499brt Privacy Policy

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Mobile phone number registered in Bangladesh.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Username and encrypted password selected during account creation.

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documents (utility bill, bank statement dated within three months).
• Proof of payment method ownership where required (e.g., screenshot of bKash or Nagad wallet).
• Selfie or live photograph where required for advanced identity verification.

• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Payment method identifiers (e.g., bKash mobile number, Nagad wallet ID, Rocket account, Upay reference, Visa/Mastercard last four digits).
• Account balance history and bonus credit/debit records.
• Currency: all financial data is recorded in Bangladeshi Taka (BDT, ৳).

• IP address and approximate geolocation at time of login.
• Device type, operating system, browser version, and screen resolution.
• Pages visited, games played, session duration, and betting history.
• Clickstream data and interaction logs used for platform improvement and fraud detection.
• Cookies and similar tracking technologies (see Section 7 for full cookie details).

• Support enquiries, complaint submissions, and chat transcripts.
• Email correspondence and responses to our communications.
• Survey responses and feedback submitted voluntarily through the platform.

To create, maintain, and administer your player account, including verifying your identity, processing deposits and withdrawals, applying bonuses, and enabling access to all platform features available to registered players.

To process your financial transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, including verifying transaction authenticity, preventing payment fraud, and maintaining accurate financial records in compliance with applicable requirements.

To fulfil our legal and compliance obligations, including Know Your Customer (KYC) verification, anti-money laundering (AML) screening, age verification (21+ requirement), and detection and prevention of fraudulent, collusive, or prohibited activity on the platform.

To respond to your enquiries, resolve complaints, investigate disputed transactions, and provide technical assistance. Support communications may be recorded and retained for quality assurance and training purposes.

To analyse usage patterns, test new features, optimise game performance, and improve the overall user experience. Analytics data is aggregated and anonymised wherever possible before being used for internal reporting.

To monitor player behaviour for signs of problem gambling, enforce self-imposed deposit limits or self-exclusion requests, and send responsible gaming communications where our systems identify risk indicators consistent with harmful play patterns.

With your consent, to send you information about promotions, bonuses, seasonal offers (e.g., BPL season promotions, Eid special offers, Pohela Boishakh reload bonuses), and platform updates. You may withdraw marketing consent at any time by contacting support or updating your account communication preferences.

While your account is active, we retain all data associated with your account, including registration data, transaction history, game records, and communications, for the full duration of the account's activity and for a period following account closure as set out below.

Following the closure of your account — whether by your request, by 499brt action, or through inactivity — we retain your personal data for a minimum period of five (5) years to comply with anti-money laundering obligations, resolve disputes, and support legal proceedings if required. After this period, data is securely deleted or anonymised.

Identity verification documents (copies of NID, passport, proof of address) are retained for the duration of your account's activity and for five (5) years following account closure. Documents are stored in encrypted, access-controlled storage with strict internal access permissions.

You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 calendar days of receiving a valid request.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where corrections affect your KYC status, updated supporting documentation may be required.

You may request the deletion of your personal data. Please note that this right is subject to our legal retention obligations — we cannot delete data that we are required to retain by law (e.g., financial records and KYC data subject to anti-money laundering requirements).

Where processing of your data is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you believe that 499brt has not handled your personal data in accordance with this Policy, you may submit a formal complaint in writing to [email protected]. We will acknowledge your complaint within 48 hours and provide a substantive response within 14 calendar days.

These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state between pages, and protect against cross-site request forgery attacks. These cookies cannot be disabled without impairing core platform functionality.

We use anonymised analytics cookies to understand how players navigate the platform, which games are most popular, and where technical errors occur. This data helps us improve the platform experience. Analytics data is aggregated and does not personally identify individual players.

These cookies remember your settings and preferences — such as your preferred language setting, notification preferences, and recently played games — so that you do not need to reconfigure them each time you visit.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some platform features. Refer to your browser's help documentation for instructions on cookie management.

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Secure password hashing using industry-standard algorithms — plaintext passwords are never stored.
• Regular automated vulnerability scanning and penetration testing of our infrastructure.
• Intrusion detection and real-time alerting systems on all production environments.

• Strict role-based access control — team members can only access data necessary for their specific function.
• All staff with access to personal data are bound by confidentiality obligations.
• Regular internal data protection training and policy reviews.
• A documented incident response procedure for managing any suspected data breaches.