned on behalf of, an unauthorised party.

The 399ba platform is strictly for adults aged 21 and above. 399ba does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If 399ba discovers or is informed that personal data belonging to a minor has been submitted through the platform, the associated account will be suspended immediately, all personal data relating to that individual will be deleted, and any deposited funds will be returned to the originating payment method subject to verification.

If you are a parent or guardian and believe that a minor in your care has created a 399ba account or submitted personal data to the platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary steps to remove the relevant data and close the account.

The 399ba platform integrates with a number of third-party services to deliver its full range of features. These include game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and identity verification and fraud prevention services.

Each of these third-party services operates under its own privacy policy and data handling practices. 399ba is not responsible for the privacy practices of third-party service providers. Where 399ba shares your personal data with a third-party provider for the purpose of delivering a specific service (as described in Section 6 of this policy), it does so under data processing agreements that impose appropriate security and confidentiality obligations on the receiving party.

399ba does not endorse, control, or accept responsibility for the content or privacy practices of any third-party website or service that may be referenced in the context of third-party game or payment provider integrations. Your use of any third-party service is subject to that provider's own terms and privacy policy.

399ba reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy, we will publish the revised version on this page and update the "Last Updated" date shown at the top of the document. Where changes are significant, we may also notify registered players by email to the address associated with their account.

We encourage you to review this Privacy Policy periodically to stay informed about how 399ba is protecting your personal data. Your continued use of the 399ba platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must stop using the platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 399ba's handling of your personal data, please contact our support team. We are available 24 hours a day, seven days a week, Bangladesh Standard Time (UTC+6).

Support email: [email protected]

Please include your registered account username, a clear description of your query or request, and sufficient information to verify your identity. 399ba aims to acknowledge all privacy-related correspondence promptly and to provide a substantive response within a commercially reasonable time frame.