At 399bit, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains exactly what data we collect, why we collect it, how we protect it, and what rights you hold as a player registered on our platform.
Six principles underpin how 399bit approaches data privacy. These are not aspirational statements — they describe how the platform actually operates today.
399bit collects only the personal data that is genuinely necessary to operate your account, process transactions, and comply with applicable legal obligations. We do not collect data speculatively or for purposes beyond those stated in this policy.
Data collected for one purpose — such as identity verification — is not repurposed for unrelated activities such as unsolicited marketing profiling. Every use of your data has a clear, documented basis and is limited to the scope disclosed at the point of collection.
399bit does not sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. Your information is not a product. Sharing with service providers occurs strictly under contractual data-processing agreements and only where necessary.
All personal data held by 399bit is stored with SSL/TLS encryption in transit and AES-256 encryption at rest. Access to player data within the 399bit organisation is restricted on a strict need-to-know basis with role-based access controls and audit logging.
You have the right to access, correct, and request deletion of the personal data 399bit holds about you. You may also object to certain processing activities or request a copy of your data in a portable format. Submit requests via the support team and we will respond within a reasonable timeframe.
Personal data is not kept indefinitely. 399bit applies defined retention periods to each category of data, after which records are securely deleted or anonymised. Retention periods are set to satisfy legal obligations while minimising unnecessary storage of personal information.
Effective Date: 1 January 2026. This Privacy Policy replaces all previous versions published on the 399bit platform. By continuing to use the 399bit platform after this date, you acknowledge that you have read and understood this policy. If you have questions about how your data is handled, contact our support team at any time — details are in Section 15.
This Privacy Policy ("Policy") describes how 399bit ("399bit", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "Player", "User") who register an account on, access, or otherwise interact with the 399bit online casino and sports betting platform, available at https://399bit.club (the "Platform").
399bit is committed to handling personal data with transparency, integrity, and respect for individual privacy. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the Platform.
This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and another document on the Platform, this Policy prevails with respect to data protection matters.
If you do not agree with the practices described in this Policy, you should not use the Platform. You may close your account at any time by contacting the support team.
For the purposes of this Policy, 399bit acts as the data controller in respect of personal data collected from players who use the Platform. As data controller, 399bit determines the purposes for which and the means by which personal data is processed.
Where 399bit engages third-party service providers to process personal data on its behalf — such as identity verification agencies, payment processors, and fraud detection services — those providers act as data processors, operating under written data processing agreements that restrict their use of your data to the specific services they provide to 399bit.
All enquiries, data access requests, and complaints relating to this Policy should be directed to the 399bit data team via the contact details provided in Section 15.
399bit collects personal data across several categories. The table below summarises the types of data collected and provides examples of the specific data points within each category.
| Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, passport number, photograph | Yes — for KYC verification |
| Contact Data | Mobile number, email address, residential address (city, district, postal code) | Yes — for account and communications |
| Financial Data | bKash/Nagad/Rocket/Upay account numbers, transaction amounts, deposit and withdrawal history | Yes — for payment processing |
| Account Data | Username, hashed password, account balance, bonus history, wagering records, session history | Yes — to operate the account |
| Technical Data | IP address, device type, operating system, browser type, time zone, screen resolution | Collected automatically |
| Usage Data | Pages visited, games played, bet amounts, session durations, navigation paths | Collected automatically |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Where you contact us |
399bit does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity documents submitted for KYC verification incidentally contain such information — in which case that data is used solely for verification purposes and is not retained beyond the verification process.
The majority of personal data 399bit holds about you is data you provide voluntarily during the account registration process, identity verification (KYC), deposit and withdrawal transactions, and when you contact the support team. This includes your name, date of birth, contact details, and payment method information.
When you access and use the Platform, 399bit's servers and analytics systems automatically collect technical and usage data. This includes your IP address, the device and browser you are using, your approximate geographic location (derived from IP), the pages and games you access, the duration of your sessions, and actions you take within the Platform. This data is collected using server logs, cookies, and similar tracking technologies described further in Section 8.
399bit may receive personal data about you from third-party sources including:
Data received from third parties is used only for the purpose for which it was shared and is subject to the same security and retention standards as data you provide directly.
399bit processes your personal data for the following purposes, each supported by a defined legal basis:
Purpose: To create, maintain, and manage your 399bit player account, including processing bets, deposits, withdrawals, and bonus entitlements.
Legal Basis: Performance of the contract between you and 399bit (the Terms & Conditions).
Purpose: To verify your identity and age in compliance with responsible gaming obligations and to prevent fraudulent account creation.
Legal Basis: Compliance with legal obligations; legitimate interests of 399bit in preventing fraud and protecting the integrity of the Platform.
Purpose: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions.
Legal Basis: Performance of the contract; compliance with financial record-keeping obligations.
Purpose: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access.
Legal Basis: Legitimate interests of 399bit and its players in maintaining a secure, fair platform; compliance with applicable anti-fraud and anti-money-laundering obligations.
Purpose: To respond to your support enquiries, resolve disputes, and improve the quality of our support services.
Legal Basis: Performance of the contract; legitimate interests in providing effective customer service.
Purpose: To monitor gameplay patterns for indicators of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods requested by players.
Legal Basis: Legitimate interests of 399bit in protecting player welfare; compliance with responsible gaming obligations.
Purpose: To analyse aggregated usage data in order to improve Platform performance, game selection, user experience, and promotional relevance.
Legal Basis: Legitimate interests of 399bit in continuously improving the Platform. Analytics used for this purpose are conducted on anonymised or aggregated data sets wherever practicable.
Purpose: To send you promotional offers, bonus notifications, and Platform updates that may be of interest to you.
Legal Basis: Your consent, which you may withdraw at any time. See Section 13 for details on managing marketing preferences.
399bit does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Your data may be shared in the following limited circumstances:
399bit engages third-party service providers who process personal data on our behalf to deliver specific services. These include identity verification providers, payment processors, cloud hosting and infrastructure providers, fraud detection services, and customer support platform operators. All service providers are engaged under written data processing agreements that prohibit them from using your data for any purpose other than delivering the specified service to 399bit.
Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive limited gameplay data — such as session tokens and bet amounts — necessary to operate their games within the Platform. Game providers do not receive your full identity or payment data. Data shared with game providers is governed by their own data processing agreements with 399bit.
399bit may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, in response to a lawful order or warrant, or where disclosure is necessary to protect the rights, property, or safety of 399bit, its players, or the public. Where legally permissible, 399bit will notify you of such a disclosure.
In the event that 399bit undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the successor entity as part of that transaction. In such circumstances, 399bit will take reasonable steps to ensure that the successor entity is bound by data protection obligations consistent with this Policy, and will notify affected players of any material change to how their data is handled.
All financial transactions on the 399bit Platform are processed in Bangladeshi Taka (BDT) via mobile financial services including bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay. 399bit does not store full MFS account credentials or PIN numbers. The financial data 399bit retains consists of transaction reference numbers, amounts, timestamps, and the partially masked MFS account identifiers associated with your deposits and withdrawals.
Payment data is retained for the period required to satisfy financial record-keeping obligations and to resolve any transaction disputes that may arise. During this period, access to payment data is restricted to authorised personnel involved in payment reconciliation and fraud investigation.
When a withdrawal is requested, 399bit verifies that the destination MFS account matches the account used for prior deposits, in accordance with the anti-money-laundering principle that funds must be returned to their source. This check uses the account identifiers held on file and does not involve any re-transmission of your full MFS credentials.
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device on subsequent visits and to store preferences or session information. 399bit uses cookies and similar technologies (including local storage and session storage) to operate the Platform and to understand how players interact with it.
You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using core Platform features. Instructions for managing cookies in common browsers are available in each browser's help documentation. 399bit does not currently respond to "Do Not Track" browser signals, as there is no universally accepted standard for this mechanism.
399bit employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
While 399bit takes data security seriously and implements industry-standard controls, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 399bit account and to notify support immediately if you suspect your account has been compromised.
399bit retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or to satisfy applicable legal, regulatory, tax, accounting, or reporting obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| Financial Transaction Data | 7 years from transaction date | Anti-money-laundering obligations |
| KYC Verification Documents | Duration of account + 5 years after closure | Fraud prevention; regulatory requirements |
| Support Communications | 3 years from last interaction | Dispute resolution; service improvement |
| Technical & Usage Logs | 13 months from collection | Security monitoring; analytics |
| Marketing Consent Records | Until withdrawn + 3 years | Proof of consent; compliance |
When a retention period expires, personal data is either securely deleted from all 399bit systems or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis. Where data is subject to an active legal dispute, investigation, or regulatory inquiry, retention may be extended for the duration of that matter.
As a player whose personal data is processed by 399bit, you hold the following rights with respect to that data. To exercise any of these rights, contact the support team using the details in Section 15. 399bit will respond to all valid requests within a reasonable timeframe, and in no event later than 30 days of receipt.
You have the right to request a copy of the personal data 399bit holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR). 399bit will provide this information in a clear, structured format.
If any personal data 399bit holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information (such as your contact email) directly within your account settings; other corrections must be requested via the support team and may require supporting documentation.
You may request that 399bit delete the personal data it holds about you. This right is not absolute — 399bit may be required to retain certain data to comply with legal obligations (such as financial record-keeping and anti-money-laundering requirements) even after an account has been closed. Where deletion is not possible in full, 399bit will explain which data must be retained and why.
In certain circumstances — for example, where you contest the accuracy of your data or have objected to its processing — you may request that 399bit restricts the processing of your data while the matter is being resolved. During a restriction, 399bit may still store your data but will not actively process it for other purposes.
You have the right to object to processing of your personal data where 399bit relies on legitimate interests as the legal basis. You may also object at any time to the processing of your data for direct marketing purposes, including profiling for marketing. 399bit will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that it may be transmitted to another controller.
Where 399bit processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.
The 399bit Platform is strictly intended for individuals who are 18 years of age or older. 399bit does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use the Platform, register an account, or submit any personal data.
If 399bit becomes aware that personal data has been collected from a person under the age of 18, the affected account will be immediately suspended, the data will be deleted as quickly as practicable (subject to any legal hold obligations), and any funds held in the account will be handled in accordance with the Terms & Conditions' underage gambling provisions.
If you are a parent or guardian and believe that your child has registered an account or submitted personal data to 399bit, please contact the support team immediately so that the matter can be investigated and resolved without delay.
With your consent, 399bit may send you promotional communications about bonuses, new games, sports betting markets, and Platform updates. These communications may be sent via email or SMS to the contact details registered on your account.
You may opt out of marketing communications at any time by:
Please note that opting out of marketing communications does not affect transactional communications, which 399bit will continue to send as part of the normal operation of your account. Transactional communications include deposit confirmations, withdrawal notifications, KYC requests, security alerts, and updates to these policies.
399bit does not engage in unsolicited cold-call telephone marketing. If you receive a phone call purportedly from 399bit requesting personal or financial information, you should treat this as a potential fraud attempt and report it to the support team immediately.
399bit may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. The revised Policy will be published on this page with an updated effective date. For changes that materially affect the way 399bit processes your personal data, we will make reasonable efforts to notify active players via the email address registered on their account or via a prominent notice displayed upon login.
Your continued use of the Platform following the publication of any revised Policy constitutes your acknowledgement of the changes. If you do not agree with any material change, you must cease using the Platform and contact the support team to close your account. Closing your account will not affect any rights or obligations that arose prior to account closure, including 399bit's legal obligation to retain certain data for specified periods as described in Section 10.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 399bit handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, with support available in both English and Bengali.
Contact us by email at: support at 399bit.club
Please include your registered username, a description of your request or concern, and any relevant details (such as transaction references for financial data queries) to help us respond efficiently. We aim to acknowledge all data-related queries within 24 hours and to provide a substantive response within 30 days.
For matters relating to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page or raise your request directly with the support team — these matters are handled as a priority.
Now that you know how we protect your personal data, discover everything 399bit has to offer — from live cricket betting and premium slots to fishing games and a full live casino experience.