Privacy Policy
of 299bab

299bab collects personal information from you in several ways during the course of your registration, account management, and use of our platform. The categories of data we collect are described below.

Registration and identity data: When you create a 299bab account, we collect your full name, date of birth, email address, mobile phone number, and the username and password you choose. This data is required to create and maintain your account and to verify that you meet the minimum age requirement of 18 years.

Identity verification (KYC) data: To comply with anti-money laundering (AML) obligations and to confirm your identity before processing larger withdrawals, we may request documentary evidence such as a National Identity Card (NID), passport, driving licence, or utility bill. These documents are collected, stored, and processed securely and are used only for the purpose of verification.

Financial and payment data: We collect information about the payment methods you use to deposit and withdraw funds, including your bKash number, Nagad number, Rocket number, Upay number, or bank account details (where applicable). We do not store full payment credentials ourselves — transactions are processed through certified payment gateways. We do retain records of transaction amounts, dates, and reference numbers for accounting and regulatory purposes.

Transactional and betting data: We maintain a full record of all bets, wagers, game sessions, deposit and withdrawal transactions, and bonus activity associated with your account. This data is essential for resolving disputes, calculating liabilities, and meeting our record-keeping obligations.

Device and technical data: When you access 299bab, our systems automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, and referring URL. This data helps us detect fraud, prevent multiple account creation, and improve the performance of our platform.

Behavioural and usage data: We analyse how players interact with our platform — which games they play, how long sessions last, which features they use most frequently, and what pages they visit. This helps us improve the 299bab experience and identify responsible gaming concerns at an early stage.

Communications data: If you contact our customer support team via live chat, WhatsApp, or email, we retain a record of that communication. This allows us to track the resolution of your query and maintain service quality over time.

299bab does not sell your personal data to any third party. We share data with external organisations only where necessary to deliver our services, comply with legal obligations, or protect the security of our platform. The categories of third parties with whom we may share your data are described below.

Payment service providers: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, we share the minimum payment-related data required to complete each transaction. These providers operate under their own privacy policies and are required to maintain appropriate data security standards.

Identity verification providers: We may use third-party KYC and identity verification services to validate the documents you submit during account verification. These services process your identity documents on our behalf and are bound by strict data processing agreements.

Game software providers: Casino games on 299bab are supplied by certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Your game session data (stakes, outcomes, session duration) is shared with the relevant game provider to the extent required for the game to function. Game providers do not receive your contact details, payment information, or identity documents.

Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, 299bab may be obliged to disclose certain player data to law enforcement or regulatory bodies in Bangladesh. We will always seek to limit such disclosures to the minimum information required and, where legally permitted, will notify you of such a disclosure in advance.

Fraud prevention networks: To protect our platform and its players from fraud, money laundering, and match-fixing, 299bab participates in industry-standard fraud prevention networks. Anonymised or pseudonymised data about suspicious account activity may be shared with such networks.

299bab retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy or as required by applicable law. The retention periods that apply to different categories of data are set out below.

• Account data (name, email, date of birth, username): retained for the lifetime of your active account plus five years following account closure, to comply with financial record-keeping obligations.
• KYC and identity verification documents: retained for a minimum of five years following account closure in accordance with anti-money laundering regulations.
• Transaction and betting records: retained for a minimum of five years following the date of each transaction, consistent with financial record-keeping requirements.
• Customer support communications: retained for three years from the date of the last interaction, after which they are securely deleted unless they relate to an open dispute.
• Device and technical log data: retained for a maximum of 12 months on a rolling basis, after which older logs are automatically purged.
• Anonymised analytics data: retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

When personal data is no longer required and its retention period has expired, 299bab will delete or irreversibly anonymise it using industry-standard data destruction methods. In some cases, data may need to be retained beyond the standard periods described above if it is subject to an active legal dispute, regulatory investigation, or court order — in which case retention will continue until the matter is fully resolved.

As a player registered on 299bab, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our support team at [email protected]. We will respond to all requests within a reasonable timeframe, and in most cases within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 299bab holds about you, along with information about how it is being processed. We will provide this in a clear, readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details (such as your email address or mobile number) directly through your account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Please note that some data must be retained for legal and regulatory reasons even after an erasure request — in such cases, we will explain what data must be retained and why.
• Right to restrict processing: You may ask us to pause the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.