Your Privacy Matters at 299bte

1. Information We Collect

1.1 Registration Information

When you create a 299bte account, we collect the personal information you provide directly during the registration process. This includes your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and maintain your account, verify your identity in accordance with our KYC obligations, and communicate with you about your account.

1.2 Identity Verification Documents

As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, we may request copies of identity verification documents at various stages of your account lifecycle. Documents we may collect include a government-issued photo identity card (National ID, passport, or driving licence), proof of address, and, where relevant, proof of ownership of the payment methods used on your account.

1.3 Financial and Transaction Data

We collect records of all financial transactions conducted through your 299bte account, including deposit amounts, withdrawal requests, bonus credits, wager history, and account balance changes. For payments processed via bKash, Nagad, Rocket, and Upay, we collect the mobile wallet number associated with each transaction. For Visa and Mastercard payments, we collect and store only a tokenised card reference — we do not store full card numbers, CVV codes, or expiry dates on our servers.

1.4 Technical and Device Data

When you access the 299bte platform, our servers automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type (desktop, tablet, or mobile), screen resolution, language settings, and the pages you navigate to within the platform. This technical data is used for fraud prevention, platform optimisation, and security monitoring.

1.5 Behavioural and Usage Data

We collect data about how you interact with the 299bte platform, including the games you play, the sports markets you browse, the duration of your sessions, the time of day you access the platform, and your use of responsible gaming tools such as deposit limits and session reminders. This behavioural data helps us improve our product, personalise your experience, and identify signs of problem gambling that may require intervention under our responsible gaming obligations.

1.6 Communications Data

When you contact our customer support team via live chat or email, we retain records of that correspondence. This includes the content of your messages, any attachments you provide, and the outcome of any queries or disputes raised. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

Data Category	Examples	Purpose
Registration Data	Name, DOB, address, email, phone	Account creation, KYC, communications
Identity Documents	National ID, passport, proof of address	KYC verification, AML compliance
Financial Data	Deposit/withdrawal records, wallet references	Transaction processing, fraud prevention
Technical Data	IP address, browser, device type	Security, fraud prevention, optimisation
Behavioural Data	Games played, session duration, bet history	Product improvement, responsible gaming
Communications Data	Support chat transcripts, emails	Quality assurance, dispute resolution

2. How We Use Your Data

299bte uses the personal information collected from you for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account Administration: Creating, maintaining, and managing your 299bte account, including processing your login credentials, account settings, and communication preferences.
• Identity and Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years, in compliance with our terms and our responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, reconciling transaction records, and managing chargebacks or payment disputes.
• Fraud and Security Monitoring: Detecting and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Customer Support: Responding to your queries, complaints, and dispute escalations through our live chat and email channels.
• Personalisation: Tailoring your platform experience based on your game preferences, betting history, and responsible gaming settings to deliver a more relevant and enjoyable experience.
• Promotional Communications: Sending you information about bonus offers, promotions, and platform updates relevant to Bangladeshi players — but only where you have opted in to receive such communications. You may opt out at any time through your account communication preferences.
• Responsible Gaming: Monitoring account activity for behavioural patterns that may indicate problem gambling, applying responsible gaming limits you have set, and reaching out proactively where our systems flag a concern.
• Legal and Regulatory Compliance: Fulfilling our obligations under applicable laws and responding to lawful requests from regulatory authorities or law enforcement agencies.
• Platform Improvement: Analysing aggregated usage data to improve the performance, security, and feature set of the 299bte platform for all players.

3. Legal Basis for Processing

299bte processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of each processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 299bte — specifically, to operate your account, process your transactions, and deliver the gaming and betting services you have registered for.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML transaction monitoring, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in furtherance of 299bte's legitimate business interests — such as fraud prevention, security monitoring, platform improvement, and responsible gaming intervention — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional promotional communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

4. Data Sharing and Disclosure

299bte does not sell your personal data to third parties. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Game Providers and Technology Partners

To deliver the games and betting services available on the 299bte platform, we work with third-party game providers and technology partners including, but not limited to, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These partners may receive technical identifiers (such as anonymised player session tokens) necessary for game delivery and result certification. They do not receive your full personal profile, payment credentials, or identity documents.

4.2 Payment Processing Partners

To process deposits and withdrawals, we share the minimum necessary information with payment processors and mobile financial service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. The information shared is limited to what is technically required to execute and confirm the specific transaction. All payment partners are contractually bound to handle your data securely and in accordance with their respective data protection obligations.

4.3 Identity Verification Services

Where automated KYC verification is used, your identity documents and registration details may be shared with third-party identity verification service providers. These providers are engaged solely to confirm your identity and age and are prohibited from using your data for any other purpose. All such providers are subject to data processing agreements that mandate appropriate security and confidentiality standards.

4.4 Legal and Regulatory Disclosure

299bte may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so or where such disclosure is necessary to investigate suspected illegal activity, enforce our Terms & Conditions, or protect the rights, property, or safety of 299bte, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 299bte's business, your personal data may be transferred as part of that transaction. In such circumstances, the acquiring entity will be required to honour the terms of this Privacy Policy with respect to the personal data transferred. You will be notified of any change in the data controller responsible for your information.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect information about how you interact with the site. 299bte uses both first-party cookies (set directly by the 299bte platform) and a limited number of third-party cookies (set by our technology service partners).

5.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential / Session	Maintain your login session, prevent CSRF attacks, enable core platform functions	Session (deleted on browser close)
Preference	Remember your language and display preferences, responsible gaming settings	Up to 12 months
Performance / Analytics	Measure page load times, error rates, and feature usage to improve the platform	Up to 24 months
Security / Fraud Prevention	Detect suspicious login attempts, identify bots, and flag anomalous transaction patterns	Up to 12 months

5.3 What We Do Not Use Cookies For

299bte does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. We do not share any cookie-derived data with advertising networks or data brokers. Our cookie usage is strictly limited to the operational categories described above.

5.4 Managing Cookies

You may control cookie settings through your browser preferences. Most modern browsers allow you to block or delete specific categories of cookies. Please note that disabling essential session cookies will prevent you from logging in to your 299bte account and accessing core platform functions. Disabling performance cookies will not affect your ability to use the platform but will reduce our ability to diagnose and fix technical issues efficiently.

6. Data Retention

299bte retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data (registration details, transaction history, game records): retained for the full duration of your account and for a period of 5 years following account closure, in accordance with standard financial record-keeping practices and AML regulatory requirements.
• KYC and identity documents: retained for a minimum of 5 years following the end of the business relationship, as required by applicable anti-money laundering legislation.
• Customer support correspondence: retained for 3 years following the resolution of the relevant query or dispute, for quality assurance and dispute evidence purposes.
• Technical and device data (server logs): retained for a rolling period of 12 months, after which logs are anonymised or deleted.
• Marketing consent records: retained for the duration of your consent and for 3 years following withdrawal of consent, as evidence of the consent given.

At the end of the applicable retention period, your personal data is securely deleted or anonymised in a manner that prevents reconstruction of your individual identity. Anonymised, aggregated data derived from your account activity may be retained indefinitely for statistical and product analysis purposes, as it no longer constitutes personal data once properly anonymised.

7. Data Security Measures

299bte employs a layered approach to information security designed to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include, but are not limited to, the following:

• Encryption in Transit: All data exchanged between your device and the 299bte platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across all platform endpoints.
• Encryption at Rest: Sensitive data fields — including identity document copies, payment references, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff members with access to personal data are subject to confidentiality agreements and regular data protection training.
• Penetration Testing: The 299bte platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection: Automated monitoring systems alert our security team to anomalous access patterns, login attempts, or data transfer activities in real time.
• Password Security: Player account passwords are stored as salted cryptographic hashes. 299bte support staff cannot view your password in plain text. If you forget your password, a reset link is issued to your registered email address.

8. Your Data Rights

As a registered user of the 299bte platform, you hold a number of rights over the personal data we hold about you. These rights are described below, along with guidance on how to exercise them.

• Right of Access: You have the right to request a copy of all personal data that 299bte holds about you. Upon a valid access request, we will provide a structured summary of your data within 30 calendar days.
• Right to Rectification: If any personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as email address or phone number updates) can be made directly through your account settings. For corrections to identity documents or core registration data, please contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent and there is no other legal basis for processing. Note that we are not obligated to erase data where we have a legal obligation to retain it (for example, AML record-keeping requirements).
• Right to Restriction of Processing: In certain circumstances — such as while a dispute about data accuracy is being resolved — you have the right to request that we temporarily restrict the processing of your personal data.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller of your choice.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to your personal data being used for direct marketing purposes, which will be honoured immediately on receipt of your objection.
• Rights in Relation to Automated Decision-Making: Where 299bte makes decisions about your account (for example, flagging a transaction as suspicious) using automated systems without human review, you have the right to request that a human review be conducted and to contest the outcome of the automated decision.

To exercise any of the above rights, please contact our privacy team at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. We will verify your identity before processing your request and will respond within 30 calendar days. In cases of complex or multiple requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

9. Children and Minors

If you are a parent or guardian and you believe that a minor in your care has created a 299bte account or otherwise provided personal information to us, please contact our support team immediately at [email protected]. We will investigate the report and take prompt action, including account closure and data deletion where confirmed.

299bte employs age verification checks as part of the registration process and may request identity documents at any stage to confirm that a player meets the minimum age requirement. These checks form part of our broader responsible gaming framework, which is described in more detail on our Responsible Gaming page.

10. International Data Transfers

The 299bte platform primarily processes and stores data on servers located within secure data centre facilities. In the course of our operations, certain personal data may be transferred to, or accessed by, third-party service providers located outside Bangladesh — for example, game providers or technology partners whose operations span multiple regions.

Where such international transfers occur, 299bte takes steps to ensure that your personal data receives an adequate level of protection. These steps may include relying on standard contractual clauses that impose equivalent data protection obligations on the recipient, or verifying that the recipient operates under a data protection framework that meets internationally recognised standards.

By using the 299bte platform and accepting this Privacy Policy, you acknowledge that your data may be transferred internationally in the limited circumstances described above, subject to the safeguards described in this section.

11. Policy Updates

299bte reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The most current version of this Policy will always be available at 299bte.com/privacy-policy. The "Effective" date displayed at the top of the page and within the hero section indicates when the current version entered into force.

For material changes — defined as changes that meaningfully affect how we collect, use, or share your personal data — 299bte will provide advance notice to registered players via the email address on file, with a minimum of 7 calendar days' notice before the revised Policy takes effect. Your continued use of the 299bte platform following the effective date of any updated Policy constitutes your acknowledgement and acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 299bte protects your information. If you have any questions about a recent or upcoming change to this Policy, please contact our privacy team using the details provided in Section 12 below.

12. Privacy Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 299bte handles your personal information, please contact our privacy team through the following channels:

• Email: [email protected] — subject line "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 from your account dashboard — average response time under 3 minutes during Bangladesh Standard Time (BST, UTC+6) peak hours

Our privacy team aims to acknowledge all written privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days. For formal data rights requests (access, erasure, portability, etc.), please include your registered account username and a clear description of the specific right you are seeking to exercise to allow us to process your request efficiently.

299bte is committed to resolving all privacy-related concerns promptly and in good faith. If you are not satisfied with the response you receive, you have the right to escalate the matter through our formal dispute escalation process, as described in Section 12.2 of the 299bte Terms & Conditions.