Privacy Policy
How 499bde Handles Your Personal Data

This Privacy Policy applies to all users of the 499bde platform — including visitors who have not yet registered an account. By continuing to use the 499bde website, you acknowledge that you have read this policy and understand how your personal information is handled. This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

About This Policy

This Privacy Policy is issued by 499bde ("we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data belonging to players and visitors ("you", "your") who interact with the 499bde platform accessible at 499bde.app.

The term "personal data" refers to any information that identifies or can reasonably be used to identify a living individual. This includes, but is not limited to, your full name, date of birth, national identity card number, mobile phone number, email address, device identifiers, IP address, and payment method details.

499bde is committed to handling personal data responsibly and transparently. This policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about sharing your information with us.

If you are under 18 years of age, you are not permitted to use the 499bde platform and must not submit any personal data to us. If we become aware that personal data has been submitted by a person under 18, we will delete that data immediately and close any associated account. Please see our Responsible Gaming page for our full 18+ policy.

Data We Collect

499bde collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party service providers such as payment processors and identity verification partners. The categories of personal data we collect are set out below.

Registration & Account Data

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the 18+ age requirement.
• Email address — used for account communications, security notifications, and (where opted in) marketing.
• Bangladesh mobile phone number — used for account verification via SMS one-time passwords (OTPs) and for mobile wallet payment processing.
• Username and password — your chosen account credentials. Passwords are stored in hashed form and are never accessible in plain text to 499bde staff.
• Preferred currency and language settings — stored to personalise your platform experience.

Identity Verification (KYC) Data

• Bangladesh National Identity Card (NID) number and scanned images (front and back).
• Passport biographical data where NID is not available.
• Birth Registration Certificate where applicable.
• Selfie / liveness check image where required for advanced KYC verification.

KYC documents are processed by our identity verification partner and are retained in encrypted storage for compliance purposes. They are not used for any purpose other than identity and age verification and fraud prevention.

Payment & Transaction Data

• Mobile wallet account numbers associated with bKash, Nagad, Rocket, and Upay transactions.
• Bank account or card details (masked) associated with Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard transactions.
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Wagering history, game session data, and betting records — retained for account management, responsible gaming monitoring, and dispute resolution.

Technical & Usage Data

• IP address — used for geolocation checks, fraud detection, and security monitoring.
• Device type, operating system, and browser version — used for platform optimisation and security profiling.
• Session timestamps and duration — used for responsible gaming monitoring and platform analytics.
• Pages visited and features used within the platform — used for UX improvement and personalisation.
• Referral source — the URL or campaign from which you arrived at 499bde, used for marketing attribution.

Communication Data

• The content of support messages, emails, and live chat transcripts exchanged with the 499bde support team.
• Survey responses and feedback submitted voluntarily through the platform.
• Records of marketing consent and opt-out preferences.

How We Use Your Data

499bde uses your personal data only for the purposes described in this policy. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary uses of personal data held by 499bde are as follows:

Account Operations

• Creating, managing, and maintaining your 499bde player account.
• Authenticating your identity at login and during sensitive account actions (e.g., withdrawal requests, password changes).
• Processing deposit and withdrawal transactions and maintaining accurate account balance records.
• Applying bonus credits and calculating wagering requirement progress.

Legal Compliance & Fraud Prevention

• Verifying that you meet the 18+ age requirement before granting full account access.
• Conducting Know Your Customer (KYC) checks to confirm your identity and prevent the use of false identities or stolen documents.
• Monitoring account activity for signs of money laundering, fraud, collusion, or bonus abuse, and taking appropriate action where such activity is detected.
• Complying with any lawful requests from law enforcement or regulatory authorities.

Platform Improvement & Personalisation

• Analysing aggregated and anonymised usage data to improve platform features, game selection, and user experience.
• Personalising your platform experience based on your game history, preferences, and location within Bangladesh.
• Resolving technical issues, bugs, and platform errors using diagnostic data collected from your sessions.

Responsible Gaming

• Monitoring betting patterns and session durations to identify potential signs of problem gambling.
• Applying and enforcing deposit limits, loss limits, and self-exclusion restrictions set by you or by 499bde's responsible gaming team.
• Contacting you proactively where our systems identify unusual activity that may suggest gambling-related harm.

Marketing Communications

• Where you have given explicit consent, sending promotional emails and SMS messages about 499bde bonuses, seasonal offers (e.g., Eid promotions, Pohela Boishakh specials), and new game launches.
• Measuring the effectiveness of marketing campaigns using open rates, click-through data, and deposit attribution.

Data Sharing & Disclosure

499bde does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process deposit and withdrawal transactions, 499bde shares relevant payment data (such as your mobile wallet number or masked card details) with regulated payment processors including bKash, Nagad, Rocket, Upay, and banking partners. These processors are contractually obligated to handle your data securely and to use it only for the purpose of executing your specific transaction.

Identity Verification Partners

499bde uses a third-party KYC verification service to validate the identity documents submitted by players. This service receives only the KYC documents and basic account details necessary to perform the verification check. Verification partners are bound by strict data processing agreements and are prohibited from using your data for any other purpose.

Technology & Infrastructure Providers

499bde's platform is hosted on secure cloud infrastructure provided by third-party technology partners. These providers process personal data only on 499bde's instructions as data processors, and are contractually bound to implement appropriate security measures.

Game Software Providers

Some game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical session data (such as a session token and game round identifiers) to facilitate gameplay. These providers do not receive your full personal profile and are bound by data processing agreements with 499bde.

Legal & Regulatory Disclosure

499bde may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by a lawful order, warrant, or legal obligation. In such cases, 499bde will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where it is lawfully permitted to do so.

Cookies & Tracking Technologies

499bde uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather anonymised analytics data. This section explains what types of cookies we use and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and gather information about how you use the site. Cookies cannot execute programs or deliver viruses; they are passive data storage files.

Managing Cookie Preferences

You can manage or disable cookies through your browser's settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will impair your ability to use the 499bde platform, including logging into your account.

For guidance on managing cookies in common browsers used in Bangladesh — including Chrome for Android, Samsung Internet, and Mozilla Firefox — please refer to your browser's built-in help documentation.

Data Retention

499bde retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and compliance obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account's existence on the 499bde platform.
• Closed account data: Following account closure, core account and transaction records are retained for a minimum of five (5) years to satisfy anti-money-laundering record-keeping requirements and to support potential dispute resolution.
• KYC documents: Retained for a minimum of five (5) years after account closure, in line with standard financial services compliance obligations.
• Support communication records: Retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance.
• Analytics and technical logs: Retained in anonymised or aggregated form for up to two (2) years for platform improvement purposes.
• Marketing consent records: Retained for three (3) years from the date of consent or the date of last marketing communication, whichever is later, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be used to identify an individual. Where technical constraints mean that immediate deletion is not possible (e.g., data held in backup systems), the data will be isolated from active processing until it can be securely deleted.

Data Security Measures

499bde implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 499bde platform is encrypted using industry-standard TLS protocols. The 499bde platform operates exclusively over HTTPS.
• Password Hashing: Account passwords are stored using a strong, salted cryptographic hashing algorithm. Plain-text passwords are never stored on 499bde systems, and 499bde staff cannot retrieve your password.
• OTP Authentication: Sensitive account actions — including login from a new device and withdrawal requests — are protected by one-time SMS verification codes sent to your registered Bangladesh mobile number.
• Access Controls: Access to personal data within 499bde's internal systems is restricted to staff members who require it to perform their role. Access is controlled through role-based permissions and is subject to regular review.
• Intrusion Detection: 499bde's infrastructure is monitored for unusual activity, attempted intrusions, and anomalous data access patterns on a continuous basis.
• Data Minimisation: 499bde collects only the personal data that is strictly necessary for the stated purpose, reducing the volume of data at risk in the event of a security incident.
• Third-Party Security Standards: All third-party data processors engaged by 499bde are required to demonstrate compliance with appropriate data security standards as a condition of their engagement.

While 499bde takes all reasonable precautions, no online platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, not sharing your login credentials, and reporting any suspicious activity on your account to the support team promptly.

Your Privacy Rights

As a player whose personal data is held by 499bde, you have the following rights in relation to that data. To exercise any of these rights, please contact the support team using the email address in the footer of this page. 499bde will respond to all valid data rights requests within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that 499bde holds about you, along with information about how that data is being used. 499bde will provide a summary of your personal data in a structured, commonly used format upon request.

Right to Rectification

If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as your email address or phone number), you can update your information directly in your account settings. For fields that require identity verification to change (such as your legal name or date of birth), please contact the support team.

Right to Erasure

You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other legal basis for processing. Please note that 499bde may be required to retain certain data for legal and compliance purposes even following a valid erasure request; in such cases, 499bde will inform you of what data must be retained and why.

Right to Restrict Processing

You have the right to request that 499bde restrict the active processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved. During a restriction period, your data will be stored but not actively processed.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing carried out on the basis of legitimate interest, though in some cases 499bde may demonstrate overriding grounds that justify continued processing.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another service provider where technically feasible.

Third-Party Services

The 499bde platform integrates with a number of third-party service providers to deliver the full range of platform features. While 499bde carefully selects and contractually obligates its third-party partners, this Privacy Policy does not govern the data practices of those third parties beyond the obligations imposed by 499bde's data processing agreements.

Third-party services integrated into the 499bde platform include:

• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers operate their games under their own technical infrastructure and may receive session tokens to facilitate gameplay continuity.
• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners. These providers process your transaction data under their own privacy policies and applicable financial regulations.
• Identity verification services — third-party KYC providers that process identity documents submitted during account verification.
• Cloud hosting infrastructure — third-party cloud platform providers that host the 499bde application and store platform data.

499bde is not responsible for the privacy practices of any third party that is not acting as a data processor on 499bde's instructions. If you have concerns about how a specific third-party provider handles your data, you should consult that provider's own privacy policy directly.

Updates to This Policy

499bde reserves the right to update or revise this Privacy Policy at any time. When material changes are made — that is, changes that meaningfully affect how your personal data is collected, used, or shared — 499bde will notify you through one or more of the following methods:

• A notification displayed upon your next login to the 499bde platform.
• An email sent to the registered email address associated with your account.
• A notice posted on the 499bde homepage or platform announcements section.

The effective date shown at the top of this page reflects the date on which the current version came into force. Minor updates — such as corrections to typographical errors, clarifications that do not alter the substance of any provision, or updates to contact details — may be made without specific advance notice and take effect immediately upon publication.

Your continued use of the 499bde platform after the publication of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the revised policy, you must stop using the platform and may request account closure in accordance with the Account Suspension & Closure section of our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how 499bde is protecting your data. Previous versions of this policy are available on request from the support team.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how your personal data is being handled by 499bde, please contact the support team. The team is available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

499bde aims to resolve all privacy-related inquiries within 5 business days. For formal data rights requests (access, erasure, portability), a response will be provided within 30 days of receipt. If your request is complex or if you have submitted multiple requests, 499bde may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with 499bde's response to your privacy inquiry, you have the right to escalate your complaint. We encourage players to contact us first so we have the opportunity to resolve concerns directly before any escalation is necessary.