299ba Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 299ba ("we", "us", "our") collects, uses, stores, and protects the personal information of players and visitors ("you", "your") who access the 299ba platform at https://299ba.io. This Policy applies to all services offered through the 299ba website, including casino games, sports betting, account management, payment processing, and customer support.

We are committed to handling your personal data with integrity, transparency, and in accordance with applicable data protection principles. Please read this Policy carefully. By registering an account, making a deposit, or otherwise using the 299ba platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of this Policy, 299ba acts as the data controller in respect of the personal information it collects from players accessing the platform from Bangladesh. All enquiries relating to data protection, privacy rights, or this Policy should be directed to our support team using the contact details provided in Section 15 of this document.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account or interact with 299ba, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address in Bangladesh (including city such as Dhaka, Chittagong, Sylhet, or Khulna).
• Verification Data: Copies of government-issued identification (National ID Card, passport, or driving licence), proof of address documents, and selfie photographs submitted as part of KYC verification.
• Financial Data: bKash account numbers, Nagad wallet identifiers, Rocket account details, Upay details, or masked card numbers associated with your deposits and withdrawals. Full card numbers are never stored by 299ba.
• Account Credentials: Username and encrypted password. Passwords are stored using industry-standard one-way hashing and are never stored or transmitted in plain text.
• Communications Data: Records of your correspondence with our support team via live chat, email, or WhatsApp.

3.2 Information Collected Automatically

When you access the 299ba platform, certain technical data is collected automatically:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage Data: Pages visited, games played, bet amounts, session duration, login timestamps, and clickstream data.
• Cookie Data: Session tokens, authentication cookies, and analytics identifiers. See Section 8 for full details on our cookie use.

3.3 Information from Third Parties

We may receive personal data about you from third parties where this is necessary to verify your identity, process payments, or prevent fraud. These third parties include payment processors (such as bKash and Nagad), identity verification service providers, fraud detection services, and game software providers such as Evolution Gaming, Pragmatic Play, and Ezugi.

4. How We Use Your Data

299ba uses your personal data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact, Credentials
Processing deposits and withdrawals	Identity, Financial, Verification
KYC and age verification (21+ compliance)	Identity, Verification
Fraud prevention and security monitoring	Device, Usage, Financial, Identity
Customer support and dispute resolution	Identity, Contact, Communications
Responsible gaming monitoring	Usage, Financial
Platform analytics and performance improvement	Device, Usage, Cookie
Sending account notifications and service updates	Contact, Identity
Legal and regulatory compliance	All categories as required

We do not use your personal data to serve third-party advertising, build marketing profiles for external platforms, or engage in automated decision-making that produces legal or similarly significant effects without human review.

5. Legal Basis for Processing

299ba processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to operate your account and deliver services you have requested, including game access, deposit handling, and withdrawal processing.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, KYC regulations, and fraud prevention duties.
• Legitimate Interests: Processing carried out to protect the security and integrity of the 299ba platform, prevent fraud, conduct platform analytics, and improve service quality — where these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting our support team.

6. Data Sharing & Disclosure

299ba does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity Verification Providers: KYC service providers receive the identity and document data you submit during account verification. These providers are contractually bound to use your data solely for verification purposes.
• Game Software Providers: Providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and Microgaming may receive anonymised session data to facilitate game delivery and detect irregular play patterns.
• Fraud Prevention Services: Specialist fraud detection providers receive device and behavioural data to identify and prevent fraudulent account activity.
• Law Enforcement and Regulatory Authorities: Where required by applicable law or a valid legal order, 299ba may disclose personal data to competent authorities. We will notify you of such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of the 299ba business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. Payment Data Security

The security of your financial information is treated as our highest priority. 299ba employs the following measures to protect payment data:

• All payment transactions are processed over encrypted HTTPS connections using 256-bit SSL/TLS protocols.
• Full card numbers, bKash PINs, Nagad PINs, and other sensitive authentication credentials are never stored on 299ba servers.
• Financial data is tokenised — we store only a secure reference token, not the underlying payment credential.
• Our payment infrastructure undergoes regular independent security audits.
• Withdrawal requests are manually reviewed by our finance team before processing, providing an additional layer of fraud detection.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They allow the site to recognise your device across sessions and remember your preferences. 299ba uses cookies and similar tracking technologies (such as local storage and session tokens) strictly for platform-related purposes.

8.2 How 299ba Uses Cookies

Cookie Type	Purpose	Duration
Essential Session Cookies	Maintain your login session and account state while you are using the platform	Session (deleted on browser close)
Authentication Tokens	Keep you securely logged in between visits if you select "Remember Me"	Up to 30 days
Analytics Cookies	Measure platform usage patterns (pages visited, session duration) to improve performance	Up to 12 months
Fraud Detection Cookies	Identify unusual device behaviour or access patterns associated with fraud	Up to 6 months

8.3 Managing Cookies

You may configure your browser to reject or delete cookies at any time. Please note that disabling essential session cookies will prevent you from logging into your 299ba account. Analytics and fraud-detection cookies do not affect core platform functionality if disabled. Refer to your browser's help documentation for instructions on managing cookie preferences.

9. Data Retention

299ba retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with the following principles:

• Active Accounts: All personal and transactional data is retained for the duration of your account relationship with 299ba.
• Closed Accounts: Following account closure, 299ba retains identity, financial, and transaction records for a minimum period required to satisfy AML and fraud prevention obligations. After this period, data is securely and irreversibly deleted.
• Support Communications: Records of customer support interactions are retained for a period sufficient to resolve ongoing disputes and for quality assurance purposes.
• Analytics Data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be used to identify individual players.

Once the applicable retention period expires, personal data is deleted from active systems and purged from backup archives within a reasonable timeframe.

10. Your Rights

As a player on the 299ba platform, you hold the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data 299ba holds about you. We will provide this information within 14 business days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile information directly from your account settings.
• Right to Erasure: Subject to our legal retention obligations, you may request deletion of your personal data. We will assess your request and inform you of any data that must be retained due to legal requirements.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its use for a specific purpose.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where 299ba relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact our support team at [email protected]. We may require you to verify your identity before processing a data rights request to protect against unauthorised disclosure.

11. Children's Privacy

The 299ba platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will immediately close the associated account and delete all related personal data.

If you believe a minor has registered an account on 299ba, please notify us immediately at [email protected] so that we may take prompt remedial action.

12. International Data Transfers

The 299ba platform serves players located in Bangladesh. Some of our third-party service providers — including game software providers such as Evolution Gaming, Pragmatic Play, and Ezugi — may process data on servers located outside Bangladesh. Where such transfers occur, 299ba ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

By using the 299ba platform, you acknowledge and consent to the transfer of your personal data to service providers operating in other jurisdictions solely for the purposes described in this Policy.

13. Third-Party Links

The 299ba platform may contain references to third-party services (such as bKash, Nagad, or game providers). These services operate under their own privacy policies, which are entirely independent of this Policy. 299ba accepts no responsibility for the data practices of any third-party platform. We encourage you to review the privacy policy of any third-party service before providing personal information to it.

14. Updates to This Policy

299ba reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification. The effective date shown at the top of this document will always reflect the date of the most recent revision.

Your continued use of the 299ba platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the 299ba data support team through the following channels:

• Email: [email protected]
• WhatsApp: +880 1700-299299
• Live Chat: Available 24/7 on the 299ba platform
• Response Time: We aim to respond to all privacy-related enquiries within 14 business days of receipt.
• Operating Hours: All day, every day — Bangladesh Standard Time (BST, UTC+6)

For account security matters requiring urgent attention, live chat is the fastest available channel.