2299bdt Privacy Policy — How We Protect Your Personal Data

01 Data We Collect

When you interact with 2299bdt — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. The categories we collect and the circumstances in which each is collected are set out below.

Account Registration Data

When you create a 2299bdt account, we collect:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify you are aged 18 or above).
• Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Email address (used for account communications, security alerts, and optional marketing where consented).
• Mobile phone number registered in Bangladesh (used for SMS one-time passwords and account recovery).
• Username and encrypted password.

Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud and underage gambling, we may collect copies of identity documents including your National Identity Card (NID), passport, or driving licence. We may also collect a recent utility bill or bank statement as proof of address. These documents are used solely for verification purposes and are handled with the highest level of security.

Financial Transaction Data

When you make a deposit or request a withdrawal, we collect transaction records including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction reference numbers, amounts in Bangladeshi Taka (BDT), and timestamps. We do not store full card numbers — card data is tokenised by your payment provider before reaching our systems.

Technical and Usage Data

When you use the 2299bdt platform, our servers automatically collect:

• IP address and approximate geolocation (country and city level).
• Browser type and version, operating system, and device type.
• Pages visited, time spent on each page, links clicked, and navigation paths.
• Game session data including games played, bet amounts, win/loss records, and session duration.
• Error logs and performance metrics used to diagnose technical issues.

Communications Data

If you contact 2299bdt via email at [email protected] or through any on-platform messaging tool, we retain the content of those communications and any attachments, along with your contact details and the date and time of each interaction, for the purpose of resolving your query and for staff training and quality assurance.

02 How We Use Your Data

2299bdt processes your personal data only for purposes that are lawful and proportionate. The table below summarises our primary processing activities and the legal basis that justifies each.

Where we rely on your consent as the legal basis for processing (for example, to send you promotional emails about new bonuses or seasonal events like BPL or Eid promotions), you may withdraw that consent at any time by contacting us at [email protected] or by updating your communication preferences within your account settings. Withdrawal of consent does not affect any processing that occurred prior to your withdrawal.

03 Data Sharing & Disclosure

2299bdt does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Service Providers and Technology Partners

We engage trusted third-party service providers to assist in operating the 2299bdt platform. These include payment processing partners (including the operators of bKash, Nagad, Rocket, and Upay integrations), identity verification providers, cloud hosting infrastructure providers, and analytics platforms. All such providers are bound by data processing agreements that restrict them from using your data for any purpose other than delivering the specific service they provide to 2299bdt.

Game Providers

Some game data (such as your player session ID and game results) is processed by our game software suppliers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive only the minimum data required to run the game and record the outcome. They are not provided with your full identity or financial details beyond what is required for game integrity purposes.

Legal and Regulatory Disclosure

We may disclose personal data to competent authorities, courts, or regulatory bodies where we are required to do so by applicable law, court order, or regulatory direction. Where we are legally permitted to do so, we will notify you of such a request before complying.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of the 2299bdt business, personal data held by us may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and the privacy implications before it takes effect.

04 Cookies & Tracking Technologies

2299bdt uses cookies and similar lightweight tracking technologies to make the platform function correctly, to keep your session secure, and to understand how players use the site so that we can improve it. We do not use cookies for cross-site advertising or for building profiles that are shared with third-party advertising networks.

Types of Cookies We Use

• Essential Cookies: These are required for the platform to function. They maintain your login session, remember your language and display preferences, and protect against cross-site request forgery (CSRF). You cannot opt out of essential cookies without ceasing to use 2299bdt.
• Performance and Analytics Cookies: These cookies collect anonymised data about which pages are visited most frequently, how long sessions last, and which features are used. This data is processed in aggregate and cannot identify you as an individual. We use this information solely to improve the 2299bdt platform.
• Security Cookies: These are used by our fraud detection systems to identify unusual patterns of behaviour that may indicate account compromise or automated bot activity.

Managing Cookies

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete cookies that have already been set. Please note that disabling essential cookies will prevent you from logging into your 2299bdt account and using core platform features. Detailed instructions for managing cookies are available in the help section of your browser's documentation.

Local Storage

In addition to cookies, 2299bdt may use browser local storage to temporarily cache your game preferences and session state on your device. This data does not leave your device and is not accessible to third parties. It is cleared when you log out of your account or clear your browser data.

05 Data Security Measures

2299bdt implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information from unauthorised access, loss, alteration, or disclosure.

Technical Controls

• All connections to 2299bdt are encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Passwords are stored using one-way cryptographic hashing with salting — your actual password is never stored or visible to any 2299bdt staff member.
• Payment card data is tokenised via our payment processing partners; full card numbers are never stored on 2299bdt servers.
• Access to production systems containing personal data is restricted to authorised personnel only and is protected by multi-factor authentication.
• Our infrastructure is hosted on secure servers with continuous intrusion detection monitoring.

Organisational Controls

• All 2299bdt staff with access to personal data receive regular privacy and data security training.
• Internal data access is governed by role-based access control — staff members can only access the data categories necessary for their specific function.
• Third-party service providers are subject to due diligence assessments and contractual data security obligations before being granted access to any 2299bdt player data.

Incident Response

In the event of a personal data breach that poses a risk to affected individuals, 2299bdt will notify the affected players without undue delay, providing clear information about the nature of the breach, the data affected, and the steps being taken to mitigate harm. We will also report to relevant authorities where required.

06 Data Retention Policy

2299bdt does not retain personal data for longer than is necessary for the purpose for which it was collected, taking into account any legal, regulatory, or contractual retention obligations that apply.

Retention Periods by Data Category

• Account and identity data: Retained for the duration of your active account relationship with 2299bdt, plus a minimum of five (5) years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for the duration of the account plus five (5) years post-closure, or such longer period as may be required by applicable law.
• Customer support communications: Retained for two (2) years from the date of the last interaction in the relevant support thread, unless the matter is subject to ongoing dispute or legal proceedings.
• Technical and usage logs: Retained for thirteen (13) months on a rolling basis for platform performance and security analysis purposes, then deleted or anonymised.
• Marketing consent records: Retained for three (3) years from the date consent was given or last confirmed, or until withdrawn, whichever is earlier.

When a retention period expires, the relevant data is securely and irreversibly deleted from all 2299bdt systems, or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data that cannot be linked to any individual may be retained indefinitely for statistical and analytical purposes.

07 Your Privacy Rights

As a 2299bdt player, you hold meaningful rights in relation to the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and without unnecessary friction.

Right of Access

You have the right to request a copy of the personal data 2299bdt holds about you. Upon receipt of a verified request, we will provide you with a summary of the data we hold, the purposes for which it is processed, and the categories of recipients to whom it has been disclosed.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update certain account details directly within your 2299bdt account settings. For changes to identity-linked data (such as your name or date of birth), you will be asked to provide supporting documentation.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where we have processed it unlawfully. Please note that this right is subject to our legal retention obligations — we cannot delete financial or identity records that we are required to retain by law.

Right to Restrict Processing

You may request that we restrict our processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interest and we are assessing whether our grounds override yours.

Right to Object to Marketing

You may opt out of receiving promotional communications from 2299bdt at any time by updating your notification preferences in your account settings or by emailing [email protected]. We will action opt-out requests within five (5) business days.

08 Contact & Data Queries

If you have any questions, concerns, or complaints relating to the way 2299bdt processes your personal data, or if you wish to exercise any of your privacy rights, please contact us using the details below.

Our customer support team is available 24 hours a day, 7 days a week and responds exclusively in English. All privacy-related enquiries are handled with strict confidentiality. We aim to acknowledge all privacy queries within 72 hours and provide a full response within 30 calendar days.

Updates to This Privacy Policy

2299bdt reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will notify registered players via email and post a prominent notice on the platform. The effective date at the top of this document will always reflect when the current version took effect. We encourage you to review this page periodically to stay informed about how 2299bdt protects your data.

Your continued use of the 2299bdt platform after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with the updated terms, you should discontinue use and request account closure by contacting [email protected].