b299 Privacy Policy — How We Handle Your Data

1. Introduction

b299 ("b299", "We", "Us", "Our") operates the online casino and sports betting platform accessible at https://b299.bio. This Privacy Policy ("Policy") describes how b299 collects, uses, stores, discloses, and protects personal information about users ("You", "Your", "Player") of the b299 platform in accordance with applicable data protection law. By registering an account or using the b299 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all personal data collected through your use of the b299 website, mobile-optimised web application, customer support channels, and any communications b299 sends to you. It does not apply to third-party websites or services linked from the b299 platform — those providers have their own privacy policies which you should review independently.

Privacy at a Glance

The cards below summarise the six most important aspects of how b299 handles your data. They are for reference only — the full policy below is the authoritative document.

2. Data Controller

For the purposes of this Privacy Policy, b299 is the data controller — the entity responsible for determining how and why your personal data is processed. If you have any questions about this Policy or wish to exercise your data rights, you may contact the b299 data protection team directly.

3. Information We Collect

b299 collects personal information in three ways: information you provide directly when registering or using the platform, information collected automatically during your use of the platform, and information received from third-party verification and payment partners. The table below summarises the categories of data collected and the primary purpose for each.

b299 does not collect or store payment card numbers on its own servers. All card-based transactions are handled by PCI-DSS compliant third-party payment processors. b299 retains only a tokenised reference for reconciliation purposes.

4. How We Use Your Information

b299 uses your personal data only for the purposes set out in this Policy. We do not use your data for automated decision-making that produces legal or similarly significant effects without a human review step. The main purposes for which we process your data are:

• To create and manage your b299 account, including verifying your identity and age, authenticating your login sessions, and processing your deposits and withdrawals.
• To provide and improve the b299 platform — delivering games, processing bets, calculating payouts, and identifying and fixing technical issues that affect platform performance.
• To comply with legal obligations, including anti-money laundering (AML) requirements, KYC identity verification obligations, responsible gaming regulations, and any reporting requirements imposed by applicable law.
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the b299 Terms and Conditions.
• To provide customer support — responding to your enquiries, resolving account disputes, and acting on responsible gaming requests such as deposit limits, time-outs, and self-exclusion.
• To send you transactional and account-related communications, including deposit confirmations, withdrawal updates, bonus award notices, and security alerts. We will only send promotional communications if you have explicitly opted in to receive them, and you may opt out at any time.

5. Legal Basis for Processing

b299 processes your personal data on the following legal bases:

• Contract performance — processing your data is necessary to provide you with the b299 account, execute bets, and process payments as agreed when you registered.
• Legal obligation — processing is necessary to comply with applicable laws, including AML regulations, KYC requirements, and responsible gaming obligations.
• Legitimate interests — b299 processes certain technical and usage data based on its legitimate interest in operating a secure, fair, and fraud-resistant platform. We balance these interests against your privacy rights and do not process data where your interests override ours.
• Consent — where b299 sends optional promotional communications, we do so on the basis of your explicit consent. You may withdraw consent for promotional communications at any time by updating your account notification settings or contacting support.

6. Sharing Your Information

b299 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors — b299 shares necessary payment reference data (not full card or account details) with bKash, Nagad, Rocket, Upay, and other payment partners solely for the purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers — b299 shares identity documents and biographic data with KYC verification partners for the purpose of age verification and anti-fraud screening. These partners are contractually bound to process data only for the stated purpose and to maintain equivalent data security standards.
• Game and platform providers — game outcome data and session logs may be shared with third-party game providers (including Evolution Gaming, Pragmatic Play, and Spribe) solely for the purpose of game delivery, RNG certification audit, and technical support.
• Law enforcement and regulatory authorities — b299 will disclose personal data to governmental, law enforcement, or regulatory bodies where required to do so by applicable law, court order, or to protect the safety of users or the public.

7. Cookies and Tracking Technologies

The b299 web application uses cookies and similar tracking technologies to operate correctly and to improve the player experience. b299 uses three categories of cookies:

• Essential cookies — strictly necessary for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies — used by b299 to understand aggregate usage patterns, identify performance bottlenecks, and improve the platform. These cookies collect anonymised data and do not track your activity on websites other than b299.
• Preference cookies — used to remember your language selection and display preferences so that you receive a personalised experience each time you visit b299. These cookies store no sensitive personal data.

b299 does not deploy third-party advertising, retargeting, or cross-site tracking cookies. You may clear cookies at any time through your browser settings. Disabling analytics or preference cookies will not prevent you from using the b299 platform, though some display preferences may reset.

8. Data Retention

b299 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data (identity documents, contact details, financial transaction records) is retained for a minimum of 5 years following account closure to comply with AML and record-keeping obligations. Game history and betting records are retained for 7 years. Technical logs (IP addresses, session data) are retained for 90 days.

When your data is no longer required, b299 will securely delete or anonymise it. Where anonymisation is not technically feasible, b299 will ensure the data is stored in a restricted-access environment and is not actively processed. If you request deletion of your account and there is no outstanding legal obligation requiring us to retain your data, your personal information will be deleted within 30 days of the request.

9. Data Security

b299 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a strict need-to-know basis, and regular internal security reviews.

In the event of a personal data breach that poses a risk to your rights and freedoms, b299 will notify affected players without undue delay and, where required by law, will also notify the relevant regulatory authority. b299 will provide clear information about the nature of the breach, the data affected, and the steps being taken to address it. To report a suspected security vulnerability, contact [email protected] immediately.

10. Your Data Rights

As a b299 player, you have the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected]. b299 will respond within 2 business days of receipt and will complete all valid requests within 30 calendar days.

• Right of access — You may request a copy of all personal data b299 holds about you, along with information about how it is processed.
• Right to rectification — If any personal data b299 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where b299 has processed it unlawfully.
• Right to restriction — You may request that b299 restrict processing of your data in certain circumstances, for example while a rectification request is being reviewed.
• Right to object — You may object to processing carried out on the basis of b299's legitimate interests. b299 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

b299 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case b299 may charge a reasonable administrative fee or decline to act, providing written reasons. Where b299 is unable to fulfil a request — for example, because retaining data is required by law — b299 will explain the reason in writing.

11. Third-Party Services

The b299 platform integrates third-party game content from providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and Microgaming. These providers operate their own software environments and may collect certain technical data (such as session identifiers) directly from your browser or device for the purpose of delivering their games. b299 does not control the data practices of these third-party game providers beyond the contractual obligations in its provider agreements.

b299 is not responsible for the content, privacy practices, or security of any third-party website or service that is accessible from a link on the b299 platform. If you follow a link to any third-party site, please review that site's privacy policy independently before submitting any personal information.

12. Children's Privacy

The b299 platform is strictly for adults aged 21 and above. b299 does not knowingly collect personal data from any person under the age of 21. If b299 discovers or is notified that it has collected personal data from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the originating payment method where practically possible. If you believe that a person under the age of 21 has registered a b299 account, please contact us immediately at [email protected].

13. Changes to This Policy

b299 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the structure of the b299 platform. Where a change is material — for example, a new category of data being collected or a new third-party sharing arrangement — b299 will post a prominent notice on the platform and, where reasonably practicable, notify registered players by mobile message at least 7 days before the change takes effect. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Continued use of the b299 platform after a policy update constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to raise a data protection concern, please contact the b299 data protection team. We aim to respond to all privacy enquiries within 2 business days. Support is available in English and Bengali.