499db Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 499db collects from players in Bangladesh, how that data is used and protected, and what rights you hold over your own information. We are committed to transparency and to handling your data with care.
1 Data Controller Information
499db ("we", "us", "our", or the "Platform") acts as the data controller for all personal information collected through the 499db website at 499db.app and any associated mobile or desktop interfaces. As data controller, 499db determines the purposes and means by which your personal data is processed.
This Privacy Policy applies to all visitors, registered players, and former account holders who have interacted with the 499db platform, including individuals based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.
Data Enquiries: For any questions, requests, or concerns relating to your personal data, please contact our Data Protection team directly. Email: [email protected]. We aim to respond to all data-related enquiries within five (5) business days, measured in Bangladesh Standard Time (BST, UTC+6).
By creating a 499db account, depositing funds, placing wagers, or otherwise using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy in its entirety and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the platform immediately.
2 Data We Collect
499db collects personal data through several channels: information you provide directly during registration and account use, information generated automatically by your interaction with the platform, and information received from trusted third-party payment and identity verification partners.
2.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address (including city and district within Bangladesh)
- Identity verification (KYC) documents: Scanned copies or photographs of your National Identity Card (NID), passport, driving licence, or other government-issued photo ID
- Proof of address: Utility bills, bank statements, or other official correspondence dated within three months
- Payment method details: Your registered bKash number, Nagad number, Rocket number, Upay number, or bank account details (account number, bank name, branch) used for deposits and withdrawals
- Communications: Messages, chat transcripts, emails, and support tickets you submit to the 499db customer support team
- Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and session timer preferences you configure in your account
2.2 Information Collected Automatically
- Device and technical data: IP address, device type (smartphone, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers
- Usage and behavioural data: Pages visited, time spent on each page, games launched, betting history (markets selected, stake amounts in ৳, outcomes), session duration, login timestamps, and navigation paths through the platform
- Location data: Approximate geolocation derived from your IP address, used to verify that you are accessing the platform from Bangladesh and to comply with our market restrictions
- Cookie and tracking data: Data collected through cookies, pixels, and similar technologies as described in Section 4 of this policy
2.3 Information from Third Parties
- Payment providers: Transaction confirmation data, payment reference numbers, and fraud-screening results from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank
- Identity verification services: Results of document authenticity and liveness checks performed by our KYC verification partners
- Game providers: Game round results, RNG certification data, and session logs from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers
- Fraud prevention services: Risk scores, device fingerprinting results, and flagged activity reports from our anti-fraud technology partners
Minimum Data Principle: 499db does not collect personal data beyond what is necessary for the specific purpose being served. We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless expressly required by an applicable legal obligation.
3 How We Use Your Data
499db processes your personal data only for defined, legitimate purposes. The table below sets out each principal use of your data alongside the legal basis under which that processing is conducted.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Performance of contract |
| Identity verification (KYC/AML) | ID documents, proof of address, payment details | Legal obligation |
| Processing deposits and withdrawals | Payment method data, transaction history | Performance of contract |
| Fraud detection and prevention | Device data, IP address, behavioural data | Legitimate interest |
| Responsible gaming compliance | Gaming history, self-exclusion records, deposit limits | Legal obligation & legitimate interest |
| Customer support | Communications, account data | Performance of contract |
| Marketing communications | Contact details, preferences | Consent (opt-in only) |
| Platform analytics and improvement | Usage data, behavioural data | Legitimate interest |
3.1 Marketing Communications
499db will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, or seasonal offers (including Eid promotions, BPL season offers, and Pohela Boishakh specials) if you have explicitly opted in to receive such communications during registration or through your account notification settings. You may withdraw your consent at any time by updating your preferences in your account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any marketing sent prior to that withdrawal.
3.2 Automated Decision-Making
499db uses automated systems to assist with fraud detection, responsible gaming interventions, and bonus eligibility assessments. Where an automated decision produces a significant effect on your account — such as a payment hold or an account restriction — you have the right to request human review of that decision. Please contact our support team to exercise this right.
4 Cookies & Tracking Technologies
499db uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the platform. When you first visit 499db.app, a cookie preference dialogue is presented. Continuing to use the platform after dismissing this dialogue constitutes acceptance of our essential cookies. Non-essential cookies require explicit opt-in.
4.1 Types of Cookies We Use
- Strictly necessary cookies: Required for core platform functions including user authentication, session management, and security checks. These cannot be disabled without rendering the platform non-functional.
- Functional cookies: Remember your preferences such as language settings, deposit method defaults, and responsible gaming limit configurations to provide a personalised experience on return visits.
- Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — which game categories are most popular, where players drop off during the registration flow, and how long sessions typically last. This data helps 499db improve the user experience for Bangladesh players.
- Performance cookies: Monitor platform response times, error rates, and uptime to ensure 499db operates reliably across all device types and network conditions common in Bangladesh.
4.2 Managing Your Cookie Preferences
You may adjust your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or security settings menus. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling functional cookies may mean that your preferences are not saved between sessions.
Third-Party Analytics: 499db may use third-party analytics services to process aggregated behavioural data. These services receive anonymised data only — they do not receive your name, contact details, payment information, or any other directly identifying personal data.
5 Data Sharing & Third Parties
499db does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the specific, controlled circumstances described below.
5.1 Service Providers and Data Processors
We share personal data with trusted third-party service providers who process data on our behalf, under strict contractual data processing agreements. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to facilitate deposits and withdrawals to and from Bangladesh player accounts
- KYC and identity verification partners: Specialist providers that verify the authenticity of identity documents and perform liveness checks on behalf of 499db
- Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated studios receive session-level data necessary to deliver and settle game rounds
- Fraud prevention and cybersecurity providers: Services that analyse device fingerprints, IP reputation, and transaction patterns to detect and prevent fraud against 499db players
- Customer support platforms: The ticketing and live-chat infrastructure used by the 499db support team to manage and respond to player enquiries
5.2 Legal and Regulatory Disclosures
499db may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies without prior notice to you in the following circumstances:
- Where required by applicable law, court order, or binding legal process
- Where necessary to investigate, detect, or prevent money laundering, terrorist financing, fraud, or other financial crimes
- Where disclosure is necessary to protect the rights, property, or safety of 499db, its players, or the public
No Data Sales: 499db strictly prohibits the sale of player personal data to data brokers, advertising networks, or any commercial third party for their own use. Any service provider receiving 499db player data does so solely to perform services on our behalf and is contractually forbidden from using that data for any other purpose.
6 Data Retention
499db retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain accurate business records, and to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation, dispute resolution |
| KYC / identity documents | Duration of account + 5 years post-closure | Anti-money-laundering legal requirement |
| Transaction records | 7 years from date of transaction | Financial record-keeping obligations |
| Betting and gaming history | 5 years from date of activity | Responsible gaming, dispute resolution |
| Support communications | 3 years from date of communication | Service quality, dispute resolution |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of lawful marketing basis |
| Cookie and analytics data | Up to 13 months from collection | Platform analytics and improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained beyond these periods due to an ongoing legal proceeding, investigation, or regulatory requirement, it will be retained until that matter is fully resolved and then deleted promptly.
7 Your Privacy Rights
As a 499db player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your full registered name, account username, and a clear description of your request. We will acknowledge your request within two (2) business days and provide a substantive response within thirty (30) calendar days.
7.1 Right of Access
You have the right to request a copy of all personal data that 499db holds about you, along with information about how that data is being used and with whom it has been shared. We will provide this in a structured, readable format at no charge.
7.2 Right to Rectification
If any personal data held by 499db is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may update certain account details (such as your contact email or mobile number) directly within your account settings. For changes to core identity data (name, date of birth), please contact support and provide supporting documentation.
7.3 Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right is subject to overriding legal obligations — for example, 499db is required to retain KYC and transaction records for defined periods regardless of an erasure request.
7.4 Right to Restrict Processing
You have the right to request that 499db restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending.
7.5 Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted directly to another controller where technically feasible.
7.6 Right to Object
You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing. Upon receipt of such an objection, 499db will cease all marketing processing immediately. You may also object to processing based on legitimate interests, in which case 499db will review the balance of interests and respond within the standard timeframe.
No Retaliation: Exercising any of your privacy rights will not result in any negative treatment of your account, restriction of services, or any other adverse consequence. 499db treats all data rights requests with equal respect and diligence.
8 Data Security
499db takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- SSL/TLS encryption: All data transmitted between your device and the 499db platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection to 499db.app is secure.
- Encryption at rest: Sensitive personal data stored on 499db servers — including KYC documents, payment details, and account credentials — is encrypted using AES-256 encryption.
- Access controls: Access to personal data held by 499db is restricted on a strict need-to-know basis. Team members are only granted access to the data required to perform their specific role, and all access is logged and audited.
- Two-factor authentication: 499db offers and strongly recommends two-factor authentication (2FA) via SMS OTP for all player accounts, providing an additional layer of protection against unauthorised access.
- Regular security assessments: The 499db platform and its data infrastructure are subject to periodic security reviews, penetration testing, and vulnerability assessments conducted by independent security specialists.
- Incident response: 499db maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take immediate remediation action.
While 499db implements robust security measures, no online platform can guarantee absolute security. You play an important role in keeping your account safe by using a strong, unique password, enabling 2FA, and never sharing your login credentials with anyone. If you believe your account may have been compromised, please contact our support team at [email protected] immediately.
8.1 Changes to This Privacy Policy
499db reserves the right to update this Privacy Policy at any time. When material changes are made, we will publish the revised policy at 499db.app/privacy-policy with an updated "Last Updated" date at the top of the page. For significant changes that materially affect how we process your data, we will notify registered players via the email address on their account before the changes take effect. Your continued use of the 499db platform after any such update constitutes your acceptance of the revised Privacy Policy.
Our Privacy Commitments
How 499db Protects Your Data
Privacy is not an afterthought at 499db. It is built into the platform architecture and our day-to-day operations. Here is what that commitment looks like in practice for players across Bangladesh.
SSL Encryption on Every Connection
Every data exchange between your device and the 499db platform travels over a fully encrypted SSL/TLS connection. Whether you are depositing via bKash in Dhaka or checking your betting history from Chittagong, your data is protected in transit.
No Data Selling — Ever
499db does not sell, rent, or trade your personal information to data brokers or advertisers. The data you share to create your account and place bets stays within the 499db ecosystem and is shared only with processors who support our services.
Consent-Based Marketing Only
Promotional communications — including seasonal offers for Eid, BPL betting bonuses, and new game announcements — are only sent to players who have explicitly opted in. You can manage or withdraw marketing consent at any time from your account settings.
Defined Retention Periods
499db does not hold your data indefinitely. Clear retention schedules govern how long each category of personal data is kept, and data is securely deleted or anonymised once its retention period expires and no legal obligation requires further storage.
Actionable Privacy Rights
Access, rectification, erasure, portability, and the right to object are not just legal formalities at 499db. Our support team is trained to handle data rights requests promptly and transparently, with responses issued within thirty calendar days.
Regular Security Assessments
The 499db platform undergoes periodic penetration testing and independent security reviews. Vulnerabilities are triaged and remediated according to severity, and our incident response plan ensures rapid action in the unlikely event of a data breach.
Your Privacy Is Protected at 499db
Feel confident playing at 499db knowing your personal data is handled with care. Explore our games, check our FAQ for common privacy questions, or log in to manage your account preferences today.