Privacy Policy

When you create a 499but account, we collect:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify you are 21 years of age or older).
• Mobile phone number (used for account verification and notifications).
• Email address (used for account communications and password recovery).
• Preferred username and password (password stored in hashed form only).
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).

To comply with responsible gaming obligations and to process withdrawals, we may request:

• A copy of your National Identity Card (NID), passport, or other government-issued photo identification.
• Proof of address (e.g., a utility bill or bank statement issued within the past three months).
• Proof of payment method ownership (e.g., a screenshot of your bKash, Nagad, or Rocket account showing your registered mobile number).

When you make a deposit or withdrawal, we record transaction amounts, timestamps, payment method identifiers (e.g., your bKash or Nagad mobile number, masked card number for Visa/Mastercard), and transaction reference numbers. We do not store full card numbers or mobile banking PINs.

We maintain a record of all bets placed, games played, wager amounts, win/loss outcomes, and bonus usage on your account. This data is used to operate the Platform, detect fraud, resolve disputes, and comply with responsible gaming requirements.

When you access the Platform, we automatically collect:

• IP address and approximate geographic location derived from it.
• Device type, operating system version, and browser type and version.
• Pages visited, time spent on each page, and clickstream data.
• Session start and end times, and frequency of visits.
• Cookie identifiers and similar tracking technologies (see Section 7 below).

If you contact our support team via live chat, email, or any other channel, we retain a record of that correspondence, including the content of messages and any attachments you provide. This allows us to track the history of your support requests and improve our service quality.

To create and maintain your Member account, verify your identity, process your deposits and withdrawals, and provide you with access to the Platform's features including cricket betting, live casino, and slot games.

To operate the Platform, personalise your experience, improve the quality and reliability of our services, develop new features, and conduct internal analytics and research. For example, we may analyse betting patterns to improve the range of cricket markets we offer during BPL and T20 World Cup seasons.

To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, multiple account registrations, and other prohibited activities. Technical data such as IP addresses and device fingerprints play an important role in this function.

To monitor for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit and wager limits you have set, and send welfare communications where appropriate. This processing is carried out in the interest of player welfare and public health.

With your consent, we may send you promotional emails or SMS messages about bonuses, new games, cricket betting markets, seasonal promotions (such as Eid or Pohela Boishakh offers), and other 499but news. You may opt out of marketing communications at any time by following the unsubscribe link in any email or contacting support at [email protected].

To comply with applicable laws, to respond to lawful requests from competent authorities, and to establish, exercise, or defend legal claims in connection with the Platform.

To process your deposits and withdrawals, we share relevant transaction data with your chosen payment provider, which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. These providers process your data under their own privacy policies and are independent data controllers for that processing.

Casino games and live dealer tables on the Platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and gameplay data necessary to operate their games. They do not receive your full name, NID, or financial account details.

We use trusted third-party service providers for hosting, content delivery, analytics, customer support tools, and cybersecurity. These providers act as data processors on our behalf and are bound by strict contractual data protection obligations. They may not use your data for their own purposes.

We may disclose your personal data to law enforcement, regulatory authorities, or other public bodies when required to do so by applicable law, court order, or to protect the safety and security of the Platform and its users. In such cases, we disclose only the minimum information necessary to satisfy the legal requirement.

In the event that 499but undergoes a merger, acquisition, or sale of all or a substantial part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify active Members of any such change via the Platform or by email prior to it taking effect, to the extent permitted by applicable law.

We retain your personal data for as long as your 499but account remains active. If you have not logged into your account for a continuous period of three (3) years, we may treat your account as dormant and contact you to confirm whether you wish to keep it open.

When your account is closed — whether by your own request, due to self-exclusion, or as a result of a breach of our Terms & Conditions — we will retain your personal data for a minimum period of five (5) years from the date of closure. This retention period is maintained to enable us to comply with legal obligations, resolve disputes, and prevent re-registration by self-excluded players.

Transaction records, deposit histories, and withdrawal records are retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping requirements. After this period, records are securely destroyed.

You may request a copy of the personal data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. You may update basic account information directly via your account settings page. For identity documents or financial records, please contact support.

You may request that we delete your personal data. This right is subject to our legal obligations — for example, we cannot delete transaction records that we are required to retain under applicable law. Where deletion is possible, we will confirm completion within thirty (30) days.

You may request that we limit the processing of your data in certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved, or where you have objected to processing pending verification of our legitimate grounds.

Where our processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Cookies are small text files placed on your device by websites you visit. 499but uses cookies and similar tracking technologies (such as local storage and session tokens) to keep you logged in, remember your preferences, and understand how you interact with the Platform.

• Essential Cookies: Required for the Platform to function. They enable secure login sessions, navigation between pages, and safe financial transactions. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Help us understand user behaviour in aggregate — such as which game categories are most popular and how users navigate to the cricket betting section — so we can improve the Platform.
• Functional Cookies: Remember your preferences such as language settings and notification preferences to personalise your experience.
• Marketing Cookies: Used only with your consent to deliver relevant promotions and to measure the effectiveness of our campaigns.

You can control or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from using key features of the Platform, including secure login and financial transactions. For instructions on managing cookies in your browser, refer to your browser's help documentation.

All data in transit between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data at rest — including passwords, payment identifiers, and identity documents — is stored using encryption and hashing methods appropriate to the sensitivity of the data category.

Access to personal data within 499but's systems is restricted on a strict need-to-know basis. Staff who are authorised to access personal data are trained in data protection obligations and subject to contractual confidentiality requirements.

While we implement robust technical and organisational security measures, the security of your account also depends on you. You are responsible for keeping your login credentials confidential and for logging out of your account on shared devices. If you suspect that your account has been accessed without authorisation, contact us immediately at [email protected].

The Platform is strictly intended for adults aged 21 years and over. 499but does not knowingly collect or process personal data from individuals under the age of 21. If we discover or are notified that we have inadvertently collected data from a person under 21, we will promptly close that account, void any associated transactions, and securely delete the relevant data.

Parents and guardians are encouraged to install parental control software on devices used by minors to prevent access to gambling websites. If you believe a minor has registered an account on 499but, please contact us at [email protected] immediately so we can investigate and take appropriate action.

499but reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active Members by email or via an in-Platform notification. Your continued use of the Platform after a revised Policy has been posted constitutes your acceptance of the updated terms.

If you would like to review a prior version of this Privacy Policy, or if you have questions about how a specific change affects you, please contact our support team and we will be happy to assist.

Email: [email protected] — please include "Privacy Request" in the subject line for faster routing.

We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within thirty (30) calendar days. Complex requests may take longer, in which case we will notify you of the expected timeline.