Privacy Policy – 299beg

299beg operates the online casino and sports betting platform accessible at 299beg.app (the "Platform"). For the purposes of this Privacy Policy, 299beg acts as the data controller in respect of personal data collected from players and visitors based in Bangladesh.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact our support team. Our contact details are displayed in plain text at the foot of every page on the Platform:

Email: [email protected] (plain text — not a clickable link)
Response time: Within three (3) Bangladesh Standard Time (BST, UTC+6) business days for privacy-related requests.

299beg collects personal data from you in three principal ways: data you provide to us directly, data we collect automatically when you use the Platform, and data we receive from third-party payment and verification providers. The categories of personal data we collect include:

Data you provide directly:

• Full legal name, date of birth, and gender as entered during account registration.
• Mobile phone number registered in Bangladesh (used as the primary account identifier and for OTP-based authentication).
• Identity documents submitted during KYC verification, including National Identity Card (NID) number, passport number, or birth registration certificate reference.
• Payment method details, including bKash account number, Nagad account number, Rocket number, Upay number, or bank account details for Dutch-Bangla Bank, City Bank, Sonali Bank, BRAC Bank, Islami Bank, or other approved institutions.
• Any information included in communications you send to the 299beg support team.

Data collected automatically:

• IP address and approximate geolocation derived from IP at the time of login and during active sessions.
• Device identifiers including device type, operating system version, and browser type.
• Session data including login timestamps, session duration, pages visited, games played, bet amounts, and withdrawal requests.
• Cookies and similar tracking technologies — see Section 7 for full details.

Data received from third parties:

• Transaction confirmation data from mobile financial service providers (bKash, Nagad, Rocket, Upay) and partner banks, confirming the status and amount of deposits and withdrawals.
• Identity verification outcomes from KYC service providers where 299beg uses automated document verification tools.
• Fraud and risk signals from third-party fraud prevention partners, used to protect Players and the Platform from financial crime.

299beg processes personal data only where there is a clear, lawful purpose. The table below summarises the primary processing activities and the justification for each.

299beg does not sell your personal data. We share data only in the following strictly defined circumstances:

• Payment providers: We share the minimum necessary payment and identity data with bKash, Nagad, Rocket, Upay, and our partner banks solely to process deposits and withdrawals on your behalf.
• KYC and fraud prevention partners: Identity documents and risk signals may be shared with authorised third-party verification and fraud prevention services. These providers are contractually bound to process data only for the specific purpose for which it was shared and must maintain security standards equivalent to our own.
• Game content providers: When you play games supplied by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and minimal technical data are passed to the provider's platform to load and run the game. These providers do not receive your full account profile or payment details.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement, regulatory bodies, or courts in Bangladesh where we receive a lawful and documented request. We will notify you of any such disclosure unless legally prohibited from doing so.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of the 299beg platform, your personal data may be transferred to the acquiring entity. You will be notified in advance, and this Privacy Policy will continue to apply until updated terms are issued.

All third parties with whom 299beg shares personal data are required to handle that data in a manner consistent with this Privacy Policy and to apply appropriate security measures.

299beg applies a layered approach to data security, combining technical controls with organisational policies to minimise the risk of unauthorised access, disclosure, alteration, or destruction of personal data.

Technical measures include:

• Full SSL/TLS encryption on all data in transit between your device and the 299beg platform.
• Encryption at rest for all sensitive personal data stored on our servers, including identity documents and payment method details.
• OTP-based (one-time password) authentication for account login and high-value transactions, delivered to your registered Bangladesh mobile number.
• Automated session timeouts to reduce the risk of unauthorised access on shared or unattended devices.
• Continuous monitoring of platform activity for anomalous patterns indicative of account takeover or data exfiltration attempts.
• Regular security assessments of the platform's infrastructure and application layer.

Organisational measures include:

• Strict role-based access controls — only staff members who need access to specific categories of personal data to perform their job functions are granted that access.
• Confidentiality obligations for all 299beg staff and contracted service providers who handle personal data.
• Documented data breach response procedures, including a commitment to notify affected Players without undue delay in the event of a breach that poses a risk to their rights.

While 299beg takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely infallible. You also play a role in keeping your account secure — see the Account Security section of our Terms & Conditions.

Some of 299beg's third-party service providers — particularly game content providers such as Pragmatic Play, Evolution Gaming, and Microgaming — operate servers located outside Bangladesh. Where personal data is transferred to a jurisdiction outside Bangladesh for processing, 299beg ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that bind the recipient to data protection standards consistent with this Privacy Policy.
• Transfer only of the minimum data necessary for the specific processing purpose (e.g., a session token for game loading — not your full profile or payment details).
• Restriction of transfers to providers who have demonstrated compliance with internationally recognised data security standards.

By using the 299beg platform, you acknowledge that limited technical data may be processed by game providers in their respective jurisdictions as described above.

299beg uses cookies and similar local storage technologies to operate the Platform effectively and to improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: These are essential for the Platform to function and cannot be switched off. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No consent is required for these.
• Functional cookies: These remember your preferences — such as your chosen game category or notification settings — so you do not need to reconfigure them on each visit.
• Analytics cookies: We use anonymised, first-party analytics data to understand how Players navigate the Platform, which games are most popular, and where technical friction exists. This data is aggregated and does not identify individual players.

Most mobile browsers and devices allow you to control cookie storage through your device settings. Disabling strictly necessary cookies will prevent you from logging in or placing bets, but disabling functional or analytics cookies will not affect your core ability to use the Platform.

299beg does not use third-party advertising cookies or cross-site tracking technologies for ad targeting purposes.

As a 299beg player based in Bangladesh, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at the address shown in the footer of this page:

• Right of access: You may request a copy of the personal data 299beg holds about you. We will provide this within fourteen (14) BST business days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Where possible, you can update basic details such as your mobile number directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request that 299beg delete your personal data. This right is subject to limitations — we are not able to delete data that we are legally required to retain (for example, transaction records required for AML compliance). Where erasure is not possible, we will explain why and apply appropriate restrictions to further processing instead.
• Right to restrict processing: In certain circumstances — for example, while you dispute the accuracy of data we hold — you may request that we pause processing of your data while the dispute is resolved.
• Right to data portability: You may request that we provide the personal data you have given us in a structured, commonly used, and machine-readable format, so that it can be transferred to another service provider if you choose.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object to marketing: You may opt out of all direct marketing communications from 299beg at any time, including bonus notifications, promotional SMS messages, and seasonal offers. Opting out of marketing does not affect your ability to use the Platform or receive transactional communications about your account.

299beg will respond to all data rights requests within the timeframes stated above. Where a request is complex or numerous, we may extend this period by an additional fourteen (14) days, in which case we will notify you of the extension and the reason for it.

299beg retains personal data for the periods set out below. Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

• Active account data (name, contact details, account preferences): Retained for the lifetime of the account and for a period of five (5) years following account closure.
• Identity verification documents (NID, passport, address proof): Retained for a minimum of five (5) years from the date of submission, in line with AML compliance obligations.
• Transaction records (deposit and withdrawal history, bet records): Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for three (3) years from the date of each interaction, unless the correspondence relates to an unresolved dispute.
• Session and analytics data (anonymised): Retained in aggregated form indefinitely for Platform improvement purposes. Individual-level session logs are deleted after twelve (12) months.
• Marketing preference records: Retained for the lifetime of the account plus two (2) years to document opt-in and opt-out history.

Where a legal hold, ongoing investigation, or unresolved dispute requires us to retain data beyond the standard periods above, we will do so until the hold, investigation, or dispute is resolved, after which standard deletion procedures apply.

The 299beg platform is strictly for individuals aged 21 years or older. We do not knowingly collect personal data from any individual under the age of 21. If you are a parent or guardian and believe that a minor has registered an account with 299beg or has provided personal data to us, please contact our support team immediately at [email protected] (plain text — not a clickable link).

Upon receiving a verified report that personal data belonging to an underage individual has been collected, 299beg will close the relevant account and delete the associated personal data as swiftly as reasonably possible, subject only to any mandatory AML retention obligations that may apply to financial transactions already processed on the account.

299beg reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify registered Players via their registered mobile number or by displaying a prominent notice on the Platform for no fewer than seven (7) days before the amended policy takes effect.

The "Last updated" date at the top of this page will always reflect the date on which the most recent version of this policy became effective. We encourage you to review this page periodically. Your continued use of the 299beg platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree to any change in this Privacy Policy, you should cease using the Platform and may request account closure and deletion of your personal data in accordance with Section 8 and Section 9 of this policy.