Privacy Policy — 599bet Data Protection

This Privacy Policy applies to all personal data processed by 599bet in connection with the operation of the online gaming and sports betting platform available at https://599bet.today (the "Platform"). It covers data collected from players who register an account, browse the Platform, place bets, participate in promotions, or contact the 599bet support team.

599bet is committed to handling your personal data responsibly, transparently, and in a manner consistent with recognised data protection principles. We process personal data only for the specific purposes described in this document, using appropriate technical and organisational safeguards to protect that data throughout its lifecycle.

This Privacy Policy should be read in conjunction with the 599bet Terms & Conditions and Responsible Gaming Policy, which together form the complete regulatory framework governing your relationship with the Platform. Where any conflict exists between this Privacy Policy and those documents on a matter of personal data, this Privacy Policy shall prevail.

This document is written in the English language and is directed at players based in Bangladesh. All references to monetary amounts use Bangladeshi Taka (BDT or ৳).

For the purposes of this Privacy Policy, 599bet acts as the data controller in respect of all personal data collected from players using the Platform. As data controller, 599bet determines the purposes for which personal data is collected and the manner in which it is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the 599bet Data Protection contact point using the details provided in Section 14 (Contact Us) of this document. We aim to respond to all data-related enquiries within five (5) business days of receipt.

599bet collects the following categories of personal data in the course of operating the Platform:

599bet collects personal data through the following channels:

• Direct collection: Information you provide when completing the registration form, submitting identity verification documents, making a deposit or withdrawal, or contacting support.
• Automated collection: Technical and behavioural data collected automatically when you access the Platform, including via cookies, server logs, and analytics tools. See Section 8 for details on cookies.
• Payment providers: Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks following a deposit or withdrawal instruction.
• Identity verification services: Data received from third-party KYC (Know Your Customer) verification partners when processing identity document checks.
• Game providers: Session and result data transmitted by licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe) in connection with games you play on the Platform.
• Fraud prevention services: Risk signals and device fingerprint data received from fraud detection partners used to protect the Platform and its players.

599bet processes your personal data for the following defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account registration and management: To create, maintain, and administer your 599bet player account, including authentication and account recovery.
• Identity verification (KYC): To verify your identity and age in accordance with our obligations to prevent underage gambling and financial crime.
• Payment processing: To process deposits and withdrawals through your selected payment method and to reconcile transaction records.
• Service delivery: To provide access to sports betting markets, casino games, live dealer tables, promotions, and other Platform features.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to apply player-requested limits and self-exclusion requests, and to comply with responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, collusion, bonus abuse, and other prohibited conduct.
• Legal compliance: To fulfil obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal requirements.
• Customer support: To respond to your enquiries, resolve disputes, and manage complaints.
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates where you have consented to receive such communications. You may withdraw consent at any time via account settings.
• Platform improvement: To analyse aggregated, anonymised usage data to improve Platform performance, user experience, and product offerings.

599bet processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the 599bet Terms & Conditions — including account management, payment processing, and service delivery.
• Legitimate interests: Processing necessary for 599bet's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud detection, platform security, and aggregated analytics.
• Legal obligation: Processing required to comply with applicable law, including AML/CTF obligations, identity verification requirements, and record-keeping mandates.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Personal data may be shared with the following categories of third parties, strictly to the extent necessary to deliver the 599bet service or to fulfil a legal obligation:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for processing deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist in verifying player identity and age documentation.
• Game studios: Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive limited session data necessary to deliver their games.
• Fraud and risk management services: Partners who provide device fingerprinting, IP reputation analysis, and transaction monitoring services to protect players and the platform from financial crime.
• Hosting and infrastructure providers: Cloud hosting and data centre partners who provide the technical infrastructure on which the Platform operates, subject to strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or a competent regulatory authority, 599bet may disclose personal data to the relevant body. We will notify affected players where legally permitted to do so.

All third-party partners who process personal data on behalf of 599bet are required to maintain appropriate data security standards and to process data solely for the purposes specified in their data processing agreements with 599bet.

The 599bet Platform uses cookies and similar tracking technologies to operate essential platform functions, maintain your session, and collect anonymised analytics data. The following types of cookies are used:

• Strictly necessary cookies: These are essential for the Platform to function. They manage your login session, maintain your account authentication state, and preserve your responsible gaming settings. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These collect anonymised data about how players interact with the Platform — which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used exclusively to improve the Platform experience.
• Functional cookies: These remember your preferences such as language settings, game display options, and notification settings, so you do not need to reconfigure them on each visit.
• Security cookies: Short-lived cookies used by fraud detection systems to identify unusual access patterns and protect player accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, though some preference-based features may not function as expected. Strictly necessary and security cookies cannot be disabled via browser settings while remaining logged in to a 599bet account.

The following retention periods apply to the principal categories of personal data held by 599bet:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity and bet history: Retained for a minimum of three (3) years from the date of each session or transaction, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of the last interaction, unless retention is required for an ongoing dispute or legal matter.
• Marketing preference records: Retained for three (3) years from the date of the last opt-in or opt-out action, to evidence compliance with consent obligations.
• Technical / log data: Retained for twelve (12) months from the date of collection, after which logs are either deleted or permanently anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 599bet's data disposal procedures. Anonymised or aggregated data that cannot be used to identify an individual may be retained indefinitely for statistical and analytical purposes.

As a player whose personal data is processed by 599bet, you hold the following rights in respect of that data. To exercise any of these rights, please contact the 599bet support team using the details in Section 14:

• Right of access: You have the right to request a copy of all personal data held about you by 599bet. We will provide this in a commonly used electronic format within 30 days of a verified request.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may also update certain information (such as your contact email or mobile number) directly through your account settings.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request that 599bet delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where consent has been withdrawn and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations, including AML record-keeping requirements.
• Right to restrict processing: You may request that 599bet restrict the processing of your data in certain situations — for example, while a rectification request is being assessed, or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is carried out on the basis of consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to withdraw consent: Where 599bet processes your personal data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
• Right to object to marketing: You have the right to object to the use of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, 599bet will cease all marketing communications to you promptly.

All requests to exercise data rights will be acknowledged within five (5) business days and resolved within thirty (30) days of receipt, subject to identity verification. 599bet will not charge a fee for reasonable requests. Where a request is manifestly unfounded or excessive, 599bet reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.

599bet implements a multi-layered technical and organisational security framework to protect player personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Transport Layer Security (TLS): All data in transit between player devices and 599bet servers is encrypted using industry-standard TLS protocols.
• Data-at-rest encryption: Sensitive personal data stored on 599bet infrastructure is encrypted at the storage layer using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and subject to regular review.
• Penetration testing: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate weaknesses before they can be exploited.
• Incident response: 599bet maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to player rights, affected players will be notified promptly with details of the incident and the steps being taken to address it.
• Employee training: All 599bet staff who handle personal data receive mandatory data protection training as part of their onboarding, with annual refresher training thereafter.

Whilst 599bet takes all reasonable steps to protect your data, no electronic transmission over the internet or storage system can be guaranteed to be entirely secure. Players are encouraged to use strong, unique passwords for their 599bet accounts and to enable any available account security features. If you suspect your account has been compromised, contact [email protected] immediately.

599bet operates a zero-tolerance policy on underage gambling. Age verification is performed as part of the account registration and KYC process to prevent access by minors. If 599bet becomes aware that personal data has been collected from an individual under the age of 18, that data will be deleted immediately and the account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered an account on the 599bet platform, please contact [email protected] immediately. Include as much detail as possible so that we can investigate and take appropriate action without delay. We take reports of underage access with the utmost seriousness.

599bet reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, registered players will be notified via the email address associated with their account no fewer than seven (7) days before the updated policy takes effect, except where immediate amendment is required for legal or security reasons.

The most current version of this Privacy Policy will always be available at https://599bet.today/privacy-policy. The "Last Updated" date shown at the top of this document indicates the date on which the current version came into effect. We encourage all players to review this policy periodically to remain informed about how their data is being protected.

Continued use of the 599bet Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change to this Privacy Policy, you must discontinue use of the Platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 599bet, please contact our support team using the details below. All data protection enquiries are handled with priority and in strict confidence.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: Within 5 business days for data protection requests; within 24 hours for urgent account security matters
• Reference: Please include "Privacy Request" in your message subject line to ensure prompt routing to the relevant team

All data subject access requests and erasure requests require identity verification before processing. You will be asked to confirm your identity by providing the registered mobile number and, where applicable, a copy of the identity document on file for your account. This verification step is mandatory to prevent unauthorised disclosure of personal data to third parties.