🔒 Data Protection
399bid Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 399bid collects, how it is used, who it may be shared with, and what rights you have over your own information as a player registered on our platform in Bangladesh.
At a Glance
Our Privacy Commitments
These cards summarise 399bid's core commitments to your privacy. They are provided for convenience and do not replace the full legal text in the sections below.
Secure by Design
All personal data processed by 399bid is protected by SSL/TLS encryption in transit and encrypted storage at rest. We apply access controls so that only authorised personnel can view sensitive account information, and all access is logged and audited.
No Data Selling
399bid does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your data is used solely for the purposes described in this Privacy Policy, including operating your account, processing payments, and meeting compliance obligations.
Purpose Limitation
We collect only the data we genuinely need. Each data category collected by 399bid has a clearly defined purpose — account management, payment processing, fraud prevention, or regulatory compliance. We do not collect data speculatively or retain it longer than necessary for its stated purpose.
Your Rights Are Real
Registered players have the right to access their personal data, request corrections, ask for deletion under certain conditions, and opt out of marketing communications at any time. These rights can be exercised by contacting the 399bid support team — no complicated procedure required.
Transparent Cookie Use
399bid uses cookies strictly for session management, platform performance, and analytics. We do not use third-party advertising cookies or behavioural tracking cookies that follow you across unrelated websites. The cookies section of this policy lists every category of cookie used and why.
Bangladesh-Focused Processing
The 399bid platform is designed for players in Bangladesh. Data processing practices are calibrated to the needs of Bangladeshi players, including support for local payment methods such as bKash, Nagad, Rocket, and Upay, each of which has specific data-handling considerations explained in the payments section below.
Section 1
Data We Collect
399bid collects personal data from players through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party providers (such as payment processors) in connection with transactions you initiate. The table below provides a structured overview of the data categories we collect, the source of each category, and the legal basis on which we process it.
| Data Category | Examples | Source | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Provided by you at registration or during KYC verification | Contractual necessity; legal obligation (AML/KYC) |
| Contact Data | Email address, mobile number, residential address (city, district) | Provided by you at registration or during account updates | Contractual necessity; legitimate interest |
| Financial Data | Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account references, transaction IDs | Provided by you when making deposits or requesting withdrawals | Contractual necessity; legal obligation |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automatically collected during platform use | Legitimate interest (security, fraud prevention) |
| Usage Data | Pages visited, games played, bets placed, session duration, feature interaction logs | Automatically collected during platform use | Legitimate interest (platform improvement, personalisation) |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Generated during support interactions | Legitimate interest (service quality, dispute resolution) |
| Marketing Preferences | Email opt-in/opt-out status, promotional communication history | Provided by you; derived from your account settings | Consent |
1.1 Data You Are Not Required to Provide
Certain fields in your account profile are optional. Providing optional information (such as a preferred username display or notification preferences) may enhance your experience but is not required to access the core services of the 399bid platform. Where a field is mandatory for account creation or transaction processing, this will be clearly indicated at the point of collection.
1.2 Data from Minors
The 399bid platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that personal data has been collected from a minor, we will delete it immediately and close the associated account. If you believe a minor has registered on the platform, please contact the support team without delay.
Minimal collection principle: 399bid does not collect sensitive personal categories such as racial or ethnic origin, political opinions, religious beliefs, or health data. The only exception is where a player voluntarily discloses health-related information in the context of a responsible gaming request (e.g., a self-exclusion application citing a gambling disorder), in which case the data is used solely for that welfare purpose and is handled with heightened confidentiality controls.
Section 2
How We Use Your Data
399bid processes personal data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following describes the primary purposes for which your data is used on the 399bid platform.
2.1 Account Management
Your identity and contact data are used to create and maintain your player account, authenticate your login sessions, process your account settings changes, and communicate with you about your account status. This is the foundational use of data on the platform and is necessary for the delivery of the service under the contract between you and 399bid.
2.2 Payment Processing
Financial data — including your bKash, Nagad, Rocket, or Upay wallet numbers, and any bank account references provided — is used exclusively to process deposit and withdrawal transactions initiated by you. 399bid does not store complete card numbers. Payment references are retained for the period required to resolve potential transaction disputes and to comply with financial record-keeping obligations.
2.3 Identity Verification and Compliance
Identity data collected during the KYC (Know Your Customer) verification process is used to confirm that you meet the age requirement (18+), that your account belongs to a real individual, and that your use of the platform does not constitute money laundering or other prohibited financial activity. These processing activities are carried out as legal obligations and cannot be waived or opted out of by individual players.
2.4 Fraud Prevention and Security
Technical and usage data — including IP addresses, device fingerprints, and login patterns — are analysed to detect and prevent fraudulent account activity, unauthorised access attempts, bonus abuse, and collusion. This processing is carried out under legitimate interest and is essential for maintaining the security and fairness of the platform for all players.
2.5 Platform Improvement and Analytics
Aggregated and anonymised usage data helps the 399bid product team understand how players interact with the platform, which game categories are most popular in Dhaka, Chittagong, Sylhet, and other regions of Bangladesh, and where the user experience can be improved. Analytics processing does not individually profile players for automated decision-making purposes.
2.6 Marketing Communications
With your consent, 399bid may send you promotional communications about bonuses, new game releases, cricket season offers (BPL, IPL, T20 World Cup), and seasonal promotions aligned with the Bangladeshi calendar. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team. Withdrawal of marketing consent does not affect processing carried out prior to withdrawal.
No automated profiling for adverse decisions: 399bid does not use fully automated processing to make decisions that produce significant legal or similarly significant effects on individual players (such as account closure or bonus disqualification) without human review being available. If an automated system flags your account for review, a member of the compliance team will conduct a manual assessment before any material action is taken.
Section 3
Data Sharing
399bid does not sell or rent your personal data to any third party. We share data only where it is strictly necessary for the operation of the platform or required by applicable law. The following categories of third parties may receive limited personal data in defined circumstances.
3.1 Payment Service Providers
To process your deposits and withdrawals, 399bid shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank. The data shared is limited to what is required to execute the specific transaction you have initiated — typically your registered wallet number or bank reference, the transaction amount in BDT, and a transaction reference identifier. Each payment provider operates under its own privacy policy and data protection obligations.
3.2 Game Studio Providers
When you play games hosted by third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — a session token and basic account identifier are shared with the relevant studio's game server to facilitate the game session. These providers do not receive your full identity data, contact details, or financial information. Game studios are contractually bound to use session data solely for game delivery purposes.
3.3 Compliance and Legal Disclosures
399bid may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to a lawful request. We will comply with such obligations and, where legally permitted, will notify the affected player of the disclosure. 399bid does not volunteer player data to authorities beyond what is required by a specific, valid legal obligation.
3.4 Analytics and Technology Partners
Anonymised or pseudonymised technical and usage data may be shared with technology partners who assist 399bid in platform performance monitoring, security analysis, and fraud detection. These partners are prohibited from using the data for their own commercial purposes and are bound by data processing agreements that restrict use to the services provided to 399bid.
3.5 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of 399bid's business assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 399bid will notify registered players in advance and ensure that the acquiring entity agrees to honour the terms of this Privacy Policy or provide a substantially equivalent level of protection.
Third-party privacy policies: When you interact with payment providers (bKash, Nagad, Visa, etc.) or game studios, those interactions are also governed by the respective third party's own privacy policy. 399bid encourages players to review those policies independently. 399bid is not responsible for the data practices of third-party services beyond the scope of its contractual agreements with them.
Section 4
Cookies & Tracking
The 399bid platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse platform performance. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred settings and whether you are logged in — across page loads and return visits. Cookies do not contain your full personal data and cannot execute code on your device.
4.2 Cookies Used by 399bid
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Session cookies | Maintain your authenticated login session while you are using the platform. Without these cookies, you would be logged out on every page navigation. | Session (deleted on browser close) | Yes — essential |
| Preference cookies | Remember your display preferences, language settings, and notification choices so they persist between visits. | 90 days | No — functional |
| Analytics cookies | Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. Used to improve the platform experience. | 12 months | No — optional |
| Security cookies | Support fraud detection by identifying unusual login patterns, multiple account signals, and suspicious transaction behaviour. | 30 days | Yes — essential |
4.3 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through the privacy or settings menu. Please note that disabling essential session or security cookies will impair your ability to log in and use the platform. Disabling analytics or preference cookies will not affect your access to games or account features but may result in a slightly less personalised experience.
4.4 No Cross-Site Tracking
399bid does not use third-party advertising networks or behavioural retargeting cookies. We do not place tracking pixels or scripts on the 399bid platform that report your activity to external advertising platforms. The only data collected through cookies on the 399bid platform stays within the 399bid operating environment and its contracted analytics partners as described above.
Section 5
Data Security
399bid takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. No digital platform can guarantee absolute security, but the controls described below represent a robust, proportionate approach to protecting player data.
5.1 Encryption
All data transmitted between your device and the 399bid platform is encrypted using TLS 1.2 or higher. This ensures that your login credentials, personal details, and payment information cannot be intercepted in transit. Data stored in our systems — including identity documents submitted for KYC verification — is encrypted at rest using industry-standard AES-256 encryption.
5.2 Access Controls
Access to player personal data within the 399bid organisation is governed by role-based access control. Only personnel who require access to a specific category of data to perform their job functions are granted that access. All access is logged and reviewed on a periodic basis. Employees are required to complete data protection training before being granted access to production systems containing player data.
5.3 Incident Response
In the unlikely event of a personal data breach that poses a risk to affected players, 399bid will notify impacted players without undue delay once the breach has been confirmed, contained, and assessed. Notification will include the nature of the data involved, the likely consequences of the breach, and the steps 399bid has taken or proposes to take to address it.
5.4 Your Role in Security
The security of your account is a shared responsibility. You are encouraged to use a strong, unique password for your 399bid account, to enable SMS two-factor authentication from within your account security settings, and to log out of your account when accessing the platform from a shared or public device. 399bid will never ask for your account password through any communication channel.
SSL indicator: You can verify that your connection to the 399bid platform is encrypted by checking for the padlock icon in your browser's address bar. If you ever access a page that appears to be 399bid but does not display a valid SSL certificate, do not enter any personal or payment information and contact the support team immediately.
Section 6
Data Retention
399bid retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements. The following table outlines the retention periods applied to each major category of personal data.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account identity data | Duration of account + 5 years after closure | Legal obligation (AML record-keeping); dispute resolution |
| Transaction records | 7 years from transaction date | Financial record-keeping; regulatory compliance |
| KYC verification documents | Duration of account + 5 years after closure | Anti-money laundering legal obligation |
| Support communications | 3 years from last interaction | Dispute resolution; service quality review |
| Technical / security logs | 12 months | Fraud detection; security incident investigation |
| Analytics data | 24 months (anonymised thereafter) | Platform improvement; trend analysis |
| Marketing preference data | Until consent withdrawn + 12 months | Evidence of consent; suppression list management |
6.1 Deletion Requests
Where you request deletion of your personal data and no legal retention obligation applies, 399bid will delete or irreversibly anonymise the data within 30 days of receiving a verified deletion request. Data that is subject to a mandatory retention period (such as transaction records required by financial compliance regulations) cannot be deleted until that period expires, but will be restricted from active processing during the retention-only phase.
Anonymisation vs deletion: In some cases, rather than deleting data outright, 399bid may anonymise it — removing all identifiers such that it can no longer be linked to you — and retain the anonymised record for statistical or compliance purposes. Anonymised data does not constitute personal data and is not subject to data subject rights such as access or erasure.
Section 7
Your Privacy Rights
As a registered player on the 399bid platform, you have a number of rights over the personal data we hold about you. These rights are described below. To exercise any of these rights, contact the 399bid support team via live chat or by emailing . We will respond to all verified requests within 30 days.
Right of Access
You have the right to request a copy of the personal data 399bid holds about you, along with information about how it is processed and with whom it has been shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly from your account profile page.
Right to Erasure
You may request that 399bid delete your personal data where it is no longer necessary for the purposes collected, where you have withdrawn consent, or where the data has been unlawfully processed. Mandatory retention obligations may limit this right in some circumstances.
Right to Restriction
You may ask 399bid to restrict the processing of your data in certain situations — for example, while a correction request is being assessed, or where you have objected to processing and the outcome of that objection is pending.
Right to Object
Where 399bid processes your data based on legitimate interest (including for analytics or marketing), you have the right to object at any time. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Portability
For data you have provided to 399bid on the basis of consent or contractual necessity, you may request a structured, machine-readable copy of that data to transfer to another service provider where technically feasible.
7.1 Response Timeframes
399bid will acknowledge all privacy rights requests within 5 business days of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.
7.2 Verification Requirement
To protect player data from unauthorised access, all privacy rights requests must be verified before we can act on them. Verification typically involves confirming your identity through the contact details and security information associated with your registered account. We will not action a data subject request made by a person who cannot be verified as the account holder.
Section 8
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about the way 399bid handles your personal data, please get in touch using the contact information below.
8.1 How to Contact Us
The 399bid support team handles privacy-related queries alongside general support enquiries. For privacy-specific matters, please clearly indicate in your message that your query relates to data protection or your personal data, so that it can be directed to the appropriate team member promptly.
- Live Chat: Available 24 hours a day, 7 days a week through the 399bid platform. Average response time: 2–5 minutes.
- Email: — responses within 2 business days for privacy-related requests.
8.2 Updates to This Policy
399bid reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where material changes are made, registered players will be notified via the email address associated with their account or through a prominent in-platform notice before the changes take effect. The effective date at the top of this policy will be updated to reflect the date of the most recent revision. We encourage you to review this policy periodically so that you remain informed about how your data is protected.
8.3 Complaints
If you are not satisfied with how 399bid has handled a privacy concern or a data subject rights request, you may escalate your complaint by contacting the support team and requesting a senior review. 399bid is committed to resolving all privacy complaints fairly and transparently. We aim to provide a final response to escalated complaints within 15 business days of the escalation being received.
Policy changes: Continued use of the 399bid platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to a material change in this policy, you should cease using the platform and contact the support team to arrange account closure and, where applicable, withdrawal of your remaining account balance.
Continue Exploring
Questions About Your Privacy?
Browse the FAQ for quick answers, review the Responsible Gaming page, or reach the 399bid support team via live chat — available 24/7 with an average response time of 2–5 minutes.
18+ Only · SSL Secured · Your data is protected · BDT Accounts