Privacy Policy — 3999com
Your privacy matters to us. This Privacy Policy explains exactly what personal information 3999com collects from players in Bangladesh, how that data is used, stored, and protected, and the rights you hold over your own information.
This Privacy Policy ("Policy") applies to all personal data collected by 3999com ("the Platform", "we", "us", "our") in connection with the use of our website and services by players based in Bangladesh. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. We are committed to handling your personal data transparently and in accordance with applicable data protection principles. Version 2026.1
Our Commitment
How 3999com Protects Your Privacy
We built our data practices around six core commitments. These are not just policy statements — they are actively enforced principles that govern how every member of the 3999com team handles player data.
Encryption at Rest & in Transit
All personal data stored on 3999com servers is encrypted at rest using AES-256. Every connection between your device and our Platform is secured with TLS 1.3, ensuring no data travels over unencrypted channels.
Minimal Data Collection
We collect only the personal data that is strictly necessary to operate the Platform, verify your identity, process payments in BDT, and comply with anti-money laundering obligations. We do not collect data speculatively or for undefined future use.
No Sale of Personal Data
3999com does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to deliver and improve the services you have signed up for.
Player Control & Access Rights
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days. See the Your Privacy Rights section for full details.
Marketing Opt-Out
Promotional emails and SMS messages are only sent to players who have opted in during registration or via account settings. You can withdraw consent for marketing communications at any time without affecting your account status.
Third-Party Due Diligence
Any third-party service provider that processes player data on our behalf — including payment processors, KYC verification partners, and game studios — is contractually required to maintain equivalent data protection standards to those we observe ourselves.
Section 1
Information We Collect
3999com collects personal data through several channels: directly from you during registration, from your ongoing use of the Platform, and in limited cases from trusted third-party verification services. The table below summarises the categories of data we collect and the purpose for which each category is gathered.
1.1 Data You Provide Directly
When you register an account on 3999com, you voluntarily provide identity and contact information. This data is required to create your account, verify your age (18+), and comply with our KYC obligations under applicable anti-money laundering standards. Providing false or inaccurate information constitutes a breach of our Terms & Conditions and may result in account closure.
1.2 Data We Collect Automatically
When you access the Platform, our servers and analytics systems automatically collect technical and usage data. This includes your IP address (used for geographic access checks and fraud detection), device fingerprint, session timestamps, and in-game activity logs. This data is collected using server logs, session cookies, and first-party analytics tools. We do not use third-party advertising trackers to collect this data.
1.3 Data from Third Parties
In certain circumstances, 3999com may receive personal data about you from third-party sources, including KYC identity verification providers, payment processors such as bKash and Nagad, and fraud prevention services. Any data received from third parties is handled in accordance with this Privacy Policy and is used only for the purpose for which it was shared with us.
KYC Identity Verification
Players based in Bangladesh are required to submit a valid National ID Card (NID) or passport to complete KYC verification. This data is processed securely and stored only for as long as required by our AML obligations. We do not share identity documents with third parties except as required for the verification process itself.
3999com does not knowingly collect personal data from individuals under the age of 18. 18+ If we discover that data from a minor has been collected, we will immediately suspend the associated account, delete the data, and return any deposited funds to the originating payment method.
Section 2
How We Use Your Data
2.1 Service Delivery
The primary purpose for which 3999com processes your personal data is to deliver the services you have registered for. This includes creating and maintaining your account, processing deposits and withdrawals in BDT via bKash, Nagad, and Rocket, providing access to our casino games and cricket betting markets, and resolving any disputes or technical issues you report to our support team.
2.2 Identity & Age Verification
We are obligated to verify that all players are aged 18 or above and that their identity is genuine. Your identity data is processed for this purpose at registration and again upon the first withdrawal request, or at any point where our fraud prevention systems flag a verification need. Age and identity verification is a legal and regulatory obligation, not optional.
2.3 Fraud Prevention & Security
3999com uses technical and usage data — including IP addresses, device fingerprints, and session logs — to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised access. Automated systems flag unusual patterns for manual review by our security team. This processing is necessary for the legitimate interest of maintaining a fair and secure platform for all players.
2.4 Responsible Gaming
Your usage data — including session duration, wager frequency, and deposit patterns — is analysed to identify potential signs of problem gambling behaviour. Where our responsible gaming systems detect patterns of concern, our team may reach out to offer support tools such as deposit limits, cooling-off periods, or self-exclusion. This processing is conducted in the interest of player wellbeing and is a core part of our responsible gaming obligations.
2.5 Customer Support
When you contact our support team via live chat or email, the content of that communication is recorded and stored for quality assurance, dispute resolution, and training purposes. Support records are retained for a minimum of 24 months from the date of the interaction.
2.6 Marketing Communications
With your prior consent, we may use your contact details to send promotional emails and SMS messages about new games, seasonal promotions (including Eid offers, Pohela Boishakh specials, and BPL cricket promotions), and bonus credits. You may withdraw this consent at any time without consequence to your account by updating your notification preferences in account settings or by contacting support at support@3999com.
2.7 Platform Improvement
Aggregated and anonymised usage data — from which no individual player can be identified — is used to analyse player behaviour patterns, test new features, optimise page performance, and improve the overall quality of the 3999com experience. This data is never used to profile individual players for marketing without their consent.
Under applicable data protection principles, 3999com processes your personal data on the following legal bases: (a) contractual necessity — to deliver the services you have registered for; (b) legal obligation — KYC, AML, and age verification requirements; (c) legitimate interests — fraud prevention, security monitoring, and platform improvement; and (d) consent — marketing communications and optional analytics cookies.
Analytics & Reporting
3999com uses first-party analytics tools only. We do not use Google Analytics or any third-party advertising platform that tracks your behaviour across external websites. All analytics data collected on the Platform stays within our own infrastructure and is used exclusively to improve our services.
Section 3
Data Sharing & Third Parties
3999com does not sell your personal data. We share data only with carefully vetted third-party service providers where strictly necessary to operate the Platform, and only under contractual data protection obligations.
3.1 Payment Processors
To process your deposits and withdrawals in BDT, 3999com shares your payment account details (such as your bKash, Nagad, or Rocket wallet number) with the relevant mobile financial service provider or bank. This data sharing is essential to complete your requested transaction and is governed by the privacy policies of those payment services. 3999com does not store your full mobile banking PIN or card CVV on its servers.
3.2 KYC & Identity Verification Partners
To fulfil our age verification and anti-money laundering obligations, we may share identity documents (National ID Card, passport) and biometric data with accredited third-party KYC verification providers. These providers are contractually prohibited from using your data for any purpose other than completing the verification request made by 3999com.
3.3 Game Studio Providers
Games on 3999com are powered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive limited technical data (such as a session token or player ID) necessary to launch and log game sessions. They do not receive your full identity profile, contact details, or financial information. Game providers are required to maintain player data confidentiality under our licensing and integration agreements.
3.4 Legal & Regulatory Disclosure
3999com may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so by a valid legal order or regulatory requirement. We will, where legally permitted, notify the affected player before complying with such a request. We do not voluntarily share player data with government bodies in the absence of a lawful, binding legal instrument.
3.5 Corporate Transactions
In the event of a merger, acquisition, or sale of all or part of 3999com's business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such change via the registered email address, and the acquiring entity will be required to honour the data protection commitments set out in this Policy.
Data Processing Agreements
All third-party processors that handle player data on our behalf are bound by Data Processing Agreements (DPAs) that require them to: process data only on our documented instructions; implement appropriate technical and organisational security measures; delete or return data upon termination of the service relationship; and assist us in meeting our obligations to players exercising their rights.
Some of our third-party game providers and KYC partners operate servers outside Bangladesh. Where personal data is transferred internationally, 3999com ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to maintain data protection standards equivalent to those in this Policy.
Section 5
Data Retention & Storage
5.1 Retention Principles
3999com retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.
5.2 Active Account Data
While your account is active, we retain all personal data associated with that account. This includes identity data, contact details, financial transaction history, gameplay records, and support communications. Active account data is retained to provide you with the full service, including access to your historical transaction records and game history.
5.3 Post-Closure Retention
Following account closure — whether initiated by you or by 3999com — your personal data is retained for a minimum of 5 years from the date of closure. This retention period reflects our obligations under anti-money laundering regulations, which require financial service providers to maintain transaction records for a legally specified minimum period. Identity documents submitted for KYC are retained for the same period.
5.4 Support & Communications Data
Live chat transcripts and email correspondence with our support team are retained for 24 months from the date of the last interaction in a given support thread. After this period, content is deleted and only the metadata (date, subject matter category, resolution status) is retained in an anonymised format for service quality reporting.
5.5 Marketing Data
If you have consented to marketing communications, your marketing preference data and contact details used for that purpose are retained until you withdraw your consent. Upon opt-out, your details are removed from active marketing lists within 5 business days. A suppression record (confirming opt-out) is retained indefinitely to prevent re-addition to marketing lists without a fresh opt-in.
5.6 Server & Technical Log Data
Server access logs, including IP address records and session timestamps, are retained for 12 months for security monitoring and fraud investigation purposes, after which they are automatically purged from our logging systems.
Data Storage Location
Player data collected by 3999com is stored on secured servers. Where data is processed by third-party partners operating internationally, appropriate contractual safeguards are applied to ensure your data is protected to the same standard as data held within our own infrastructure. We do not store data on consumer cloud services or unencrypted storage media.
You may request deletion of your personal data at any time. However, where we are legally required to retain data (e.g., under AML regulations for a minimum of 5 years post-closure), we will fulfil the deletion request to the maximum extent permitted by law and inform you of any data that must be retained and the legal basis for doing so.
Section 6
Your Privacy Rights
As a player on 3999com, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our Data Protection team at support@3999com with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and resolve it within 30 calendar days.
Right of Access
Request a full copy of all personal data we hold about you, including the categories of data, processing purposes, and any third parties with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data. We will update records within 10 business days and notify any third parties holding the same data on our behalf.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restriction
Request that we restrict processing of your data while a dispute over its accuracy or lawfulness is being resolved, rather than deleting it outright.
Right to Portability
Request your personal data in a structured, commonly used, machine-readable format (CSV or JSON) so you can transfer it to another service provider if you choose.
Right to Object
Object to processing of your data based on legitimate interests, including profiling for responsible gaming monitoring or platform improvement analytics.
Rights re: Automated Decisions
Request human review of any significant decision made about your account through automated processing, such as fraud flags or responsible gaming alerts that result in account restriction.
Right to Withdraw Consent
Withdraw consent for marketing communications or optional analytics cookies at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To protect your data from unauthorised disclosure, 3999com requires all privacy rights requests to be submitted from the email address registered to your account, or accompanied by sufficient identity verification. We will not fulfil a data access or deletion request without first confirming the requester's identity. This is a security measure designed to protect you, not to obstruct your rights.
Section 7
Data Security Measures
7.1 Technical Security
3999com implements a layered technical security architecture to protect player data. All data in transit between your browser and our servers is encrypted using TLS 1.3. Data stored on our servers is encrypted at rest using AES-256. Database access is restricted by role-based access controls — only staff with a verified operational need can access specific categories of player data, and all access is logged and audited.
7.2 Password Security
Account passwords are stored using industry-standard one-way cryptographic hashing with individual salting. This means that even in the highly unlikely event of a data breach, your raw password is not readable by anyone — including 3999com staff. We strongly recommend using a unique, complex password for your 3999com account and enabling two-factor authentication where available.
7.3 Access Controls & Staff Training
Access to player data within 3999com's internal systems is governed by a principle of least privilege — staff members are granted access only to the data categories required for their specific role. All staff with access to personal data undergo mandatory data protection training upon onboarding and annually thereafter. Access privileges are reviewed quarterly and revoked immediately upon role change or departure.
7.4 Penetration Testing & Vulnerability Management
3999com commissions independent penetration tests of its Platform and infrastructure on a regular basis. Any vulnerabilities identified are triaged by severity and remediated within defined response windows. Critical vulnerabilities affecting player data are treated as the highest priority and resolved within 24 hours of discovery.
7.5 Data Breach Response
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 3999com will notify affected players without undue delay. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures taken or proposed to address the breach. Players are encouraged to change their password immediately upon receiving any such notification.
7.6 Your Responsibility
While 3999com takes extensive measures to protect your data, you also play a role in keeping your account secure. Keep your password confidential and do not share it with anyone. Never log in to your 3999com account on a shared or public device without logging out fully afterwards. If you suspect your account has been compromised, contact our support team immediately at support@3999com.
Security Standards
Our Platform is built and maintained in accordance with established industry security frameworks. Key controls include: firewall and DDoS mitigation at network perimeter; web application firewall (WAF) filtering for injection and scripting attacks; automated anomaly detection on login and transaction events; and multi-factor authentication for all internal administrative access. No security measure is perfect, but ours are designed to industry best practice.
3999com will never ask you for your password, full payment PIN, or one-time passcode via email, live chat, or phone. If you receive any such request claiming to be from 3999com, treat it as a phishing attempt and report it to support@3999com immediately.
Section 8
Contact & Data Controller
8.1 Data Controller
3999com acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, 3999com determines the purposes for which personal data is processed and the means by which that processing is carried out. If you have any questions, concerns, or complaints regarding the way your personal data is handled, you are entitled to raise them directly with us.
8.2 How to Contact Us
For all privacy-related enquiries, including exercising your rights under Section 6 of this Policy, submitting a data subject access request, reporting a suspected data breach involving your account, or raising a complaint about our data practices, please contact our data protection team using the details below.
Contact email (plain text — not a clickable link): support@3999com
Please use the subject line "Privacy Rights Request" or "Data Protection Enquiry" to ensure your message is routed directly to the appropriate team. We aim to acknowledge all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days. Complex requests may require additional time, in which case we will notify you and provide a revised estimated response date.
8.3 Complaints
If you are dissatisfied with our response to a privacy complaint or believe we have handled your data unlawfully, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. We encourage you to contact us first, as we are committed to resolving complaints directly and promptly wherever possible.
8.4 Policy Updates
3999com reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that significantly affect how we collect, use, or share your personal data — will be communicated to you via email to your registered address and via a prominent notice on the Platform homepage at least 14 days before the changes take effect. Minor changes (such as corrections of typographical errors or clarifications that do not alter meaning) may be made without prior notice. The effective date at the top of this document will always reflect when the current version came into force. Continued use of the Platform after the effective date of any material amendment constitutes your acceptance of the revised Policy.
Support Team Availability
Our customer support team is available 24 hours a day, 7 days a week, all year round — including during Eid, Durga Puja, and public holidays. For privacy-related matters specifically, our data protection team operates during standard business hours (Bangladesh Standard Time, UTC+6) with a guaranteed response within 5 business days. Live chat responses for general account queries average under 3 minutes.
This Privacy Policy was last reviewed and updated on 1 January 2026. The version number is 2026.1. Please check this page periodically for the most current version. Archived versions of this Policy are available on request by contacting our support team.
Related Policies
For details on acceptable use, account rules, and liability limitations, see our Terms & Conditions. For tools to manage your gambling habits, including deposit limits and self-exclusion, see our Responsible Gaming page.
Continue Exploring 3999com
Now that you've reviewed our Privacy Policy, feel free to explore everything 3999com has to offer — from live casino tables and cricket betting to slots and more. Play safely, play responsibly.