Privacy Policy — How e3999 Protects Your Data

Information We Collect

e3999 collects personal information from you in three principal ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and identity verification partners.

Information You Provide Directly: When you create an e3999 account, you will be asked to supply personal details including your full legal name, date of birth, residential address (including city and district within Bangladesh — for example, Dhaka, Chittagong, Sylhet, or Rajshahi), a valid email address, and a mobile phone number. This information is necessary to create and administer your account, verify your identity, and process payments.

Know Your Customer (KYC) Documents: As part of our identity verification process, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof-of-address documents such as a recent utility bill or bank statement, and proof of payment method ownership. These documents are collected to comply with our anti-money laundering obligations and to ensure account security.

Financial Transaction Data: We collect records of all deposits and withdrawals made on your account, including the amounts, timestamps, payment methods used (bKash, Nagad, Rocket, Upay, or bank transfer), and transaction reference numbers. We do not store complete mobile banking PINs or full bank account numbers.

Gaming and Betting Activity: We collect detailed records of your gaming sessions on e3999, including which games you played, bet amounts, outcomes, session durations, and wagering history. This data is used to settle bets accurately, detect responsible gaming concerns, and improve the quality of our product offering.

Communications Data: If you contact our support team via live chat or email, we retain a record of those communications to resolve your query and to improve our service quality. We may also retain records of promotional communications sent to you and your responses to them.

How We Use Your Information

e3999 uses the personal information it collects for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. Below is a detailed breakdown of how each category of data is used and the legal basis on which we rely for each use.

• Account creation and management: Identity and contact data are used to set up your player account, verify your identity, and administer your account on an ongoing basis. Legal basis: performance of a contract.
• Payment processing and fraud prevention: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to detect and prevent fraudulent transactions. Legal basis: performance of a contract and legitimate interest.
• Compliance with legal obligations: KYC documents and transaction records are retained to comply with anti-money laundering and counter-terrorism financing obligations. Legal basis: legal obligation.
• Responsible gaming monitoring: Gaming activity data is used to identify patterns that may indicate problem gambling behaviour, enabling our team to intervene with appropriate support tools and resources. Legal basis: legitimate interest and legal obligation.
• Customer support: Communications data is used to respond to your queries, resolve disputes, and improve our support service quality. Legal basis: performance of a contract.
• Marketing and promotions: Contact data is used to send you promotional offers, bonus notifications, and seasonal campaigns (for example, Eid, Pohela Boishakh, and BPL season promotions) only where you have consented to receive such communications or where we have a legitimate interest in marketing to existing customers. Legal basis: consent or legitimate interest. You may withdraw marketing consent at any time.
• Platform improvement and analytics: Technical and usage data is used to analyse how players interact with the e3999 platform, identify technical issues, and guide product development decisions. This analysis is performed on aggregated or pseudonymised data wherever possible. Legal basis: legitimate interest.
• Security and access control: Technical data (IP address, device fingerprint) is used to detect and prevent unauthorised account access, multi-accounting, and bot activity. Legal basis: legitimate interest.

Sharing Your Information

e3999 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

Payment Service Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, we share the transaction details necessary to process that payment with the relevant payment service provider. Those providers are bound by their own privacy policies and regulatory obligations. e3999 has no control over how payment providers handle data shared with them in the course of processing your transactions.

Identity Verification Partners: e3999 uses third-party identity verification services to assist with KYC checks. Your name, date of birth, and document images may be shared with these partners solely for the purpose of verifying your identity. Verification partners are contractually prohibited from using your data for any other purpose.

Game Software Providers: When you play a game supplied by a third-party studio such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi, certain technical data (such as a session token and bet/outcome records) is shared with that provider to render the game and settle the result. Game providers do not receive your name, contact details, or financial data as part of this exchange.

Legal and Regulatory Disclosures: e3999 may disclose personal information to law enforcement agencies, financial regulators, or courts where required to do so by applicable law, court order, or legitimate legal process. We will notify you of such disclosures where we are legally permitted to do so.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of e3999, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is processed as a result.

Cookies & Tracking Technologies

e3999 uses cookies and similar technologies (such as web beacons and local storage) to ensure the platform functions correctly, to remember your preferences, and to analyse how the platform is used. This section explains what types of cookies we use, what they do, and how you can manage them.

A cookie is a small text file placed on your device by the e3999 website. Cookies cannot run programmes or transmit viruses. They are not used to access any other files on your device. The information stored in cookies is associated with your browser or device, not directly with you as an individual, unless you are logged into your e3999 account.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your e3999 account or using core platform features. Instructions for managing cookies in popular browsers are available from the browser provider's help centre.

Data Security & Storage

e3999 takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. No system can guarantee absolute security, but we continuously review and update our practices to maintain a high standard of data protection.

Technical Measures in Place:

• All data in transit between your browser and the e3999 servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Sensitive data fields (including passwords and payment credentials) are stored using one-way cryptographic hashing or tokenisation — e3999 staff cannot read your password in plain text.
• e3999 production systems are hosted on infrastructure with firewall protection, intrusion detection, and regular security patch cycles.
• Player account access is protected by password authentication, and two-factor authentication (2FA) is available as an additional layer of security for all accounts.
• Automated systems monitor for unusual login patterns, multiple failed authentication attempts, and anomalous transaction behaviour, and can trigger automatic account security locks.

Organisational Measures in Place:

• Access to personal data is restricted on a need-to-know basis. Only authorised e3999 staff whose role requires it — such as the KYC compliance team, finance team, and customer support team — have access to player personal data.
• All e3999 staff who handle personal data are required to maintain confidentiality and are trained on data protection obligations.
• Third-party service providers who process data on e3999's behalf are required to maintain security standards at least equivalent to those of e3999.

Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, e3999 will notify affected players without undue delay once the breach has been identified and its scope assessed. Notification will include a description of the nature of the breach, the categories and approximate number of records affected, and the steps e3999 is taking to address it.

Your Privacy Rights

As a registered player on e3999, you have a number of rights with respect to your personal data. These rights are described below. To exercise any of these rights, please contact the e3999 support team via live chat or by emailing [email protected]. We will respond to all valid requests within 30 days. In some cases, we may need to verify your identity before processing a request.

• Right of Access You have the right to request a copy of all personal data that e3999 holds about you. We will provide this in a structured, commonly used format. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic contact information directly in your account settings.
• Right to Erasure You may request that e3999 delete your personal data. This right is not absolute — we may retain data where we have a legal obligation to do so (for example, transaction records required for anti-money laundering compliance). We will inform you of any data that must be retained and the reason why.
• Right to Restriction of Processing You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved, or while you are contesting the legal basis for processing.
• Right to Data Portability Where processing is based on your consent or on a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format that you can transfer to another service provider.
• Right to Object You have the right to object to processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of legitimate interest, though this right is subject to e3999's ability to demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent Where processing is based on your consent (for example, receipt of marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Retention Policy

e3999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below represent our standard approach; in some circumstances, data may be retained for longer periods if required by a specific legal obligation, active dispute, or ongoing investigation.

• Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Gaming activity records: Retained for a minimum of 3 years from the date of the session, or for the duration of any active dispute relating to that session, whichever is later.
• Support communications: Retained for 2 years from the date of the communication, or until any dispute raised in the communication is fully resolved.
• Marketing preferences and consent records: Retained for as long as you have an active account, plus 1 year following account closure to handle any late opt-out requests.
• Technical and analytics data: Aggregated or pseudonymised analytics data may be retained indefinitely. Raw server logs containing IP addresses are deleted after 12 months.

When personal data is no longer required, e3999 securely destroys or anonymises it. Secure destruction involves overwriting digital records and physically destroying any paper copies of KYC documents.

Updates to This Policy

e3999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where a material change is made — for example, a new category of data collection, a new third-party sharing arrangement, or a significant change to how data is used — e3999 will notify active players by posting a prominent notice on the platform and, where required, by sending a notification to the registered email address on your account.

The effective date and last-updated date displayed at the top of this policy will be revised with each update. We encourage you to review this policy periodically to stay informed about how e3999 protects your information. Your continued use of the e3999 platform following notification of a material change constitutes your acknowledgement of the updated policy.

For historical versions of this Privacy Policy or if you have a question about any change that has been made, please contact us at [email protected].

This Privacy Policy is governed by and should be read in conjunction with the e3999 Terms & Conditions and the Responsible Gaming policy. In the event of any conflict between the Privacy Policy and the Terms & Conditions on a matter of data handling, this Privacy Policy takes precedence.