Privacy Policy – How 299bat Handles Your Data

299bat operates the online gaming and sports betting platform accessible at 299bat.bar. For the purposes of this Privacy Policy, "299bat", "we", "us", and "our" refer to the operator of this platform. "You" refers to any individual who accesses, registers with, or uses 299bat's services.

This Privacy Policy applies to all personal data collected in connection with your use of 299bat's website, mobile browser experience, customer support channels, and promotional communications. It does not apply to third-party websites or services that may be linked from our platform.

For all privacy-related enquiries, please contact us at: [email protected]

299bat collects personal data only where it is necessary to provide our services, comply with legal obligations, or improve platform performance. The categories of data we collect include:

We collect your personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or responding to surveys and promotions.
• Automated technologies: As you navigate our platform, we automatically collect technical and usage data via cookies, server logs, pixel tags, and similar tracking technologies.
• Third-party payment processors: When you complete a transaction via bKash, Nagad, Rocket, or Upay, our payment partners may share confirmation data (such as transaction reference numbers and wallet identifiers) with us to reconcile your account.
• Identity verification providers: Where required for age verification or anti-fraud purposes, we may use third-party services to verify the authenticity of identity documents you submit.
• Analytics providers: We use privacy-respecting analytics tools to understand aggregate usage patterns. These tools process data in anonymised or pseudonymised form wherever possible.

299bat uses the personal data it collects for the following purposes, each of which is grounded in a lawful basis:

• Account creation and management: To register your account, verify your identity, and maintain your profile and preferences.
• Service delivery: To process deposits and withdrawals, settle bets, credit bonuses, and provide access to games and live casino services.
• Customer support: To respond to your queries, resolve disputes, and manage complaints through our support channels.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) requirements, age verification standards, and fraud prevention frameworks.
• Platform security: To detect, investigate, and prevent unauthorised access, cheating, collusion, and other prohibited activities on the 299bat platform.
• Responsible gaming: To monitor for signs of problem gambling behaviour and, where appropriate, apply responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have given your consent or where we have a legitimate interest in doing so. You may withdraw consent at any time.
• Platform improvement: To analyse usage patterns in aggregate and use anonymised data to improve our games, navigation, and overall user experience.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent.

299bat does not sell your personal data. We may share data with trusted third parties only in the circumstances described below:

• Payment service providers: We share necessary transaction details with bKash, Nagad, Rocket, Upay, and other financial service providers to process deposits and withdrawals securely.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to deliver their games. These providers operate under strict data processing agreements.
• Identity verification services: Where we are required to verify your age or identity, we may share relevant documentation with accredited third-party verification providers. These providers are contractually bound to use your data only for verification purposes.
• Fraud prevention and AML: We may share data with fraud detection services and financial intelligence systems to fulfil our anti-money laundering and counter-terrorism financing obligations.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement, regulatory bodies, or courts in Bangladesh where we are legally required or compelled to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 299bat's business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer.

All third parties with whom we share data are required to handle it securely and only for the specified purpose. We do not permit any third party to use your data for their own independent marketing purposes.

299bat uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on our platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

You may control your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Withdrawing consent for analytics or marketing cookies will not affect your access to games or account functions.

299bat retains your personal data only for as long as is necessary for the purposes outlined in this policy, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active accounts: Personal and financial data is retained for the full duration of your account's active status plus a minimum period of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Identity verification documents: Copies of identity documents submitted during verification are retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years in accordance with financial record-keeping obligations.
• Support communications: Customer support correspondence is retained for three years from the date of resolution to assist with any future disputes or regulatory enquiries.
• Marketing data: Where you have withdrawn consent for marketing communications, we retain a suppression record of your opt-out to ensure we do not contact you again.
• Technical and usage data: Anonymised analytics data may be retained indefinitely. Identifiable usage logs are typically deleted or anonymised within 12 months.

When the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be associated with you.

As a 299bat member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your account details and a clear description of your request. We will respond within a reasonable period, typically within 30 calendar days.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances, such as while a dispute is being resolved.
• Right to data portability: You may request a copy of certain personal data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. We will honour such requests immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that some rights may be limited where we have a compelling legal obligation to retain or process your data — for instance, to comply with anti-money laundering regulations. We will explain the basis for any limitation at the time of your request.

299bat takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for passwords — passwords are never stored in plain text.
• Role-based access controls ensuring that only authorised 299bat personnel can access sensitive data, and only to the extent required by their role.
• Regular internal security audits and vulnerability assessments.
• Two-factor authentication options available to all account holders for additional login security.
• Monitoring systems that detect and alert on unusual login patterns or suspicious account activity in real time.

While we apply robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account. We will never ask for your password via email or live chat.

The 299bat platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to 299bat, please contact us immediately at [email protected]. We will promptly investigate the matter, close the account, and securely delete all associated personal data.

As part of our age verification process, we may request documentary proof of age before processing withdrawals or activating bonus offers. This is in place to protect minors and to fulfil our responsible gaming obligations.

The 299bat platform may contain references to third-party game studios and payment providers. Where you interact directly with a third-party service — for example, when completing a payment via bKash or Nagad — that service's own privacy policy governs the handling of your data during that interaction. 299bat is not responsible for the privacy practices of third-party platforms or services that operate independently of our platform.

We encourage you to review the privacy policies of any third-party services you interact with, particularly those of your mobile wallet provider, before sharing your personal data with them.

299bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered members via email or an in-platform notification.

Your continued use of the 299bat platform after the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend checking this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 299bat handles your personal data, please reach out to our support team. We take all privacy enquiries seriously and aim to respond within 30 calendar days.

Email: [email protected]

Please include your registered username and a brief description of your query in all privacy-related communications. We will never ask for your password and all correspondence is treated as strictly confidential.