Privacy Policy — 299bad

1 Introduction

299bad ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who interacts with our online casino and sports betting platform at 299bad.club (the "Platform"). This Privacy Policy describes in detail the categories of personal data we collect from players and website visitors in Bangladesh, the purposes for which that data is processed, the legal grounds on which we rely, the parties with whom we may share it, and the rights you have in relation to your own information.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and 299bad. By registering an account on the Platform or by continuing to use our services, you acknowledge that you have read and understood this Privacy Policy.

2 Data Controller

For the purposes of applicable data protection law, 299bad acts as the data controller in respect of the personal data of its registered players and platform visitors. As data controller, 299bad determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in compliance with applicable legal obligations.

If you have any questions, requests, or concerns relating to the processing of your personal data, please direct your enquiry to our support team using the contact details provided in Section 14 of this policy. All data protection correspondence will be handled promptly and confidentially.

3 Data We Collect

299bad collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically as you browse and use the Platform; and in some cases from third-party payment processors used to facilitate your BDT transactions. The categories of data we may collect include:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (used to verify you are 18 years of age or older)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh)
• Mobile phone number
• Email address (where provided)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scanned copy
• Passport number and scanned copy (where NID is unavailable)
• Proof of address documentation (e.g., utility bill, bank statement)
• Selfie or photograph for facial verification purposes (where required)

3.3 Financial & Transaction Data

• Mobile financial service account details (bKash, Nagad, Rocket mobile numbers) as needed to process deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal requests, dates, and statuses
• Bonus and promotion redemption records

3.4 Usage & Technical Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser type and version
• Session durations, pages visited, and navigation paths on the Platform
• Game history, bet amounts, outcomes, and wagering patterns
• Log files and error reports generated during your use of the Platform

3.5 Communications Data

• Content of support tickets, chat messages, or emails submitted to the 299bad support team
• Survey or feedback responses, where you choose to participate

4 How We Use Your Data

299bad uses the personal data we collect for the following purposes:

299bad will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5 Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Performance of a contract: Processing that is necessary to provide you with the services you have requested — including account management, transaction processing, and game delivery — is carried out on the basis that it is required to perform our contractual obligations to you.
• Legal obligation: Certain processing activities, including identity verification, anti-money laundering checks, and the retention of transaction records, are required by applicable law. We carry out this processing to comply with those legal requirements.
• Legitimate interests: We process some data — including usage analytics, fraud detection signals, and responsible gaming monitoring — on the basis that doing so is in our legitimate interests as a platform operator, provided those interests are not overridden by your rights and freedoms.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we do so only with your prior consent. You may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Personal Data

299bad does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipient in the circumstances described below:

6.1 Payment Service Providers

To process your BDT deposits and withdrawals, we share necessary financial data — including your mobile account number and transaction amount — with your selected mobile financial service provider: bKash, Nagad, or Rocket. These providers process your data in accordance with their own privacy policies and applicable financial services regulations.

6.2 Identity Verification Partners

Where we use third-party KYC verification services to confirm your identity and age, we may share relevant identity documents and personal details with those service providers. All such partners are contractually required to process your data solely for the purpose of identity verification and to maintain appropriate security standards.

6.3 Game Content Providers

The games available on the 299bad Platform are provided by licensed third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player identifier and session token) to facilitate the delivery of game content. They do not receive your full name, NID, or payment details.

6.4 Legal and Regulatory Authorities

299bad will disclose personal data to competent governmental, law enforcement, or regulatory authorities where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or other illegal activity.

6.5 Professional Advisors

We may share data with our legal, financial, and technical advisors on a strictly need-to-know basis, subject to professional confidentiality obligations, where necessary for the conduct of our business.

7 Cookies & Tracking Technologies

299bad uses cookies and similar tracking technologies on the Platform to enhance your browsing experience, maintain your logged-in session, and gather analytics data that helps us understand how the Platform is used and where it can be improved.

7.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as maintaining your 299bad Login session, remembering your preferences, and ensuring security. These cookies cannot be disabled without impairing your ability to use the Platform.
• Analytics cookies: These cookies collect aggregated, anonymised information about how visitors interact with the Platform — for example, which pages are visited most frequently and whether users encounter error messages. We use this data to improve Platform performance and content.
• Preference cookies: These cookies remember choices you make on the Platform, such as your preferred language or display settings, so that you do not need to reconfigure them on each visit.
• Marketing cookies: Where you have given consent, these cookies track your browsing activity to enable us to deliver relevant promotional content. You may withdraw consent to marketing cookies at any time.

7.2 Managing Cookies

You can control and manage cookies via your browser settings. Most modern browsers allow you to refuse some or all cookies, or to receive a notification before a cookie is set. Please note that restricting strictly necessary cookies may prevent you from accessing certain parts of the Platform, including your account dashboard.

8 Data Retention

299bad retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's existence on the 299bad Platform, plus a period of up to 5 years following account closure to satisfy legal, regulatory, and dispute resolution requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, or longer if required by applicable law.
• Support communications: Retained for up to 2 years from the date of the last interaction, unless the content relates to a matter that requires longer retention for legal or compliance reasons.
• Analytics and usage data: Retained in aggregated or anonymised form indefinitely; identifiable usage data is deleted or anonymised within 12 months of collection.

Once the applicable retention period has expired, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual.

9 Data Security

299bad has implemented a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 299bad Platform.
• Encryption at rest for sensitive data stored on our servers, including passwords (which are stored as salted cryptographic hashes and are never stored in plain text).
• Access controls: Personal data is accessible only to authorised personnel who require it for legitimate business purposes. Access is governed by role-based permissions and is regularly reviewed.
• Network security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits.
• Incident response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 299bad will take prompt remedial action and notify affected individuals as required by applicable law.

While 299bad takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 299bad Login credentials and for notifying us immediately if you suspect unauthorised access to your account.

10 Your Privacy Rights

As a player on the 299bad Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that 299bad holds about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. Note that we may be required by law to retain certain data and cannot fulfil erasure requests in respect of that data.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interests, including profiling. You may also object to receiving direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

The 299bad Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. If you are a parent or guardian and believe that a person under your care has registered an account on the 299bad Platform, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete any associated personal data.

As part of our ongoing commitment to child protection, 299bad employs age verification measures during the account registration process and reserves the right to request documentary proof of age from any account holder at any time. Any account found to belong to a minor will be suspended immediately and all account balances forfeited in accordance with our Terms & Conditions.

12 Third-Party Links

The 299bad Platform may contain references to or integrations with third-party game providers and payment services. Where interaction with those services occurs — for example, when you deposit via bKash, Nagad, or Rocket, or when you launch a game hosted by Pragmatic Play or Evolution Gaming — you may be subject to the privacy policies of those third parties in addition to this Privacy Policy.

299bad is not responsible for the privacy practices or the content of third-party services. We encourage you to review the privacy policies of any third-party service you interact with, particularly in relation to how your payment data and device information are handled by those providers.

13 Updates to This Privacy Policy

299bad reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will endeavour to notify registered players via on-platform notification or by email to the address on file.

The effective date displayed at the top of this page will be updated each time the policy is revised. Your continued use of the 299bad Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 299bad, please contact our support team. We are available 24 hours a day, 7 days a week, operating in Bangladesh Standard Time (BST, UTC+6).

Please include "Privacy Request" or "Privacy Enquiry" in the subject line of your email, along with your registered account username or mobile number, to help us locate your records and respond to your request as efficiently as possible. All privacy-related correspondence is handled in strict confidence.