Privacy Policy — 499bej
How We Handle Your Data

1. Data We Collect

499bej collects personal data from you at the time of account registration, during account verification, through your ongoing use of the Platform, and via automated technical means. The categories of data we collect are described below.

1.1 Registration Data

When you create a 499bej account, we collect the following information that you provide directly:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — to verify that you meet the 18+ age requirement for all Bangladesh players.
• Residential address — including district, city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), and postcode.
• Email address — used for account communications, promotional messages (where opted in), and security alerts.
• Mobile number — used for account verification, two-factor authentication, and customer support.
• Preferred payment method — bKash, Nagad, Rocket, Upay, Visa, or Mastercard account details as required to process deposits and withdrawals.
• Username and password — your chosen login credentials. Passwords are stored as salted cryptographic hashes; 499bej staff cannot view your password in plain text.

1.2 Identity Verification Data

To comply with know-your-customer (KYC) obligations, 499bej may request copies of:

• Government-issued National ID card (NID), valid passport, or driving licence issued in Bangladesh.
• Proof of address — a utility bill, bank statement, or government correspondence dated within three months, showing your registered address.
• Proof of payment method ownership — a screenshot or confirmation showing your name on the bKash, Nagad, Rocket, or Upay account used to fund your 499bej wallet.

1.3 Transactional Data

499bej automatically records the full history of financial transactions on your account, including deposit amounts, withdrawal requests and completions, bonus credits, wagering activity, game session history, and any chargebacks or reversals. This data is retained for a minimum of five years for financial record-keeping and responsible gaming monitoring purposes.

1.4 Technical and Device Data

When you access the 499bej Platform, our servers and analytics systems automatically collect the following technical data:

2. How We Use Your Data

499bej processes your personal data only for the specific, legitimate purposes described in this section. We do not use your data in ways that are incompatible with these stated purposes without first seeking your explicit consent.

2.1 Account Operation

The primary use of your personal data is to create and manage your 499bej player account. This includes processing your registration, verifying your identity and age, enabling you to deposit and withdraw funds in BDT, providing access to casino games and cricket betting markets, delivering customer support, and sending you account-related communications such as security alerts and transaction confirmations.

2.2 Identity Verification and Fraud Prevention

499bej uses your registration data and KYC documents to verify that you are who you say you are, that you are at least 18 years of age, and that your account is not being used for fraudulent, money-laundering, or other unlawful purposes. This processing is a legal obligation and a core component of responsible platform operation. Where fraud or identity misrepresentation is detected, 499bej will act in accordance with the account suspension procedures set out in the Terms & Conditions.

2.3 Payment Processing

Your payment method details are shared with our payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay gateway services, as well as Visa and Mastercard network processors — solely to the extent necessary to execute your deposit and withdrawal requests. 499bej does not store full card numbers or mobile banking PINs on its own servers.

2.4 Responsible Gaming Monitoring

499bej uses your session data, transaction history, and wagering patterns to monitor for signs of problem gambling behaviour. This includes tracking session lengths, frequency of deposits, loss chasing patterns, and responses to responsible gaming prompts. Where concerning patterns are detected, our responsible gaming team may contact you directly to offer support tools including deposit limits, cooling-off periods, and self-exclusion. See the Responsible Gaming page for full details.

2.5 Marketing Communications

Where you have explicitly opted in to receiving marketing communications at registration or via your account settings, 499bej may use your email address and mobile number to send you promotional offers, bonus notifications, BPL season betting promotions, tournament announcements, and seasonal offers such as Eid and Pohela Boishakh specials. You may withdraw your marketing consent at any time by updating your account notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any communications sent prior to withdrawal.

2.6 Platform Improvement

Aggregated, anonymised technical and behavioural data is used by 499bej to analyse Platform performance, identify technical issues, improve user experience, optimise game loading times, and develop new features. This analysis does not involve processing data at an individual identifiable level — it is performed on anonymised aggregate datasets only.

3. Cookies & Tracking Technologies

499bej uses cookies and similar tracking technologies on its Platform to enable core functionality, improve performance, and — where you consent — to deliver relevant content. This section explains what cookies we use and how you can control them.

3.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, and browsing behaviour — so that the site functions correctly and your experience is personalised. Cookies cannot execute code, carry viruses, or access other files on your device.

3.2 Categories of Cookies Used by 499bej

3.3 Managing Your Cookie Preferences

You may manage non-essential cookies through your browser settings at any time. Most modern browsers — including Chrome, Firefox, Safari, and the browsers built into Android and iOS devices commonly used in Bangladesh — provide controls to view, delete, and block cookies on a per-site basis. Please be aware that disabling functional or analytics cookies may affect the quality of your experience on the 499bej Platform. Disabling strictly necessary cookies will prevent you from logging in and using the Platform.

4. Data Sharing & Third-Party Access

499bej does not sell, rent, or trade your personal data. We share data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Payment Processing Partners

To process deposits and withdrawals, 499bej shares your name and relevant payment method identifiers with licensed payment gateway operators including bKash, Nagad, Rocket, Upay, and the card network processors for Visa and Mastercard transactions. These partners are contractually prohibited from using your data for any purpose other than processing the specific transaction requested.

4.2 Game Studio Partners

When you play a game provided by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a pseudonymous player identifier (not your real name or email) and your current game session balance are transmitted to the studio's game server to enable gameplay. No personally identifiable registration data is shared with game studios.

4.3 Identity Verification Services

499bej may use third-party KYC and identity verification service providers to assist with the verification of identity documents submitted by Bangladesh players. These providers process your submitted documents under strict data processing agreements and are prohibited from retaining your documents beyond the verification period.

4.4 Legal and Regulatory Obligations

499bej may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by applicable law, court order, or binding regulatory direction. In such cases, 499bej will disclose only the minimum data required to comply with the specific legal obligation and will, where permissible, notify you of the disclosure.

4.5 Business Transfers

In the event that 499bej undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the same privacy protections described in this Policy, and you will be notified via email or a prominent Platform notice prior to the transfer taking effect.

5. Data Retention

499bej retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with the purposes for which the data was collected and the applicable legal obligations that require us to retain certain records.

5.1 Active Account Data

While your 499bej account is active, we retain all registration data, transaction history, KYC documents, and communication records. This data is necessary to operate your account and to fulfil our responsible gaming, fraud prevention, and financial record-keeping obligations.

5.2 Post-Closure Retention

Following the closure of your 499bej account — whether voluntarily, via self-exclusion, or by 499bej — we retain the following data for the periods specified:

• Transaction and financial records: 5 years from the date of account closure, required for financial audit and anti-money-laundering compliance.
• Identity verification documents: 5 years from the date of account closure.
• Account registration data: 2 years from closure, retained to prevent re-registration during a self-exclusion period and for fraud prevention.
• Support correspondence: 2 years from the date of the last interaction.
• Technical and session logs: 12 months from collection, after which they are permanently deleted.

5.3 Deletion Requests

Where you request deletion of your personal data and no overriding legal retention obligation applies, 499bej will permanently delete or irreversibly anonymise your data within 30 calendar days of receiving a verified deletion request. Deletion requests may be submitted to [email protected] with the subject line "Data Deletion Request". Note that data subject to a legal retention obligation (such as financial transaction records) cannot be deleted prior to the expiry of the applicable retention period, even upon request.

6. Your Rights Over Your Personal Data

As a 499bej player, you have the following rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting our support team at [email protected]. We will respond to all verified rights requests within 5 business days and aim to fulfil requests within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of all personal data that 499bej holds about you. Upon receiving a verified access request, 499bej will provide a structured summary of your registration data, transaction history, KYC verification status, marketing preferences, and any notes on your account. Access requests are fulfilled free of charge.

6.2 Right of Correction

If any personal data held by 499bej is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. Common correction requests include updating a residential address within Bangladesh, correcting a misspelling in a registered name, or updating a mobile number. Identity-critical data (such as your legal name or date of birth) may require re-submission of a KYC document to support the correction.

6.3 Right to Data Portability

You have the right to request that 499bej provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you may transfer it to another service provider. Data portability requests apply to data that you provided directly to 499bej — it does not extend to derived data or internal analytics records.

6.4 Right to Erasure

Subject to the data retention obligations described in Section 5, you have the right to request that 499bej permanently delete your personal data. Erasure requests will be honoured in full where no overriding legal obligation requires continued retention. Where partial erasure is possible (for example, deleting marketing data while retaining legally required financial records), 499bej will delete all data not subject to a retention obligation and confirm in writing which data, if any, has been retained and the specific legal basis for its retention.

6.5 Right to Withdraw Marketing Consent

Where you have consented to receiving marketing communications from 499bej, you may withdraw that consent at any time without affecting the lawfulness of communications sent prior to withdrawal. To withdraw marketing consent, update your notification preferences in your account settings or send an email to [email protected] with the subject line "Unsubscribe from Marketing". Withdrawal of marketing consent will be processed within 2 business days.

6.6 Right to Object to Processing

You have the right to object to 499bej's processing of your personal data where that processing is based on our legitimate interests rather than a legal obligation. Where an objection is upheld, 499bej will cease the specific processing activity objected to unless there are compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise, or defence of legal claims.

7. Data Security

499bej implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• Transport encryption: All data in transit between your device and 499bej servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES cipher suites.
• At-rest encryption: Sensitive personal data and KYC documents stored on 499bej servers are encrypted at rest using AES-256 encryption.
• Password hashing: Account passwords are never stored in plain text. They are stored as salted bcrypt hashes, meaning 499bej staff cannot retrieve your password.
• Payment tokenisation: Full payment credentials (bKash account numbers, card numbers) are tokenised at the point of entry and never stored in raw form on 499bej servers.
• Access controls: Access to player personal data within 499bej's internal systems is restricted to authorised personnel on a strict need-to-know basis and is logged and audited.
• Intrusion detection: 499bej operates real-time intrusion detection and anomaly monitoring systems that alert our security team to unusual access patterns within the Platform infrastructure.
• Regular security testing: The 499bej Platform undergoes periodic penetration testing and security audits by independent security professionals.

7.1 Data Breach Response

In the event of a data security breach that is likely to result in a risk to the rights and freedoms of affected players, 499bej will notify affected players via email as soon as reasonably practicable following our becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures 499bej has taken or proposes to take to address the breach and mitigate its impact.

7.2 Your Role in Account Security

While 499bej takes all reasonable technical precautions on our end, account security is a shared responsibility. Players are strongly advised to use a unique, strong password for their 499bej account, to enable two-factor authentication (2FA) where available, and to never share their login credentials with any third party. 499bej will never ask for your password via email, phone, or chat.

8. Policy Updates & Contact

499bej reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made to this Policy, 499bej will notify registered players by email to their registered address and/or by a prominent notice on the Platform. The updated Policy will clearly state its effective date at the top of the document.

Continued use of the 499bej Platform following the notification of a Privacy Policy update constitutes your acceptance of the revised Policy. Players who do not accept the revised Policy should close their account and cease using the Platform prior to the effective date of the new version.

8.1 How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 499bej holds about you, please contact our privacy support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Request — [Your Username]"
• Response time: Within 5 business days (during Bangladesh Standard Time business hours)
• Language: All privacy correspondence is handled in English