Privacy Policy – Your Data at 499ba

1 Information We Collect

When you register and use a 499ba account, we collect personal information across several categories. The specific data collected depends on the stage of your relationship with the platform — from initial registration through to ongoing account use, identity verification, and customer support interactions.

Registration data: When you create a 499ba account, you provide us with your full legal name, date of birth, residential address (including district and division within Bangladesh), mobile telephone number, and email address. This information forms the foundation of your account identity and is required to open an account.

Identity verification (KYC) data: To comply with our Know Your Customer and anti-money laundering obligations, we may request documentary proof of identity and address. This includes scanned or photographed copies of your National Identity Card (NID), passport, driving licence, utility bills, bank statements, or other official documents issued by Bangladeshi authorities or recognised international bodies.

Financial transaction data: We record details of every deposit and withdrawal you make on the platform, including the amount in Bangladeshi Taka (৳), the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction timestamps, and reference numbers. This data is retained for regulatory and audit purposes.

Gaming activity data: We maintain records of all bets placed, games played, sports markets accessed, wager amounts, outcomes, and session durations associated with your account. This data is used for responsible gaming monitoring, fraud detection, dispute resolution, and platform improvement.

Device and technical data: When you access 499ba through a browser or mobile device, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, screen resolution, and referring URL. This data is used for fraud prevention, security monitoring, and platform optimisation.

Communications data: If you contact 499ba support via email or live chat, the content of those communications — including your messages, support agent responses, and any attachments — is retained for quality assurance and dispute resolution purposes.

2 How We Use Your Data

499ba processes your personal data only for purposes that are lawful, transparent, and directly related to operating and improving our platform. The following sets out the primary purposes for which your data is used:

• Account management: To create, maintain, and administer your 499ba account, including processing login requests, updating account details, and managing your wallet balance in Bangladeshi Taka (৳).
• Identity verification: To verify your age (18+), identity, and place of residence in compliance with our Know Your Customer obligations. This is a prerequisite for processing withdrawals and accessing certain platform features.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records associated with your account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other security threats. Technical data such as IP addresses and device identifiers are central to this effort.
• Responsible gaming: To monitor gaming activity patterns for indicators of problem gambling behaviour, to enforce self-exclusion requests, to apply deposit limits and session time alerts where requested or required, and to fulfil our obligations under responsible gaming best practices.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide account-related assistance through our support team at support@499ba.app.
• Promotional communications: Where you have not opted out, to send you information about 499ba promotions, bonuses, seasonal offers (such as BPL cricket season promotions or Eid reload bonuses), and platform updates relevant to your account. You may opt out of marketing communications at any time.
• Legal compliance: To comply with applicable laws and regulations, to respond to lawful requests from regulatory or law enforcement authorities, and to establish, exercise, or defend legal claims.
• Platform improvement: To analyse aggregated, anonymised usage patterns in order to improve platform performance, user experience, and game offering — particularly for players across Bangladesh from Dhaka to Chittagong, Sylhet to Cox's Bazar.

499ba will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by applicable law, obtaining your consent.

3 Data Sharing & Third Parties

499ba does not sell, rent, or commercially trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment processors: To process your deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and partnered Bangladeshi commercial banks. These providers are contractually bound to use your data solely for the purpose of processing your transaction and are prohibited from using it for any other purpose.

Game and technology providers: To deliver casino games, live dealer experiences, sports betting markets, and slot titles, 499ba works with software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive technical session data (such as a player session token) necessary to run their games within the 499ba platform environment. They do not receive your full personal profile.

Identity verification services: To fulfil our KYC obligations, we may use third-party identity verification services to cross-reference the documents and information you provide. These services operate under strict data processing agreements with 499ba.

Legal and regulatory authorities: Where required by law, court order, or lawful request from a government or regulatory body in Bangladesh or any other applicable jurisdiction, 499ba will disclose personal data to the relevant authority. 499ba will, where legally permitted, notify you of such a disclosure.

Business transfers: In the event that 499ba undergoes a merger, acquisition, or transfer of all or part of its business assets, personal data held by 499ba may be transferred to the acquiring entity. Players will be notified of any such transfer and their rights in relation to it.

4 Cookies & Tracking Technologies

499ba uses cookies and similar technologies (including local storage and session storage) on its platform. Cookies are small text files placed on your device when you access a website. They allow the platform to recognise your device between pages and sessions, maintain your login state, and gather technical usage data.

The following categories of cookies are used on 499ba:

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, maintain your wallet state during a session, preserve language and display preferences, and enable core security features such as CSRF protection. Essential cookies cannot be disabled without breaking platform functionality.
• Analytics cookies: These collect anonymised information about how players use the 499ba platform — such as which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used solely to improve platform performance and user experience. No individual player is identified in analytics data.
• Fraud prevention cookies: These cookies assign a device fingerprint that is used alongside your IP address and login behaviour to detect suspicious activity, account takeover attempts, and multi-accounting. They are essential to our security infrastructure.
• Preference cookies: These remember choices you make on the platform, such as preferred sports markets, favourite game categories, and notification settings, so that your experience is consistent across sessions.

What we do not use: 499ba does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookies that share your data with external advertising networks. Your browsing behaviour on 499ba is not used to serve you targeted advertisements on other websites.

Managing cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging into your account and using core platform features. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge).

Cookie lifespan: Session cookies expire when you close your browser. Persistent cookies used for fraud prevention and preference retention are retained for a maximum period of 12 months, after which they are automatically deleted.

5 Data Retention & Storage

499ba retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account data (active accounts): Retained for the lifetime of your account plus a minimum period of five years following account closure, in order to satisfy anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable regulatory guidance.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction. These records may be required for tax, audit, or legal proceedings.
• Gaming activity records: Retained for a minimum of three years from the date of each gaming session, used for responsible gaming review, dispute resolution, and regulatory compliance.
• Support communications: Retained for two years from the date of the most recent interaction, or longer if the communication relates to an ongoing dispute or legal proceeding.
• Technical / device data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

All data is stored on servers protected with industry-standard physical and digital security controls. 499ba does not transfer your personal data to countries outside its operating jurisdiction without ensuring appropriate data protection safeguards are in place. Where cross-border data transfers do occur — for instance, in connection with international game providers — contractual data protection obligations are applied.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

6 Your Privacy Rights

As a 499ba player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@499ba.app with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of all personal data that 499ba holds about you. We will provide this in a structured, commonly used, and machine-readable format where feasible.
• Right to rectification: If any personal data held by 499ba is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your contact email or address can be updated by contacting support.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the legal basis for processing), or where the data has been processed unlawfully. Please note that this right is subject to overriding legal obligations — in particular, AML regulations require us to retain certain financial and identity records for a minimum period regardless of an erasure request.
• Right to restriction of processing: You may request that 499ba restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that your personal data be transferred to you or to a third party in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where 499ba processes your data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

499ba will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or decline to act on the request, providing written reasons for our decision.

7 Data Security Measures

499ba implements a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security programme includes the following measures:

• Encryption in transit: All data transmitted between your device and the 499ba platform is encrypted using TLS 1.3. Our platform enforces HTTPS on every page and does not permit unencrypted HTTP connections.
• Encryption at rest: Personal data and financial records stored in our databases are encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff and contractor access is governed by role-based access control policies, multi-factor authentication requirements, and regular access reviews.
• Penetration testing: The 499ba platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection: Automated monitoring systems operate continuously to detect unusual access patterns, brute-force login attempts, and other indicators of malicious activity. Security alerts trigger immediate investigation by our operations team.
• Incident response: 499ba maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to players, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.
• Staff training: All 499ba staff who handle personal data receive regular training on data protection obligations, phishing awareness, and secure data handling practices.

While 499ba takes all reasonable and practicable steps to protect your data, no security system is completely impenetrable. You also play an important role in keeping your account secure: use a strong, unique password for your 499ba account, never share your login credentials, and contact support@499ba.app immediately if you suspect your account has been compromised.

8 Policy Updates & Contact

499ba reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this policy indicates when the current version was last updated. We encourage you to review this policy periodically to stay informed about how 499ba protects your personal data. Your continued use of the platform after a revised policy takes effect constitutes your acceptance of the updated terms.

Previous versions of this Privacy Policy are available on request by contacting our support team. We retain archived versions for a minimum of three years from the date they were superseded.

Data protection enquiries: For any questions, concerns, or requests relating to your personal data and privacy rights at 499ba, please contact our support team using the details below. All data-related communications should clearly state "Privacy Enquiry" or "Data Rights Request" in the subject line to ensure they are directed to the appropriate team member promptly.

• Email: support@499ba.app (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh
• Average response time: 4–12 hours for email enquiries; 2–5 minutes via live chat
• Time zone: Bangladesh Standard Time (BST, UTC+6)

Last updated: 1 January 2026. This Privacy Policy supersedes all previous versions. For a full history of policy changes, contact support@499ba.app.