Privacy Policy — 3999but Bangladesh
At 3999but, your personal data is treated with the highest degree of care and confidentiality. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and the rights you hold over your own data as a player on our Bangladesh betting platform.
Key Privacy Commitments
No Data Sold to Third Parties
3999but never sells, rents, or auctions your personal data to any external advertiser, data broker, or third-party business for commercial gain.
256-Bit SSL Encryption
All data transmitted between your device and 3999but is protected by 256-bit SSL encryption. Your login credentials, payment details, and personal information are never sent in plain text.
You Control Your Data
You have the right to access, correct, restrict, and request deletion of your personal data held by 3999but at any time by contacting our support team.
Bangladesh Payment Data Protected
Payment method details including bKash and Nagad account numbers are stored in encrypted form and are never accessible to unauthorised personnel or external parties.
Transparent Cookie Use
3999but uses cookies solely for session management, security, and platform performance purposes. We do not deploy invasive third-party advertising trackers on our platform.
Opt-Out of Marketing
You may opt out of promotional email and SMS communications from 3999but at any time by updating your notification preferences in your account settings or contacting support.
1 Information We Collect
3999but collects personal information from you through several channels during the course of your use of our platform. The categories of information we collect, and the circumstances in which we collect them, are described in detail below. We collect only the minimum data necessary to provide our services securely and in compliance with our operational obligations.
Information You Provide Directly
When you register an account at 3999but, you provide us with the following personal data:
- Full legal name as it appears on your government-issued identification document
- Date of birth (used for mandatory 18+ age verification)
- Residential address including district, division, and postal code
- Email address (used for account notifications and communication)
- Mobile phone number (used for account security and transaction verification)
- Username and password (password stored in irreversibly hashed form — never in plain text)
- Payment method details, including bKash account number, Nagad account number, Rocket number, Upay number, or bank account details as applicable
During the Know Your Customer (KYC) verification process, you may additionally be required to provide:
- A scanned copy or photograph of your National Identity Card (NID), passport, or driving licence
- A recent utility bill, bank statement, or official correspondence confirming your residential address
- A selfie photograph holding your identity document
- A screenshot confirming ownership of your registered mobile banking account
Information Collected Automatically
When you access 3999but through a browser or mobile device, we automatically collect certain technical information required for platform security and performance:
| Data Type | Purpose | Retention Period |
|---|---|---|
| IP address | Fraud prevention, geographic access control, account security monitoring | 12 months |
| Device identifier and type | Multi-account detection, session security, platform compatibility | 12 months |
| Browser type and version | Platform rendering optimisation, security fingerprinting | 6 months |
| Session timestamps and duration | Responsible gaming monitoring, account security audit trails | 24 months |
| Betting and gaming activity logs | Dispute resolution, bonus compliance, regulatory audit | 5 years |
| Deposit and withdrawal transaction records | Financial compliance, fraud prevention, tax and regulatory reporting | 7 years |
Information from Third-Party Sources
In certain circumstances, 3999but may receive supplementary personal information about you from trusted third-party sources, including identity verification service providers engaged to assist with KYC compliance, payment processing partners such as bKash and Nagad, and fraud prevention data providers. Any such third-party data is processed under the same privacy standards as data collected directly from you.
Sensitive data: 3999but does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes. The only biometric-adjacent data we may collect is a selfie photograph submitted during KYC, which is used solely for identity verification and is not processed through facial recognition systems.
2 How We Use Your Data
3999but processes your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which 3999but uses your personal data are as follows:
Account Management and Service Delivery
We use your personal data to create and maintain your 3999but account, verify your identity and age, process your deposits and withdrawals, deliver the betting and gaming services you request, and communicate with you regarding your account activity. This includes sending transaction confirmations, account security alerts, and responses to your support enquiries.
Identity Verification and Fraud Prevention
3999but uses the personal data you provide — including identity documents, payment method details, device identifiers, and IP addresses — to verify that you are who you claim to be, to enforce our one-account-per-player policy, and to detect and prevent fraudulent activity, money laundering, underage gambling, and other forms of platform misuse. This processing is essential to the safe operation of 3999but and cannot be opted out of while you maintain an active account.
Responsible Gaming Monitoring
3999but uses your session data, betting history, and deposit activity to monitor for signs of problem gambling behaviour. This includes automated monitoring for indicators such as significantly increased deposit frequency, extended session durations, and chasing-loss patterns. Where such indicators are detected, our responsible gaming team may contact you proactively. For more information, please visit our Responsible Gaming page.
Marketing and Promotions
With your consent, 3999but may use your email address and mobile phone number to send you promotional offers, bonus notifications, and information about new games and sports markets available on the platform. Marketing communications are targeted based on your gaming preferences, deposit history, and platform activity to ensure that offers presented to you are relevant. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting support at support@3999but. Withdrawal of marketing consent does not affect your ability to use the platform.
Legal and Regulatory Compliance
3999but retains certain categories of personal data — particularly financial transaction records and identity verification documents — for the periods required by applicable financial, anti-money-laundering, and data retention regulations. This processing is mandatory and cannot be avoided even upon account closure. The specific retention periods applicable to each data category are set out in the data table in Section 1 above.
Automated decision-making: 3999but uses automated systems to flag accounts for bonus abuse review, fraud investigation, and responsible gaming intervention. Where an automated decision results in account restriction or suspension, you have the right to request human review of that decision by contacting support@3999but.
3 Data Sharing & Third Parties
3999but does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data is shared only in the limited circumstances described in this section, and only with parties who are contractually bound to process it securely and for the specified purposes only.
Payment Processing Partners
To facilitate deposits and withdrawals, 3999but shares relevant transaction data with its payment processing partners, which currently include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. The data shared is limited to what is strictly necessary to complete the requested transaction. Each payment partner operates under its own privacy policy and data protection obligations.
Identity Verification Providers
3999but engages third-party identity verification service providers to assist with KYC compliance. These providers receive copies of the identity documents and verification photographs you submit and return a verification result to 3999but. They are not permitted to retain your documents beyond the period necessary to complete verification or to use your data for any other purpose.
Game and Technology Providers
Live casino games and certain RNG slot titles available at 3999but are delivered by third-party studio and technology providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive your player identifier and session data as part of the game delivery process. They do not receive your full personal profile, payment method details, or identity documents.
Legal and Regulatory Disclosure
3999but may be required to disclose your personal data to law enforcement agencies, regulatory authorities, or courts in response to a lawful request, court order, or statutory obligation. In such cases, 3999but will disclose only the minimum data required to satisfy the legal obligation and will inform you of any such disclosure where legally permitted to do so.
Business Transfers
In the event that 3999but undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may form part of the transferred assets. In such circumstances, 3999but will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy, and will notify affected players of any material change to how their data is handled.
No advertising networks: 3999but does not share your personal data with advertising networks, social media platforms, or data analytics companies for the purpose of targeting you with third-party advertisements on other websites or applications.
5 Data Retention
3999but retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The specific retention periods applicable to each major category of personal data are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data (name, DOB, address, email, phone) | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| Identity verification documents (NID, passport, selfie) | Duration of account + 5 years post-closure | Anti-money-laundering compliance |
| Financial transaction records (deposits, withdrawals) | 7 years from date of transaction | Financial record-keeping requirement |
| Betting and gaming history | 5 years from date of activity | Dispute resolution, regulatory audit |
| Customer support communications | 3 years from date of communication | Service quality and dispute resolution |
| Session and login logs | 24 months | Security monitoring and fraud prevention |
| Marketing consent records | Duration of consent + 3 years | Proof of consent obligation |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gaming compliance |
Data Deletion After Retention Period
Upon expiry of the applicable retention period, 3999but will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.
Requests for Early Deletion
You may request early deletion of your personal data by contacting support@3999but. Please note that where 3999but is legally required to retain data for a minimum period — such as financial transaction records or identity verification documents — your deletion request cannot be fulfilled in full until the mandatory retention period has elapsed. 3999but will inform you of any data that cannot be deleted immediately and provide an expected deletion date.
6 Security Measures
3999but implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, 3999but maintains industry-standard protections that are reviewed and updated on a regular basis.
Technical Safeguards
- 256-bit SSL/TLS encryption on all data transmitted between your browser or device and 3999but servers
- Password hashing using a strong, irreversible cryptographic algorithm — your plain-text password is never stored
- Encrypted storage for sensitive data fields including payment method identifiers and identity document copies
- Access controls ensuring that employee access to personal data is limited to those who need it to perform their specific job functions
- Intrusion detection systems monitoring for unusual access patterns and potential breach attempts in real time
- Regular penetration testing conducted by independent third-party security specialists
- Automatic session expiry after periods of inactivity to reduce the risk of account takeover on shared devices
Organisational Safeguards
- All 3999but employees and contractors with access to personal data are bound by confidentiality agreements
- Staff with access to sensitive personal data undergo regular data protection and security training
- Third-party service providers are vetted for data security standards before being granted any access to 3999but systems or player data
- A formal data breach response procedure is in place; affected players will be notified promptly in the event of a breach that poses a risk to their rights and freedoms
Your Responsibilities
While 3999but takes extensive measures to protect your data on our end, the security of your account also depends on steps you take to protect your own credentials. You are responsible for:
- Choosing a strong, unique password for your 3999but account that is not used on any other platform
- Not sharing your username or password with any other person under any circumstances
- Logging out of your account after each session, especially on shared or public devices
- Contacting support@3999but immediately if you suspect that your account has been accessed without your authorisation
Phishing awareness: 3999but will never ask you for your account password via email, chat, or phone. If you receive any communication claiming to be from 3999but that requests your password or financial details, do not respond and report it to support@3999but immediately.
7 Your Privacy Rights
As a player at 3999but, you hold a number of rights with respect to your personal data. 3999but is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at support@3999but with your request, your registered account email address, and a brief description of what you are requesting.
Right of Access
You may request a copy of all personal data that 3999but holds about you. We will provide this within 14 days of receiving a verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mandatory retention obligations.
Right to Restrict Processing
You may request that we temporarily stop processing your personal data in certain circumstances, for example while a dispute is being investigated.
Right to Data Portability
You may request a copy of your personal data in a structured, machine-readable format that can be transferred to another service provider.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. Your objection will be acted upon immediately.
Rights re: Automated Decisions
Where an automated decision materially affects your account (e.g., suspension), you may request human review of that decision by contacting our support team.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Response Timeframes
3999but will acknowledge receipt of all privacy rights requests within 48 hours and will complete the requested action or provide a substantive response within 14 calendar days of receiving a verified request. In cases of particular complexity, this period may be extended by a further 14 days, in which case we will notify you of the extension and the reason for it.
Identity Verification for Requests
To protect your privacy, 3999but requires that all data rights requests be submitted from the email address registered to your account, and may ask you to confirm additional account details before processing the request. This is to prevent unauthorised parties from accessing or deleting your data.
Minor players: 3999but does not knowingly collect personal data from individuals under 18 years of age. If you believe that a person under 18 has registered an account at 3999but, please contact us immediately at support@3999but. Upon confirmation, all data associated with the underage account will be deleted as promptly as legally permissible.
8 Policy Changes & Contact
3999but reserves the right to update, amend, or replace this Privacy Policy at any time. Any material changes to the way we collect, use, or store your personal data will be communicated to you via the email address registered to your account at least 14 days before the change takes effect. Non-material updates — such as clarifications of existing language or formatting changes — may be made without prior notice. The effective date at the top of this page will always reflect when the current version was last reviewed and updated.
Continued Use Constitutes Acceptance
Your continued use of 3999but following the publication of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Privacy Policy, you should cease use of the platform and contact support@3999but to close your account and request deletion of your personal data in accordance with the retention schedule set out in Section 5.
Contact Details
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 3999but holds about you , please contact our support team using the details below:
Email Support
Send your privacy request or query to support@3999but — we respond within 48 hours on all business days.
Support Hours
Our support team is available 24 hours a day, 7 days a week, including public holidays. Response times may vary during peak periods such as BPL and IPL match days.
Time Zone
All support response timelines are measured in Bangladesh Standard Time (BST, UTC+6). Response time commitments begin from the moment your request is received in our queue.
Please include in your email: your registered account email address, a clear description of your request or concern, and — for data access or deletion requests — confirmation that you are submitting the request from your registered email address. This helps us verify your identity and process your request as quickly as possible.
Our Privacy Principles in Practice
Every feature of the 3999but platform is designed with your data security and privacy at its core — from the moment you register to every transaction you make.
End-to-End Encrypted Transactions
Every bKash, Nagad, and Rocket transaction processed through 3999but travels over a fully encrypted connection. Your mobile banking credentials are never exposed to our servers — payment verification happens directly through each provider's secure API.
Zero Third-Party Ad Tracking
3999but runs no advertising networks and places no retargeting pixels on our platform. Your activity on the site stays entirely within the 3999but ecosystem and is never shared with external marketers or data brokers.
Verified KYC with Minimal Data
Our Know Your Customer process collects only the data strictly required to confirm your identity and age. Documents submitted for KYC are stored in encrypted form and are accessible only to our compliance team members who need them.
Clear Consent Management
You choose what marketing communications you receive from 3999but. Your consent preferences are stored clearly against your account and can be updated or withdrawn at any time without affecting your access to the platform.
Defined Data Retention Schedules
3999but operates on clearly defined data retention schedules for every category of personal data we hold. When the retention period for your data expires, it is securely deleted or anonymised — we do not hold data indefinitely without justification.
Responsive Human Support
Privacy rights requests at 3999but are handled by real support team members — not automated form responses. We acknowledge every request within 48 hours and are committed to resolving data queries within 14 calendar days.
Explore 3999but with Confidence
Your data is protected every step of the way. Browse our cricket markets, discover top slot titles, or visit the live casino — all on a platform built with your privacy at its core.
18+ only. Please gamble responsibly. If gambling is affecting your life, seek help immediately.