Privacy Policy — bd3999

This Privacy Policy ("Policy") describes how bd3999 ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "the Player") who visit or use the bd3999 online casino and sports betting platform, accessible at https://bd3999.vip ("the Platform"). This Policy forms part of our broader Terms & Conditions and should be read in conjunction with them.

By accessing the Platform, creating a registered account, making a deposit, or otherwise using any of bd3999's services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the Platform.

bd3999 is committed to protecting the privacy of all players registered in Bangladesh. We recognise that the personal data you entrust to us is sensitive, and we take our responsibility to safeguard it with the utmost seriousness. This Policy is designed to be transparent, comprehensive, and written in plain English so that every player fully understands how their data is handled at every stage of their relationship with bd3999.

This Policy applies to all personal data collected through: the bd3999 website, any mobile-optimised version of the Platform, customer support communications (email, WhatsApp), and any other channel through which you interact with bd3999 directly. It does not apply to third-party websites or services that may be linked from the Platform — those are governed by their own privacy policies.

bd3999 processes personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table sets out our primary processing purposes and the legal basis for each:

• Account Creation and Management: We use your identity and contact data to create and maintain your player account, authenticate your identity at login, and communicate account-related updates (e.g., password resets, security alerts, withdrawal confirmations). This processing is necessary to perform our contractual obligations to you.
• Age and Identity Verification: We process your identity documents and date of birth to confirm that you meet the 18+ age requirement and to comply with our anti-money-laundering (AML) and know-your-customer (KYC) obligations. This is a legal requirement that we are obligated to fulfil.
• Payment Processing: Financial data is used exclusively to process deposits, execute withdrawal requests, detect and investigate fraudulent transactions, and maintain accurate financial records. bd3999 does not store full card numbers or mobile banking PINs.
• Responsible Gaming: Usage and betting history data allows us to monitor for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits, and fulfil our duty of care to players. For more information, visit our Responsible Gaming page.
• Platform Improvement: Technical and usage data is analysed in aggregate (anonymised where possible) to identify performance issues, improve game loading speeds, optimise the user interface, and enhance the overall player experience across all devices used by players in Dhaka, Chittagong, Sylhet, Khulna, and across Bangladesh.
• Fraud Prevention and Security: IP addresses, device identifiers, and behavioural patterns are monitored to detect suspicious activity, prevent account takeovers, identify duplicate accounts, and protect the integrity of the Platform and its players.
• Legal and Regulatory Compliance: bd3999 may process and retain certain data categories to comply with applicable legal obligations, respond to lawful requests from public authorities, and resolve legal disputes.
• Customer Support: Communication data is used to respond to your enquiries, process complaints, and maintain a record of interactions for quality-assurance and dispute-resolution purposes.

bd3999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose:

• Payment Service Providers: To process your deposits and withdrawals, bd3999 shares relevant financial data with licensed payment processors supporting bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers are bound by strict data-handling agreements and are authorised to use your data solely to process the transaction in question.
• Game Software Providers: The bd3999 Platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To load and operate their games within the Platform, a session token and anonymised player identifier may be passed to the relevant provider. These providers do not receive your full name, contact details, or financial information.
• Identity Verification Services: For KYC and AML compliance, bd3999 may use third-party identity verification services to authenticate documents such as National ID cards or passports submitted during the account verification process. These providers handle documents under strict confidentiality obligations.
• IT Infrastructure and Cloud Services: bd3999 uses secure third-party cloud infrastructure to host the Platform and store data. All infrastructure providers operate under data-processing agreements that require them to implement appropriate technical and organisational security measures.
• Legal and Regulatory Authorities: bd3999 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally obligated to do so — for example, in response to a court order, an anti-money-laundering investigation, or a fraud-prevention request from a financial institution.
• Business Transfers: In the unlikely event of a merger, acquisition, or sale of all or part of bd3999's business, player data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified in advance and provided with the opportunity to close their accounts if they do not consent to their data being transferred.

As a player registered with bd3999, you hold a number of rights in relation to your personal data. bd3999 is committed to honouring these rights in a timely and transparent manner. The following rights are available to you:

• Right of Access: You have the right to request a copy of the personal data that bd3999 holds about you, along with information about how it is processed. We will provide this information in a clear, structured format within a reasonable timeframe following receipt of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details (such as your email address or phone number) directly within your account settings. For changes to identity data, please contact support with supporting documentation.
• Right to Erasure: You may request that bd3999 delete your personal data in certain circumstances — for example, when the data is no longer necessary for the purpose it was collected, or when you withdraw your consent. Please note that we may be required to retain certain data for legal or regulatory compliance purposes even after an erasure request; in such cases, we will inform you of the data we are unable to delete and explain why.
• Right to Restrict Processing: You have the right to request that bd3999 restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed, or where you contest the lawfulness of our processing.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider if you choose.
• Right to Object: You have the right to object to bd3999 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, although bd3999 may continue processing if we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

To exercise any of the rights described above, please submit a written request to [email protected]. For security purposes, we may ask you to verify your identity before processing your request. We aim to respond to all data rights requests within 30 days; where a request is complex or voluminous, we may extend this period and will notify you accordingly.