Your Privacy Matters at 299bd
This Privacy Policy explains exactly what personal data 299bd collects from players in Bangladesh and across all supported regions, why we collect it, how it is used, and the rights you hold over your own information. We are committed to handling your data with transparency and care.
Six Things 299bd Commits to Every Player
Before reading the full policy, these six commitments summarise how 299bd approaches your personal data — consistently and without exception.
Introduction
This Privacy Policy (hereinafter "Policy") describes how 299bd ("Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who access or use the 299bd website located at 299bd.im, including all sub-pages, services, casino products, sportsbook markets, promotional features, and related applications (collectively, the "Platform").
By registering a 299bd account, visiting the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the 299bd Terms & Conditions and should be read alongside them.
Important: If you do not agree with this Privacy Policy, you must not create an account or use the 299bd Platform. If you already hold an account and no longer consent to this Policy, please contact us at [email protected] to request account closure.
This Policy is written in English and the English version shall prevail in the event of any inconsistency. The effective date of this version of the Policy is January 2026.
Who We Are
299bd is an online casino and sports betting platform operating under an internationally recognised offshore gambling licence. The Platform is designed to serve adult players (aged 21 and above) across Bangladesh and other supported regions, offering a localised gaming experience with support for Bangladeshi Taka (৳), bKash, Nagad, Rocket, Upay, and leading bank transfer services.
For the purposes of this Policy, 299bd acts as the data controller — meaning we determine the purposes and means of processing your personal data. Where third-party service providers process data on our behalf (for example, payment processors or identity verification partners), they act as data processors and are bound by contractual obligations to process data only on our instruction and in accordance with applicable data protection standards.
You may contact 299bd regarding any privacy-related matter by emailing [email protected]. We aim to acknowledge all privacy inquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within five business days.
Data We Collect
299bd collects personal data from you in three primary ways: directly from you during registration and use of the Platform, automatically through technical systems as you browse and play, and from third parties where necessary to verify your identity or process payments.
3.1 Data You Provide Directly
- Registration Data: Full legal name, date of birth, email address, mobile phone number, country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
- Identity Verification (KYC) Documents: National ID card, passport, driving licence, utility bills, bank statements, and payment method screenshots submitted to verify your identity and age
- Payment Data: bKash account numbers, Nagad numbers, Rocket wallet details, bank account information, Visa/Mastercard card numbers (last four digits only — full card numbers are never stored by 299bd), and transaction histories
- Account Preferences: Language preference, communication preferences, responsible gaming settings (deposit limits, session alerts, self-exclusion status)
- Support Communications: Records of live chat conversations, emails, and any other correspondence submitted to the 299bd support team
3.2 Data Collected Automatically
- Device & Technical Data: IP address, device type (mobile/desktop/tablet), operating system, browser type and version, screen resolution
- Usage Data: Pages visited, features accessed, games played, betting and wagering history, session start and end times, click paths, and navigation patterns
- Location Data: General geographic location inferred from IP address — used to apply regional compliance rules and detect access from restricted jurisdictions
- Cookie and Tracking Data: Data collected via cookies, pixel tags, local storage, and similar technologies as described in Section 6 of this Policy
3.3 Data from Third Parties
- Identity Verification Partners: Where automated KYC tools are used, these partners may return a verification status, risk score, or document authenticity check result to 299bd
- Payment Processors: Transaction confirmation references, settlement amounts, and fraud risk signals from bKash, Nagad, Rocket, Upay, and card processing networks
- Fraud Detection Services: Fraud scores, device fingerprints, and behavioural risk indicators from anti-fraud partners used to protect your account
Data Minimisation: 299bd is committed to collecting only the data necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming assessment and with your explicit consent.
How We Use Your Data
The personal data 299bd collects is used for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your 299bd account, authenticating your login, and managing account settings and preferences. |
| Identity Verification | Verifying your age (21+ requirement), identity, and payment methods in accordance with our KYC and anti-money laundering obligations. |
| Payment Processing | Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment networks. |
| Platform Delivery | Providing access to casino games, sportsbook markets, live dealer content, and all other Platform features. |
| Customer Support | Responding to queries, resolving complaints, and maintaining a record of support interactions for quality assurance. |
| Fraud & Security | Detecting and preventing fraud, bonus abuse, multi-accounting, money laundering, and other prohibited conduct. |
| Responsible Gaming | Monitoring player behaviour to identify potential problem gambling indicators and administering self-exclusion, deposit limits, and cooling-off periods. |
| Legal Compliance | Meeting our obligations under applicable laws, including anti-money laundering regulations and responses to lawful requests from regulatory or law enforcement authorities. |
| Marketing (Opt-In) | Sending promotional offers, bonus notifications, and personalised recommendations where you have explicitly consented to receive them. |
| Platform Improvement | Analysing aggregated usage patterns to improve Platform performance, game selection, and user experience. |
Legal Basis for Processing
299bd processes your personal data on the following legal bases, consistent with internationally recognised data protection principles including those reflected in the EU General Data Protection Regulation (GDPR) which we voluntarily align with as a matter of best practice:
- Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and Platform delivery
- Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and responses to lawful regulatory requests
- Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and Platform improvement — where these interests are not overridden by your rights and freedoms
- Consent: Processing for optional marketing communications and non-essential cookie placement — where you have given freely given, specific, informed, and unambiguous consent that can be withdrawn at any time
Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights. You may request information about any legitimate interests assessment by contacting [email protected].
Cookies & Tracking Technologies
299bd uses cookies and similar technologies to ensure the Platform functions correctly, to protect your account, to analyse usage, and — where you have consented — to deliver personalised content. A cookie is a small text file placed on your device when you visit the Platform.
Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to function. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without breaking Platform functionality.
- Functional Cookies: Remember your preferences such as language setting, preferred payment method, and responsible gaming configurations between sessions.
- Analytical Cookies: Collect aggregated, anonymised data about how players navigate the Platform — page views, session duration, bounce rates — to help us improve the user experience. These are only placed with your consent.
- Marketing Cookies: Track your activity on the Platform to allow us to deliver relevant promotional offers and measure campaign effectiveness. These are only placed with your explicit consent and may be withdrawn at any time.
Managing Your Cookie Preferences
You may manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling strictly necessary cookies will affect Platform functionality. For browser-specific instructions, refer to your browser's help documentation.
Third-Party Cookies: Some game providers (including Pragmatic Play, Evolution Gaming, and Spribe) may place their own cookies within game iframes for session management and fraud prevention purposes. 299bd does not control the cookie practices of these third parties and recommends reviewing their respective privacy policies.
Sharing Your Data
299bd does not sell, rent, or trade your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to process deposits and withdrawals on your behalf
- Identity Verification Partners: KYC and AML compliance service providers who verify the authenticity of identity documents and conduct age verification checks
- Fraud Prevention Services: Anti-fraud platforms that analyse transaction patterns and device data to protect you and the Platform from fraudulent activity
- Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens necessary to load and operate their games within the 299bd Platform. They do not receive your full personal profile.
- Legal and Regulatory Authorities: Where required by applicable law, a court order, or a lawful regulatory request, 299bd will disclose personal data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.
- Professional Advisers: Legal counsel, auditors, and insurers who require access to data in the context of professional engagements, subject to confidentiality obligations
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of 299bd's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments
Processor Obligations: All third parties who process data on behalf of 299bd are required to enter into data processing agreements that mandate confidentiality, security standards consistent with this Policy, and prohibition on using your data for any purpose other than those authorised by 299bd.
International Data Transfers
As an internationally operated platform, 299bd and some of its service providers may process your personal data in countries outside Bangladesh. These countries may not have data protection laws equivalent to those in your home jurisdiction.
Where personal data is transferred internationally, 299bd implements appropriate safeguards to ensure your data receives a level of protection consistent with the principles set out in this Policy. These safeguards include:
- Standard contractual clauses that impose binding data protection obligations on the receiving entity
- Transfers only to jurisdictions that maintain robust data protection frameworks recognised by international standards
- Technical and organisational security measures applied consistently regardless of the location of processing
You may request further information about the specific safeguards in place for any international transfer by contacting the 299bd privacy team at [email protected].
Data Retention
299bd retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for as long as required by applicable law and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | 5 years after account closure | AML and KYC regulatory requirements |
| KYC Documents | 5 years after account closure | Identity verification regulatory obligations |
| Transaction Records | 7 years after each transaction | Financial record-keeping requirements |
| Betting & Gaming History | 5 years after account closure | Dispute resolution and regulatory compliance |
| Support Communications | 3 years after last contact | Quality assurance and dispute resolution |
| Marketing Consent Records | 3 years after consent was given or withdrawn | Evidence of consent for marketing communications |
| Analytical & Usage Data | 26 months from collection | Platform improvement analysis |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to your identity. Where data must be retained beyond these periods due to an ongoing dispute, legal proceeding, or regulatory investigation, it will be kept only for as long as necessary for that specific purpose.
Your Rights Over Your Data
299bd respects your rights regarding the personal data we hold about you. You may exercise any of the following rights by contacting us at [email protected]:
- Right of Access: Request a copy of the personal data 299bd holds about you, including information on how it is processed and with whom it is shared
- Right to Rectification: Request that inaccurate or incomplete personal data be corrected without undue delay
- Right to Erasure: Request that your personal data be deleted where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the processing was unlawful — subject to our legal retention obligations
- Right to Restriction: Request that processing of your personal data be restricted in certain circumstances, for example while the accuracy of data is contested
- Right to Data Portability: Receive a copy of the personal data you have provided to 299bd in a structured, commonly used, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease processing for that purpose immediately
- Rights Related to Automated Decision-Making: Request human review of any decision made solely by automated means that significantly affects you
- Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal
Identity Verification for Requests: To protect your privacy and security, 299bd may request proof of identity before processing a data rights request. We aim to respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 60 days — you will be notified if an extension applies.
Security Measures
299bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- Encryption in Transit: All data exchanged between your device and the 299bd Platform is encrypted using 256-bit SSL/TLS protocols. Connections using outdated or insecure protocols are rejected.
- Encryption at Rest: Sensitive data stored on 299bd servers — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within 299bd is restricted on a strict need-to-know basis. Staff with access to player data receive mandatory privacy and security training and are bound by confidentiality agreements.
- Two-Factor Authentication: 299bd offers and strongly recommends two-factor authentication (2FA) on all player accounts to add an additional layer of protection against unauthorised access.
- Intrusion Detection: Continuous monitoring systems scan for suspicious activity, attempted breaches, and unusual access patterns in real time.
- Penetration Testing: Regular security assessments and penetration tests are conducted by qualified third-party security professionals to identify and remediate vulnerabilities.
- Incident Response: In the event of a data breach that is likely to result in a risk to your rights, 299bd will notify affected players promptly and take all necessary steps to contain and investigate the breach.
While 299bd employs industry-standard security practices, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your own login credentials confidential and for notifying 299bd immediately if you suspect unauthorised access to your account.
Children & Minors
The 299bd Platform is strictly intended for individuals who are 21 years of age or older. 299bd does not knowingly collect, process, or store personal data from individuals under the age of 21. The minimum age requirement is enforced through our KYC verification process, which requires documentary proof of age before a withdrawal can be processed.
If 299bd discovers or has reason to believe that a player account is held by a person under the age of 21, the account will be closed immediately. Any funds held in the account will be returned to the payment method used for deposits, subject to applicable verification procedures. All data associated with an underage account will be deleted promptly upon discovery, except where retention is required for regulatory reporting purposes.
Parental Notice: If you believe that a minor in your household has accessed or registered with 299bd, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. We also encourage parents and guardians to make use of parental control software to restrict access to online gambling sites.
Third-Party Links & Services
The 299bd Platform may contain references to third-party services — including game providers, payment processors, and affiliate partners. These third-party services operate under their own privacy policies and data practices, which are entirely independent of 299bd. 299bd is not responsible for the privacy practices or content of any third-party service, and the inclusion of a reference to a third-party provider on the Platform does not constitute an endorsement of that party's privacy practices.
When you interact with a third-party game (for example, a live dealer game powered by Evolution Gaming or a slot title by Pragmatic Play), that provider's session management systems may collect certain technical data such as your session token, game preferences, and wagering activity within their game environment. We recommend reviewing the privacy policies of game providers whose titles you play regularly.
Similarly, when processing payments through bKash, Nagad, Rocket, or Upay, your transaction data passes through those providers' systems and is subject to their respective data handling practices. 299bd has no control over how these providers store or process data on their own infrastructure beyond the contractual obligations we impose on them as data processors.
Updates to This Policy
299bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify you by one or more of the following methods:
- Displaying a prominent notice on the 299bd Platform homepage and login page at least 14 days before the changes take effect
- Sending an email notification to the address associated with your registered 299bd account
- Updating the "Effective Date" displayed at the top of this page to reflect the date the revised Policy comes into force
Your continued use of the 299bd Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue use of the Platform and may request account closure by contacting [email protected] before the effective date.
We encourage you to review this Policy periodically to stay informed about how 299bd protects your data. Previous versions of this Policy are available on request by contacting our support team.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 299bd processes your personal data, please contact us using the details below. All privacy-related communications are handled by our dedicated support team, who aim to provide a substantive response within five business days (Bangladesh Standard Time, UTC+6).
- Email: [email protected] — please include "Privacy Policy" in your subject line
- Response Time: Acknowledgement within 48 hours; substantive response within 5 business days
- Operating Hours: 24/7 support availability, Bangladesh Standard Time (UTC+6)
- Postal Address: Available on request for formal legal correspondence
Data Rights Requests: To exercise any of your rights described in Section 10 — including access, rectification, erasure, or portability — email [email protected] with the subject line "Data Rights Request" and include your registered account username or email address so we can locate your records promptly.
299bd is committed to resolving all privacy concerns fairly and transparently. We take every inquiry seriously and treat your data rights with the same care as we apply to the security of your account.
Explore 299bd — Bangladesh's Trusted Casino Platform
Your data is protected. Your experience is secure. Discover hundreds of casino games, live cricket betting, and instant ৳ withdrawals via bKash and Nagad — all backed by 24/7 English support.