Privacy Policy – 399 Bet Pakistan Data Protection Guide

1. Introduction

This Privacy Policy explains how 399 Bet collects, uses, stores, and protects the personal information of Pakistani players who use our online betting and gaming platform. We know that handing over personal details — especially something as sensitive as your CNIC or mobile wallet credentials — requires real trust. This policy is our way of explaining exactly what we do with your data, in plain language that doesn't require a legal background to understand.

We have written this policy with the Pakistani player in mind. We're aware that data privacy is a topic people don't always pay attention to until something goes wrong, so we've tried to make this document as clear and direct as possible. If anything in here is confusing or you have questions we haven't covered, please reach out to our support team at any time.

Your continued use of 399 Bet constitutes your acceptance of this Privacy Policy. If you do not agree with any part of it, you should not use the platform. We update this policy periodically — the "Last Updated" date at the top of the page tells you when it was last revised.

2. Who We Are

The data controller for all personal information collected through the 399 Bet platform is the operator of 399bet-khelo.com. We are the entity responsible for determining how and why your personal data is processed. All queries, requests, and complaints relating to data privacy should be directed to us at:

• Platform: 399 Bet — 399bet-khelo.com
• Email: support@399bet-khelo.com
• Subject Line for Privacy Queries: "Privacy Policy Query"

We take our responsibilities as a data controller seriously and operate within the framework of applicable data protection principles. Our internal data protection practices are reviewed annually to ensure they remain adequate.

3. What Personal Data We Collect

399 Bet collects personal data in three main ways: information you provide directly when registering and using the platform, information generated automatically by your use of the platform, and information received from third parties for verification purposes. Here is what we collect in each category:

Information You Provide Directly

• Registration data: Your full name, Pakistani mobile number, email address, date of birth, and city of residence.
• Identity documents: A copy of your CNIC (Computerised National Identity Card) or other government-issued identity document, collected during the KYC (Know Your Customer) process.
• Payment information: Your Easypaisa or JazzCash mobile number, NayaPay or SadaPay wallet identifier, IBAN for IBFT transfers, or masked card details for Visa/Mastercard transactions. We do not store full card numbers.
• Communications: Any messages you send to 399 Bet support via live chat or email, including account query details and complaint submissions.
• Responsible gaming preferences: Any self-imposed limits, cooling-off periods, or self-exclusion requests you submit through the platform.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage data: Pages visited on 399 Bet, session duration, features used, betting patterns, game history, and navigation paths through the platform.
• Transaction logs: A complete record of all deposits, withdrawals, bets placed, bets settled, and Ludo game entries associated with your account.
• Cookie data: Information stored via cookies and similar technologies on your device. See Section 9 for full cookie details.

Information from Third Parties

• Payment processors: Transaction status confirmations, fraud flags, and payment method validity data from Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners.
• Identity verification services: Confirmation of CNIC validity from authorised verification partners during the KYC process.
• Fraud prevention services: Risk signals and fraud indicators from third-party security providers used to protect the platform and its players.

4. How We Use Your Personal Data

399 Bet uses your personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose you would not reasonably expect given the nature of an online betting platform.

5. Legal Basis for Processing

399 Bet processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a player — including account management, bet settlement, and payment processing. Without this data, we cannot provide the platform services.
• Legal obligation: Certain processing is required by law — including KYC verification, anti-money laundering checks, and financial record-keeping. We must carry out this processing regardless of your preferences.
• Legitimate interests: Some processing — such as fraud detection, security monitoring, and platform analytics — is necessary to protect 399 Bet and its player community from harm. We only rely on this basis where it doesn't override your privacy rights.
• Consent: Where we rely on consent — such as for marketing messages or non-essential cookies — we will ask for your explicit opt-in before processing. You can withdraw consent at any time without affecting other processing.

6. Who We Share Your Data With

399 Bet does not sell your personal data. We share your data only in the following limited and necessary circumstances:

• Payment processors: We share your payment details and transaction information with Easypaisa, JazzCash, NayaPay, SadaPay, and card processors to facilitate your deposits and withdrawals. These parties are contractually bound to protect your data and use it only for the purpose of processing your payment.
• Identity verification partners: We share the minimum necessary identity data with authorised KYC verification services to confirm your age and identity. These partners operate under strict confidentiality obligations.
• Fraud prevention providers: We may share limited device and transaction data with security providers to detect and prevent fraudulent activity. These providers are data processors acting on our instructions.
• Legal authorities: If required by a valid court order, regulatory instruction, or other lawful authority, 399 Bet will disclose personal data to the extent legally required. We will notify you of such a request where we are legally permitted to do so.
• Business successors: If 399 Bet is acquired by or merged with another entity, player data may be transferred as part of that transaction. We will inform affected players and ensure the receiving entity upholds equivalent data protection standards.

In all cases where we share your data with third parties, we take reasonable steps to ensure those parties handle your information securely and in accordance with applicable data protection principles.

7. Payment Data & PKR Transactions

Given that 399 Bet is a real-money platform dealing exclusively in Pakistani Rupees, payment data is among the most sensitive information we handle. Here is how we treat it:

• We do not store your full Easypaisa or JazzCash PIN, your IBFT banking password, or your full Visa/Mastercard card number at any point.
• Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and used only to route withdrawal payments back to you.
• All payment transactions are routed through PCI-DSS compliant payment gateways for card transactions.
• A complete audit log of every deposit and withdrawal is retained for a minimum of 5 years for financial compliance purposes. This log includes amounts, timestamps, payment methods, and transaction reference numbers, but not full card or PIN details.
• Withdrawals are always sent to the same payment method used for the most recent deposit. This policy exists to protect you — it prevents any third party from redirecting your funds to an account they control.

For full details on supported payment methods, limits, and processing times, visit the Deposit and Withdrawal page.

8. KYC & Identity Verification

399 Bet is legally and operationally required to verify the identity and age of players before processing withdrawals. This process is known as Know Your Customer (KYC). Here is what you need to know about how we handle your identity documents:

• KYC verification is a one-time process. Once your CNIC has been verified, you will not be asked to submit it again unless there is a specific reason to re-verify your identity.
• Your CNIC images are stored in an encrypted, access-controlled document management system. They are not stored in the same database as your betting history or payment records.
• Access to CNIC images is restricted to a small number of authorised compliance team members who need this access to process verification requests.
• We do not share your CNIC with any party other than our authorised KYC verification partner, whose sole purpose is to confirm the document's authenticity and your age.
• Your CNIC data will be retained for a minimum of 5 years after your account is closed, as required by applicable anti-money laundering regulations. After this period, it will be securely deleted.
• If your KYC verification fails, you will be notified by support and given a clear explanation of what documentation is needed to resolve the issue.

9. Cookies & Tracking Technologies

399 Bet uses cookies and similar technologies to ensure the platform functions correctly, to remember your session, and to understand how players use the site. A cookie is a small text file stored on your device by your browser. Here is what we use and why:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the platform from working correctly — you will not be able to log in or place bets without them. To opt out of analytics and preference cookies, visit your browser's cookie settings and clear or block cookies from 399bet-khelo.com for non-essential categories.

10. Your Data Rights as a 399 Bet Player

As a player on 399 Bet, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@399bet-khelo.com with the subject line "Data Rights Request" and your registered mobile number.

11. Data Retention – How Long We Keep Your Information

399 Bet retains personal data for as long as it is necessary for the purposes described in this policy, and no longer. The following general retention periods apply:

• Active account data (registration details, preferences, betting history): Retained for the lifetime of your account plus 5 years after closure.
• KYC and identity documents (CNIC copies): Retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations.
• Transaction records (deposits, withdrawals, bet slips): Retained for a minimum of 5 years for financial compliance and audit purposes.
• Customer support communications (live chat logs, emails): Retained for 3 years from the date of the last interaction to assist with any future disputes or queries.
• Cookie data: Session cookies expire when you close your browser. Persistent analytics cookies expire after 12 months maximum.
• Marketing opt-in records: Retained for the duration of your opt-in plus 2 years as evidence of consent, even after you opt out.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so it can no longer be linked to you. We do not retain data "just in case" — deletion happens systematically when retention periods end.

12. Children and Minors

399 Bet is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step before any withdrawal can be processed, and we reserve the right to request age verification at any point during a player's use of the platform.

If we become aware — through KYC verification, responsible gaming monitoring, or any other means — that a player is under 18 years of age, we will immediately:

• Suspend the account pending investigation.
• Freeze the account balance.
• Return any deposits made by the minor to the original payment method after deducting any net winnings (as required by responsible gaming policy).
• Delete all account data relating to the minor from our active systems.

If you believe a minor has opened an account on 399 Bet, please contact us immediately at support@399bet-khelo.com. We will investigate and act promptly. Parents and guardians who are concerned about minor access to betting platforms should use device parental controls and have open conversations with their children about online gambling risks.

13. Technical Security Measures

399 Bet implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• Transport encryption: All data transmitted between your device and 399 Bet's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this connection is active.
• Storage encryption: Sensitive data fields — including CNIC images, payment wallet identifiers, and passwords — are encrypted at rest in our databases using AES-256 encryption.
• Password protection: Player passwords are never stored in plain text. We use industry-standard one-way hashing (bcrypt) so that even our own staff cannot read your password.
• Access controls: Access to player data is restricted on a need-to-know basis. Staff members can only access the data they genuinely need for their role. All data access is logged and regularly audited.
• OTP authentication: Sensitive actions — including withdrawals, password resets, and email changes — require OTP confirmation to your registered mobile number. This ensures that even if someone knows your password, they cannot take these actions without access to your phone.
• Intrusion detection: Our systems monitor for unusual access patterns and potential security breaches in real time. Suspicious activity triggers automatic alerts and account protection measures.
• Annual security audits: 399 Bet engages independent security professionals to conduct annual penetration testing and security audits of our platform infrastructure.

Despite these measures, no internet transmission or electronic storage system is 100% secure. We strongly encourage you to use a strong, unique password for your 399 Bet account and to enable your device's lock screen protection.

14. Changes to This Privacy Policy

399 Bet reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the 399 Bet platform for at least 14 days following a significant update.
• Send a notification to your registered mobile number or email address for changes that materially affect your privacy rights.

We encourage you to visit this page periodically to stay informed. Your continued use of 399 Bet after any update constitutes your acceptance of the revised Privacy Policy. If you disagree with a change, you may request account closure as described in our Terms and Conditions.

15. Contact Us About Privacy

If you have any questions, concerns, or requests relating to your personal data and how 399 Bet handles it, please get in touch. We take privacy queries seriously and will respond promptly.

• Live Chat: Available 24/7 on every page of the 399 Bet website. Fastest response for urgent queries.
• Email: support@399bet-khelo.com — use subject line "Privacy Policy Query" or "Data Rights Request".
• For marketing opt-out specifically: Email with subject "Unsubscribe" and we will remove you from all promotional communications immediately.

We aim to acknowledge all privacy-related queries within 24 hours and provide a full response within 15 business days. For complex matters involving data rights requests, this may extend by a further 15 days, and we will notify you if this applies.