Privacy Policy – How 399btc Protects Your Personal Data

1 How We Use Your Personal Data

399btc processes your personal data for the following specific and legitimate purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the 399btc platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records in BDT.
• Security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Regulatory compliance: To meet know-your-customer (KYC) and anti-money-laundering (AML) obligations applicable to international online gaming platforms.
• Customer support: To respond to your enquiries, resolve account disputes, and improve the quality of our support services.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features that enhance the 399btc gaming experience.
• Promotional communications: To send you relevant bonus offers, promotions, and platform updates via email or SMS, subject to your communication preferences.
• Responsible gaming: To monitor gaming behaviour, identify patterns consistent with problem gambling, and reach out proactively where appropriate. Players aged 21 and above only. 21+

399btc will not process your personal data for any purpose that is incompatible with those listed above without obtaining your prior consent.

2 Legal Basis for Processing

399btc processes your personal data on the following legal bases:

• Contractual necessity: Processing is required to fulfil the agreement you enter into with 399btc when you register an account and accept the Terms & Conditions.
• Legal obligation: Certain data processing is required to comply with applicable KYC, AML, and financial record-keeping obligations under international gaming standards.
• Legitimate interests: 399btc has a legitimate interest in processing data to detect fraud, ensure platform security, and improve service quality — provided these interests do not override your fundamental rights.
• Consent: Where 399btc relies on your consent (for example, for direct marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

3 Data Sharing and Disclosure

399btc does not sell or rent your personal data to any third party. We may share your data with carefully selected service providers and partners only where strictly necessary and under binding data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their respective technology partners, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Certified KYC/AML service providers used to verify the authenticity of identity documents you submit during account verification.
• Game technology providers: Studios such as Pragmatic Play, Evolution Gaming, PG Soft, Spribe, and Ezugi receive limited technical session data necessary to deliver their game content through the 399btc platform.
• Customer support platforms: Third-party helpdesk software providers used to manage and track support ticket workflows — these providers are prohibited from accessing your data for their own purposes.
• Law enforcement and regulatory bodies: Where required by applicable law, court order, or legitimate regulatory request, 399btc may disclose personal data to the relevant authority. We will notify you of such disclosures where legally permitted to do so.

All third-party data processors engaged by 399btc are bound by contractual obligations to process your data solely on our instructions, maintain appropriate security standards, and delete or return your data upon termination of their engagement.

4 Cookies and Tracking Technologies

399btc uses the following types of cookies and browser-based tracking technologies when you visit https://399btc.vip:

• Essential cookies: Required for the website to function correctly. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without affecting core platform functionality.
• Preference cookies: Used to remember your settings such as language preference, notification preferences, and display options between sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the 399btc platform — such as which pages are most visited and where technical errors occur. This data is used solely for internal platform improvement and is not shared with advertisers.

399btc does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use the platform.

5 Data Retention

399btc retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with the following principles:

• Active accounts: Personal data is retained for the full duration of your account's active status on the platform.
• Closed accounts: Following account closure, 399btc retains transaction records, KYC documents, and communication logs for a minimum of 5 years to satisfy AML and financial compliance obligations.
• Marketing data: If you have consented to receive promotional communications, your contact details for this purpose are retained until you withdraw your consent or unsubscribe.
• Support records: Customer support tickets and chat transcripts are retained for 2 years from the date of the last interaction to enable quality assurance and dispute resolution.

Upon expiry of the relevant retention period, 399btc will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual.

6 Data Security

399btc implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including payment method references and identity document metadata.
• Role-based access controls ensuring that only authorised 399btc personnel with a legitimate business need can access personal data.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Automated intrusion detection and anomaly monitoring systems that flag unusual access patterns in real time.
• Multi-factor authentication requirements for all internal systems that store or process player personal data.

Despite these measures, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 399btc will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

7 Your Rights as a Data Subject

As a player of 399btc, you have the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with your account username and a clear description of your request:

• Right of access: You may request a copy of all personal data 399btc holds about you, together with information about how it is being processed.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restriction: You may request that 399btc restricts the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to 399btc, for transfer to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on 399btc's legitimate interests where you believe your rights override those interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

399btc will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

8 Children and Minors

The 399btc platform is strictly intended for adults aged 21 years and above. 21+ 399btc does not knowingly collect, process, or retain personal data belonging to persons under the age of 21. If you believe that a minor has registered an account on 399btc or has submitted personal data through the platform, please contact us immediately at [email protected]. Upon confirmation, we will suspend the account, delete all associated personal data, and reverse any financial transactions to the best of our ability.

9 International Data Transfers

399btc operates as an international online gaming platform. In order to deliver our services, your personal data may be transferred to and processed in countries outside Bangladesh. These transfers are necessary to engage the game technology providers, payment processors, and infrastructure partners that power the 399btc platform.

Where personal data is transferred internationally, 399btc takes appropriate steps to ensure that the recipient provides an adequate level of data protection, including through the use of standard contractual clauses, binding corporate rules, or other recognised safeguard mechanisms. If you would like further information about the specific safeguards applicable to your data transfers, please contact [email protected].

10 Changes to This Privacy Policy

399btc may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform upon next login.

The updated Policy will take effect 7 days after notification. Your continued use of the 399btc platform after the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how 399btc protects your personal data.

11 Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about the way 399btc processes your personal data, please contact us using the details below:

• Email: [email protected]
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Availability: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: Within 24 hours for general privacy enquiries; within 30 days for formal data rights requests

399btc is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your concern to the appropriate data protection authority or seek independent legal advice.