499bst Privacy Policy

1.1 499bst processes your personal data for the following purposes:

• Account management: To create and maintain your 499bst account, verify your identity, and process login and session authentication.
• Payment processing: To execute deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, and to maintain accurate records of all financial activity on your account.
• Compliance and fraud prevention: To fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, and to detect, investigate, and prevent fraudulent or prohibited activity on the platform.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer any self-exclusion, deposit limit, or time-out tools that you activate on your account.
• Customer support: To respond to your queries, process complaints, and maintain records of all support interactions for quality assurance purposes.
• Platform improvement: To analyse aggregated, anonymised usage data that helps us improve platform performance, game selection, and the overall player experience.
• Marketing communications: To send you relevant promotional offers and bonus notifications — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by contacting support.

1.2 499bst will not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law.

2.1 499bst processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to when creating your account — including identity verification, payment processing, and account management.
• Legal obligation: Processing required to comply with applicable AML, KYC, and record-keeping obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where those interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where you have provided clear and affirmative consent that can be withdrawn at any time.

2.2 Where we rely on legitimate interests as a legal basis, we carry out a balancing test to ensure that our interests do not disproportionately override your rights. You may contact us to request details of any such balancing assessment.

3.1 499bst does not sell your personal data to third parties for commercial marketing purposes. We may share your data with carefully selected third parties only where necessary and only for the following categories of purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment channels require your mobile number and transaction details to process deposits and withdrawals.
• Identity verification partners: Third-party KYC service providers who assist us in verifying identity documents and confirming age eligibility.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised or pseudonymised session identifiers to deliver their game content and audit game outcomes. They do not receive your full personal profile.
• Fraud and AML screening: Specialist compliance technology providers who help us detect money laundering patterns and fraudulent account activity.
• Legal and regulatory authorities: Where required by applicable law, court order, or official regulatory request, we may be compelled to disclose your personal data to relevant authorities. We will notify you of any such disclosure where legally permitted to do so.

3.2 All third parties with whom we share personal data are required to process it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to 499bst.

4.1 499bst retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with our legal and compliance obligations. The following general retention guidelines apply:

• Account and identity records: Retained for a minimum of five years after account closure to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for two years from the date of the most recent interaction in a given support thread.
• Technical and device logs: Retained for twelve months on a rolling basis and then anonymised or deleted.
• Marketing consent records: Retained for the duration of your account and for three years after consent is withdrawn, to demonstrate compliance with consent obligations.

4.2 After the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

5.1 499bst applies a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our platform.
• Encrypted storage of sensitive data fields at rest, including identity document references and payment identifiers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access player data.
• OTP (one-time password) verification for all withdrawal requests, providing an additional layer of authentication beyond your account login credentials.
• Regular security assessments and penetration testing of platform infrastructure.
• Automatic session expiry after a defined period of inactivity to reduce the risk of unauthorised access on shared devices.

5.2 Despite these measures, no internet-based system can guarantee absolute security. In the event that we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you as required by applicable law and take all reasonable steps to contain the breach and mitigate any harm.

5.3 You are responsible for keeping your 499bst login credentials confidential. Do not share your password with anyone. If you suspect that your credentials have been compromised, contact support immediately at [email protected].

6.1 499bst uses cookies and similar tracking technologies to operate the platform and to understand how players use it. Cookies are small text files stored on your device by your browser. We use the following categories of cookie:

• Essential cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing the platform from working correctly.
• Functional cookies: Used to remember your preferences, such as language settings and previously selected payment methods.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform — such as which pages are visited most frequently and where sessions typically end. This helps us improve the platform experience over time.

6.2 You can manage or delete cookies through your browser settings at any time. Blocking essential cookies will prevent you from logging in and using the platform. Blocking analytics cookies will not affect your ability to play but will limit our ability to improve the platform based on usage data.

6.3 499bst does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with advertising networks.

7.1 Some of the third-party service providers we work with — including certain game studios and technical infrastructure partners — may process data outside Bangladesh. Where personal data is transferred internationally, 499bst takes steps to ensure that appropriate safeguards are in place, including contractual obligations on the recipient to maintain data protection standards equivalent to those described in this Policy.

7.2 By using the 499bst platform, you acknowledge that your data may be transferred to and processed in countries outside your country of residence. We will always ensure such transfers are made in accordance with applicable data protection obligations.

8.1 The 499bst platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an underage individual, we will immediately close the associated account, void any transactions, return any deposits to the original payment method, and delete the personal data from our systems.

8.2 If you believe that an underage individual has created a 499bst account, please notify us immediately at [email protected] so that we can investigate and take appropriate action promptly.

9.1 With your consent, 499bst may send you promotional communications about bonuses, new game releases, seasonal offers (such as Eid specials, BPL tournament promotions, or Pohela Boishakh offers), and platform updates. These communications will be sent via your registered mobile number or any other contact channel you provide.

9.2 You may withdraw your consent to receive marketing communications at any time by contacting our support team at [email protected]. Once your request is processed — which we will complete within five business days — you will no longer receive promotional messages. Withdrawal of marketing consent does not affect the lawfulness of processing that took place prior to withdrawal.

9.3 Operational communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the administration of your account.

10.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact the 499bst support team. Our support team is available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

10.2 All privacy-related requests and enquiries should be submitted in writing to: [email protected]. Please include your registered mobile number and a clear description of your request or concern. We will acknowledge all privacy requests within 24 hours and provide a substantive response within ten business days.

10.3 This Policy was last updated in January 2026. 499bst reserves the right to update this Policy at any time. Material changes will be communicated to registered players before they take effect. The current version of this Policy is always available at 499bst.app/privacy-policy.