Privacy Policy for 499bst

499bst collects personal data from you at different points during your relationship with the platform. The categories of data we collect, and the circumstances in which each category is gathered, are set out below.

Registration Data

When you create a 499bst account, we collect your full legal name, date of birth, email address, mobile phone number, and your chosen username and password. This data is required to establish your account identity and is used throughout the duration of your membership.

Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify that you meet the minimum age requirement of 18 years, we may request copies of:

• A government-issued photo identification document (National ID card, passport, or driving licence);
• A proof of address document such as a utility bill, bank statement, or official correspondence dated within the last three months;
• Proof of ownership of the payment method you use for deposits and withdrawals (for example, a screenshot of your bKash or Nagad account showing your name and mobile number).

Financial Transaction Data

We record details of all deposits, withdrawals, and betting transactions conducted through your 499bst account. This includes transaction amounts in Bangladeshi Taka (৳), timestamps in Bangladesh Standard Time (BST, UTC+6), payment method identifiers (such as your bKash or Nagad mobile number), and transaction reference numbers. This data is retained for audit and regulatory compliance purposes.

Technical and Usage Data

When you access 499bst, our systems automatically collect certain technical data including your IP address, device type, operating system, browser type and version, session duration, pages visited, and in-game behaviour data. This data is used to detect fraud, monitor platform security, and improve the overall user experience.

Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain a record of those communications. This helps us resolve disputes, maintain service quality, and train our support staff. Support interactions are stored for a minimum of 12 months.

499bst uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not described in this Privacy Policy without first obtaining your explicit consent.

Where 499bst uses your data to send promotional communications — including information about new games, bonuses, seasonal offers tied to events like BPL season, Eid, or Pohela Boishakh — we will only do so where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by updating your preferences in your account settings or by contacting support.

499bst processes your personal data under one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing your registration data, financial transaction data, and KYC information is necessary for 499bst to fulfil its contractual obligations to you as a registered player. Without this processing, we cannot operate your account or facilitate deposits and withdrawals.
• Legal obligation: Certain processing activities — particularly identity verification, anti-money laundering monitoring, and record-keeping of financial transactions — are required by applicable law. 499bst must retain this data regardless of your preferences in order to comply with these obligations.
• Legitimate interests: Processing your technical and usage data for fraud detection, platform security, and service improvement is carried out on the basis of 499bst's legitimate interest in operating a secure and reliable platform. We have assessed that this processing does not override your fundamental privacy rights, given the security benefits it provides to all players.
• Consent: Where we send marketing communications or deploy non-essential cookies, we rely on your explicit consent as the legal basis. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

If you have questions about the specific legal basis applied to any particular processing activity carried out by 499bst, you may submit a written inquiry to our support team via live chat or by emailing [email protected].

499bst does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, 499bst must share relevant transaction data with these payment providers. This typically includes your mobile number or card details, the transaction amount in Bangladeshi Taka, and a unique transaction reference. These providers operate under their own privacy policies and are independently responsible for how they handle data within their own systems.

Game Software Providers

499bst integrates games from third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming. To deliver these games within your account session, a session token and anonymised player identifier are shared with the relevant provider. Your full name, contact details, and financial transaction history are not shared with game providers.

KYC and Identity Verification Services

499bst may use third-party identity verification platforms to assist with the KYC process. These platforms process your submitted documents on our behalf under a data processing agreement that restricts their use of your data to the verification purpose only. Verified documents are not retained by the third-party platform beyond the verification period.

Legal and Regulatory Authorities

499bst will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or as part of a formal investigation into fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where legally permitted to do so.

The 499bst platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with different features. The cookies we use fall into the following categories:

Strictly necessary cookies are placed automatically as they are essential for the platform to operate. All other cookie categories are placed only with your consent. You may adjust or withdraw your cookie consent at any time by modifying the settings in your browser. Please note that disabling certain cookies may affect the functionality of some platform features.

499bst does not use third-party advertising cookies or behavioural retargeting technologies that track your activity across external websites. Our cookie use is limited to improving your experience within the 499bst platform itself.

499bst retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applied to each category of data are outlined below.

• Account and registration data: Retained for the full duration of your account and for a minimum of 5 years following permanent account closure, in line with standard financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later. This retention period is mandated by anti-money laundering compliance requirements.
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction, to support regulatory audits and player dispute resolution.
• Customer support communications: Retained for a minimum of 12 months from the date of the interaction, and for up to 5 years where the communication relates to a formal complaint, dispute, or fraud investigation.
• Technical and usage data (logs): Retained for up to 12 months for fraud detection and security monitoring purposes, after which they are deleted or permanently anonymised.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, to demonstrate compliance with consent obligations.

When your personal data is no longer required and no legal retention obligation applies, 499bst will securely delete or permanently anonymise the data so that it can no longer be attributed to you as an individual.

As a registered player on 499bst, you hold the following rights in relation to your personal data. These rights are exercisable at any time by contacting our support team via live chat or by emailing [email protected].

• Right of access: You may request a copy of all personal data that 499bst holds about you. We will provide this information in a structured, readable format within 30 days of a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details — such as your email address and phone number — directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer needed for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that erasure requests cannot be fulfilled where retention is required by law (for example, AML record-keeping obligations).
• Right to restrict processing: You may request that 499bst restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being disputed or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that your personal data be provided to you in a machine-readable format, or transferred directly to another service provider where technically feasible.
• Right to object: You may object at any time to the processing of your personal data where that processing is based on our legitimate interests. If you object, we will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

499bst will respond to all valid privacy rights requests within 30 calendar days of receipt. In cases of complexity or high volume of requests, this period may be extended by a further 60 days, with notice provided to you within the initial 30-day window.

499bst implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The key security controls we maintain include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers;
• Encrypted storage of sensitive data at rest, including KYC documents and payment method details;
• Role-based access controls limiting internal access to personal data strictly to staff and systems with a verified operational need;
• Multi-factor authentication (MFA) for all internal administrative accounts with access to player data;
• Continuous security monitoring and automated alerts for unusual login patterns, suspicious transaction volumes, or other potential indicators of account compromise;
• Regular security audits and penetration testing conducted by independent third-party security professionals;
• Data backup procedures ensuring that player account data and transaction records can be recovered in the event of a system failure or ransomware incident.

In the event of a personal data breach that poses a risk to your rights and freedoms, 499bst will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. A summary of the breach, the data affected, and the remediation steps taken will be communicated to affected players via their registered email address within 72 hours of the breach being identified, where technically feasible.

While 499bst takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You also play a role in protecting your account — use a strong, unique password for your 499bst account, enable any available two-factor authentication options, and never share your login credentials with another person. If you suspect your account has been compromised, contact our support team immediately via live chat.

This Privacy Policy was last reviewed and updated on 1 January 2026. 499bst reserves the right to update this policy at any time. Material changes will be communicated to registered players via their registered email address. Continued use of the 499bst platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy. For questions about this policy, contact us at [email protected].