c3999 Privacy Policy

1Introduction

c3999 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player and visitor who uses the c3999 platform at https://c3999.vip. This Privacy Policy ("Policy") describes how c3999 collects, processes, stores, shares, and protects personal data in connection with the use of our online casino and sports betting services.

By registering an account on c3999 or using any of its services, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein. If you do not agree with this Policy, please discontinue use of the platform and contact support to request account closure.

2What Personal Data We Collect

c3999 collects only the personal data that is necessary to operate your account, process transactions, comply with legal obligations, and deliver a safe gaming experience. The table below summarises the categories of data we collect, specific examples, and the reason we collect each:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data, or health information. If any such data is inadvertently submitted to c3999, it will be deleted promptly without being processed.

✦Our Privacy Commitments to You

c3999 upholds these five core privacy principles across every aspect of how we handle your data.

3How We Use Your Personal Data

c3999 uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and operate your c3999 player account, including processing registration details, verifying your identity through KYC, and communicating account-related information to you.
• Transaction processing: To process deposits made via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, and to process withdrawal requests to your registered payment method.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, which may require us to collect, verify, and retain identity and transaction records.
• Security and fraud prevention: To monitor platform activity for suspicious behaviour, unauthorised access attempts, multi-accounting, bot use, and other forms of abuse that could harm other players or the integrity of the platform.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, to enforce the deposit limits and self-exclusion settings a player has configured, and to fulfil our duty of care obligations.
• Service improvement: To analyse aggregated, anonymised gaming and usage data to improve platform performance, game selection, loading speed, and the overall player experience on c3999.

4Legal Basis for Processing Your Data

c3999 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and c3999, including creating your account, processing bets, and handling deposits and withdrawals. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and any lawful requests from competent authorities.
• Legitimate interests: Processing that serves c3999's legitimate business interests, including fraud prevention, security monitoring, and platform analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send you optional promotional communications or use non-essential cookies, we will obtain your prior consent. You may withdraw consent at any time by contacting support or adjusting your account notification settings.

5Payment Data and Mobile Wallet Security

c3999 accepts payments via bKash, Nagad, Rocket, Upay, and direct bank transfer from Bangladeshi banks including BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, Sonali Bank, and others. All payment transactions are initiated and authenticated entirely within the respective payment provider's own application or platform.

When you make a deposit or initiate a withdrawal via bKash or Nagad, your wallet PIN and authentication credentials are entered directly into the bKash or Nagad app. c3999 receives only a transaction reference number and confirmation status from the payment provider — never your PIN or authentication token. This architecture means that even in the unlikely event of a data breach on c3999's side, your mobile banking credentials remain protected within the payment provider's systems.

6Sharing Your Personal Data

c3999 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment service providers: We share the minimum necessary transaction data (such as amount, account reference, and timestamp) with bKash, Nagad, Rocket, Upay, and banking partners solely to process your deposits and withdrawals. These providers are contractually bound to use the data only for transaction processing.
• Game providers: Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive a session token to authenticate your game session. They do not receive your full identity data or financial details beyond what is technically required to launch the game.
• Legal and regulatory authorities: c3999 will disclose personal data to law enforcement, financial regulators, or other competent authorities when required to do so by applicable law, court order, or regulatory obligation. We will notify you of such disclosure where we are legally permitted to do so.
• Technical service providers: Hosting, infrastructure, security, and analytics service providers who process data on c3999's behalf under strict data processing agreements that prohibit them from using the data for any purpose other than providing the contracted service to c3999.

All third parties with whom c3999 shares personal data are required to implement appropriate technical and organisational security measures to protect that data. c3999 does not authorise any third party to use your personal data for their own independent commercial purposes.

7Cookies and Tracking Technologies

c3999 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players use the site. The cookies we use fall into the following categories:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate c3999. Without these, the platform cannot operate correctly and they cannot be disabled.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login patterns. These help protect your account and the integrity of the platform.
• Performance cookies: Collect anonymised data about how players interact with c3999, including which pages are visited most frequently and where errors occur. This data is used to improve platform performance and fix issues.
• Preference cookies: Store your platform preferences such as language settings and display options so they are remembered between sessions. These are optional and may be disabled via your browser settings.

You can control cookie behaviour through your mobile browser's privacy settings. Disabling essential cookies will prevent you from logging into c3999. c3999 does not use cross-site tracking cookies or serve third-party advertising cookies on its platform.

8Data Retention

c3999 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any applicable legal minimum retention obligations. Our retention periods by data category are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years after account closure, to comply with AML record-keeping obligations. KYC documents are retained for the same minimum period.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping requirements applicable to online payment processing.
• Technical and session logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, after which they are automatically deleted or anonymised.

When a retention period expires and there is no ongoing legal obligation requiring continued retention, c3999 will securely delete or irreversibly anonymise the relevant personal data. You may request early deletion of non-legally-mandated data by contacting [email protected].

9Your Privacy Rights

As a c3999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered account details and the specific right you wish to invoke:

• Right of access: You may request a copy of the personal data c3999 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: If you believe any personal data c3999 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Basic account details (phone number, email) can be updated directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Legal retention obligations (e.g., AML) may prevent full erasure in some cases.
• Right to restrict processing: In certain circumstances (e.g., while a rectification request is being resolved), you may request that c3999 restrict its processing of your personal data to storage only.
• Right to data portability: You may request a copy of the personal data you have provided to c3999 in a structured, commonly used, machine-readable format (e.g., CSV), to the extent technically feasible.
• Right to object: You may object to c3999's processing of your personal data based on legitimate interests, including profiling. c3999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

c3999 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days, notifying you of the extension and the reason within the first 30-day period.

10Security Measures

c3999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and c3999 servers, ensuring that your account details and transaction information cannot be intercepted by third parties on the network.
• Encrypted storage for sensitive identity data at rest. Personally identifiable information stored on c3999 servers is encrypted using industry-standard symmetric encryption, with access restricted to authorised personnel only.
• Access controls: Only authorised c3999 personnel with a documented business need may access player personal data. Access is logged and audited regularly. Employees are trained on data privacy obligations and bound by confidentiality agreements.
• Intrusion detection and real-time monitoring systems that alert the security team to anomalous access patterns, large or unusual withdrawal activity, or signs of account compromise — 24 hours a day, 7 days a week.

While c3999 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, c3999 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

11Children and Underage Users

c3999 is strictly an adult platform. The minimum age to register and use c3999 is 21 years. c3999 does not knowingly collect personal data from persons under the age of 21. Our registration process requires users to confirm their age, and our KYC process verifies age using government-issued identity documents.

If c3999 discovers that personal data has been collected from a person under the age of 21, that data will be immediately deleted and the associated account will be permanently closed. If you are a parent or guardian and believe your child has registered on c3999, please contact [email protected] immediately so we can take appropriate action.

12Third-Party Links and External Services

The c3999 platform may display references to third-party payment services (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, and others). When you interact with these services — for example, when you open your bKash app to authorise a deposit — you are operating within that provider's own application and their privacy policy governs how your data is handled within their system. c3999 is not responsible for the privacy practices of third-party providers. We recommend reviewing the privacy policy of any third-party service you use in connection with your c3999 account.

13Changes to This Privacy Policy

c3999 reserves the right to update this Privacy Policy at any time. When we make material changes to this Policy, we will publish the revised version on this page with an updated "Last updated" date and, where required, notify active players via their registered contact details.

Your continued use of c3999 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how c3999 protects your personal data.

14Contact Us and Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how c3999 has handled your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 30 days.

Privacy and support email: [email protected]

When contacting us about a data rights request, please include your registered phone number or username and clearly state which right you are exercising (e.g., access, rectification, erasure). We will verify your identity before processing any data rights request to protect against unauthorised requests.