Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by 399bit ("399bit", "we", "us" or "our"), the operator of the online casino and sports betting platform accessible at https://399bit.cam (the "Platform"). This Policy applies to all personal data collected, processed and stored in connection with your use of the Platform and its associated Services.

399bit is committed to protecting the privacy and personal data of all users. We process personal data in accordance with applicable data protection legislation and the principles set out in this Policy. By registering an account on the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and 399bit. In the event of any conflict between this Policy and the Terms, the Terms shall prevail except in matters expressly governed by this Policy.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Controller" — the entity that determines the purposes and means of processing personal data; in this context, 399bit is the Controller in respect of player data.
• "Data Subject" — an identified or identifiable natural person whose personal data is being processed; in this context, the registered Player.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers and financial information.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure or destruction.
• "Processor" — a third party that processes personal data on behalf of 399bit under a written data processing agreement.
• "Services" — the online casino, sports betting, live casino and all other gambling and ancillary services provided by 399bit through the Platform.
• "Special Category Data" — personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or similar sensitive categories, which is subject to heightened protection.

Data We Collect

399bit collects the following categories of personal data in the course of operating the Platform:

399bit does not intentionally collect Special Category Data. If you believe you have inadvertently provided such data, please contact our support team promptly so we can address it appropriately.

How We Collect Your Data

We collect personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC procedures, making deposits or withdrawals, contacting customer support or completing any form on the Platform.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information and session data, via cookies and similar technologies (see Section 9).
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud service providers; payment data from payment processing intermediaries. Data received from third-party sources is used solely in connection with the purpose for which it was obtained.
• Gameplay activity: Transactional records of all bets placed, games played, bonuses claimed and withdrawals requested, generated automatically by the Platform systems.

Legal Basis for Processing

399bit processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions, including account operation, transaction processing, game delivery and customer support.
• Legal obligation: Processing required to comply with applicable KYC, AML, tax reporting and regulatory requirements imposed by the operator's licence jurisdiction.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, platform improvement and responsible gambling monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where we have obtained your explicit consent. You may withdraw consent at any time by contacting support or using the opt-out mechanism in marketing communications.

How We Use Your Data

399bit uses your personal data for the following purposes:

1. Account creation and management: Establishing, maintaining and administering your registered account on the Platform.
2. Service delivery: Processing deposits, withdrawals and bets; delivering casino games and live dealer streams; crediting bonuses; managing loyalty programme participation.
3. Identity verification: Completing KYC procedures as required by the operator's compliance obligations.
4. Fraud and money laundering prevention: Monitoring transactions and account activity for suspicious patterns; investigating and acting on detected fraud or AML concerns.
5. Responsible gambling monitoring: Identifying indicators of problem gambling behaviour and applying appropriate interventions in accordance with our Responsible Gambling Policy.
6. Customer support: Responding to account queries, complaints and requests from players across Pakistan and other serviced jurisdictions.
7. Marketing communications: Sending promotional offers, product updates and platform news where you have consented to receive them.
8. Platform improvement: Analysing aggregate usage data to improve the Platform's functionality, performance and user experience.
9. Legal compliance: Meeting reporting and record-keeping obligations imposed by applicable regulation and licensing requirements.

Data Sharing & Disclosure

399bit does not sell, rent or trade personal data to third parties for marketing purposes under any circumstances. We share personal data only in the following limited circumstances:

• Service providers and Processors: Third-party providers engaged by 399bit to deliver components of the Services, including payment processing intermediaries, KYC verification services, game content providers, IT infrastructure providers and customer support platform operators. All Processors are engaged under written data processing agreements that restrict their use of data to the specified purpose.
• Regulatory and legal authorities: Disclosure required by applicable law, court order, regulatory directive or licensing authority requirement.
• Fraud prevention agencies: Sharing of fraud indicators with recognised fraud prevention or AML screening services where required to protect the integrity of the Platform.
• Business transfers: In the event of a merger, acquisition or sale of all or substantially all of the operator's assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

International Data Transfers

As an international online platform, 399bit may transfer personal data to countries outside Pakistan and outside the European Economic Area (EEA), including to countries where the operator's infrastructure, service providers or game content partners are located.

Where such transfers occur, 399bit takes appropriate measures to ensure that the transferred data is protected to a standard equivalent to the protections provided by this Policy. Such measures may include contractual clauses with data recipients, reliance on adequacy decisions, or other recognised transfer mechanisms under applicable law.

By registering an account and using the Services, you acknowledge and consent to the international transfer of your personal data as described in this Section, subject to the protections described herein.

Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are used to remember information about your visit, enable certain Platform functions, and support analysis of usage patterns.

9.2 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without affecting core Platform functionality.
• Analytical / Performance Cookies: Used to collect aggregate information about how users navigate and use the Platform, enabling us to improve functionality and performance. These do not identify individual users.
• Functional Cookies: Remember your preferences (such as language, currency display settings and responsible gambling limits) to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic and account compromise attempts.

9.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete and block cookies. Please note that disabling essential cookies will impair the Platform's functionality and may prevent you from accessing your account. Disabling analytical or functional cookies will not prevent access but may affect your experience.

Data Retention

399bit retains personal data for the following periods, unless a longer retention period is required by applicable law or regulatory obligation:

• Account data: For the duration of the active account relationship, and for a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documentation: As required by the operator's licence jurisdiction, typically a minimum of five (5) years from the date of the last transaction or account closure.
• Transaction records: Minimum of five (5) years from the date of the relevant transaction, for AML and financial compliance purposes.
• Support communications: Retained for the duration of the support relationship and for a reasonable period thereafter to support complaint resolution and regulatory reporting.
• Marketing consent records: Retained for the period during which consent is active and for a reasonable period thereafter to evidence the consent given.

When data is no longer required for the purposes for which it was collected and no legal retention obligation applies, it is securely deleted or irreversibly anonymised.

Data Security

399bit implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability testing;
• Incident response procedures for data breach detection, containment and notification.

While 399bit takes reasonable precautions to protect personal data, no electronic transmission or storage system is completely secure. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

Children's Privacy

The Platform is strictly for adults aged 18 years or over, or the higher minimum age required by the operator's licence jurisdiction. 399bit does not knowingly collect personal data from persons under the minimum eligible age.

If we become aware that personal data has been collected from a person under the minimum eligible age without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account or provided personal data on the Platform, please notify us immediately at our support email address.

Your Data Rights

Subject to applicable law and data protection legislation, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update certain account details directly through your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our obligation to retain data under applicable AML, KYC and regulatory requirements.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain defined circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where processing is based on consent or contract performance, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. Objection to direct marketing will be honoured without delay.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at the details provided in Section 17. We will respond within a reasonable period, and in any event within 30 days of receipt of a verifiable request.

Payment Data & Financial Information

Payment transactions on the Platform are processed through the operator's designated payment intermediaries. 399bit does not directly store complete payment card numbers or full bank account credentials. Transaction records maintained by 399bit include transaction identifiers, amounts, timestamps, payment method type references and status records for compliance purposes.

References on the Platform to familiar local payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided for contextual familiarity for Pakistani players. These references do not constitute a partnership, endorsement arrangement or data-sharing agreement with any of these providers. Actual payment processing arrangements are governed by the operator's payment processing agreements.

All financial transaction data is retained for the period required by applicable AML regulations, as described in Section 10 of this Policy.

Marketing Communications

With your consent, 399bit may send you promotional communications including information about bonuses, new game releases, sports betting offers, PSL and cricket betting promotions, and other platform news. Marketing communications are sent by email.

You may opt out of marketing communications at any time by:

• Using the unsubscribe link included in every marketing email;
• Updating your communication preferences in your account settings; or
• Contacting our support team and requesting removal from marketing communications.

Opting out of marketing communications will not affect transactional, account security or regulatory communications, which are sent regardless of marketing preferences.

Policy Amendments

399bit reviews this Privacy Policy periodically and will update it to reflect changes in our data processing practices, applicable law or regulatory requirements. Material changes will be communicated to registered Players via email or a prominent Platform notification prior to the change taking effect.

The current version of this Policy is always available on this page. The "Last reviewed" date at the top of the Policy indicates when it was most recently updated. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised version.

Contact Us

If you have questions, concerns or requests in relation to this Privacy Policy or the processing of your personal data, please contact our support team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 per operator schedule, accessible from your account dashboard.
• Response Time: We aim to respond to data-related requests within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with notification.
• Language: All support communications are in English. Pakistan Standard Time (UTC+5) applies to scheduled support hours.

For account-related requests, including account closure, please also visit our Terms & Conditions or our Responsible Gambling page for relevant self-service tools.