c3999 Privacy Policy — How We Handle Your Personal Data

1.1 c3999 is an online betting and casino platform operated for players in Bangladesh. This Privacy Policy governs the collection and processing of personal data across all c3999 services, including sports betting, live casino, slots, account management, customer support interactions, and any other features accessible through the c3999 platform.

1.2 References to "c3999", "we", "us", and "our" throughout this document refer to the c3999 platform and its operating entity. References to "you", "your", and "the user" refer to any individual who accesses the c3999 website, registers an account, or otherwise interacts with the platform.

1.3 This Privacy Policy should be read alongside the c3999 Terms & Conditions, which govern the overall use of the platform. Together, these two documents form the complete agreement between you and c3999 regarding your use of our services and the handling of your personal information.

2.1 c3999 collects personal data through a variety of touchpoints across the platform. The categories of data we collect are set out below.

2.2 Registration Data. When you create a c3999 account, we collect your full name, date of birth, email address, phone number, and chosen username. This information is required to establish and maintain your account and to verify that you meet the minimum age requirement of 21 years.

2.3 Identity Verification Data. As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, together with proof of address documents such as a utility bill or bank statement. This data is used exclusively for identity verification and fraud prevention purposes.

2.4 Financial Data. When you make a deposit or request a withdrawal, we collect transaction-related data including your bKash, Nagad, Rocket, or Upay account reference, transaction amounts, timestamps, and payment method details. We do not store full payment credentials — sensitive payment data is handled directly by the relevant payment service provider.

2.5 Usage Data. We automatically collect data about how you interact with the c3999 platform, including pages visited, games played, bets placed, session duration, device type, operating system, browser type, and IP address. This data helps us improve platform performance and personalise your experience.

2.6 Communication Data. When you contact c3999 customer support — via live chat or email — we retain a record of that communication, including the content of the messages and any files exchanged, for quality assurance, dispute resolution, and training purposes.

3.1 c3999 uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and securing your c3999 account, including processing login requests, password resets, and account setting changes.
• Age and Identity Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity as required under our KYC obligations.
• Payment Processing: Facilitating deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access across the platform.
• Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, in order to offer support tools and interventions where appropriate.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance via live chat and email.
• Platform Improvement: Analysing aggregated usage data to understand player behaviour, optimise platform performance, and develop new features and products.
• Marketing Communications: Sending you information about c3999 promotions, bonuses, and new products, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting support.
• Legal Compliance: Meeting our obligations under applicable laws and responding to lawful requests from regulatory or law enforcement authorities.

3.2 c3999 does not use your personal data to make fully automated decisions that produce significant legal effects without any human involvement. Where automated systems flag an account for review — for example, fraud detection algorithms — the flagged case is reviewed by a c3999 staff member before any material action is taken.

4.1 c3999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform the contract between you and c3999 — specifically, to operate your account, process bets, and handle payments.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering obligations and identity verification requirements.
• Legitimate Interests: Processing carried out in pursuit of c3999's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed consent — such as sending marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5.1 c3999 uses cookies and similar tracking technologies to support the operation of the platform and to improve your experience. A cookie is a small text file placed on your device when you visit the c3999 website. Cookies enable the platform to remember your session, preferences, and certain usage data.

5.2 Strictly Necessary Cookies. These cookies are essential for the platform to function. They manage user sessions, maintain login state, and ensure that security controls operate correctly. These cookies cannot be disabled without affecting core platform functionality.

5.3 Analytics Cookies. c3999 uses analytics tools to collect aggregated, anonymised data about how players navigate and use the platform. This data is used exclusively to improve platform design, performance, and content. No individually identifiable information is included in analytics reports.

5.4 Preference Cookies. These cookies store your platform preferences — such as language settings and display options — so that you do not need to re-configure them on each visit.

5.5 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the c3999 platform.

6.1 c3999 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Your data is shared with third parties only in the following circumstances and only to the extent necessary for each purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data security standards.
• Identity Verification Services: Third-party KYC service providers may process copies of your identity documents to verify your identity. These providers are contractually bound to use your data solely for verification purposes and to apply appropriate security measures.
• Game Providers: When you play a casino game or slot title hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — certain session and gameplay data is transmitted to the relevant provider's servers to operate the game. Game providers do not receive your name, contact details, or payment data.
• Legal and Regulatory Authorities: c3999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal request. c3999 will notify you of such a disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of c3999's operations, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change in ownership that affects the handling of your data.

6.2 All third-party service providers engaged by c3999 are required to maintain the confidentiality and security of any personal data they process on c3999's behalf and to use that data only for the specific purpose for which it was shared.

7.1 c3999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, or reporting requirements.

7.2 Account data — including registration information, transaction history, and KYC documents — is retained for a minimum of five years following account closure. This retention period is required to meet anti-money laundering obligations and to resolve any disputes or claims that may arise after closure.

7.3 Customer support communication records are retained for a period of three years from the date of the last relevant interaction. After this period, communication records are securely deleted unless a pending dispute or legal matter requires longer retention.

7.4 Usage and analytics data is retained in anonymised, aggregated form for platform improvement purposes and does not have a fixed deletion schedule, as it cannot be linked back to any individual user.

7.5 When personal data is no longer required and the applicable retention period has expired, c3999 securely destroys or anonymises that data using industry-standard methods.

8.1 c3999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

8.2 Encryption. All data transmitted between your device and the c3999 platform is encrypted using 256-bit SSL/TLS technology. Sensitive data stored within c3999's systems — including account credentials and identity document copies — is encrypted at rest using current industry standards.

8.3 Access Controls. Access to personal data within c3999's internal systems is restricted to authorised personnel who require it to perform specific job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.

8.4 Monitoring. c3999 employs continuous security monitoring and intrusion detection systems to identify and respond to potential security incidents in real time. In the event of a confirmed data breach that is likely to result in a high risk to your rights and interests, c3999 will notify affected account holders without undue delay.

8.5 While c3999 takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying c3999 immediately if you suspect any unauthorised access to your account.

9.1 As a c3999 account holder, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact c3999 customer support using the details provided in Section 13 of this policy.

• Right of Access: You have the right to request a copy of the personal data c3999 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. We cannot delete data that we are legally required to retain.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being resolved.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where c3999 processes your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

9.2 c3999 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

9.3 c3999 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply.

10.1 The c3999 platform is strictly intended for individuals aged 21 years and above. c3999 does not knowingly collect or process personal data from any person under the age of 21.

10.2 If c3999 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted promptly and the associated account will be closed immediately. Any funds deposited into an underage account will be returned to the originating payment source.

10.3 If you believe that a person under the age of 21 has registered an account or provided personal data to c3999, please contact our support team immediately so that the matter can be investigated and resolved without delay.

11.1 The c3999 platform may contain references to third-party game providers, payment processors, or other services. Where a third-party service operates under its own domain or privacy framework — such as a payment provider's own checkout page — that service's own privacy policy governs the data collected during your interaction with it.

11.2 c3999 is not responsible for the privacy practices or content of any third-party service. We recommend that you review the privacy policies of any third-party services you use in connection with your c3999 account, particularly payment providers such as bKash and Nagad.

12.1 c3999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The updated policy will be published on this page with a revised effective date.

12.2 For material changes — those that meaningfully affect how your personal data is collected, used, or shared — c3999 will provide advance notice via email to your registered address before the change takes effect. For minor clarifications that do not alter the substance of the policy, no advance notice will be given.

12.3 Your continued use of the c3999 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must stop using the platform and may request account closure by contacting customer support.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data c3999 holds about you, please contact our customer support team. Support is available 24 hours a day, 7 days a week, via live chat inside your account dashboard.

13.2 You may also reach us by email. The support address is listed below as plain text — it is not a clickable link. Please copy it manually into your email client:

[email protected]

13.3 c3999 aims to acknowledge all written privacy enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6) and to resolve standard requests within 30 days. Where a request requires additional investigation, we will keep you informed of progress throughout the process.

13.4 This Privacy Policy is published and maintained in English. In the event of any conflict between the English version and any translated version that may be made available, the English version shall take precedence in all respects.