Privacy Policy — How www299 Protects Your Data

Introduction

www299 is Bangladesh's trusted online casino and sports betting platform, accessible at www299.app. As part of operating this platform and delivering services to our registered players, we necessarily collect and process a range of personal information. We take our obligations as a data processor seriously, and this Privacy Policy is designed to make our data practices fully transparent.

This Privacy Policy applies to all personal data collected through the www299 website and any associated services, including live casino games, sports betting markets, crash games, virtual sports, customer support interactions, and promotional communications. It applies to all registered players and to unregistered visitors who access any part of www299.app.

This Privacy Policy should be read alongside the www299 Terms & Conditions, which govern the overall relationship between the Player and the platform, and the Responsible Gaming Policy, which sets out our commitments to player welfare. Together, these three documents form the complete framework governing your use of www299.

We may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players via their registered email address or via a prominent notice on the platform. The "Last Updated" date at the top of this document indicates when the most recent revision was made. Continued use of the platform after an update constitutes acceptance of the revised Privacy Policy.

Data We Collect

www299 collects personal data through several channels: directly from you when you register, verify your account, or interact with support; automatically when you use the platform; and, in limited circumstances, from third-party partners such as payment providers. The specific categories of data we collect are described below.

Information you provide directly: When you create an account, you will provide identity data (such as your full name and date of birth), contact data (your mobile number and email address), and, during KYC verification, documentary evidence of your identity and address. If you contact our support team, the content of those communications is also retained.

Information collected automatically: When you access www299.app, our systems automatically collect technical data including your IP address, device type and operating system, browser version, referring URL, and session timestamps. Usage data — such as which games you played, how long your sessions lasted, and what betting markets you accessed — is also collected to support responsible gaming monitoring and platform improvement.

Information from third parties: Payment providers such as bKash, Nagad, Rocket, and Upay may share transaction confirmation data with www299 to facilitate deposit and withdrawal processing. We may also receive limited identity verification data from third-party KYC service providers where we use such tools to assist in verifying player identity documents.

In all cases, the data collected is limited to what is necessary for the purposes described in this Privacy Policy. We do not purchase personal data from data brokers or other commercial data suppliers.

How We Use Your Data

www299 uses the personal data it collects for the following specific purposes. We process data only where we have a lawful basis for doing so — either because processing is necessary to fulfil our contract with you, because we are required to by law, because you have given consent, or because we have a legitimate interest that is not overridden by your rights.

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate essential account notifications to you.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain an accurate transaction history on your account.
• KYC and age verification: To confirm that you meet the minimum age requirement of 18 years and to verify your identity in accordance with our anti-money-laundering obligations.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, and abuse of promotional systems.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion periods you have set, and to provide responsible gaming interventions where appropriate.
• Customer support: To respond to your queries, resolve disputes, and maintain records of your interactions with our support team for quality assurance purposes.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features and products that better serve our players.
• Promotional communications: Where you have opted in, to send you information about bonuses, promotions, tournaments, and new platform features. You may withdraw this consent at any time without affecting your access to the platform.
• Legal compliance: To comply with any applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

www299 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming monitoring may involve automated flagging, but any intervention that affects your account access is reviewed by a member of our responsible gaming team before action is taken.

Data Sharing & Third Parties

www299 may share your personal data with the following categories of third parties in the circumstances described:

• Payment providers (bKash, Nagad, Rocket, Upay): We share the minimum data necessary to process your deposit or withdrawal request, including your account reference, transaction amount, and payment method details. These providers are bound by their own privacy policies and applicable financial regulations.
• Game providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and others): When you launch a game, a session token and limited account reference data is passed to the relevant game provider to authenticate your session. Game providers do not receive your full identity or financial information.
• KYC and identity verification partners: Where we use third-party services to assist with document verification, we share the relevant identity documents and data with those providers under strict confidentiality agreements and solely for verification purposes.
• IT and hosting infrastructure providers: Our platform runs on cloud and server infrastructure provided by third-party technology partners. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory and law enforcement authorities: We may be required by applicable law to disclose personal data to government bodies, courts, or law enforcement agencies. In such cases, www299 will comply with its legal obligations while taking all reasonable steps to limit the scope of disclosure to what is legally required.

All third parties with whom www299 shares personal data are required, by contract, to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared. www299 remains responsible for ensuring that these third-party arrangements comply with our data protection obligations.

Cookies & Tracking Technologies

www299 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, enhance your user experience, and gather analytical data about how the platform is used. This section explains what types of cookies we use and why.

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency settings, and ensure that security features operate correctly. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences and personalisation choices — such as your preferred game categories, responsible gaming settings, and notification preferences — to provide a more tailored experience across sessions.
• Analytical cookies: We use analytics tools to understand aggregate patterns in how players navigate and use the platform. This helps us identify underperforming features, improve page layouts, and allocate development resources appropriately. Analytical data is processed at an aggregate, anonymised level wherever possible.
• Security and fraud-detection cookies: These cookies help our security systems identify suspicious activity, detect automated bots, and protect player accounts from unauthorised access attempts.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is set. Please note that disabling strictly necessary cookies may prevent certain platform features from working correctly. www299 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the platform.

Data Security

www299 takes the security of your personal data seriously. We implement a layered security approach designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Firewalls and intrusion detection: Our servers are protected by enterprise-grade firewalls. Intrusion detection and prevention systems monitor network traffic continuously for suspicious activity.
• Access controls: Access to personal data held by www299 is restricted to staff and systems that have a legitimate operational need. Access permissions are role-based and reviewed regularly. All access events are logged.
• Two-factor authentication (2FA): www299 strongly encourages all players to enable 2FA on their accounts. 2FA adds a second layer of verification at login, significantly reducing the risk of unauthorised account access even if a password is compromised.
• Regular security assessments: www299 conducts periodic internal security reviews and, where appropriate, engages independent security professionals to conduct vulnerability assessments of our platform infrastructure.

While www299 takes all reasonable and industry-standard steps to protect your personal data, no system is entirely immune from all conceivable threats. Players are responsible for maintaining the security of their own login credentials, devices, and network connections. www299 cannot be held liable for data security incidents that result from a player's own failure to maintain reasonable personal security practices.

In the event of a data security incident that poses a risk to your rights or interests, www299 will take prompt action to contain the incident and, where required by applicable law, will notify affected players and relevant authorities within applicable notification timeframes.

Data Retention

www299 does not retain personal data for longer than is necessary for the purpose for which it was collected, or for longer than is required by applicable legal obligations. The following general retention principles apply:

• Active account data: Identity, contact, and financial data associated with an active player account is retained for the duration of the account's active status and for a minimum period of five (5) years following account closure, to satisfy financial record-keeping and anti-money-laundering requirements.
• KYC and verification documents: Copies of identity and address documents submitted during the KYC process are retained for a minimum of five (5) years following the date of verification or account closure, whichever is later, in accordance with applicable legal obligations.
• Transaction records: Records of all deposits, withdrawals, and wagers are retained for a minimum of five (5) years following the date of the relevant transaction.
• Support communications: Records of customer support interactions (live chat transcripts, email correspondence) are retained for up to three (3) years from the date of the interaction, after which they are deleted unless required for an ongoing dispute or legal matter.
• Technical and usage data: Anonymised or aggregated usage and analytical data may be retained indefinitely for platform improvement purposes. Personal identifiers are removed from this data as soon as retention of the identifying information is no longer required.
• Marketing data: Marketing preference data (including opt-in records) is retained for the duration of your account and for one (1) year following account closure or withdrawal of consent, to demonstrate compliance with consent obligations.

When a retention period expires, personal data is either securely deleted (using methods that render recovery impossible) or anonymised in a way that means the data can no longer be linked back to any identifiable individual. Requests for early deletion are handled in accordance with the "Your Rights" section of this Policy.

Your Rights

As a player on the www299 platform, you hold specific rights in relation to your personal data. www299 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To exercise any of the rights described below, contact our support team via live chat or email at [email protected].

• Right of access: You have the right to request a copy of the personal data that www299 holds about you, along with information about how it is being processed and on what legal basis.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update many data fields directly via your account settings.
• Right to erasure ("right to be forgotten"): You may request that www299 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where you object to processing and there is no overriding legitimate interest. Please note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to restriction: You may request that www299 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of whether our legitimate interests override your rights.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interest. www299 will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based solely on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

www299 aims to respond to all data subject requests within 30 calendar days of receipt. In complex or high-volume cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. We will not charge a fee for handling data subject requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Children's Privacy

www299 applies age verification controls during the registration process, and may request additional documentary proof of age at any point during an account's lifecycle. If www299 becomes aware that an account has been registered by a person under the age of 18, the account will be immediately suspended, all funds will be returned to the depositing payment method, and the personal data associated with the account will be securely deleted except where retention is required for compliance purposes.

If you are a parent or guardian and believe that a minor under your care has created an account on www299, please contact our support team immediately via live chat or at [email protected]. We will investigate promptly and take all appropriate action, including account closure and fund return, within the timeframes described in our Terms & Conditions.

Third-Party Links

The www299 platform is a self-contained environment. www299.app does not contain links to external third-party websites for commercial, advertising, or affiliate purposes. All navigation within the platform remains within the www299 domain.

In the event that any third-party content or reference appears on the platform — for example, in relation to game providers, payment methods, or informational resources — please be aware that any third-party website or service you navigate to independently operates under its own privacy policy, which is entirely separate from this document. www299 bears no responsibility for the privacy practices of any third-party service and encourages players to review the relevant privacy policies before providing any personal data to any external platform.

Changes to This Privacy Policy

www299 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, new platform features, changes in applicable law, or feedback from players and advisors.

For material changes — particularly those that affect how your personal data is used or shared, or that alter your rights in any significant way — www299 will provide at least seven (7) days' advance notice before the revised policy takes effect. Notice will be given via email to your registered address and/or via a prominent notice on the platform. For minor, non-material changes such as formatting corrections or clarifications that do not alter substantive meaning, the Policy may be updated without prior notice.

The date of the most recent revision is always displayed at the top of this document under "Last Updated". We encourage you to review this page periodically to stay informed about how www299 protects your data. Your continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data www299 holds about you, please do not hesitate to get in touch with our support team. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

• Live Chat: Available 24/7 directly from your account dashboard. Average response time: 2–5 minutes.
• Email: [email protected] — Responses within 4 hours on business days.
• WhatsApp: Available after login, Bangladesh Standard Time (BST) 8 AM – 2 AM.

When contacting us about a data subject request, please include your registered account username and a brief description of your request. For verification purposes, we may ask you to confirm your identity before processing certain types of requests, such as data access or erasure requests. This is to ensure that personal data is disclosed or deleted only at the instruction of the account holder themselves.

www299 aims to handle all privacy enquiries with professionalism, transparency, and respect for your rights. If you remain dissatisfied with our response to a privacy concern, you may wish to seek independent advice or escalate your complaint through appropriate channels available in your jurisdiction.