299bit Privacy Policy

1.1 Registration Data

When you create a 299bit account, we collect the information you provide during the registration process, which may include:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Mobile phone number (used for account verification and bKash/Nagad/Rocket payments);
• Email address;
• Residential address (district, city, postal code, Bangladesh);
• Username and password (password stored in hashed form — never in plain text).

1.2 Financial and Payment Data

To process deposits and withdrawals in BDT, we collect payment-related information including:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers;
• Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported Bangladeshi bank transfers;
• Visa or Mastercard card details (card number, expiry date, and billing name — CVV is never stored);
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers in BDT.

Full payment card numbers are processed via secure payment gateways and are not stored on 299bit servers in unencrypted form.

1.3 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") process, we may collect copies of documents including:

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of address documents (utility bills, bank statements, or official correspondence dated within the last three months);
• Selfie or live photograph for biometric identity confirmation, where required.

KYC documents are retained for the period required to comply with applicable anti-money-laundering regulations and are not used for any purpose beyond identity verification and compliance.

1.4 Technical and Device Data

When you access the 299bit platform, our systems automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session start and end times, pages visited, and features used;
• Cookies and similar tracking technologies (see Section 6 for full details);
• Referring URL (the page or link that directed you to 299bit).

1.5 Gaming and Betting Activity Data

We maintain a full record of your gaming and betting activity on the 299bit platform, which includes:

• Bets placed, games played, and wager amounts in BDT;
• Winnings, losses, and net gaming activity over time;
• Bonus and promotion claims and wagering requirement progress;
• Sports betting selections (cricket, football, kabaddi, and other markets);
• Responsible gaming tool settings, including any deposit limits or self-exclusion requests you have submitted.

2.1 Marketing Communications

299bit may send you promotional communications about new games, seasonal offers (such as Eid, Pohela Boishakh, or BPL tournament promotions), and platform updates. We will only send marketing messages where you have provided consent at registration or subsequently opted in via your account settings. You may withdraw consent to marketing communications at any time by contacting [email protected] or adjusting your account notification preferences.

2.2 Responsible Gaming Monitoring

299bit uses your gaming activity data to identify patterns that may indicate problem gambling behaviour, in accordance with our Responsible Gaming Policy. Where our systems flag a potential concern, our responsible gaming team may reach out to you proactively. This processing is carried out in your interest and in fulfilment of our duty of care as a platform operator.

3.1 Service Providers

299bit works with a limited number of trusted third-party service providers who assist in delivering our platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, and Mastercard network partners), game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), customer support tooling providers, and fraud detection services. All third-party providers are contractually required to process your data only for the specific purpose for which it was shared and to maintain appropriate security standards.

3.2 Legal and Regulatory Disclosure

299bit may be required to disclose personal data to competent authorities, regulators, or law enforcement agencies where required by applicable law or court order, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other unlawful activity. In such cases, 299bit will disclose only the minimum information necessary to satisfy the legal obligation.

3.3 No Sale of Data

299bit does not sell, rent, or otherwise transfer personal data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to the categories described in this Section 3 and is governed by appropriate data processing agreements.

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. 299bit uses cookies and similar technologies (such as local storage and session tokens) to keep you logged in, remember your preferences, prevent fraud, and understand how players interact with the platform.

4.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include authentication tokens that keep your 299bit Login session active and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings and notification choices so you do not need to re-enter them on every visit.
• Analytics cookies: Help us understand aggregate usage patterns — which game categories are most popular, how players navigate the platform, and where technical issues occur. Analytics data is processed in anonymised or pseudonymised form.
• Fraud-prevention cookies: Used by our security systems to detect and block suspicious behaviour such as automated bot access or account takeover attempts.

4.3 Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please be aware that disabling essential cookies will prevent you from logging in and using core 299bit platform features. For instructions specific to your browser, consult your browser's help documentation.

5.1 Retention Periods

299bit retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or audit obligations. In practice, this means:

• Account registration data and KYC documents are retained for the duration of your active account plus a minimum of five years after account closure, in compliance with anti-money-laundering requirements;
• Financial transaction records in BDT are retained for a minimum of five years from the date of the transaction;
• Gaming activity logs are retained for three years from the date of the activity, unless a dispute is open in which case records are retained until the dispute is resolved;
• Marketing preference records are retained until you withdraw consent or close your account;
• Technical and device data is retained for up to twelve months on a rolling basis.

5.2 Secure Deletion

When personal data is no longer required and no retention obligation applies, 299bit securely deletes or anonymises that data so that it can no longer be associated with you as an individual. Physical documents containing personal data are destroyed using appropriate secure document destruction procedures.

Right of Access

You may request a copy of the personal data that 299bit holds about you. We will respond to access requests within 30 days of receipt and provide the data in a clear, structured format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic profile details directly within your 299bit account settings. For document-level corrections, please contact support.

Right to Erasure

You may request that 299bit delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. Please note that 299bit may be required to retain certain data to comply with legal obligations (such as anti-money-laundering record-keeping requirements), in which case erasure of that specific data may not be possible during the mandated retention period.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that 299bit restricts processing of your data while the matter is resolved. During a restriction period, 299bit will continue to store your data but will not actively use it for any purpose other than storage and compliance.

Right to Object

You have the right to object to 299bit's processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, where you believe your rights and interests outweigh those of 299bit. We will assess each objection on its merits and respond within 30 days.

7.1 Technical Safeguards

299bit implements a layered security architecture to protect your personal data, including SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, bcrypt password hashing, two-factor authentication availability for account login, real-time fraud detection and anomaly alerting, and regular security assessments of our platform infrastructure.

7.2 Organisational Safeguards

Access to personal data within 299bit is restricted on a strict need-to-know basis. All staff and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training. Privileged access to production systems is logged and subject to periodic review.

7.3 Data Breach Response

In the event of a data security incident that poses a risk to your personal data, 299bit has an incident response procedure that includes containment, investigation, and notification steps. Affected users will be notified without undue delay where the incident is likely to result in a high risk to their rights and freedoms. Notifications will be sent to the email address registered on your 299bit account.

8.1 Age Restriction

The 299bit platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend the account, initiate a verification process, and if confirmed, permanently close the account and securely delete or anonymise the associated personal data in accordance with our data retention schedule.

If you have reason to believe that a person under 21 has created a 299bit account, please contact us at [email protected] so that we can investigate promptly.

9.1 Right to Update

299bit reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered users via the email address on their account and display a prominent notice on the 299bit platform for a reasonable period following the change. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the 299bit platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 299bit protects your personal data. If you disagree with any changes to this Policy, you may contact our support team to discuss your options, including account closure.

Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to 299bit's handling of your personal data, please contact our Data Protection team directly:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 48 hours Bangladesh Standard Time (BST, UTC+6)
• Support hours: 24/7, 365 days per year

For formal privacy rights requests (access, rectification, erasure, objection), please use the subject line "Privacy Rights Request" to ensure your message is routed directly to our data protection team for priority handling.