40a3 Privacy Policy — How Is Your Personal Data Protected?
This document explains how we collect, use, store, and protect your information when you use the 40a3 platform. The privacy of our users in Bangladesh is our highest priority.
Last Updated: January 2026
What information is collected when I register on the 40a3 platform?
When you create an account with 40a3, we collect your name, email address, mobile number, date of birth, and Bangladeshi address. This information is required primarily for account verification (KYC), age confirmation, and secure transactions. Every piece of data we collect has a specific, legitimate purpose — we do not collect anything unnecessary or excessive. If you transact via mobile banking methods common in Bangladesh (such as bKash, Nagad, or Rocket) or bank transfer, relevant payment details may also be collected. However, card or payment credentials are never stored directly on our servers — they are processed securely through a third-party payment gateway.
- Full Name & Username
- Email Address
- Mobile Number (Bangladeshi)
- Date of Birth & Gender
- Bangladeshi Address & Postcode
- National ID / Passport (for KYC)
- IP Address & Approximate Location
- Device Type & Operating System
- Browser Version & Language Settings
- Session Time & Login History
- Page Visit Patterns & Click Data
- Referral Source (how you arrived at the site)
- Deposit & Withdrawal Amounts (BDT)
- Mobile Banking Number (partially masked)
- Bank Account Details (partial)
- Transaction Date & Reference Number
- Bonus & Promotion Usage History
- Betting History & Results
- Preferred Sports & Game Categories
- Session Duration & Bet Amount
- Wins & Losses Statistics
- Responsible Gaming Limit Information
What Do We Actually Do with the Data We Collect?
40a3 uses your information only for specific, transparent, and lawful purposes — nothing else. Your primary details are used for account registration, login verification, and identity confirmation. Transaction data is used to process deposits and withdrawals and to ensure financial security. Device and browser information is used for platform improvements, fraud detection, and preventing unauthorised account access. We also analyse your gaming activity data to make your experience more relevant and personalised — such as recommending your preferred games or sending responsible gaming reminders.
We use your email address or mobile number to send important account notices, transaction confirmations, and security alerts. Promotional messages are only sent with your consent and can be opted out of at any time. Your information may also be used to meet legal obligations or satisfy requests from regulatory authorities of the Government of Bangladesh.
Primary Purposes for Using Your Information
- Account Registration & KYC Verification
- Transaction Processing (BDT Deposits & Withdrawals)
- Fraud & Anti-Money Laundering Prevention
- Platform Technical Improvements & Bug Fixes
- Delivering a Personalised Gaming Experience
- Responsible Gaming Monitoring & Alerts
- Customer Support & Dispute Resolution
- Legal & Regulatory Compliance
Cookies & Tracking Technologies — What Gets Recorded While You Browse?
The 40a3 website and app use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help the platform remember your preferences and session details. We primarily use three types of cookies: essential cookies (required to keep the site running), functionality cookies (to remember your language and settings), and analytical cookies (to understand how the platform is used). Promotional or marketing cookies are only activated with your consent.
You can manage or delete cookies at any time through your browser settings. Keep in mind that disabling essential cookies may affect how certain features on the platform work. We do not track your activity on other websites through cross-site tracking or third-party ad networks. Analytics data collected by 40a3 is used solely to improve the platform and is never shared with advertisers.
Essential for login sessions, security tokens, and platform operation. Cannot be disabled.
Used for language preferences, theme settings, and personalised experience. Requires your consent.
Used for platform usage analytics and improvement. Not shared with third parties.
How Long Is Your Data Retained and How Secure Is It?
40a3 stores your personal data to the highest security standards. All data on our servers is protected with AES-256 encryption, and all site communications are secured via SSL/TLS protocols. Your data is retained for as long as your account remains active, and following account closure, certain information may be kept for up to five years to meet legal obligations. Financial transaction records are retained for the period required under applicable laws in Bangladesh. Once the retention period expires, data is securely deleted or anonymised.
40a3 conducts regular security audits and vulnerability assessments to keep your data protected at all times. Real-time monitoring is active across our systems to detect any unauthorised access attempts. Data access is restricted to only those staff members who require it, and every access event is logged. In the event of a data breach, we are committed to notifying affected users within 72 hours and taking all necessary remedial action.
Security Measures Overview
- AES-256 Data Encryption
- SSL/TLS Connection Security
- Two-Factor Authentication (2FA)
- Real-Time Threat Detection
- Regular Third-Party Security Audits
- Limited & Logged Staff Access
- Automated Backup & Recovery System
- Breach Notification Within 72 Hours
Is your information shared with third parties?
40a3 never sells your personal information or shares it with third parties for advertising purposes. However, limited data may be shared with specific service providers in the normal course of operating the platform — such as payment gateway providers, identity verification services, and cloud hosting infrastructure. All such third parties operate under strict confidentiality agreements with us and may only use your data for their designated purpose. They are not permitted to use it for their own ends or share it elsewhere.
Where required by law — such as upon receipt of a valid order from the Bangladesh Financial Intelligence Unit (BFIU) or a law enforcement authority — we are obligated to provide information in compliance with applicable regulations. In such cases, we disclose only what is legally required, nothing more. In the event of any change to 40a3's corporate structure or a merger, users will be informed in advance and the commitment to protecting their data will be upheld.
- To process payment gateway transactions
- To complete KYC / identity verification
- For cloud infrastructure management
- When Required to Comply with a Legal Order
- In coordination with fraud prevention services
- To advertising or marketing companies
- For Sale to Third Parties
- To Unrelated Business Partners
- In any case without your consent
- On Social Media Platforms
What Rights Do You Have Over Your Data?
40a3 believes you should have full control over your own data. As a user in Bangladesh, you have the following rights, which you can exercise at any time. First, the Right to Access — you can request a complete copy of all information we hold about you. Second, the Right to Rectification — if any of your details are incorrect, you can ask us to correct them and we will do so as quickly as possible. Third, the Right to Erasure — in certain circumstances you can request that your data be deleted, though some information may need to be retained for a set period due to legal obligations.
Fourth, the Right to Restrict Processing — you can object to your data being used for a specific purpose. Fifth, the Right to Data Portability — you can request an export of your data in a standard format. To exercise any of these rights or for any privacy-related queries, please contact our support team. 40a3 will endeavour to respond to your request within 30 days of receipt.
You can request a copy of all information we hold about you.
You can request corrections to any inaccurate or incomplete information at any time.
You can request deletion of your personal data under certain conditions.
Policy Updates & Contact
40a3 reserves the right to update this Privacy Policy as needed. For any significant changes, we will notify you by email or through the platform, and the date of the update will be noted at the top of this page. For any privacy-related questions or concerns, please reach out to our support team:
Email: support@40a3.com | Support: Available via 24/7 Live Chat
Still have questions? We're here to help.
If you have any questions about 40a3's privacy policy or your account information, visit our FAQ page or register directly to get support.