299bot Privacy Policy

Who We Are and How to Contact Us

299bot operates the online casino and sports betting platform accessible at 299bot.app. For all privacy-related queries, requests, or complaints, you may contact our Data Support team directly:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

We aim to respond to all privacy-related requests within 5 business days. Complex requests involving data exports or deletion reviews may take up to 14 business days, and we will notify you of any delay.

Data We Collect and Why

We collect personal data through three primary channels: information you provide directly, information generated automatically by your use of the platform, and information received from trusted third-party verification or payment partners.

Data you provide directly:

• Full name, date of birth, and contact details (email address and/or mobile number) provided during account registration.
• Identity verification documents such as a national ID card, passport, or driving licence, submitted in response to a verification request.
• Payment account details (bKash number, Nagad number, Rocket number, Upay number, bank account details) used for deposits and withdrawals.
• Communications you send to our support team, including complaint descriptions, dispute details, and any attachments.
• Responsible gaming preferences such as deposit limits, session time limits, or self-exclusion requests.

Data collected automatically:

• IP address and approximate geographic location (city/region level) at the time of login and transaction.
• Device type, operating system, browser type and version, and screen resolution.
• Session duration, pages visited, games played, bet history, and in-game actions.
• Cookie identifiers and session tokens used to maintain your logged-in state and remember your preferences.
• Transaction logs including deposit amounts (in ৳ BDT), withdrawal requests, bonus activations, and wager records.

Data received from third parties:

• Identity confirmation signals from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming that a transaction was authorised by the named account holder.
• Fraud risk signals from anti-fraud screening services where applicable.

Legal Bases for Processing Your Data

299bot processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing your registration details, identity verification, deposits, withdrawals, and bet settlements is necessary to fulfil our contract with you as a registered player.
• Legal obligation: We are required to retain certain transaction and identity records to comply with applicable anti-money laundering, counter-terrorism financing, and age verification obligations.
• Legitimate interests: We process session data, device data, and usage analytics to detect fraud, prevent account takeover, improve platform performance, and maintain the integrity of our games and sportsbook.
• Consent: Where we send you promotional communications or optional personalisation features, we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected].

How We Use Your Data

The personal data 299bot holds about you is used for the following specific purposes:

• Creating and managing your 299bot account, including verifying your identity and age (21+ requirement).
• Processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Settling bets and game results accurately and in accordance with our Terms & Conditions.
• Detecting and preventing fraudulent activity, money laundering, multi-accounting, and bonus abuse.
• Providing customer support and resolving complaints or disputes raised through our support channel.
• Sending you account-related notifications such as transaction confirmations, security alerts, and verification requests.
• Where you have opted in: sending promotional offers, bonus notifications, and seasonal campaign communications.
• Analysing aggregated, anonymised usage data to improve our platform's games, navigation, and performance.
• Complying with applicable laws, regulatory directions, and lawful requests from competent authorities.

Data Sharing and Third Parties

299bot does not sell your personal data. We share data only in the following limited, necessary circumstances:

• Payment processors: When you make a deposit or request a withdrawal, we share the minimum necessary transaction data with the relevant payment provider (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank) to complete the transaction. These providers have their own privacy policies and are bound by their own data protection obligations.
• Game content providers: Live dealer and slot game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session tokens necessary to load and run their games within the 299bot platform. These providers do not receive your name, payment details, or contact information.
• Identity and fraud screening services: Where necessary to meet age verification or anti-fraud obligations, we may share document details with accredited identity verification partners. These partners are contractually bound to use the data only for the stated purpose.
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally compelled to do so or where we reasonably believe that disclosure is necessary to prevent serious harm or illegal activity.

In all cases of third-party sharing, 299bot uses contractual safeguards to ensure that your data is processed only for the stated purpose, retained no longer than necessary, and protected with appropriate security measures.

Data Retention

We retain your personal data for as long as your 299bot account is active, and for a defined period after account closure as required by our legal and operational obligations. The following retention periods apply:

Data Type	Retention Period
Account registration details	Duration of account + 5 years post-closure
Identity verification documents	Duration of account + 5 years post-closure
Transaction and betting records	Duration of account + 7 years post-closure
Support communications	3 years from the date of the communication
Session and device logs	13 months from collection
Cookie data	Up to 12 months, or until cleared by the user

After the applicable retention period expires, your data is either securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

Cookies and Tracking Technologies

299bot uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during your visit and security cookies that help us detect suspicious activity. These cannot be disabled without breaking core functionality.
• Preference cookies: Store your language settings, display preferences, and responsible gaming tool configurations so you do not need to re-enter them on each visit.
• Analytics cookies: Help us understand how users navigate the platform — which games are most popular, where users encounter difficulty, and how platform performance can be improved. Data collected by analytics cookies is aggregated and anonymised.
• Fraud prevention cookies: Used to identify device fingerprints and detect multi-accounting or bot activity. These are essential to the integrity of the platform and cannot be disabled.

You can manage or clear non-essential cookies through your browser's settings. Please note that clearing cookies will log you out of your current session and may reset your saved preferences.

Your Privacy Rights

As a 299bot user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request":

• Right of access: You may request a copy of the personal data we hold about you. We will provide this in a clear, readable format within a reasonable timeframe.
• Right to rectification: If any data we hold is inaccurate or out of date, you may ask us to correct it. Account details can also be updated directly through your account dashboard.
• Right to erasure: You may request that we delete your personal data. We will honour this request where there is no overriding legal obligation to retain the data (for example, mandatory transaction records for anti-money laundering compliance cannot be deleted early).
• Right to restrict processing: You may ask us to stop using your data for a specific purpose (e.g., marketing) while we investigate a complaint or rectification request.
• Right to object: You may object to data processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate a compelling legitimate reason that overrides your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.
• Right to data portability: You may request your data in a structured, machine-readable format for transfer to another service, where technically feasible.

Security Measures

299bot implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All data in transit is encrypted using 256-bit SSL/TLS protocols.
• Data at rest is stored on secured servers with access restricted to authorised personnel only, on a need-to-know basis.
• Account access is protected by password hashing using industry-standard algorithms. We never store passwords in plain text.
• Automated monitoring systems detect and alert our team to unusual login patterns, large withdrawal requests, and other potential security events in real time.
• Internal staff who handle personal data are bound by confidentiality obligations and receive regular data protection training.
• We conduct periodic security reviews and vulnerability assessments of our platform infrastructure.

Despite these measures, no internet-based system is completely immune to security risks. We encourage you to use a strong, unique password for your 299bot account and to contact us immediately at [email protected] if you believe your account has been compromised.

Children and Minors

299bot is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes date-of-birth verification to enforce this requirement. If we discover that an account has been created by or on behalf of a person under 21, the account will be immediately suspended, any funds will be placed on hold pending investigation, and all personal data associated with the account will be reviewed and handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor may have created a 299bot account using false information, please contact us at [email protected] immediately so that we can investigate and take appropriate action.

Changes to This Privacy Policy

299bot may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes that materially affect how we use your data, we will notify registered users via their registered contact method prior to the changes taking effect.

Your continued use of the 299bot platform after a revised Privacy Policy has been posted constitutes your acceptance of the updated terms. We recommend that you review this page periodically to stay informed of how your data is being managed.