Privacy Policy — 4999but

Data We Collect

4999but collects personal data through several channels: directly from you at the time of registration, during account verification, through your ongoing use of the platform, and automatically through technical means such as cookies and server logs. The categories of data we collect are set out below.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, unless specifically required for responsible gaming assessment purposes and only with your explicit consent.

Data Sharing & Third Parties

4999but shares personal data with third parties only where necessary to deliver the platform's services or where required by law. We do not sell or trade your data. All third-party service partners are contractually obligated to maintain at least the same level of data protection as applied by 4999but itself.

• Payment processors: We share financial data with approved payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Visa/Mastercard processing networks — solely for the purpose of completing transactions initiated by you. These partners operate under their own published privacy policies and are responsible for the security of data within their own systems.
• KYC and identity verification providers: Identity documents submitted during the verification process are shared with our trusted KYC technology partner for automated verification. Documents are not stored externally beyond the period required to complete verification.
• Game providers: When you play games hosted by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your session data (game stake, result, and timestamp) is transmitted to that provider's game server. This is technically necessary to run the game. No additional personal data beyond your anonymised player session token is transmitted.
• Fraud and AML compliance partners: In cases where fraudulent activity or potential money laundering is suspected, relevant account and transaction data may be shared with specialist fraud investigation or compliance service providers operating under strict confidentiality obligations.
• Legal and regulatory disclosure: We may be required to disclose personal data to law enforcement agencies, courts, or regulatory authorities in response to a valid legal order. Where legally permitted, we will notify you of any such disclosure.

Data Retention

4999but retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, financial, and compliance obligations. The following retention periods apply:

• Active account data: All personal, identity, contact, and financial data associated with an active player account is retained for the full duration of the account's active status on the platform.
• Transaction and betting history: Financial transaction records and betting history logs are retained for a minimum of five years following the date of the transaction, in line with standard financial record-keeping practices.
• KYC documents: Identity documents submitted for verification purposes are retained for a minimum of five years from the date of submission. Following this period, documents are securely deleted unless a legal hold is in place.
• Closed account data: Upon voluntary account closure, personal data is retained for a period of five years to comply with financial record-keeping requirements, to resolve any outstanding disputes, and to enforce any self-exclusion agreements in place at the time of closure.
• Support communications: Customer support correspondence is retained for three years from the date of the most recent communication in a given support thread.
• Analytics data: Anonymised, aggregated analytics data that cannot be linked back to any individual player is retained indefinitely for platform improvement purposes.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Players may request early deletion of their data by contacting support@4999but, subject to any overriding legal obligations that require us to retain specific records.

Data Security Measures

4999but employs a layered security architecture to protect player data against unauthorised access, accidental loss, alteration, or disclosure. Our key technical and organisational security measures include the following:

• 256-bit SSL/TLS encryption: All data in transit between your browser or app and the 4999but servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted protection.
• Encrypted data storage: Personal data, KYC documents, and financial records are stored in encrypted databases. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.
• Access controls: Access to player personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and subject to regular audit review.
• Intrusion detection and monitoring: Our platform infrastructure is monitored around the clock by automated intrusion detection systems that flag and alert on anomalous access patterns, brute-force attempts, and unusual data queries.
• Secure password storage: Player passwords are never stored in plain text. All passwords are hashed using a strong cryptographic algorithm with per-account salting before storage.
• Regular security reviews: 4999but conducts periodic security assessments of its platform infrastructure, including vulnerability scanning and review of third-party partner security practices.

While we take every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security against all possible threats. You play an important role in protecting your own account by choosing a strong, unique password and never sharing your login credentials with any other person. If you suspect your account has been compromised, contact support@4999but immediately.