Privacy Policy —
How b4999 Protects Your Data

01 Data We Collect

b4999 collects personal data from you in three primary ways: information you provide directly during registration and account use, information generated automatically by your use of the Platform, and information received from trusted third-party service providers such as payment processors and identity verification agencies.

Information You Provide Directly

When you register a b4999 account, access the b4999 login page, make a deposit, request a withdrawal, or contact our support team, you may provide us with the following categories of personal data:

Information Collected Automatically

When you access the b4999 Platform, our servers and analytics tools automatically record certain technical information. This includes your IP address, device type and operating system, browser type and version, the pages you visit on the Platform, the time and duration of your sessions, game activity logs (games played, bet amounts, outcomes), and referring URL. This data is used for security monitoring, fraud detection, technical troubleshooting, and aggregate performance analysis.

Information from Third Parties

b4999 may receive supplementary personal data about you from third-party partners, including identity verification agencies, payment service providers (such as bKash and Nagad), and fraud screening services. This information is used solely to fulfil our legal obligations, verify your identity, process transactions, and maintain the security of the Platform. It is not used for marketing purposes without your explicit consent.

02 How We Use Your Data

b4999 processes your personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which b4999 processes personal data are as follows:

• Account creation and management: To register your b4999 account, authenticate your identity when you use the b4999 login, maintain accurate account records, and communicate account-related updates to you.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banks; to maintain accurate financial records; and to detect and prevent fraudulent transactions.
• Identity verification (KYC): To verify that you meet the 18+ age requirement, that your identity matches the payment method on file, and that your account does not present money laundering or fraud risk indicators.
• Responsible gaming compliance: To monitor your gaming activity for patterns associated with problem gambling, to enforce deposit and loss limits you have set, to administer self-exclusion periods, and to fulfil our duty of care obligations.
• Legal and regulatory compliance: To retain records required by applicable anti-money laundering obligations, to respond to lawful requests from competent authorities, and to enforce our Terms & Conditions.
• Platform improvement and security: To analyse aggregate usage patterns, fix technical errors, improve game performance, and monitor the Platform for security threats, unauthorised access attempts, and bot activity.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance purposes.
• Direct marketing (where consent is given): To send you information about promotions, bonuses, tournaments, and seasonal offers relevant to players in Bangladesh — such as BPL season promotions or Eid special offers. You may opt out of marketing communications at any time by contacting [email protected].

b4999 will never use your personal data for automated profiling that produces legal or similarly significant effects without your explicit consent, nor will we use it to discriminate on the basis of any protected characteristic.

03 Data Sharing & Third Parties

b4999 does not sell, rent, or trade your personal data. We share personal data with third parties only where strictly necessary to operate the Platform or meet a legal obligation, and always under appropriate data protection safeguards. The categories of third-party recipients who may receive your personal data are described below.

Payment Service Providers

To process deposits and withdrawals, b4999 must share your account reference number and transaction details with the payment service provider you have selected — for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. b4999 does not transmit your full payment credentials to any payment provider beyond what is strictly required to authorise and complete the transaction. All payment data is transmitted over encrypted channels.

Identity Verification Providers

Where required to complete KYC checks, b4999 may share your identity documents and biographical data with a third-party identity verification agency. These agencies are bound by strict contractual data protection obligations and are not permitted to use your data for any purpose other than fulfilling the verification request submitted by b4999.

Game Technology Providers

Games on the b4999 Platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive anonymised session and gameplay data to operate their game engines and maintain fairness certification. They do not receive your full name, payment details, or contact information unless you directly initiate a dispute via a provider's own support channel.

Legal and Regulatory Authorities

b4999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies where required to do so by applicable law or a valid legal order. b4999 will comply with all lawful data disclosure requests and will notify affected users where legally permitted to do so.

04 Cookies & Tracking

b4999 uses cookies and similar browser storage technologies on the Platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the Platform to recognise your browser across visits, maintain your session state, and record certain preferences. b4999's use of cookies is limited to the categories described below.

Types of Cookies b4999 Uses

Cookies b4999 Does NOT Use

b4999 does not deploy third-party advertising cookies, cross-site tracking pixels, social media tracking tags, retargeting beacons, or any cookie whose primary purpose is to build a behavioural advertising profile of the user.

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings at any time. Instructions for the most common browsers are available in the browser's help documentation. Please note that disabling strictly necessary cookies will prevent you from logging into your b4999 account and using core Platform features. Disabling functional or analytics cookies will not affect your ability to place bets, make deposits, or access games.

05 Data Security

b4999 employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include, but are not limited to, the following.

• 256-bit SSL/TLS encryption on all data transmitted between your device and b4999's servers.
• Encrypted storage of sensitive data fields including passwords (bcrypt-hashed, never stored in plain text), payment method identifiers, and identity document scans.
• Role-based access controls that limit employee access to personal data strictly to those who require it for their job function. Support agents, for example, can view account status but cannot access your payment credentials or identity document images without escalating to a dedicated compliance team.
• Intrusion detection systems and continuous security monitoring to identify and respond to anomalous access patterns or potential breaches in real time.
• Regular penetration testing and security audits conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) available to all b4999 account holders and mandatory for all staff accessing internal systems.

Your Role in Account Security

While b4999 maintains robust technical and organisational security measures, you also play a critical role in keeping your account safe. You must keep your b4999 login password confidential, use a strong and unique password, enable 2FA on your account, and notify b4999 immediately at [email protected] if you suspect any unauthorised access. b4999 will never ask you for your password by email, live chat, phone, or any other channel.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, b4999 will notify affected account holders without undue delay, providing details of the nature of the breach, the categories of data affected, and the steps b4999 is taking to contain it and prevent recurrence. b4999 will also notify relevant authorities as required by applicable law.

06 Data Retention

b4999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by b4999.

Once the applicable retention period has expired, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. b4999 applies retention schedules automatically and does not rely on manual deletion processes for routine data lifecycle management.

Requesting Early Deletion

You may request the deletion of your personal data at any time by contacting [email protected]. b4999 will action your request within 30 calendar days. Please note that b4999 may be required by law to retain certain categories of data (particularly financial transaction records and KYC documents) for the full legally mandated period, even following an account closure or deletion request. Where deletion is not legally possible, b4999 will restrict further processing of your data to the minimum necessary to fulfil the legal retention obligation.

07 Your Privacy Rights

As a b4999 account holder, you have the following rights with respect to your personal data. b4999 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, please submit a written request to [email protected], clearly stating which right you wish to exercise and providing sufficient detail to allow us to identify your account.

b4999 aims to respond to all privacy rights requests within 14 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it. b4999 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive.

Identity Verification for Data Rights Requests

To protect your data from unauthorised access, b4999 will require you to verify your identity before processing any data rights request. This typically involves confirming details associated with your registered account. b4999 will not act on a data rights request that cannot be linked to a verified account holder.

08 Policy Updates & Contact

b4999 reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing practices, applicable law, or feedback from users. When a material change is made to this Privacy Policy, b4999 will notify registered account holders via the email address associated with their b4999 account at least 14 days before the change takes effect. We will also display a prominent notice on the Platform for a period of not less than 30 days following any material amendment.

The date of the most recent review is displayed at the top of this Privacy Policy. If you continue to use the b4999 Platform after a revised Privacy Policy has taken effect, you are deemed to have accepted the updated terms. If you do not accept the revised Privacy Policy, you must stop using the Platform and close your account before the effective date of the change.

Previous Versions

Previous versions of this Privacy Policy are archived by b4999 and are available on request. If you wish to review an earlier version, please contact [email protected], specifying the approximate date of the version you wish to access.

Contact b4999 About Privacy

If you have any questions about this Privacy Policy, wish to exercise a data right, wish to make a complaint about how your personal data has been handled, or need to report a suspected data security incident, please contact the b4999 Privacy Team in writing:

b4999 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may have the right to lodge a complaint with an appropriate data protection authority in your jurisdiction.