bt3999 Privacy Policy

01 Introduction & Scope

bt3999 ("we", "us", "our", or "the Platform") operates the online casino and sports betting website located at https://bt3999.net, together with any associated subdomains, mobile-optimised interfaces, and promotional pages that operate under the bt3999 brand. This Privacy Policy describes our practices with respect to the collection, use, storage, protection, and disclosure of personal data obtained from users ("you", "your", or "the Player") who interact with the bt3999 platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall regulatory framework governing your use of bt3999. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail on matters of contract, and this Privacy Policy shall prevail on matters of personal data handling.

bt3999 primarily serves players based in Bangladesh and has designed its data handling practices with the needs and expectations of Bangladeshi players in mind. Our platform integrates with Bangladeshi payment providers including bKash, Nagad, Rocket, and Upay, and as a consequence we process certain financial data associated with those payment methods as part of our normal operations. The handling of such data is described in detail in the Data We Collect and Data Sharing sections below.

This Privacy Policy covers all personal data collected through the bt3999 website, account registration process, deposit and withdrawal transactions, customer support interactions, marketing communications, and any other channel through which you interact with bt3999. It does not cover data practices of third-party websites that may be linked from our platform — those websites operate under their own independent privacy policies.

02 Data We Collect

bt3999 collects personal data through several distinct channels. The categories of personal data we collect, and the circumstances in which we collect them, are set out below.

Data You Provide Directly

When you register an account, verify your identity, make a deposit or withdrawal, contact our support team, or otherwise interact with bt3999, you provide us with personal data including:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (including district, division, and postal code for Bangladesh-based players).
• Identity verification documents: National ID card number, passport number, or driving licence number, together with copies of the corresponding documents submitted during KYC verification.
• Financial data: Payment method identifiers (e.g., your registered bKash or Nagad mobile number, bank account details for bank transfer withdrawals), transaction reference numbers, deposit amounts, and withdrawal amounts — all denominated in BDT (৳).
• Account credentials: Username and encrypted password hash. bt3999 does not store your password in plain text.
• Responsible gaming preferences: Deposit limits, loss limits, session time limits, cool-off period requests, and self-exclusion records as set or requested by you.
• Support communications: The content of messages you send to bt3999 via email or live chat, together with associated metadata such as timestamps and channel identifiers.

Data Collected Automatically

When you access the bt3999 platform, certain data is collected automatically through technical means:

• Device and browser data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and preferred language.
• Session data: Login timestamps, session duration, pages visited, game sessions opened, bet history, wagering activity, and navigation paths through the platform.
• Geolocation data: Approximate geographic location derived from your IP address. bt3999 does not collect precise GPS coordinates.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in the Cookies & Tracking section of this Policy.

Data from Third Parties

In certain circumstances, bt3999 may receive personal data about you from third-party sources, including identity verification agencies used during the KYC process, fraud prevention and anti-money laundering (AML) screening services, and payment processors including bKash, Nagad, Rocket, and Upay, who may share transaction confirmation data with us in order to reconcile deposits and withdrawals on your account.

03 How We Use Your Data

bt3999 processes your personal data for specific, lawful purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The table below summarises the primary purposes for which we process player data and the lawful basis for each processing activity.

Where we rely on your consent as the lawful basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

bt3999 does not make solely automated decisions that produce significant legal or similarly significant effects on you without providing you with an opportunity for human review. Where automated systems are used for fraud detection or responsible gaming monitoring, material account-level actions are reviewed by a member of our Trust & Safety team before being implemented.

04 Data Sharing & Disclosure

bt3999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Service Providers and Data Processors

bt3999 engages trusted third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with anti-money laundering obligations.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive your Player ID and session data necessary to deliver their game content within the bt3999 platform.
• Analytics and platform optimisation providers: Services used to analyse platform performance, identify technical issues, and improve user experience. These providers process anonymised or pseudonymised data where possible.
• Customer support infrastructure providers: Systems used to manage live chat and email support ticket workflows.

All third-party data processors engaged by bt3999 are contractually bound to process your data only in accordance with our instructions, to implement appropriate security measures, and not to use your data for their own independent purposes.

Legal and Regulatory Disclosure

bt3999 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. bt3999 will take reasonable steps to notify you of any such disclosure where legally permitted to do so.

Business Transfers

In the event that bt3999 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. bt3999 will provide reasonable notice of any such transfer and will ensure that the successor entity is bound by privacy commitments that are at least as protective as those set out in this Policy.

05 Cookies & Tracking Technologies

bt3999 uses cookies and similar tracking technologies on its platform to enable core functionality, remember your preferences, analyse usage patterns, and support security measures. By continuing to use the bt3999 platform, you consent to the placement of cookies on your device in accordance with this section of the Privacy Policy.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain categories of cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will impair the functionality of the bt3999 platform, and you may be unable to log in or maintain an active session.

Disabling analytics or marketing cookies will not affect your ability to use bt3999's core features — it will simply mean that we are unable to collect non-essential usage data or measure the performance of our promotional activities.

06 Data Security Measures

bt3999 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your browser or device and the bt3999 servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that your connection to bt3999 is secured.
• Password hashing: Account passwords are never stored in plain text. bt3999 uses a robust one-way cryptographic hashing algorithm to store password credentials so that even internal staff cannot view your password.
• Access controls: Access to personal data held by bt3999 is restricted to authorised personnel on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication (2FA): bt3999 supports two-factor authentication on player accounts. We strongly encourage all players to enable 2FA via their account security settings to add an additional layer of protection beyond the username and password.
• Fraud monitoring systems: bt3999 operates automated systems that monitor account activity in real time for indicators of fraudulent or unauthorised access. Suspicious activity triggers security alerts and may result in temporary account restrictions pending investigation.
• Infrastructure security: bt3999's platform infrastructure is hosted in data centres with physical and network security controls. Regular security assessments are conducted to identify and remediate vulnerabilities.

07 Data Retention Periods

bt3999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active bt3999 account is retained for the full duration of the account's active lifetime.
• Post-closure data: Following the closure of a bt3999 account — whether voluntary or due to a breach of Terms — bt3999 retains certain account data for a minimum period of 5 years. This retention period reflects anti-money laundering and financial record-keeping obligations applicable in the jurisdictions in which bt3999 operates.
• KYC and identity documents: Copies of identity documents submitted during the KYC process are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Financial transaction records, including deposit and withdrawal history denominated in BDT (৳), are retained for a minimum of 5 years from the date of each transaction.
• Support communications: Records of customer support interactions are retained for a period of 3 years from the date of the last interaction in each support case.
• Marketing consent records: Records of your marketing consent (and any subsequent withdrawal of consent) are retained for the duration of the relationship and for 3 years thereafter, to demonstrate compliance with consent obligations.
• Dormant account data: Where an account has been inactive for 12 months or more, bt3999 may apply data minimisation measures to reduce the volume of personal data held, retaining only the minimum necessary to comply with legal obligations.

When personal data is no longer required and the applicable retention period has expired, bt3999 will securely delete or anonymise the data in a manner that prevents its reconstruction or re-identification.

08 Your Privacy Rights

As a player on the bt3999 platform, you hold a number of rights in relation to the personal data we hold about you. bt3999 is committed to respecting and facilitating those rights. The rights available to you are summarised below.

To exercise any of the rights described above, please submit a written request to [email protected] from the email address registered on your bt3999 account. bt3999 will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be notified if an extension is required.

bt3999 reserves the right to verify your identity before processing any privacy rights request, to ensure that personal data is not disclosed to or altered by unauthorised individuals. We may ask you to provide a copy of your account ID or a piece of identification to confirm that the request originates from the registered account holder.

Please note that certain privacy rights are not absolute and may be subject to limitations where bt3999 has overriding legal obligations — for example, we may be unable to delete financial transaction records that we are legally required to retain for AML compliance purposes. Where a right cannot be fully exercised, bt3999 will explain the reason clearly in its response.

09 Third-Party Services

The bt3999 platform integrates a number of third-party services necessary to deliver a complete online gaming experience. While bt3999 takes care to engage only reputable, security-conscious partners, it is important that you understand how these integrations may affect your personal data.

Game Studios

Games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi are delivered via direct integration with those studios' gaming servers. When you launch a game on bt3999, a session is created on the game studio's servers. The studio receives your anonymised Player ID, session token, and wager data necessary to run the game. Game studios do not receive your full name, payment details, or contact information. Each studio operates under its own privacy standards, which are subject to audit as part of their licensing obligations.

Payment Providers

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, the transaction is processed through that provider's own payment infrastructure. Your payment provider will handle the financial transaction data in accordance with their own privacy policy and terms of service. bt3999 receives only confirmation data (transaction reference number, amount, timestamp, and status) necessary to credit or debit your bt3999 account. bt3999 does not have access to your full mobile banking credentials or bank account PIN.

Links to External Sites

The bt3999 website does not contain links to external third-party websites. If any promotional material or game-related content references a third-party brand name (e.g., a game studio or payment provider), this is for informational purposes only and does not constitute an endorsement of that party's privacy practices. bt3999 accepts no responsibility for the privacy practices of any third-party organisation whose name or brand may be referenced on the platform.

10 Policy Updates & Contact

bt3999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the bt3999 platform. The "Last Updated" date displayed at the top of this page will be revised whenever material changes are made.

Where changes to this Privacy Policy are material — meaning they significantly affect how we handle your personal data or your rights as a data subject — bt3999 will provide notice by publishing a prominent notice on the bt3999 website or by sending a notification to the email address registered on your account. We encourage you to review this Privacy Policy periodically so that you remain informed of how your data is being handled.

Your continued use of the bt3999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure by contacting our support team.

How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by bt3999, please contact our Data Privacy team using the following details:

bt3999 takes all privacy complaints seriously. If you submit a complaint regarding our data handling practices, we will investigate the matter thoroughly and respond with our findings and any proposed remedial action within 30 calendar days. We are committed to resolving privacy concerns fairly and transparently, and we welcome feedback that helps us improve our data protection practices.