Privacy Policy

Data We Collect

When you use the 3399bet platform, we collect personal data in several ways: directly from you when you register or interact with our services, automatically as you navigate the site, and from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

Account Registration Data

When you create a 3399bet account, we collect the following information:

• Full legal name — used to verify your identity and match your payment accounts.
• Date of birth — required to confirm you meet the 18+ age requirement.
• Email address — used for account communications, security alerts, and promotional messages (where you have opted in).
• Mobile phone number — used for two-factor authentication and account recovery.
• Residential address — collected as part of our Know Your Customer (KYC) obligations.
• Username and encrypted password — used to authenticate your access to the platform.

Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and responsible gaming obligations, we may request copies of identity documents. These may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (biographical data page).
• Birth Registration Certificate.
• Utility bills or bank statements confirming your residential address (no older than 3 months).

Financial & Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard, or any other supported payment method, we record transaction reference numbers, amounts, timestamps, and the payment method type. We do not store your full bKash PIN, card CVV, or online banking passwords — these remain with your payment provider at all times.

Behavioural & Usage Data

As you use 3399bet, we automatically collect technical and behavioural data to improve platform performance and ensure compliance:

• IP address and approximate geographic location (city/district level).
• Device type, operating system, and browser version.
• Pages visited, games played, bets placed, and time spent on the platform.
• Session logs including login timestamps and session duration.
• Referring URL (the page you visited before arriving at 3399bet.club).

How We Use Your Data

3399bet uses the personal data it collects for clearly defined, lawful purposes. We do not process your data for purposes that are incompatible with those listed below. The table below summarises our primary data processing activities, the data categories involved, and the legal basis for each activity.

Marketing Communications

If you have opted in to receive promotional communications from 3399bet, we may send you information about bonuses, new games, cricket and BPL betting promotions, seasonal offers tied to events like Eid ul-Fitr, Pohela Boishakh, and IPL season, and other relevant offers. You may withdraw your marketing consent at any time by updating your preferences within your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

Data Sharing & Third Parties

3399bet does not sell your personal data. We share data only with trusted third-party service providers who assist us in delivering and improving our platform, and only to the extent necessary for them to perform their contracted services. All third-party service providers who handle personal data on our behalf are bound by data processing agreements that require them to maintain appropriate security standards and to use the data only for the purposes specified by 3399bet.

Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card networks (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Specialist KYC and AML compliance partners receive identity document data to perform verification checks required under applicable regulations.
• Game Technology Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for game performance monitoring and RNG certification purposes. These providers do not receive your personal registration or payment data.
• Cloud Infrastructure & Hosting Providers: Our platform infrastructure is hosted on secure cloud servers. Hosting providers have access to server-level data but are contractually prohibited from accessing, reading, or processing the personal data stored within our databases.
• Fraud Prevention & Cybersecurity Providers: We use specialised security services to monitor for fraudulent activity, bot traffic, and account compromise attempts. These providers process IP addresses and behavioural signals only.
• Legal & Regulatory Authorities: We may be required by law, court order, or regulatory direction to disclose personal data to government authorities, law enforcement agencies, or financial regulators. Such disclosures are made only to the extent required by the applicable legal obligation.

Cookies & Tracking Technologies

3399bet uses cookies and similar tracking technologies (including local storage and session tokens) to make the platform work correctly, remember your preferences, and understand how players interact with our site. This section explains the types of cookies we use and how you can manage them.

Types of Cookies We Use

Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings menus. You can choose to block all non-essential cookies, delete existing cookies, or be notified before a new cookie is set. Please note that disabling functional or analytics cookies will not prevent you from using 3399bet, but may affect certain preference-based features. Disabling strictly necessary cookies will prevent the platform from functioning correctly and is not recommended.

For guidance on managing cookies in your specific browser, please consult the help documentation for your browser. Common mobile browsers used in Bangladesh — including Chrome for Android, Samsung Internet, and Opera Mini — all provide cookie management options within their privacy settings menus.

Data Security & Storage

The security of your personal data is a core operational priority at 3399bet. We have implemented a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, and destruction.

Technical Security Measures

• TLS/SSL Encryption: All data in transit between your browser or app and 3399bet's servers is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring that data cannot be read by third parties during transmission.
• Password Hashing: User passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm (bcrypt with salt), meaning that even in the unlikely event of a data breach, your original password cannot be recovered from our stored data.
• Database Encryption: Sensitive data fields including identity document references and payment account details are encrypted at rest within our database using AES-256 encryption.
• Two-Factor Authentication (2FA): We strongly encourage all 3399bet players to enable 2FA on their accounts. With 2FA active, an attacker would require both your password and access to your registered mobile device to log in.
• Access Controls: Access to production systems and player data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and audited regularly.
• DDoS & Intrusion Protection: Our infrastructure is protected by a web application firewall (WAF) and DDoS mitigation systems that continuously monitor for and block malicious traffic patterns.

Data Breach Response

In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, 3399bet will notify affected users as promptly as practicable — and no later than 72 hours after becoming aware of the breach. Notifications will be sent to your registered email address and will include a description of the nature of the breach, the categories of data affected, likely consequences, and the steps 3399bet is taking to address the breach and reduce its impact.

Your Privacy Rights

3399bet respects your rights over your personal data. The following rights are available to all registered users of the platform. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a description of your request.

• Right of Access: You may request a copy of all personal data that 3399bet holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data (such as your registered name) may require supporting documentation before it can be changed.
• Right to Erasure: You may request the deletion of your personal data. We will honour such requests to the extent permitted by law. Note that certain data — particularly transaction records and KYC documents — must be retained for specific periods under financial crime prevention regulations, and cannot be deleted on request during that retention period.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data while we verify it, or if you believe our processing is unlawful but prefer restriction over deletion.
• Right to Data Portability: You may request that we provide your personal data in a portable, machine-readable format (e.g., JSON or CSV) so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where our processing of your data is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to processing that is based on our legitimate interests, including profiling for responsible gaming purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

We will respond to all valid privacy rights requests within 30 calendar days. In complex cases where additional time is required, we will notify you of the extension and the reasons for it within the initial 30-day period. All standard requests are handled free of charge. For manifestly unfounded or excessive repeat requests, we reserve the right to charge a reasonable administrative fee.

Data Retention Policy

3399bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. The table below sets out the standard retention periods for each primary category of data.

Upon expiry of the applicable retention period, personal data is securely deleted from our active systems and backups, or irreversibly anonymised so that it can no longer be linked to an identifiable individual. In cases where deletion is technically complex (e.g., data held in encrypted backup archives), we ensure that the data is excluded from any future active processing while the secure deletion process completes.

Changes to This Policy

3399bet reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new platform features, or feedback from our users and regulators. The "Effective Date" at the top of this page will be updated whenever a material change is made.

For significant changes — particularly those that affect how we use your personal data or your rights under this policy — we will notify registered users by email to their registered address at least 14 days before the changes take effect. For minor clarifications or administrative updates, notice will be provided by updating this page and the effective date.

Your continued use of 3399bet after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you have the right to close your account and request deletion of your personal data as described in the "Your Privacy Rights" section above.

Contact Our Privacy Team

If you have any questions, concerns, or complaints about how 3399bet handles your personal data, please contact our dedicated privacy team. All privacy-related enquiries are handled confidentially and will receive a substantive response within 5 business days.

Email: [email protected] — please use the subject line "Privacy Enquiry" to ensure your message is routed to the correct team.

Our support team operates around the clock and is available in English, with particular coverage during Bangladesh Standard Time (BST, UTC+6) business hours.