This Privacy Policy explains what personal information 299bit collects from players in Bangladesh, how that information is used, who it may be shared with, and what rights you hold over your own data. We are committed to handling your information with transparency and care.
This Privacy Policy applies to all personal data processed by 299bit in connection with the operation of the 299bit platform, accessible at 299bit.bio. It covers data collected when you visit the website, register an account, make deposits or withdrawals, place bets, play casino games, interact with customer support, or engage with any other feature offered under the 299bit brand.
299bit operates as an online casino and sports betting platform serving the Bangladesh market. The platform accepts players from Bangladesh who transact using Bangladeshi Taka (BDT) through local mobile financial services including bKash, Nagad, Rocket, and Upay. All personal data processed in connection with these activities is governed by this Privacy Policy.
By creating a 299bit account or continuing to use the platform after this Policy is updated, you acknowledge that you have read and understood how your personal data is handled. If you do not agree with any part of this Policy, you should discontinue use of the platform and request account closure. For the complete framework of rights and obligations governing your use of 299bit, please also review the Terms & Conditions.
Note: This Policy is written in plain English to ensure all 299bit players — regardless of their technical or legal background — can understand how their personal data is treated. Where legal terminology is unavoidable, we have provided context and explanations alongside it.
299bit collects only the personal data that is necessary to provide its services securely, verify player identity, process payments, prevent fraud, and meet its obligations as a responsible gaming platform. The categories of data we collect are set out below.
What we do not collect: 299bit does not collect credit card numbers, bank account numbers, or any payment credential beyond the mobile wallet identifiers listed above. We do not collect biometric data other than liveness-check images where mandated for verification purposes. We do not collect data about your browsing activity on other websites.
299bit collects personal data through the following channels:
| Collection Channel | Data Collected | When It Occurs |
|---|---|---|
| Account Registration Form | Name, mobile number, email, date of birth, password | At sign-up |
| Identity Verification Process | NID / passport scan, selfie image | On request, before first withdrawal or at compliance review |
| Deposit and Withdrawal Flows | Mobile wallet identifier, transaction references, amounts | Each time a financial transaction is initiated |
| Platform Activity | Bet history, game session logs, responsible gaming tool usage | Continuously during platform use |
| Automatic Technical Logging | IP address, device data, browser data, session timestamps | On every visit and login event |
| Customer Support Interactions | Message content, account queries, dispute details | When you contact the support team |
| Cookies and Tracking Technologies | Session tokens, preference settings, analytics signals | On every page visit (see Section 8) |
299bit uses personal data for the following purposes. Each purpose is tied to a specific legal basis for processing.
We use your registration data to create and maintain your account, authenticate your identity at each login, and deliver the full range of betting, casino, and payment services available on the 299bit platform. This processing is necessary to perform the contract between you and 299bit.
We use identity and verification document data to confirm that every account holder is at least 18 years of age and is who they claim to be. Age verification is a mandatory compliance requirement for any responsible gaming platform. Processing in this context is necessary for compliance with our legal obligations and our responsible gaming commitments.
We use mobile wallet identifiers and transaction data to process deposits, credit winnings, and execute withdrawal requests to your registered bKash, Nagad, Rocket, or Upay account. This processing is necessary to perform the contract between you and 299bit.
We use technical and activity data — including IP addresses, device fingerprints, login history, and betting patterns — to detect and prevent fraudulent activity, money laundering, bonus abuse, and account takeover attempts. This processing is in 299bit's legitimate interest and is necessary for the protection of the platform and all its players.
We use communications data to respond to your queries, investigate disputes, process self-exclusion or responsible gaming requests, and improve the quality of the support service. This processing is necessary to perform the contract and is in 299bit's legitimate interest to maintain service quality.
We may use and retain personal data where required to comply with a legal obligation, including responding to lawful requests from regulatory or law enforcement authorities in Bangladesh, maintaining financial transaction records for the legally required retention period, and cooperating with investigations involving suspected financial crime.
We use aggregated, anonymised or pseudonymised data derived from platform activity to analyse usage patterns, improve the user interface, refine game selection, and enhance the overall player experience. This data does not identify any individual player and is used solely for internal product development purposes.
We use gaming activity and session data to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, the 299bit responsible gaming team may proactively reach out to the account holder to offer support resources or suggest the use of available self-management tools. This processing is in the legitimate interest of player welfare.
299bit does not sell, rent, or trade personal data to third parties for marketing or commercial purposes under any circumstances. Data is shared only in the limited situations described below.
To process deposit and withdrawal transactions, 299bit shares the minimum necessary financial data with the relevant mobile wallet operator — bKash, Nagad, Rocket, or Upay — as required to execute the transaction. These operators are bound by their own privacy and data security obligations under applicable Bangladesh financial regulations.
The casino and live dealer games available on the 299bit platform are powered by certified third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers receive session-level data (game round identifiers, stake amounts, outcomes) as part of game delivery. They do not receive your name, mobile number, NID details, or financial wallet information.
Where 299bit uses a third-party service to assist with identity document verification or liveness checking, your verification documents and associated data are shared with that service provider solely for the purpose of completing the verification check. All such providers operate under strict data processing agreements with 299bit.
299bit may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies in Bangladesh where it is legally required to do so, or where 299bit has a good-faith belief that disclosure is necessary to prevent a crime, protect the safety of a person, or enforce its legal rights.
In the event that 299bit undergoes a business restructure, merger, acquisition, or sale of assets, personal data held by the platform may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to the way their data is handled as a result.
No Cross-Border Transfers: 299bit processes the personal data of Bangladesh players within systems and with service providers that are contractually bound to apply data security standards consistent with this Privacy Policy. We do not transfer personal data to countries with materially weaker data protection frameworks without appropriate safeguards in place.
299bit retains personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by applicable law or regulatory obligation. The retention periods applied to the principal categories of data are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account plus 5 years after closure | Legal obligation / contractual |
| Identity verification documents | 5 years from the date of verification | Legal obligation (AML compliance) |
| Financial transaction records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| Betting and gaming activity logs | 3 years from account closure | Legitimate interest / dispute resolution |
| Customer support communications | 3 years from the date of the interaction | Legitimate interest / dispute resolution |
| Technical and device logs | 12 months on a rolling basis | Legitimate interest / fraud prevention |
| Self-exclusion records | Duration of exclusion plus 7 years | Legal obligation / responsible gaming |
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.
299bit takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.
Your Role in Account Security: While 299bit maintains robust platform-level security, you are responsible for keeping your login credentials confidential. Do not share your password or OTP codes with anyone — including persons claiming to be 299bit staff. 299bit will never ask for your password via email, live chat, or telephone.
The 299bit platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, maintain your login session, and gather anonymised analytics data to improve the platform.
You may control cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will affect the functionality of the 299bit platform and may prevent you from logging in or completing transactions. Blocking analytics cookies will not impair platform functionality.
299bit does not use third-party advertising cookies or cross-site tracking cookies. No cookie data from the 299bit platform is shared with advertising networks or data brokers.
As a 299bit account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the 299bit support team at [email protected] with the subject line "Privacy Rights Request — [Your Account ID]".
Request a copy of the personal data 299bit holds about you. We will provide this within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data held on your account. Updates take effect within 7 business days.
Request deletion of your personal data where it is no longer necessary, subject to retention obligations under applicable law.
Request that 299bit restricts processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
Request a structured, machine-readable export of the personal data you provided to 299bit during account creation and platform use.
Object to processing of your personal data where 299bit relies on legitimate interest as the legal basis, including analytics and fraud monitoring.
The 299bit platform is strictly for adults aged 18 years and above. 299bit does not knowingly collect or process personal data from persons under the age of 18. If 299bit discovers or has reasonable grounds to believe that an account is held by a minor, the account will be suspended immediately, all associated data will be reviewed by the compliance team, and the account will be permanently closed if underage use is confirmed.
If you are a parent or guardian and believe that a minor has created a 299bit account using your details or their own, please contact the support team immediately at [email protected]. We take these reports seriously and will investigate and act without delay.
299bit reserves the right to update or revise this Privacy Policy at any time to reflect changes in platform operations, applicable law, or data processing practices. When a material change is made, registered account holders will be notified by email to their registered address, and a prominent notice will be displayed on the platform for a minimum of 7 days before the change takes effect.
Non-material changes — such as typographical corrections, formatting updates, or clarifications that do not alter the substance of any provision — may be made at any time without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision date.
Your continued use of the 299bit platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated version. If you disagree with the revised Policy, you should stop using the platform and request account closure before the changes take effect.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how 299bit handles your personal data, please contact us using the details below. All privacy-related requests are handled by the 299bit compliance and support team, operating in Bangladesh Standard Time (UTC+6).
Identity Verification for Rights Requests: To protect your personal data, 299bit will verify your identity before fulfilling any data subject rights request. You will be asked to confirm details associated with your registered account. This step ensures that data is never disclosed to or deleted at the request of a person who is not the legitimate account holder.
Six core principles that define how 299bit handles personal data across every aspect of the platform.
Every session on 299bit is protected by SSL/TLS encryption from the moment you connect. All data moving between your device and our servers — including login credentials and payment details — is encrypted in transit at all times.
Personal data is accessible only to authorised 299bit staff on a strict need-to-know basis. Access permissions are reviewed regularly, and all staff handling personal data are bound by confidentiality obligations.
299bit never sells, rents, or trades your personal data to third parties for marketing or commercial gain. Data sharing is limited to the specific operational partners — payment processors, game studios, and verification services — described in this Policy.
Every category of personal data held by 299bit has a defined maximum retention period. Data is securely deleted or irreversibly anonymised as soon as the retention period expires — we do not hold data indefinitely.
This Privacy Policy documents every category of data collected, every purpose for which it is used, and every party it may be shared with. There are no hidden processing activities at 299bit — what you read here is the complete picture.
Your rights to access, correct, delete, or export your personal data are real and exercisable. Submit a request to [email protected] and our compliance team will acknowledge it within 2 business days and respond fully within 30 days.
Now that you understand how we protect your data, you can play with confidence. Browse our games, review the FAQ, or log in to manage your account and privacy settings directly.