Privacy Policy — 299d Casino

1. Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by 299d ("299d", "we", "us", "our") in connection with your use of the 299d platform at 299d.io and any associated services, including online casino games, sports betting, live dealer tables, the 299d cashier, customer support interactions, and promotional communications.

299d is committed to handling your personal data with care, transparency, and in accordance with recognised data protection principles. We collect only the data we genuinely need to operate the platform safely, process your transactions, comply with legal obligations, and provide you with a personalised and secure experience. We do not sell your personal data to third-party marketers, and we do not share it beyond the purposes described in this Policy.

By registering a 299d account, accessing the platform via the 299d Login page, or continuing to use any 299d service after the effective date of this Policy, you acknowledge that you have read, understood, and consented to the practices described herein. If you do not agree to this Policy, you must discontinue use of the 299d platform.

This Policy should be read alongside the 299d Terms & Conditions, which are available at /terms-conditions, and the Responsible Gaming Policy available at /responsible-gaming.

2. Data Controller

For the purposes of this Policy, 299d acts as the data controller in respect of all personal data collected through the 299d platform. The data controller is responsible for determining the purposes and means by which personal data is processed.

If you have any questions, requests, or concerns relating to your personal data and how 299d handles it, you may contact our data protection point of contact using the details provided in Section 15 of this Policy. All data-related enquiries will be acknowledged within five (5) business days and responded to in full within thirty (30) days.

3. Data We Collect

299d collects personal data in several categories depending on how you interact with the platform. The following table summarises the types of data we collect and the context in which they arise:

299d does not intentionally collect special category data (such as health information, biometric data, or political opinions) unless specifically required by applicable law or regulation, such as where a player requests a medically supported self-exclusion. Any such data is handled with heightened care and is not used for any purpose beyond the specific legal requirement that necessitated its collection.

4. How We Collect Data

299d collects personal data through the following means:

• Direct provision by you: When you register a 299d account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey, you provide personal data directly to 299d.
• Automated technologies: As you use the 299d platform, we automatically collect certain technical and usage data through server logs, cookies, pixel tags, and similar tracking technologies. This data is collected passively as part of normal platform operation.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, our payment processing partners share limited transaction confirmation data with 299d to reconcile your account balance.
• Identity verification providers: Where third-party KYC services are used to verify your identity documents, those providers transmit a verification result and a summary of the data checked to 299d.
• Fraud prevention services: 299d may receive risk signals from fraud detection partners based on technical data associated with your account activity.
• Publicly available sources: In limited circumstances, such as investigating a suspected breach of the 299d Terms & Conditions, 299d may consult publicly available information to corroborate data held on account.

5. How We Use Your Data

299d uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. The primary purposes for which 299d processes personal data are:

• Account management: Creating, maintaining, and securing your 299d account, including authentication and password recovery.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and reconciling your account balance.
• Identity verification: Verifying your identity, age (21+ requirement), and source of funds in accordance with anti-money laundering obligations.
• Legal compliance: Fulfilling obligations under applicable law, including record-keeping, reporting, and responding to lawful requests from regulatory or law enforcement authorities.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, duplicate accounts, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling, enforcing deposit limits and self-exclusion requests, and complying with responsible gaming obligations.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of support interactions.
• Platform improvement: Analysing aggregated usage data to understand how players use the 299d platform and to improve game selection, performance, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about 299d — only where you have consented to receive such communications and have not subsequently opted out.
• Personalisation: Tailoring the 299d experience to your preferences, including recommending games relevant to your play history, where you have not opted out of personalisation features.

299d does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human review. Any automated screening (for example, fraud risk scoring) that may affect your account status is subject to review by a 299d team member before a final decision is taken.

6. Legal Basis for Processing

Every instance of personal data processing by 299d is underpinned by one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 299d, including account management, transaction processing, and platform access.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and lawful authority requests.
• Legitimate interests: Processing necessary for the legitimate interests of 299d or a third party, such as fraud prevention, platform security, and business analytics — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Data

299d does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with legal obligations.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical session data necessary to deliver their games to your device.
• Fraud prevention services: Specialist providers that help 299d detect and prevent fraudulent activity, account abuse, and money laundering.
• Legal and regulatory authorities: 299d will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law or a valid legal process.
• Professional advisers: Lawyers, auditors, and other professional advisers who require access to data on a confidential basis to provide services to 299d.
• Business transfers: In the event of a merger, acquisition, or asset sale involving 299d, personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to how your data is handled as a result.

All third parties with whom 299d shares personal data are required by contract to handle that data securely, to use it only for the specified purpose, and to comply with applicable data protection standards. 299d does not permit third-party service providers to use your data for their own marketing purposes.

8. Data Retention

299d retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce agreements. The following general retention periods apply:

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, 299d will securely delete or anonymise that data so that it can no longer be associated with any individual.

9. Data Security

299d implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 299d servers, ensuring that your personal and financial data cannot be intercepted during transmission.
• Password hashing using industry-standard one-way cryptographic algorithms. Your password is never stored or transmitted in a readable format. Not even 299d staff can retrieve your plain-text password.
• Access controls: Personal data is accessible only to 299d staff who require it to perform their specific job function. All access is logged and audited.
• Secure data centres: 299d servers are hosted in data centres with physical security controls, environmental protection, redundant power, and regular security auditing.
• Regular security testing: The 299d platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Fraud monitoring: Automated systems continuously monitor account activity for patterns that indicate fraud, account takeover attempts, or other security threats.

While 299d takes all reasonable steps to protect your data, no platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 299d will notify affected players without undue delay and will take all appropriate remedial action. If you believe your account has been compromised, contact [email protected] immediately.

10. Cookies & Tracking Technologies

The 299d platform uses cookies and similar technologies to ensure the platform functions correctly, to keep you logged in during a session, to remember your preferences, and to gather analytics data that helps us improve the service. The cookies used by 299d fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing your ability to use 299d.
• Functional cookies: Used to remember your preferences, such as your preferred language or display settings, so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the 299d platform. This data helps us understand which features are most used and where improvements can be made. Analytics data is not linked to your individual identity.
• Marketing cookies: Used to deliver promotional content relevant to your interests, where you have consented to receive marketing communications. These cookies may track whether you have viewed or interacted with a particular promotion.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse some or all cookies, or to alert you when a cookie is being placed. Note that disabling strictly necessary cookies will prevent you from logging in to or using the 299d platform. Disabling analytics or marketing cookies will not affect your ability to play games or make transactions.

299d does not use third-party advertising networks that track you across unrelated websites for behavioural advertising purposes beyond the 299d platform itself.

11. Your Rights

As a data subject, you hold the following rights in relation to your personal data held by 299d. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and specify the right you wish to exercise:

• Right of access: You have the right to request a copy of the personal data that 299d holds about you, together with information about how that data is being used.
• Right to rectification: If any personal data held by 299d is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request that 299d delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, 299d cannot delete transaction records that must be retained for seven years under applicable law.
• Right to restriction of processing: You may request that 299d restrict the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 299d in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your data where it is based on legitimate interests or where it is used for direct marketing purposes. In the case of direct marketing, 299d will cease processing immediately upon receipt of a valid objection.
• Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces a legal or similarly significant effect, without human review.

299d will respond to all valid data rights requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, of which you will be informed. Identity verification may be required before a request is processed to ensure that data is not disclosed to an unauthorised party.

12. Children & Minors

299d is strictly an adult platform. The 299d platform is not directed at, and is not intended for use by, any person under the age of 21. 299d does not knowingly collect personal data from any person under the age of 21. All prospective players are required to confirm their date of birth during registration, and age verification checks are applied to all accounts.

If 299d discovers that it has inadvertently collected personal data from a person under the age of 21, all data associated with that person's account will be permanently deleted, the account will be closed, and any deposits made will be returned to the original payment method. If you have reason to believe that a minor has created an account on 299d, please notify us immediately at [email protected].

Parents and guardians who are concerned about underage access to online gambling platforms are encouraged to use parental control software tools available for desktop and mobile devices to restrict access. 299d supports all responsible efforts to prevent underage gambling.

13. International Data Transfers

In order to provide the 299d platform to players across Bangladesh, certain personal data may be processed on servers or by service providers located outside Bangladesh. Where such transfers occur, 299d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards used by 299d for international transfers include contractual clauses in agreements with third-party processors that impose data protection obligations equivalent to those described in this Policy, and selection of processors that operate under recognised security and privacy frameworks. 299d does not transfer personal data to jurisdictions that lack adequate data protection standards without first implementing appropriate contractual protections.

14. Changes to This Policy

299d reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — 299d will notify you by email to the address registered on your account and by displaying a prominent notice on the 299d platform for a reasonable period prior to the changes taking effect.

Your continued use of the 299d platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. The version of this Policy bearing the most recent effective date shown at the top of this document is the version that currently governs the processing of your personal data.

If you wish to review previous versions of this Policy, you may request them from [email protected]. Archived versions are retained for a minimum of three (3) years from the date they were superseded.

15. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 299d handles your personal data, please reach out using the details below. All privacy-related communications are handled in English.

• Email: [email protected] — subject line: "Privacy Request" or "Data Rights Request"
• Live Chat: Available 24/7 via the 299d platform interface
• Response time: Acknowledgement within 5 business days; full response within 30 days

299d is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with 299d's response to a privacy complaint, you may have the right to escalate your complaint to an appropriate data protection supervisory authority in your jurisdiction.