Privacy Policy — c3999 Bangladesh

1. Data Controller

c3999 ("we", "us", "our", or the "Platform") is the data controller responsible for the personal information collected through the c3999 website at c3999.bet and through any associated mobile applications or services. As data controller, c3999 determines the purposes for which and the manner in which your personal data is processed, and accepts full responsibility for ensuring that processing activities comply with applicable data protection principles.

This Privacy Policy applies to all users of the c3999 platform, including registered account holders, prospective players browsing the site, and individuals who contact c3999 via the support channels listed below. It governs the collection, use, storage, disclosure, and protection of personal data provided to c3999 directly by users, or collected automatically during the course of platform use.

If you have any questions about how c3999 handles your personal data, or wish to exercise any of your privacy rights as described in this Policy, please contact us at [email protected] or via the 24/7 live chat service available directly on the platform.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, deposit funds, withdraw winnings, contact support, or otherwise interact with the c3999 platform, you may provide the following categories of personal data:

2.2 Information Collected Automatically

When you access the c3999 platform, our systems automatically collect certain technical and behavioural data that helps us maintain security, prevent fraud, and improve the user experience. This includes:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage data: Pages visited, games played, bets placed (sport, market, stake, odds), session duration, click patterns, and navigation paths;
• Connection data: Internet service provider, geolocation data at city level (e.g., detecting whether you are connecting from Dhaka, Khulna, Rajshahi, or Cox's Bazar), and connection timestamps;
• Cookie and tracking data: Session tokens, preference cookies, and analytics identifiers — see Section 5 (Cookies and Tracking) for full details.

2.3 Information from Third Parties

c3999 may receive personal data about you from trusted third-party sources in limited circumstances, including identity verification and fraud prevention service providers, payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and game studio providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi) where required for dispute resolution or technical support. Data received from third parties is processed only for the specific purpose for which it was shared and is not used for any broader commercial purpose without your explicit consent.

3. How We Use Your Data

c3999 uses the personal data we collect for the following clearly defined purposes. We do not use your data for purposes that are incompatible with those listed here without first obtaining your consent or establishing a new legal basis for processing.

• Account creation and management: To register your account, verify your identity and age, manage your player profile, and maintain accurate account records;
• Processing transactions: To process deposits, withdrawals, and bonus payments via bKash, Nagad, Rocket, Upay, and card payment methods — and to maintain a full and accurate transaction history;
• Platform security and fraud prevention: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, money laundering, chargebacks, and other fraudulent or prohibited activities;
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering principles, age verification requirements, and record-keeping obligations;
• Responsible gaming: To monitor betting patterns that may indicate problem gambling and to proactively apply responsible gaming tools where appropriate for player protection;
• Customer support: To respond to your queries, resolve disputes, manage complaints, and maintain records of your support history for quality and training purposes;
• Platform improvement: To analyse how players interact with c3999, identify technical issues, optimise the user experience, and develop new features;
• Promotional communications: To send you relevant bonus offers, seasonal promotions (e.g., BPL, IPL, Eid, Pohela Boishakh promotions), and platform updates — only where you have opted in or where we have a legitimate interest and you have not opted out.

4. Legal Basis for Processing

c3999 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as an account holder — including account creation, transaction processing, and customer support. Without this processing, we cannot provide the c3999 service;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, anti-money laundering checks, and record retention obligations;
• Legitimate interests: Processing carried out for c3999's legitimate business interests, including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms;
• Consent: Where you have provided clear, informed, and freely given consent for a specific processing activity — such as receiving promotional emails or push notifications. You may withdraw consent at any time by contacting our support team or updating your account communication preferences.

5. Cookies and Tracking

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the c3999 website. They allow the platform to recognise your device across sessions, remember your preferences, maintain your login state, and collect aggregated usage data to help us improve the platform experience for all players.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your c3999 account and accessing core platform features. Disabling functional or analytics cookies will not prevent you from using the platform but may affect personalisation features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6. Third-Party Sharing

c3999 shares personal data with third parties only where strictly necessary for the provision of our services, compliance with legal obligations, or protection of the platform and its users. The categories of third parties with whom we may share data, and the basis for sharing, are set out below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data required to process your deposits and withdrawals. These providers process data under their own privacy policies and are independent data controllers for payment-related data;
• Identity and age verification providers: Third-party KYC verification services may process identity documents (NID, passport, utility bills) to confirm that account holders meet the 18+ age requirement and to verify address information;
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive limited technical data (session tokens, account references) required to deliver their game content and to resolve any game-related disputes;
• IT and security service providers: Hosting, cloud infrastructure, DDoS protection, and fraud detection providers who process data on our behalf under strict data processing agreements that prohibit any secondary use of the data;
• Legal and regulatory authorities: c3999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, a court order, or to protect the rights and safety of c3999, its staff, and other players.

All third-party data processors engaged by c3999 are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your personal data for any purpose other than the specific service they provide to c3999.

7. Data Retention

c3999 retains personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable legal and regulatory obligations. The following retention guidelines apply:

Following the expiry of the applicable retention period, c3999 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Where full deletion is not technically possible within a given system (for example, backup archives), the data will be isolated from further processing and deleted at the earliest practical opportunity during the next scheduled backup cycle.

8. Data Security

c3999 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the c3999 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all page loads, login sessions, form submissions, and API communications;
• Encrypted data storage: Sensitive personal data — including identity documents, financial data, and authentication credentials — is stored using strong encryption at rest;
• Access controls: Access to personal data within c3999's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are required to undergo data protection training and are bound by confidentiality obligations;
• Intrusion detection and DDoS protection: c3999's infrastructure is monitored around the clock for suspicious activity, with automated intrusion detection and DDoS mitigation systems in place;
• Penetration testing: c3999 engages independent security professionals to conduct periodic penetration testing of the platform to identify and remediate vulnerabilities before they can be exploited;
• Incident response: In the event of a data security incident affecting your personal data, c3999 maintains an incident response plan and will notify affected users promptly in accordance with our legal obligations.

9. Your Privacy Rights

As a c3999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all verified requests within a reasonable timeframe and at no charge unless the request is manifestly unfounded or excessive.

c3999 will not discriminate against you for exercising any of the privacy rights described above. Your access to the platform and the quality of service you receive will not be affected by any legitimate privacy request you submit.

10. Children's Privacy

The c3999 platform is strictly intended for adults aged 18 years and above. c3999 does not knowingly collect, process, or retain personal data from individuals under the age of 18. If you are under 18, you must not use the c3999 platform, create an account, or submit any personal data through the site.

If c3999 becomes aware that personal data has been collected from a person under the age of 18, we will immediately suspend the associated account, delete the data in question, and — where technically feasible — return any deposited funds to the original payment method. Parents or guardians who believe that a minor may have registered on the c3999 platform are encouraged to contact us immediately at [email protected] so that the account can be investigated and closed without delay.

11. Policy Updates

c3999 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform features, or internal data handling practices. When material changes are made to this Policy, c3999 will notify registered account holders by posting a prominent notice on the platform homepage and, where practicable, by sending a notification to the email address or mobile number associated with your account.

The updated Privacy Policy will take effect from the date it is published on the c3999 website. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how c3999 protects your personal data. Your continued use of the c3999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way c3999 handles your personal data, please do not hesitate to contact our dedicated support team. We are committed to responding to all privacy-related enquiries promptly and transparently.

12.1 Contact Channels

• Live Chat: Available 24/7 directly on the c3999 platform — average response time 2–5 minutes;
• Email: [email protected] — plain text, not a clickable link;
• WhatsApp: Contact details visible after login to your c3999 account;
• Operating hours: Bangladesh Standard Time (BST, UTC+6), around the clock.

12.2 Privacy Requests

To submit a formal privacy rights request — such as a request to access, correct, delete, or port your personal data — please contact us via the live chat or email channel above and use the subject line "Privacy Rights Request" along with your registered account username or email address so that we can verify your identity and process your request efficiently. c3999 aims to acknowledge all privacy requests within 2 business days and to resolve them within 14 calendar days, subject to the complexity of the request.

12.3 Complaints

If you are dissatisfied with how c3999 has handled your personal data or responded to a privacy request, you may escalate your complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". c3999 will conduct a senior-level review of the matter and provide a written response within 10 business days. We take all privacy complaints seriously and are committed to resolving them fairly and in accordance with this Policy.