Privacy Policy — How 299bot Protects Your Personal Data

This Privacy Policy ("Policy") is issued by 299bot ("the Platform", "we", "us", "our") and applies to all personal data collected from users ("Player", "you", "your") who access or use the 299bot website at 299bot.net, including all associated services such as casino games, live dealer tables, sports betting, arcade titles, payment processing, and customer support.

299bot is committed to protecting the privacy and security of the personal data entrusted to us by our players across Bangladesh. This Policy is designed to give you a clear, transparent account of what data we collect, why we collect it, how we use it, and what your rights are in relation to it.

By registering an account on 299bot, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 299bot platform.

This Policy should be read alongside the 299bot Terms & Conditions and Responsible Gaming Policy, all of which form part of your agreement with 299bot.

299bot collects personal data from players through several channels, including account registration, payment processing, platform usage, and direct communications with our support team. The categories of personal data we collect are set out below.

We may also collect aggregated, anonymised, or pseudonymised data for analytical and platform improvement purposes. Such data cannot be used to identify you individually and is not considered personal data for the purposes of this Policy.

299bot uses the personal data we collect for the following purposes. Each purpose is supported by a specific legal basis, which is described further in Section 4 of this Policy.

• Account creation and management: To register your player account, verify your identity and age, maintain your account record, and enable you to access all platform features.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer methods, and to maintain an accurate record of all financial transactions on your account.
• Identity and age verification (KYC): To fulfil Know Your Customer obligations, verify that you meet the 18+ age requirement, confirm your residential address, and validate ownership of your payment methods.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited activities on the platform.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce self-exclusion and deposit limit settings, and to contact players who may need support.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Marketing communications: To send you information about 299bot promotions, bonuses, and new game releases, where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting our support team.
• Platform improvement: To analyse usage patterns, identify technical issues, improve platform performance, and develop new features based on aggregated player behaviour data.
• Legal and regulatory compliance: To fulfil obligations under applicable law, respond to lawful requests from authorities, and maintain records required for audit purposes.

299bot processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing that is necessary to perform the contract between you and 299bot — including account registration, payment processing, game provision, and customer support — is carried out on the basis of contractual necessity.
• Legal obligation: Processing that is required to comply with applicable legal obligations — including identity verification, age checks, anti-money-laundering procedures, and regulatory record-keeping — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of 299bot's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

299bot does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial marketing purposes. We may share your personal data with the following categories of third parties only where strictly necessary and only to the extent required for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other payment partners — solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity, age, and address as part of the account verification process.
• Game providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who supply the games available on the 299bot platform. These providers may process your player ID and session data for the purpose of delivering their games and calculating game outcomes.
• IT and infrastructure providers: Hosting, cloud storage, content delivery, and cybersecurity service providers who support the technical operation of the 299bot platform.
• Law enforcement and regulatory authorities: Where required by applicable law, court order, or regulatory request, 299bot may disclose your personal data to relevant authorities. We will only do so to the extent required by the applicable legal obligation.
• Professional advisers: Legal counsel, accountants, and compliance advisers, subject to obligations of confidentiality.

299bot uses cookies and similar tracking technologies on its website to improve platform functionality, analyse usage patterns, and deliver a personalised experience. A cookie is a small text file placed on your device by the 299bot website when you visit or interact with the platform.

The following categories of cookies are used on the 299bot platform:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cookies cannot be disabled as they are required for the platform to operate.
• Functional cookies: Used to remember your preferences, such as your preferred language, game view settings, and responsible gaming configurations. These improve your experience on return visits.
• Analytics cookies: Used to collect anonymised data about how players navigate and interact with the 299bot platform. This data helps us identify performance issues and improve the platform. Analytics cookies are only placed with your consent.
• Marketing cookies: Used to track your interactions with 299bot promotional content and measure the effectiveness of our marketing activities. Marketing cookies are only placed with your explicit consent.

In addition to cookies, 299bot may use web beacons, pixel tags, and server log analysis to collect technical data about platform usage. This data is processed in the same manner as cookie data and is subject to the same protections described in this Policy.

299bot takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 299bot platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Secure data storage: Personal data and financial records are stored on secure, access-controlled servers. Access to personal data is restricted to authorised 299bot personnel and third-party processors who have a genuine operational need to access it.
• Password hashing: Account passwords are stored in hashed form and are never stored or transmitted in plaintext. 299bot personnel cannot view your password.
• Fraud monitoring systems: Automated fraud detection systems monitor account activity in real time to identify and respond to suspicious behaviour, including unauthorised login attempts, unusual transaction patterns, and suspected multi-accounting.
• Regular security assessments: 299bot conducts periodic security reviews of its platform infrastructure and data handling practices to identify and remediate vulnerabilities.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 299bot will notify affected players as soon as reasonably practicable and will take all necessary steps to contain and remediate the breach.

299bot retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and for as long as required by applicable legal, regulatory, audit, and compliance obligations.

• Active account data: Personal data associated with an active player account is retained for the full duration of the account's active status.
• Closed account data: Following account closure, personal data — including identity records, transaction history, and communications records — is retained for a period of up to seven years from the date of closure. This retention period reflects standard financial record-keeping and anti-money-laundering compliance requirements.
• KYC documentation: Identity verification documents (copies of ID, address proofs) are retained for a minimum period required by applicable compliance obligations following the completion of the verification process or account closure, whichever is later.
• Marketing data: Where you have consented to receive marketing communications, your contact details are retained for marketing purposes until you withdraw your consent. Following withdrawal, your details are removed from active marketing lists promptly.
• Analytics data: Anonymised and aggregated analytics data may be retained indefinitely, as it cannot be used to identify individual players.

Once the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with 299bot's data disposal procedures.

As a player on the 299bot platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 299bot support team via live chat or email. 299bot will respond to all verified data subject requests within a reasonable timeframe.

• Right of access: You have the right to request confirmation of whether 299bot processes your personal data and, if so, to receive a copy of the personal data we hold about you, together with information about how it is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Some data corrections can be made directly within your account settings panel.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that this right is subject to our legal obligations to retain certain data as described in Section 8.
• Right to restrict processing: You have the right to request that 299bot restricts the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data that is based on 299bot's legitimate interests, including processing for direct marketing purposes. Where you object to marketing communications, we will stop sending them promptly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The 299bot platform is strictly intended for adults aged 18 years and above. 299bot does not knowingly collect, process, or retain personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

299bot employs age verification procedures during the registration process and during KYC checks to enforce the minimum age requirement. Players who are found to have provided false date of birth information will have their accounts closed and any winnings voided in accordance with the 299bot Terms & Conditions.

The 299bot platform integrates third-party game software from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play games powered by these providers, certain technical and gameplay data (such as your player session ID and bet amounts) is transmitted to the relevant provider's systems in order to deliver and settle the game.

Each third-party game provider operates under its own privacy policy and data protection framework. 299bot takes reasonable steps to ensure that all third-party providers engaged to process player data on our behalf do so in a manner consistent with the standards set out in this Policy, including through contractual data processing agreements where applicable.

299bot is not responsible for the privacy practices or data security measures of any third-party service provider. Our responsibility is limited to the personal data we collect and process directly, and to ensuring that our contractual arrangements with third-party processors include appropriate data protection obligations.

299bot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. Where changes are material, 299bot will make reasonable efforts to notify registered players via the email address associated with their account or via a notice displayed on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to remain informed of how 299bot collects, uses, and protects your personal data. Continued use of the 299bot platform following notification of any changes to this Policy constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 9, please contact the 299bot data team through the following channels. All contact details are provided as plain text only and are not clickable links.

• Email: [email protected] (plain text — not a mailto link)
• WhatsApp: +880 1700-299BOT (plain text — not a tel link)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the 299bot platform

Support is available around the clock on Bangladesh Standard Time (BST, UTC+6). We aim to respond to all privacy-related enquiries within 48 hours and to resolve all verified data subject requests within a reasonable timeframe consistent with our obligations. For responsible gaming concerns, please also refer to our dedicated Responsible Gaming page.