Your Privacy Matters at b299

01 Introduction

b299 ("we", "us", "our") operates the online betting and casino platform available at https://b299.io, serving players across Bangladesh with cricket sportsbook, live casino, slots, and crash game products. We understand that when you register and play on our platform, you are entrusting us with personal information that matters to you. We take that responsibility seriously.

This Privacy Policy sets out in clear, plain English: what personal data we collect from you, why we collect it, how we store and protect it, who we may share it with, how long we keep it, and what rights you have over your own data. This policy applies to all players who access b299 through any device or browser, regardless of location within Bangladesh, including from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Privacy Policy should be read alongside the b299 Terms & Conditions and Responsible Gaming policy, both of which form part of your overall agreement with b299. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy shall prevail with respect to matters of personal data.

02 Data Controller

For the purposes of applicable data protection law, b299 is the data controller responsible for the personal data collected through the Platform. As data controller, b299 determines the purposes and means by which your personal data is processed.

If you have any questions about how b299 processes your personal data, or if you wish to exercise any of the rights described in Section 11 of this policy, you may contact our data protection team at the email address listed in Section 15.

03 Personal Data We Collect

b299 collects the following categories of personal data from players. The specific data collected may vary depending on the services you use and the stage of your relationship with b299.

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for age verification — players must be 21 or older)
• Nationality and country of residence
• Residential address (street, city, postcode)
• Email address
• Mobile phone number (used for account verification and security alerts)
• Copies of government-issued identity documents (National ID Card, passport, driving licence) submitted during KYC verification

3.2 Financial Data

• bKash, Nagad, Rocket, or Upay wallet numbers used for deposits and withdrawals
• Visa or Mastercard details (card number stored in tokenised form only — we never store raw card numbers)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references
• Wagering history: game sessions, bet amounts, win/loss records

3.3 Technical and Usage Data

• IP address at the time of registration and subsequent logins
• Device type, operating system, and browser version
• Session timestamps, login history, and approximate geolocation data derived from IP address
• Pages visited on the Platform, features used, and clickstream data
• Cookie identifiers and similar tracking technology data (see Section 8)

3.4 Communications Data

• Records of all live chat conversations with b299 support agents
• Email correspondence between you and b299
• Any voluntary feedback, survey responses, or complaints you submit

04 How We Collect Your Data

b299 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to b299 when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication. The accuracy of data provided directly by you is your responsibility, and you agree to keep it current and correct.

4.2 Automated Collection

When you access the b299 Platform, our servers automatically record certain technical data including your IP address, browser type, device identifiers, and session activity. This data is collected through server logs and first-party cookies and is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

4.3 Third-Party Sources

b299 may receive data about you from third-party identity verification services engaged to assist with KYC compliance, and from payment processors engaged to facilitate your deposits and withdrawals. Data received from these sources is handled under the same standards as data collected directly and is used only for the purposes described in Section 6.

4.4 Game Providers

Third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may collect technical and gameplay data through their game engines embedded within the b299 Platform. Each provider's own privacy policy governs data collected directly within their game environments. b299 receives aggregated session data (bet amounts, round outcomes, session duration) from providers for the purpose of account management, bonus calculation, and responsible gaming monitoring.

05 Legal Basis for Processing

b299 processes your personal data on one or more of the following legal bases:

06 How We Use Your Personal Data

b299 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or as required by law.

6.1 Account Operations

Your identity and contact data is used to create and maintain your player account, verify your eligibility to use the Platform (including age verification confirming you are 21 or older), and communicate account-related information to you such as deposit confirmations, withdrawal notifications, password reset requests, and security alerts.

6.2 Payment Processing

Your financial data is used solely to process your deposit and withdrawal transactions through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), to maintain an accurate transaction history in your account, and to resolve any transaction disputes you raise with b299 or your payment provider.

6.3 Fraud Prevention and Security

Technical and usage data, together with identity data, is analysed by b299's risk management systems to detect and prevent fraudulent account activity, multiple account registration, bonus abuse, money laundering, and unauthorised access. Where fraud is detected or suspected, b299 may share relevant data with law enforcement or regulatory authorities as required by applicable law.

6.4 Responsible Gaming

b299 monitors wagering patterns, session duration, deposit frequency, and loss rates to identify players who may be developing problematic gambling behaviours. Where such patterns are identified, b299 may proactively contact you with responsible gaming information and may, in appropriate cases, apply protective account restrictions. This monitoring is carried out using automated tools combined with human review.

6.5 Marketing Communications

Where you have given your explicit consent to receive marketing communications, b299 may use your email address and mobile number to send promotional offers, bonus announcements, seasonal promotions (such as Eid, BPL season, or Pohela Boishakh offers), and news about new games or features on the Platform. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting support or using the unsubscribe link in any marketing email.

6.6 Platform Improvement

Anonymised and aggregated usage data is used to analyse how players interact with the b299 Platform, identify technical issues, improve navigation and user experience, and inform product development decisions. This analysis does not involve identifying any individual player.

07 Sharing Your Personal Data

b299 does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited and necessary circumstances:

7.1 Payment Service Providers

To process your deposits and withdrawals, b299 must share the minimum necessary financial data with your chosen payment service provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard). Each provider acts as an independent data controller for the data it receives and is governed by its own privacy policy.

7.2 Identity Verification Partners

b299 engages third-party KYC and identity verification service providers to assist with confirming the identity, age, and source of funds of our players. These providers act as data processors under contract with b299 and are permitted to use the data they receive only for the purpose of providing verification services to b299.

7.3 Game Providers

Certain game providers require a player identifier and session token to initialise a game session. b299 passes a pseudonymous player identifier (not your name or contact details) to game providers for this purpose. This is the minimum data necessary for game functionality.

7.4 Legal and Regulatory Authorities

b299 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. b299 will, where legally permitted, notify you of any such disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of b299's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

08 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. b299 uses first-party cookies (set directly by the b299 domain) to operate the Platform and improve your experience. We do not use third-party advertising cookies.

8.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a browsing session, security cookies that prevent cross-site request forgery, and load-balancing cookies that ensure Platform stability. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language, display settings, and recently viewed game categories to personalise your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, which features are used, and where players encounter errors. This data is used internally to improve the Platform and is never shared with advertising networks.

8.3 Managing Cookies

You may control or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in or using core Platform features. Disabling functional cookies will mean the Platform cannot remember your preferences between sessions. Instructions for managing cookies are available in the help documentation of all major browsers.

09 Data Retention

b299 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. b299 conducts periodic data audits to ensure that data is not retained beyond stated periods.

10 Security Measures

b299 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, loss, alteration, or disclosure.

10.1 Technical Safeguards

• SSL/TLS 256-bit encryption on all data in transit between your device and our servers
• Encryption of sensitive data fields (including payment details) at rest in our databases
• Tokenisation of payment card details — raw card numbers are never stored on b299 servers
• Multi-factor authentication options available for player accounts
• Automated intrusion detection and real-time threat monitoring
• Regular penetration testing conducted by independent security specialists
• Firewalled server environments with restricted access controls

10.2 Organisational Safeguards

• Access to player personal data is restricted on a strict need-to-know basis
• All b299 staff with access to personal data are subject to confidentiality obligations
• Data access activity is logged and reviewed regularly
• Third-party service providers are assessed for data security standards before engagement and are bound by contractual data protection obligations

10.3 Incident Response

In the event of a confirmed personal data breach, b299 will assess the nature and scope of the incident, take immediate steps to contain it, notify affected players without undue delay where the breach poses a risk to their rights, and cooperate fully with any applicable regulatory process. b299 maintains a documented incident response plan that is reviewed and tested regularly.

11 Your Data Rights

As a player registered with b299, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting b299 support at the address in Section 15:

• Right of Access: You have the right to request a copy of the personal data b299 holds about you, together with information about how it is used and with whom it is shared. b299 will respond to access requests within 10 business days.
• Right to Rectification: If you believe that any personal data b299 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require re-submission of KYC documents.
• Right to Erasure: You may request that b299 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to b299's legal retention obligations, which may require us to retain certain data for the periods specified in Section 9.
• Right to Restriction: You may request that b299 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request that b299 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to b299's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though b299 may be able to demonstrate overriding grounds for continued processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

12 Minors and Age Restriction

b299 is strictly an adult-only platform. Players must be 21 years of age or older to register an account or use any service on the Platform. b299 does not knowingly collect or process personal data belonging to individuals under the age of 21.

During registration, players are required to confirm that they meet the minimum age requirement. b299 conducts age verification as part of the KYC process and may request government-issued identity documentation to confirm a player's date of birth. Where b299 discovers or has reasonable grounds to believe that a player's account is held by an individual under 21 years of age, that account will be immediately suspended, all pending transactions cancelled, and any personal data associated with the account deleted in accordance with applicable law.

If you are a parent or guardian and you believe your child has registered an account with b299, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate promptly and take appropriate action.

13 Third-Party Links and Embedded Content

The b299 Platform may contain links to third-party websites or services, or embed content from third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This Privacy Policy applies solely to personal data collected by b299 through its own Platform and does not govern the data practices of any third-party website, service, or game provider.

b299 is not responsible for the privacy practices, cookie policies, or security standards of any third-party service. When you navigate to a third-party website or interact with embedded third-party content, you are subject to that party's own privacy terms. We encourage you to review the privacy policy of any third-party service before providing personal data to them.

b299 does not endorse or make any representations about the privacy standards of third-party services and shall not be liable for any damage or loss arising from your use of or reliance on the privacy practices of third parties.

14 Changes to This Privacy Policy

b299 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform functionality. All updates will be published on this page at https://b299.io/privacy-policy with a revised effective date displayed at the top of the document.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — b299 will provide at least 14 days' advance notice by sending an email to your registered address before the new version takes effect. Continued use of the b299 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically to stay informed about how b299 protects your data. The version history of this policy is available upon request by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way b299 processes your personal data, please contact us using the details below. Our data protection team is available to assist you and will respond to all privacy-related enquiries within 10 business days.

• Email: [email protected] (subject line: "Privacy Request" or "Data Rights Request")
• Platform: https://b299.io
• Operating Hours: Monday to Sunday, 09:00 – 23:00 Bangladesh Standard Time (BST, UTC+6)

b299 is committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response to your privacy enquiry, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.