bd299 Privacy Policy — Your Data, Our Responsibility

1.1 bd299 is an online sports betting and casino platform accessible at bd299.io. bd299 is operated for and targeted at players located in Bangladesh. References to "bd299", "we", "us", and "our" in this Privacy Policy refer to the bd299 platform and its operating entity.

1.2 bd299 acts as the data controller for the personal information you provide when registering and using the platform. As data controller, bd299 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

1.3 For any questions or concerns about how bd299 handles your personal data, or to exercise any of your rights described in this policy, please contact our support team using the details set out in Section 13 of this policy.

2.1 bd299 collects and processes the following categories of personal data in connection with your use of the platform:

Identity Data: Your full legal name, date of birth, and government-issued identification details (such as your Bangladesh National Identity Card number or passport number). This data is required to verify your identity and confirm that you meet the minimum age requirement of 21 years.

Contact Data: Your mobile phone number, email address, and residential address in Bangladesh. This information is used to communicate with you about your account, transactions, promotions (where you have consented), and platform updates.

Financial Data: Details of your payment accounts, including bKash, Nagad, Rocket, and Upay wallet numbers, Visa or Mastercard card details (where applicable), and bank account information for BRAC Bank, City Bank, Dutch-Bangla Bank, and other supported institutions. We also maintain a full record of your deposit and withdrawal transaction history on the bd299 platform.

Technical Data: Information automatically collected when you access the bd299 platform, including your IP address, device type and model, operating system version, browser type and version, session identifiers, and time-zone settings. This data is used for security monitoring, fraud detection, and to ensure the platform functions correctly on your device.

Usage Data: Information about how you interact with the bd299 platform, including the pages and features you visit, the games you play, the bets you place, your session duration, and the frequency and timing of your visits. This data helps us improve the platform and supports our responsible gaming monitoring obligations.

Communications Data: Records of any communications between you and the bd299 support team, including live chat transcripts, WhatsApp messages, and email correspondence. These records are retained for quality assurance and complaint resolution purposes.

2.2 bd299 does not collect or process special categories of sensitive personal data — such as data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data used for identification purposes — unless required by law or with your explicit prior consent.

3.1 Directly from You. The majority of the personal data bd299 holds about you is provided directly by you during the account registration process, during KYC verification, when you make a deposit or withdrawal, when you contact our support team, or when you opt into a promotion.

3.2 Automatically During Platform Use. When you access the bd299 website, our servers automatically log certain technical data, including your IP address, device information, and browsing behaviour on our platform. This collection occurs through standard web server logs and through cookies and similar technologies described in Section 7.

3.3 From Third-Party Service Providers. bd299 may receive personal data about you from third-party sources in limited circumstances, including:

• Identity and age verification providers, who confirm the authenticity of the documents you submit during KYC;
• Payment processors such as bKash, Nagad, Rocket, and Upay, who communicate transaction confirmation and status information;
• Fraud prevention and AML screening services, which may flag accounts or transactions for review based on risk models;
• Analytics providers, who supply aggregated and anonymised data about platform usage patterns.

3.4 bd299 does not purchase personal data lists from data brokers or any third-party marketing sources.

4.1 bd299 uses your personal data for the following purposes, each of which is supported by a lawful basis for processing:

• Account Creation and Management: To register your account, verify your identity, manage your profile, and provide access to all bd299 platform features. Lawful basis: contract performance.
• Transaction Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi banks. Lawful basis: contract performance.
• KYC and Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with applicable regulations. Lawful basis: legal obligation.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, match-fixing, and other prohibited conduct. Lawful basis: legitimate interests; legal obligation.
• Responsible Gaming Monitoring: To monitor your betting and gaming patterns for signs of problem gambling and to apply any responsible gaming limits you have set on your account. Lawful basis: legitimate interests; legal obligation.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance via live chat, WhatsApp, and email. Lawful basis: contract performance; legitimate interests.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the features, content, and performance of the bd299 platform. Lawful basis: legitimate interests.
• Marketing Communications: To send you information about promotions, bonuses, and new features, but only where you have given your explicit consent. You may withdraw your marketing consent at any time by contacting our support team. Lawful basis: consent.
• Legal and Regulatory Compliance: To meet our obligations under applicable law, including record-keeping requirements, responding to lawful requests from regulatory and law enforcement authorities, and resolving legal disputes. Lawful basis: legal obligation.

4.2 bd299 will not use your personal data for any purpose that is incompatible with the purposes listed in clause 4.1. If bd299 intends to use your data for a new purpose, we will notify you and, where required, seek your consent before doing so.

5.1 bd299 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited circumstances:

Payment Processors: We share the financial data necessary to process your transactions with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, City Bank, and Dutch-Bangla Bank. These partners process your data only as necessary to complete the specific transaction and are contractually prohibited from using it for any other purpose.

KYC and Identity Verification Providers: We share your identity documents and related data with accredited identity verification services to fulfil our age-verification and anti-money laundering obligations. These providers operate under strict data-processing agreements with bd299.

Game Studios and Platform Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe operate their games on the bd299 platform. These providers may receive certain session and technical data to deliver their games, but do not receive your full personal profile or financial details.

Legal and Regulatory Authorities: bd299 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a court order, or a lawful regulatory request. We will notify you of any such disclosure unless prohibited from doing so by law.

Professional Advisers: In limited circumstances, bd299 may share your data with legal advisers, auditors, or insurers under strict confidentiality obligations, for example in the context of resolving a legal dispute or conducting a financial audit.

5.2 Where bd299 shares your data with a third-party data processor, we ensure that an appropriate data-processing agreement is in place that requires the processor to handle your data in accordance with applicable data protection standards, to implement appropriate security measures, and to process the data only on bd299's documented instructions.

5.3 bd299 does not transfer your personal data to recipients outside Bangladesh unless required to do so by the operational necessity of a specific service partner (for example, a game studio with servers hosted overseas), in which case we take appropriate steps to ensure that your data remains protected to an equivalent standard.

6.1 bd299 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bd299 platform;
• Encryption of sensitive data fields (including payment details and identity documents) at rest in our database systems;
• Role-based access controls that restrict access to personal data to only those bd299 staff members who require it to perform their job functions;
• Regular security assessments and vulnerability scanning of platform infrastructure;
• Multi-factor authentication requirements for staff accessing systems that hold personal data;
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity in real time.

6.2 While bd299 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for keeping your own login credentials secure and for notifying bd299 immediately if you suspect unauthorised access to your account.

6.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bd299 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

7.1 bd299 uses cookies — small text files stored on your device — and similar technologies to make the platform work correctly, to keep your session active, and to understand how players use the platform in aggregate.

7.2 The following categories of cookies are used by bd299:

• Strictly Necessary Cookies: These cookies are essential for the bd299 platform to function. They manage your login session, keep your account authenticated, and maintain your language and currency preferences. These cookies cannot be disabled without impairing your use of the platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the bd299 platform — for example, which pages are visited most often and whether any errors are encountered. This data is used solely to improve the platform and is never used to identify individual users.
• Functionality Cookies: These cookies remember choices you make — such as your preferred game categories or display settings — to provide a more personalised experience on your next visit.

7.3 bd299 does not use third-party advertising cookies, behavioural tracking cookies, or any cookies designed to build a profile of your browsing activity across other websites.

7.4 You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using the bd299 platform.

8.1 bd299 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations. The principal retention periods are as follows:

• Identity and KYC Data: Retained for the lifetime of your bd299 account and for a minimum of five (5) years after account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for the lifetime of your account and for a minimum of seven (7) years after account closure, in compliance with financial record-keeping obligations.
• Contact Data: Retained for the lifetime of your account and for two (2) years after account closure, after which it is deleted or anonymised.
• Technical and Usage Data: Log data is retained for thirteen (13) months; aggregated usage analytics are retained for up to twenty-four (24) months before anonymisation or deletion.
• Marketing Preference Data: Retained until you withdraw your marketing consent, plus one (1) year to maintain a suppression record.
• Support Communications: Retained for three (3) years after the resolution of the relevant enquiry or complaint.

8.2 At the end of the applicable retention period, bd299 will securely delete or anonymise your personal data using industry-standard data destruction methods. Anonymised data — which cannot be used to identify you — may be retained beyond the above periods for statistical and research purposes.

9.1 As a bd299 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team using the details in Section 13:

• Right of Access: You have the right to request a copy of the personal data that bd299 holds about you, together with information about how it is processed. bd299 will provide this information within thirty (30) days of receiving your request.
• Right to Rectification: If any personal data bd299 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain data directly through your account settings.
• Right to Erasure: You have the right to request that bd299 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (if consent was the lawful basis), or where the processing is otherwise unlawful. This right is subject to bd299's legal obligations to retain certain data for defined periods.
• Right to Restrict Processing: You have the right to request that bd299 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while your objection to processing is being considered.
• Right to Data Portability: Where bd299 processes your personal data on the basis of your consent or the performance of a contract, you have the right to receive a copy of that data in a structured, machine-readable format, or to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to bd299's processing of your personal data where that processing is based on our legitimate interests. bd299 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is required for legal claims.
• Right to Withdraw Consent: Where bd299 processes your data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

9.2 bd299 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by up to two further months, in which case bd299 will notify you of the extension and the reasons for it within the initial thirty-day period.

9.3 bd299 does not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

10.1 The bd299 platform is strictly intended for individuals who are 21 years of age or older. bd299 does not knowingly collect, process, or store personal data belonging to any person under the age of 21.

10.2 Age verification is a mandatory step in the bd299 account registration and KYC process. Any account found to have been created by a person under 21 will be immediately suspended, all personal data associated with that account will be deleted or returned, and any funds held will be dealt with in accordance with applicable law.

10.3 If you are a parent or guardian and believe that a minor has created an account on bd299 or has provided us with their personal data without your knowledge, please contact our support team immediately using the contact details in Section 13. We will investigate promptly and take appropriate action.

11.1 The bd299 platform may, from time to time, contain references to third-party game studios or payment providers. While bd299 takes care in selecting its service partners, we are not responsible for the privacy practices or content of any third-party platforms or services.

11.2 If you access any third-party service in connection with your use of bd299 — for example, your bKash or Nagad mobile app to complete a transaction — your interaction with that third-party service is governed by that service's own privacy policy, not this one. bd299 encourages you to read the privacy policies of all third-party services you use.

11.3 bd299 does not embed third-party social media widgets, advertising pixels, or analytics trackers from external platforms on the bd299 website.

12.1 bd299 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will publish the updated version on this page and notify active players via a notice on the bd299 platform at least seven (7) days before the changes take effect.

12.2 The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how bd299 protects your personal data.

12.3 Your continued use of the bd299 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should stop using the platform and may request account closure by contacting our support team.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd299 handles your personal data, please contact our Data Support team through any of the following channels:

13.2 When submitting a data rights request, please include your registered username, the email address associated with your bd299 account, and a clear description of your request. This will help our team locate your records promptly and respond within the required thirty (30) day window.

13.3 bd299 is committed to resolving all privacy-related concerns quickly and fairly. If you are not satisfied with our response, you have the right to escalate the matter to the appropriate data protection authority.