399btc Privacy
Policy
At 399btc, your privacy is taken seriously. This Privacy Policy explains precisely what personal data we collect when you use our platform, how that data is used, who it may be shared with, and the rights you hold over your own information. We are committed to handling your data with transparency and care.
All data transmitted between your device and 399btc is protected by industry-standard SSL/TLS encryption. Your personal and financial information is never sent over unencrypted channels.
399btc does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used exclusively to operate and improve the 399btc platform.
You have the right to access, correct, and request deletion of any personal data 399btc holds about you. Submit a data request at any time via the support team.
Personal data held by 399btc is stored on secured servers with restricted access controls. Only authorised personnel with a legitimate operational need may access account-level data.
399btc uses cookies solely to deliver core platform functionality and improve user experience. We do not deploy third-party advertising trackers or behavioural profiling cookies without disclosure.
You may withdraw consent for marketing communications at any time. Every promotional email from 399btc includes a clear unsubscribe option, and opt-out requests are processed within 5 business days.
Information We Collect
When you register for and use a 399btc account, we collect certain categories of personal data in order to verify your identity, process transactions, comply with our legal obligations, and deliver a secure, personalised experience. The categories of data we collect are set out below.
Registration & Identity Data
When you open a 399btc account, we collect the following information directly from you:
- Full legal name as it appears on your government-issued identification document.
- Date of birth — required to verify that you meet the minimum age requirement of 18 years.
- Email address — used as your primary account identifier and communication channel.
- Mobile phone number — used for account security notifications and, where applicable, bKash or Nagad transaction verification.
- Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh), and postcode.
- National Identity Card (NID) number or passport number — collected as part of the KYC identity verification process.
Financial & Transaction Data
To process deposits and withdrawals, we collect and retain records of the following:
- Payment method details (bKash wallet number, Nagad number, Rocket number, Upay number, bank account reference, or card details where applicable).
- Transaction amounts in BDT (৳), transaction timestamps, and transaction reference numbers.
- Deposit and withdrawal history for the lifetime of your account.
- Any documents submitted as proof of payment method ownership during KYC verification.
Technical & Usage Data
When you access the 399btc platform, our systems automatically collect certain technical information to maintain security and improve platform performance:
- IP address and approximate geographic location derived from IP data.
- Device type, operating system, and browser version.
- Session duration, pages visited, features accessed, and in-game activity logs.
- Login timestamps and login location history.
How We Use Your Data
399btc processes your personal data only where a legitimate purpose exists. The table below summarises the primary purposes for which your data is used and the legal basis for each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & identity verification (KYC) | Name, DOB, NID/passport, address | Legal obligation; contractual necessity |
| Processing deposits & withdrawals | Payment method details, transaction records | Contractual necessity |
| Fraud prevention & AML compliance | Identity data, financial data, IP address, login history | Legal obligation; legitimate interest |
| Responsible gaming monitoring | Betting history, session data, self-exclusion status | Legal obligation; legitimate interest |
| Customer support & dispute resolution | Account data, communication records, transaction history | Contractual necessity; legitimate interest |
| Platform security & access control | IP address, device data, login timestamps | Legitimate interest |
| Marketing communications (where consent given) | Email address, phone number, activity preferences | Consent (withdrawable at any time) |
| Platform analytics & performance improvement | Aggregated, anonymised usage data | Legitimate interest |
399btc does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where profiling is used (for example, to identify unusual betting patterns), a member of the compliance team reviews flagged accounts before any action is taken.
Data Sharing & Third Parties
399btc does not sell or rent your personal data to any third party under any circumstances. However, in order to operate the platform and meet our legal obligations, we do share certain categories of data with trusted third-party service providers and, where required by law, with regulatory and law enforcement bodies.
Payment Processing Partners
To facilitate deposits and withdrawals, 399btc shares the minimum necessary financial data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners process your transaction data solely for the purpose of executing the payment instruction you have authorised. Each payment partner operates under its own data protection obligations and is not permitted to use your data for any other purpose.
Identity Verification Providers
Where 399btc uses a third-party KYC or identity verification service to validate the documents you submit during account opening or periodic review, your identity documents and biometric data (if used) are shared with that provider solely for verification purposes. Verification providers are contractually bound to destroy raw document data once verification is complete.
Game Content Providers
Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive aggregated session and gameplay data for the purpose of game integrity auditing, RTP certification, and technical support. These providers do not receive your name, NID, financial data, or direct contact details.
Legal & Regulatory Disclosure
399btc will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so. This includes disclosures in connection with AML investigations, fraud inquiries, or orders from a court of competent jurisdiction. We will notify you of such disclosures where we are legally permitted to do so.
Data Security & Storage
Protecting your personal data against unauthorised access, disclosure, alteration, and destruction is a core operational priority at 399btc. We implement a layered set of technical and organisational security measures designed to maintain the integrity and confidentiality of all account data.
Technical Safeguards
- TLS/SSL encryption on all data transmissions between your device and 399btc servers, ensuring that data in transit cannot be intercepted in readable form.
- Encrypted storage for sensitive fields including passwords (hashed using a strong one-way algorithm), NID numbers, and payment method identifiers.
- Access controls with role-based permissions ensuring that only staff with a documented operational need can access account-level data. All access is logged and audited.
- Intrusion detection systems that monitor platform infrastructure continuously for anomalous activity patterns indicative of attempted unauthorised access.
- Two-factor authentication (2FA) available to all players on their accounts, and mandatory for all 399btc staff accessing internal systems.
Where Is Your Data Stored?
399btc stores player data on servers located in jurisdictions with recognised data protection standards. All data storage facilities are subject to physical access controls, environmental protections, and regular security audits. Backup data is encrypted using the same standards applied to primary storage.
Breach Response
In the event of a data breach that is reasonably likely to result in a risk to your rights or interests, 399btc will notify affected account holders via the registered email address within 72 hours of becoming aware of the breach (where technically feasible). The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 399btc has taken or intends to take to address it.
Your Privacy Rights
As a 399btc account holder, you hold several rights in relation to the personal data we process about you. 399btc respects these rights and provides a straightforward process for exercising them. To submit any of the requests described below, contact the support team via live chat or email at [email protected].
Right of Access
You have the right to request a copy of the personal data 399btc holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. We will respond to verified access requests within 30 calendar days.
Right to Rectification
If any personal data 399btc holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For certain data fields (such as your email address or phone number), you may be able to update these directly within your account settings. Changes to identity documents require submission of an updated verified document.
Right to Erasure
You may request that 399btc delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the processing is unlawful. Please note that 399btc is required by AML regulations and responsible gaming obligations to retain certain transaction and identity records for a minimum statutory period. In these cases, erasure requests will be applied to the extent permitted by law.
Right to Object to Marketing
Where 399btc processes your personal data for direct marketing purposes (including promotional emails and SMS messages about bonuses, seasonal offers, and new features), you have the absolute right to object at any time. Objection requests are actioned within 5 business days and do not affect the operation of your account.
Right to Data Portability
Where processing is based on your consent or on a contractual obligation, and is carried out by automated means, you have the right to receive the personal data you provided to 399btc in a structured, commonly used, machine-readable format. Portability requests will be fulfilled within 30 calendar days.
Data Retention Policy
399btc retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The retention periods set out below reflect our standard practice.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration & identity data | Duration of account plus 5 years after closure | AML regulatory obligation |
| Transaction records (deposits & withdrawals) | 7 years from transaction date | Financial record-keeping & AML compliance |
| KYC verification documents | 5 years after account closure | Regulatory obligation |
| Customer support communications | 3 years from date of communication | Dispute resolution & quality assurance |
| Marketing consent records | Until consent is withdrawn, plus 2 years | Demonstrating lawful basis for processing |
| Technical & session logs | 12 months on a rolling basis | Security monitoring & fraud detection |
| Responsible gaming records | Duration of account plus 5 years after closure | Regulatory obligation & player welfare |
When a retention period expires and no further legal basis exists to retain the data, 399btc securely deletes or anonymises it in a manner that makes re-identification impossible. Anonymised, aggregated data (which cannot be linked to any individual) may be retained indefinitely for statistical and platform improvement purposes.
Policy Updates & Contact
399btc reviews this Privacy Policy periodically and updates it whenever there are material changes to the way we collect, use, or protect your personal data. Material changes include, but are not limited to: introduction of new data processing activities, changes in third-party data sharing arrangements, and updates driven by changes to applicable law.
How We Notify You of Changes
When this Privacy Policy is updated, the revised version will be published at https://399btc.app/privacy-policy with a new effective date shown at the top of the page. For material changes, we will send a notification to the registered email address on your account at least 14 days before the updated policy takes effect. Your continued use of the 399btc platform after the stated effective date constitutes acceptance of the revised Privacy Policy.
If you do not agree with a material change, you have the right to close your account before the updated policy takes effect. To close your account, contact the support team via live chat or email before the effective date of the change.
Contact for Privacy Matters
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 399btc holds about you, please contact us through one of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly on the 399btc platform. Average response time is under 2 minutes.
- Email: [email protected] — Privacy-related enquiries are handled within 5 business days. Data subject requests (access, rectification, erasure, portability) are handled within 30 calendar days.
- Time Zone: All support teams operate on Bangladesh Standard Time (BST, UTC+6).
Our support team is here 24/7 to address any data or privacy concern. You can also review our Terms & Conditions, explore the FAQ, or log in to manage your account settings directly. 18+