Your Privacy Matters at 299bed

1. Who We Are

This Privacy Policy is issued by 299bed, the operator of the online casino and sports betting platform accessible at https://299bed.ws ("the Platform", "we", "us", "our"). 299bed is the data controller responsible for the personal information collected through this platform. For all privacy-related matters, you may contact us at [email protected].

2. What Personal Data We Collect

We collect personal data in two ways: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Full name, date of birth, and gender (at registration).
• Mobile phone number linked to your bKash, Nagad, or Rocket wallet.
• Username and password (password stored as a one-way hash — we never store or see your plain-text password).
• Identity verification documents: National Identity Card (NID), passport, or driving licence, submitted during the KYC process.
• Proof of address documents submitted during enhanced verification.
• Communications you send to our support team via email or on-platform chat.
• Responsible gaming preferences such as deposit limits, cooling-off periods, or self-exclusion requests.

Information collected automatically:

• IP address and approximate geographic location (city level, derived from IP).
• Device type, operating system version, and mobile browser version.
• Session data: pages visited, games played, time spent on each section, button clicks.
• Deposit and withdrawal transaction records including amounts in BDT, timestamps, and payment method references (we do not store full wallet credentials).
• Wagering history: bets placed, game outcomes, bonus usage.
• Login timestamps and failed login attempts (used for security monitoring).

3. How We Use Your Personal Data

299bed uses your personal data for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity, and providing customer support.
• Service delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer; crediting winnings; applying bonuses.
• Security and fraud prevention: Detecting and preventing unauthorised access, duplicate accounts, money laundering, chargebacks, and other fraudulent activity.
• Responsible gaming compliance: Monitoring play patterns to identify signs of problem gambling and enforcing self-exclusion or deposit limits you have set.
• Legal and regulatory compliance: Retaining transaction records and identity documents as required by applicable anti-money laundering obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, layout, and game selection of the 299bed platform.
• Marketing communications: Sending promotional offers, bonus alerts, and platform news — but only where you have not opted out. You may withdraw marketing consent at any time by contacting [email protected].

4. Legal Basis for Processing

299bed processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create your account and deliver the services you have signed up for.
• Legal obligation: Processing required to comply with anti-money laundering rules, age verification obligations, and financial record-keeping requirements.
• Legitimate interests: Processing for fraud detection, security monitoring, and platform improvement, where our legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications, where we rely on your consent and where you retain the right to withdraw that consent at any time.

5. Data We Collect About Your Device

When you access 299bed via your mobile phone or tablet, we automatically collect technical information about your device for the purposes of security monitoring and platform optimisation. This includes your device model, operating system version, mobile browser type and version, screen resolution, and the mobile network carrier you are using. This data helps us ensure the 299bed platform renders and performs correctly across the wide range of Android and iOS devices used by players across Bangladesh.

We do not use device fingerprinting for advertising or profiling purposes. Device data is used solely to maintain service quality and detect anomalous login behaviour that may indicate account compromise.

6. Cookies and Similar Technologies

299bed uses cookies and similar session-tracking technologies to maintain your logged-in state, remember your platform preferences, and collect anonymous usage statistics. The following categories of cookies may be placed:

• Essential cookies: Required for the platform to function. These maintain your session while you are logged in. They cannot be disabled without breaking core platform functionality.
• Analytics cookies: Anonymous, aggregated statistics about how players navigate the platform. No personally identifiable information is included. These may be disabled without affecting your gaming experience.
• Preference cookies: Remember your language, display, and notification settings between sessions.

299bed does not use third-party advertising cookies or tracking pixels for behavioural advertising. You may manage cookie preferences through your mobile browser settings at any time.

7. Sharing Your Data with Third Parties

299bed does not sell, rent, or trade your personal data. We share data only with the following categories of third party, and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank receive only the transaction data necessary to process your deposit or withdrawal. We do not share your gaming history or account details with payment partners.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive an anonymous session token to initialise game sessions. They do not receive your name, NID number, or mobile wallet details.
• Identity verification services: Third-party KYC verification partners may process your identity documents strictly for the purpose of age and identity verification. These partners are bound by strict confidentiality and data protection obligations.
• Legal and regulatory authorities: Where required by applicable law or a valid court order, 299bed may disclose personal data to law enforcement or regulatory bodies. We will notify you of such disclosures where legally permitted to do so.
• IT infrastructure and hosting providers: Our hosting and infrastructure partners process data on our behalf under strict data processing agreements. They have no independent right to use your data for any purpose other than providing services to 299bed.

8. Data Retention

299bed retains your personal data for as long as is necessary for the purposes described in this policy, and to meet our legal obligations. The table below summarises our key retention periods:

When data is no longer required and the applicable retention period has expired, we securely delete or anonymise it so it can no longer be linked to you as an individual.

9. Security Measures

299bed applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• One-way password hashing — your plain-text password is never stored anywhere on our systems.
• Encrypted storage of identity documents and sensitive KYC files.
• Access controls limiting staff access to personal data on a strict need-to-know basis.
• Automated monitoring for suspicious login activity, including multiple failed login attempts and logins from unusual geographic locations.
• Regular security reviews of our platform infrastructure.

While we apply robust measures, no online platform can guarantee absolute security. You are responsible for keeping your 299bed login credentials confidential. If you suspect your account has been compromised, contact [email protected] immediately.

10. Your Data Rights

As a 299bed player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". We will respond within 5 business days.

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations described in Section 8.
• Right to restrict processing: You may ask us to pause processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: You may request a copy of the personal data you provided to us in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

11. Children and Minors

The 299bed platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we discover that a registered account belongs to a person under 21, we will immediately close the account, void any transactions, and securely delete all associated personal data. If you believe a minor has registered on our platform, please notify us at [email protected] immediately.

12. Marketing Communications

With your consent, 299bed may send you promotional communications about new games, bonuses, cricket betting markets (including BPL, IPL, and T20 World Cup events), seasonal promotions (Eid, Pohela Boishakh, Victory Day), and platform updates. These communications may be delivered via on-platform notification or SMS to your registered mobile number.

You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Following your request, we will cease marketing communications within 48 hours. Opting out of marketing does not affect essential service communications such as transaction confirmations and security alerts, which we will continue to send as they are necessary to operate your account.

13. Changes to This Privacy Policy

299bed may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or applicable legal requirements. When we make material changes, the "Last Updated" date at the top of this page will be revised, and active players will receive an on-platform notification. We encourage you to review this policy periodically. Your continued use of the 299bed platform after any update constitutes your acceptance of the revised policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 299bed holds about you, please contact our support team. We are available 24 hours a day, 7 days a week.

Email: [email protected] (plain text — not a clickable link)

Please include "Privacy Policy" or "Data Request" in the subject line of your email so we can route your inquiry to the correct team promptly.