Your Privacy Matters to 299b

1 Introduction

This Privacy Policy ("Policy") describes how 299b ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to users ("you", "your") of the website located at https://299b.vu and all associated services offered through it.

299b operates primarily for players based in Bangladesh and is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. By creating an account, accessing, or otherwise using the 299b platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read together with the 299b Terms & Conditions and Responsible Gaming Policy, both of which are available on this website and are incorporated by reference into the overall framework governing your use of the platform.

2 Data We Collect

299b collects personal data across several categories depending on your level of interaction with the platform. The categories are as follows:

2.1 Identity and Contact Data

• Full legal name as it appears on your national identity document
• Date of birth (used to verify the mandatory 21+ age requirement)
• Residential address, including district, city, and postcode
• Email address used for account registration and communications
• Mobile phone number registered in Bangladesh

2.2 Account and Authentication Data

• Username chosen during registration
• Encrypted password hash (we never store passwords in plaintext)
• Account creation timestamp and login history
• Two-factor authentication preferences and recovery settings

2.3 Financial and Transaction Data

• Deposit and withdrawal history, denominated in Bangladeshi Taka (৳ BDT)
• Payment method identifiers: bKash mobile numbers, Nagad account references, Rocket wallet IDs, Upay references, bank account numbers (last four digits only), Visa/Mastercard card type indicators
• Transaction timestamps and reference numbers
• Bonus and promotion redemption records

2.4 Gaming and Behavioural Data

• Betting history including market selections, stake amounts, odds accepted, and outcome records
• Casino game session data including game titles, session durations, wager amounts, and results
• Responsible gaming tool usage, including deposit limits set, cooling-off periods activated, and self-exclusion requests
• Bonus wagering progress and completion records

2.5 Technical and Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Session identifiers and cookies (see Section 7)
• Referring URL and navigation path through the website
• Time zone settings (Bangladesh Standard Time, UTC+6 is our reference)

2.6 Verification and Compliance Data

• Copies of identity documents submitted during KYC verification (National ID Card, passport, or driver's licence)
• Proof of address documentation where requested
• Source-of-funds declarations for high-value accounts
• Records of any compliance checks or flags raised during account review

3 How We Collect Data

299b collects personal data through the following channels and mechanisms:

4 Purpose of Processing

299b processes your personal data only for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those originally stated. The primary purposes for which we process personal data are:

• Account Management: Creating and maintaining your 299b account, verifying your identity, enabling login access, and managing account preferences and security settings.
• Service Delivery: Processing your bets, settling gaming outcomes, crediting winnings, managing deposit and withdrawal transactions in BDT, and delivering bonuses and promotions you have opted into.
• Age and Identity Verification: Confirming that all users meet the mandatory 21+ age requirement before being permitted to place wagers or access casino games.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover attempts, and other suspicious activity that may harm you or the integrity of the platform.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling patterns, applying self-imposed limits set by you, and fulfilling our obligations under our Responsible Gaming Policy.
• Legal and Regulatory Compliance: Retaining records and disclosing information as required by applicable laws, regulatory guidance, court orders, or instructions from competent authorities.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of support services provided through the 299b help desk.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game content selection, and user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive marketing communications and subject to your right to opt out at any time.

5 Legal Basis for Processing

299b processes personal data on the basis of one or more of the following lawful grounds:

• Contractual Necessity: Processing is required to perform the contract between you and 299b — specifically, to provide the betting, casino, and payment services you have registered to use.
• Legitimate Interests: Processing is necessary for the legitimate interests of 299b, including fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where those interests are not overridden by your rights.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including anti-money laundering requirements, record-keeping duties, and age verification mandates.
• Consent: For specific processing activities — such as direct marketing communications — we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing

299b does not sell, rent, or commercially transfer your personal data to third parties. We share data only in the following limited circumstances and only with parties who are contractually bound to handle it securely:

6.1 Payment Processors

To facilitate deposits and withdrawals in BDT, we share the minimum necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card network operators Visa and Mastercard. These partners process data only for the purpose of completing your transactions.

6.2 Identity Verification Partners

To fulfil our KYC obligations, we may share identity document images and personal details with approved third-party verification service providers. These providers are prohibited from using your data for any purpose beyond the verification service they are contracted to perform for 299b.

6.3 Game Content Providers

Casino and sports-betting game content is delivered in part by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level technical data (such as a pseudonymous session token) necessary to render games correctly. They do not receive your full personal profile.

6.4 Legal and Regulatory Authorities

We may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, valid legal process, or in connection with suspected criminal activity including fraud or money laundering.

7 Cookies & Tracking Technologies

The 299b website uses cookies and similar tracking technologies to ensure core platform functionality, maintain session security, and gather anonymised analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and display options to personalise your experience on return visits.
• Analytics Cookies: Collect anonymised data about how users navigate the 299b website — including pages visited, time spent, and common navigation paths — to help us improve platform performance and content relevance.
• Security Cookies: Used by our fraud prevention systems to assign a pseudonymous risk score to sessions, helping detect suspicious login attempts and automated bot activity without identifying you personally.

8 Data Retention

299b retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The general retention guidelines are as follows:

On expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

9 International Data Transfers

As an online platform serving players primarily in Bangladesh, some of the data processing activities described in this Policy — particularly those involving international game providers and cloud infrastructure — may involve the transfer of personal data to servers or processors located outside of Bangladesh.

Where such transfers occur, 299b takes reasonable steps to ensure that the receiving party provides an adequate level of data protection, either through contractual obligations, technical safeguards, or the equivalent of standard data protection clauses appropriate to the circumstances of the transfer.

By using the 299b platform and accepting this Privacy Policy, you acknowledge and consent to the possibility of your personal data being transferred, stored, and processed in locations outside your country of residence, subject to the protections described above.

10 Your Privacy Rights

As a user of the 299b platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days.

• Right of Access: You may request a copy of all personal data held about you by 299b, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected or updated without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction: You may request that we limit our processing of your data while a correction or objection request is being assessed.
• Right to Object: You may object to processing based on legitimate interests, particularly where that processing impacts your fundamental rights. You also have an unconditional right to object to direct marketing processing at any time.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Children's Privacy

The 299b platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. Age verification is a mandatory step in our account registration and KYC process specifically to prevent access by minors.

Parents and guardians are encouraged to use parental control software to restrict minors' access to online gambling platforms. Information on parental controls and child safety online is available from reputable digital safety organisations.

12 Security Measures

299b implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard Transport Layer Security protocols.
• Encrypted Password Storage: Passwords are never stored in plaintext. We use strong cryptographic hashing algorithms with salting to ensure that even in the unlikely event of a data breach, passwords remain protected.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based permissions, and all access events are logged and auditable.
• Fraud Detection Systems: Automated fraud monitoring tools analyse transaction and behavioural patterns in real time to detect and flag suspicious activity before it causes harm.
• Regular Security Assessments: Our platform and infrastructure undergo periodic security reviews to identify and remediate vulnerabilities in a timely manner.
• Incident Response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights, 299b will notify affected users without undue delay and take immediate remedial action.

While we take all reasonable measures to protect your data, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account safe by using a strong, unique password and reporting any suspected unauthorised access to [email protected] immediately.

13 Third-Party Links

The 299b website may contain references to or integrations with third-party services — such as game studios, payment gateways, and technology providers — whose own privacy practices are governed by their respective privacy policies. 299b is not responsible for the privacy practices, security standards, or content of any third-party services.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the 299b platform, particularly payment providers such as bKash, Nagad, Rocket, and Upay, whose data handling practices are independent of 299b.

14 Policy Updates

299b reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or our internal data practices. The most current version of this Policy will always be available at https://299b.vu/privacy-policy, along with its effective date.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify registered users by email or by placing a prominent notice on the platform prior to the change taking effect. Your continued use of the 299b platform following a policy update constitutes acceptance of the revised terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 299b handles your personal data, please contact our dedicated data support team using the details below. All privacy communications are handled in English.

We aim to resolve all privacy-related enquiries fairly and promptly. If you are not satisfied with our response, you retain the right to escalate your concern to a relevant data protection authority or seek independent legal advice.