Privacy Policy — 299det

1 Introduction

This Privacy Policy ("Policy") sets out how 299det ("we", "us", "our") collects, processes, stores, and protects personal data relating to users ("you", "your") of the 299det online casino and sports betting platform, accessible at 299det.biz and its associated subdomains.

299det is operated as an online gaming and sports wagering platform serving players based in Bangladesh. All services are provided in English and all financial transactions are denominated in Bangladeshi Taka (৳). We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Policy applies to all personal data collected through your use of the 299det website, mobile interface, live chat support, email correspondence, and any other channel through which you interact with the platform. By registering a 299det account or otherwise using our services, you acknowledge that you have read and understood this Policy.

2 Data We Collect

299det collects personal data through several channels: information you provide directly during registration and account use, data generated automatically through your interaction with the platform, and information received from third-party service partners where permitted. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (used to verify you are 18 years of age or older)
• Email address (primary account contact and communication channel)
• Mobile phone number (for account security and transaction notifications)
• Residential address in Bangladesh (city, district, postal zone)
• Preferred username and encrypted password credentials

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photo identification (national identity card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or equivalent)
• Proof of ownership of the payment method linked to your account (e.g., screenshot of bKash or Nagad wallet confirming your registered mobile number)
• Selfie or live photo for identity confirmation where required

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and timestamps
• Payment method identifiers (e.g., registered mobile number for bKash, Nagad, Rocket, Upay; last four digits of card for Visa or Mastercard)
• Transaction reference numbers generated by payment providers
• Account balance history and bonus credit/debit records

2.4 Gameplay and Betting Data

• Games played, bets placed, wager amounts, outcomes, and winnings
• Session start and end times in Bangladesh Standard Time (BST, UTC+6)
• Bonus usage records, wagering progress, and promotional participation history
• In-play betting activity including market selections and odds accepted

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP data
• Device type, operating system, and browser version
• Referring URL (the page or link that directed you to 299det)
• Pages visited on the 299det platform, time spent per page, and click-path data
• Cookie identifiers and session tokens (see Section 6 for full cookie details)

2.6 Communications Data

• Content of emails, support tickets, and live chat messages exchanged with 299det's support team
• Records of any complaints, disputes, or responsible gaming requests submitted by you
• Marketing preference records (opted-in or opted-out status for promotional communications)

3 How We Use Your Data

299det processes personal data only for specific, defined purposes. The following table summarises the primary purposes for which we use each category of data:

299det does not use automated decision-making processes that produce legal or similarly significant effects on you without human review. Where automated systems flag an account for fraud review or responsible gaming intervention, a trained compliance team member reviews the case before any account action is taken.

4 Legal Basis for Processing

299det processes your personal data on the following legal bases depending on the specific processing activity:

• Performance of a contract: Processing your registration data, financial data, and gameplay data is necessary to operate your account and deliver the services you have contracted with 299det to receive. Without this processing, we cannot provide the platform.
• Legal obligation: Certain processing activities — particularly KYC identity verification, transaction record-keeping, and anti-money-laundering checks — are required by applicable legal and regulatory obligations. 299det must perform this processing regardless of your preferences.
• Legitimate interests: 299det processes technical and device data for fraud prevention, platform security, and aggregate analytics. These activities serve our legitimate interest in maintaining a secure and well-functioning platform, and we have assessed that this processing does not disproportionately impact your privacy rights.
• Consent: Where 299det sends you marketing communications by email or notification, we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time by updating your marketing preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing carried out for other purposes listed above.

5 Data Sharing & Third Parties

299det does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Personal data is shared with third parties only in the following defined circumstances:

5.1 Payment Processing Partners

To process deposits and withdrawals, 299det shares the minimum necessary transaction data with authorised payment partners including mobile banking providers (bKash, Nagad, Rocket, Upay) and card processors (Visa, Mastercard network acquirers). These partners process data solely to complete your requested transaction and are bound by their own regulatory and security obligations.

5.2 Game Content Providers

Live casino games, slots, and fishing game content on 299det is delivered by certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the session token and wager data necessary to render the game and return results. They do not receive your full personal profile.

5.3 Identity Verification Services

Where 299det uses third-party identity verification services to assist with KYC document checks, your submitted identification documents are shared with those services under strict data processing agreements. These services are permitted to use your data only to perform the verification task and must delete it upon completion.

5.4 Legal and Regulatory Disclosure

299det may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. In such cases, 299det will disclose only the data specifically required and will, where legally permitted, notify you of the disclosure.

5.5 Business Transfers

In the event that 299det undergoes a merger, acquisition, or transfer of business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity before the transfer takes effect.

6 Cookies & Tracking Technologies

299det uses cookies and similar technologies (including local storage and session tokens) to operate the platform correctly and to understand how users interact with the site. The following categories of cookies are used:

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, remember your account preferences, and ensure security features operate correctly. Essential cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember choices you make (such as your preferred language setting or last-visited game category) to provide a more personalised experience. They are not essential but improve platform usability.
• Analytics cookies: 299det uses privacy-respecting analytics tools to collect aggregate, anonymised data about how users navigate the platform. This data helps us identify technical issues, improve page performance, and understand which features are most used. Individual users are not identified through analytics data.

299det does not use third-party advertising cookies or behavioural tracking cookies that share your activity data with external advertising networks. Your browsing behaviour on the 299det platform is not used to serve you targeted advertisements on other websites.

You may manage or clear cookies through your browser settings at any time. Please note that disabling essential cookies will affect your ability to log in and use the platform.

7 Data Retention

299det retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or to comply with applicable legal, regulatory, or contractual retention obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account plus a minimum of five years following account closure, to comply with financial record-keeping and anti-money-laundering obligations.
• KYC identity documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later, in accordance with applicable financial compliance requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction.
• Gameplay and betting logs: Retained for a minimum of three years from the date of each session, or longer if required in connection with a dispute, investigation, or regulatory inquiry.
• Support and communications data: Retained for three years from the date of the last communication, or longer if the communication relates to an unresolved complaint or legal matter.
• Marketing consent records: Retained for the duration of your account, plus three years following account closure, to demonstrate compliance with consent obligations.
• Technical and device data (logs): Retained for 12 months on a rolling basis, unless retained longer in connection with a fraud investigation or security incident.

When data reaches the end of its applicable retention period and there is no other legal basis for continued retention, 299det will securely delete the data or anonymise it in a manner that prevents re-identification.

8 Your Data Rights

As a 299det account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, contact 299det's support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request.

• Right of access: You may request a copy of the personal data 299det holds about you, along with information about how it is processed and for what purposes.
• Right to rectification: If any personal data held by 299det about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: In certain circumstances, you may request that 299det delete your personal data. This right is subject to limitations where retention is required by legal obligation or where the data is necessary to resolve a dispute or enforce our Terms.
• Right to restriction of processing: You may request that 299det restrict the processing of your personal data in specific circumstances, such as while a dispute over accuracy is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request that 299det provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of 299det's legitimate interests. We will honour this objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9 Data Security

299det implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 299det platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar.
• Password hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm, meaning that even 299det personnel cannot read your password.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Internal access is governed by role-based permissions, and all access events are logged and auditable.
• Secure infrastructure: The 299det platform is hosted on infrastructure with physical and environmental security controls, including redundant systems designed to prevent data loss from hardware failure.
• Incident response: 299det maintains a documented data security incident response procedure. In the event of a data breach that is likely to result in a risk to your rights, you will be notified promptly and provided with guidance on protective steps you can take.

While 299det applies substantial security measures, no internet-based service can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. You should use a strong, unique password for your 299det account and never share it with any other person.

10 Children's Privacy

299det does not knowingly collect personal data from any individual under the age of 18. During registration, all users are required to confirm their date of birth, and accounts where the stated date of birth indicates the user is under 18 are rejected immediately. KYC identity verification includes age confirmation as a mandatory check.

If 299det becomes aware that personal data has been collected from an individual who was under 18 at the time of collection, the account will be immediately suspended, all associated funds will be frozen pending investigation, and the data will be deleted as quickly as legally permissible. If you believe that a minor may have registered an account on 299det, please contact [email protected] immediately.

Parents and guardians in Bangladesh are encouraged to use parental control software to restrict access to online gambling platforms. 299det supports all reasonable efforts to prevent underage gambling.

11 Third-Party Links

The 299det platform may contain references to third-party service providers such as payment partners (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, Spribe, and others). While 299det takes care in selecting trusted partners, we have no control over the privacy practices of third-party websites or platforms that you may navigate to independently.

This Privacy Policy applies exclusively to personal data processed by 299det within the 299det platform. It does not cover the data practices of any third-party website, application, or service. If you follow a link to a third-party site, we strongly recommend reading the privacy policy of that site before providing any personal information.

12 Updates to This Policy

299det reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made — meaning changes that affect your rights or the fundamental nature of how we process your data — we will notify you by email to your registered address and by displaying a prominent notice on the platform at least 14 days before the changes take effect.

Non-material updates — such as corrections to typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details — may take effect without prior notice and will be reflected in the updated version date shown at the top of this document.

Your continued use of the 299det platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material update, you may request account closure by contacting [email protected] before the updated Policy takes effect.

13 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how 299det handles your personal data, please reach out to our support team. All privacy-related correspondence is handled in English and treated as confidential.

299det is committed to resolving all privacy concerns fairly and promptly. If you submit a data rights request and are not satisfied with our response, you retain the right to escalate the matter to the relevant competent authority in your jurisdiction.