Privacy Policy — 299bed

This Privacy Policy applies to the 299bed platform accessible at https://299bed.biz and all associated services, games, payment facilities, and customer support channels operated under the 299bed brand. Throughout this policy, references to "299bed", "we", "us", or "our" refer to the operator of the 299bed platform.

299bed is an online casino and sports betting platform serving players in the Bangladesh market. All financial transactions are conducted in Bangladeshi Taka (৳). Our primary support communication channel is [email protected], and our support team operates on Bangladesh Standard Time (BST, UTC+6).

For the purposes of this Privacy Policy, "player", "you", or "your" refers to any individual who accesses, registers for, or uses any service provided through the 299bed platform, whether or not they have completed full account registration.

299bed collects the following categories of personal data from players in the course of operating the platform:

• Identity data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (such as the National Identity Card or passport) provided during the KYC verification process.
• Contact data: Email address and Bangladesh mobile number provided at the time of account registration or subsequently updated by the player.
• Financial data: Records of all deposits, withdrawals, and wagers conducted through the player's 299bed account, including BDT amounts, payment method references, and transaction timestamps. Full payment credentials (e.g., bKash wallet PINs) are never stored by 299bed.
• KYC documentation: Scanned copies or photographs of identity documents, proof-of-address documents, and any supplementary verification material submitted by the player in response to a KYC request.
• Technical data: IP address, device type and operating system, browser type and version, device fingerprint identifiers, and session log data generated when the player accesses the platform.
• Usage data: Game participation history, sports betting records, session duration, bonus usage, wagering patterns, and responsible gaming tool activations recorded by the platform during account activity.
• Support data: The content of live chat conversations, email correspondence, and any complaint or dispute records created when a player contacts the 299bed support team.
• Cookie and analytics data: Session tokens, preference identifiers, and aggregated, anonymised usage analytics collected through cookies and similar browser-based technologies as described in Section 10.

299bed does not knowingly collect special category personal data (such as health data, ethnic origin, religious beliefs, or political opinions) except where a player voluntarily discloses such information in the context of a responsible gaming self-assessment or support interaction. Such disclosures are treated with the highest level of confidentiality and are used solely to provide appropriate player support.

299bed collects personal data through the following channels:

• Direct submission: Data provided by the player when completing the account registration form, submitting KYC documentation, initiating a deposit or withdrawal, contacting support, or responding to any 299bed communication.
• Automated platform systems: Technical and usage data generated automatically as a result of platform interaction, including IP address logging, session tracking, and game outcome recording.
• Payment provider data: Transaction reference information returned by payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) upon completion of a deposit or withdrawal. This is limited to confirmation data and does not include full payment credentials.
• Identity verification partners: Where 299bed engages a third-party KYC verification service to assist with document authentication, that service may return a verification outcome and risk score associated with the documents provided by the player.
• Cookies and browser technologies: Data collected through cookies, local storage, and session storage mechanisms active when the player uses the 299bed platform via a web browser.

299bed uses the personal data it collects for the following purposes:

• Account administration: Creating and maintaining the player's 299bed account, processing login authentication (including two-factor authentication via Bangladesh mobile number), managing account settings, and responding to account-related queries.
• KYC and age verification: Verifying that the player meets the minimum age requirement of 18 years, confirming the accuracy of identity information provided during registration, and complying with applicable anti-money-laundering obligations.
• Payment processing: Facilitating deposit and withdrawal transactions through approved payment channels and maintaining accurate records of all financial activity on the player's account.
• Fraud prevention and platform security: Detecting and investigating suspicious account activity, identifying duplicate accounts, preventing bonus abuse, and protecting the integrity of the platform and other players.
• Responsible gaming: Monitoring wagering patterns to identify potential indicators of problem gambling, administering deposit limits, cooling-off periods, and self-exclusion measures selected by the player, and providing appropriate support where risk indicators are identified.
• Customer support: Responding to player enquiries, processing complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: Analysing aggregate, anonymised usage data to identify technical issues, improve platform performance, and develop new features that better serve players across Bangladesh.
• Legal and regulatory compliance: Retaining records as required by applicable financial crime, tax, and consumer protection obligations, and responding to lawful requests from regulatory authorities or law enforcement bodies.

299bed does not use personal data for automated individual decision-making that produces legal or similarly significant effects, except in the context of fraud detection where automated risk-scoring may result in a temporary account hold pending manual review by the 299bed compliance team.

299bed processes personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing required to create and administer a player's account, process payments, and deliver the services described in the 299bed Terms & Conditions. Without this processing, the platform cannot be made available to the player.
• Consent: Processing based on the player's affirmative consent, including the use of non-essential cookies and any processing of voluntarily disclosed special category data in a responsible gaming context. Players may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests: Processing conducted for the purpose of fraud prevention, platform security, duplicate account detection, and aggregate analytics, where those interests do not override the player's privacy rights.
• Legal obligation: Processing required to comply with anti-money-laundering record-keeping obligations, to respond to lawful requests from regulatory authorities, and to retain financial transaction records for statutory periods.

299bed does not sell, rent, or trade personal data belonging to players. Data may be shared with the following categories of third parties only to the extent strictly necessary for the purpose stated:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, for the purpose of processing deposit and withdrawal transactions initiated by the player.
• KYC verification providers: Third-party identity and document verification services engaged by 299bed to authenticate player-submitted identification documents and perform age verification checks.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and minimal gameplay data necessary to deliver their games through the 299bed platform. These providers operate under their own privacy standards and do not receive full player profiles.
• IT infrastructure providers: Hosting, database, and network security service providers who process data on behalf of 299bed under data processing agreements that restrict their use of that data to infrastructure service delivery only.
• Legal and regulatory authorities: Regulatory bodies, law enforcement agencies, or courts where 299bed is required by law to disclose player data, or where disclosure is necessary to protect the rights or safety of 299bed, its players, or the public.

299bed implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data in transit between the player's device and 299bed platform servers is encrypted using industry-standard SSL/TLS protocols, preventing interception of login credentials, payment data, and personal information.
• Access controls: Access to player personal data within 299bed's internal systems is restricted to authorised personnel on a need-to-know basis. All internal data access is logged and subject to periodic audit.
• Two-factor authentication: Player accounts are protected by two-factor authentication via registered Bangladesh mobile numbers, reducing the risk of unauthorised account access even where login credentials are compromised.
• Password security: Player passwords are stored in hashed form using a secure hashing algorithm. 299bed personnel cannot retrieve a player's plaintext password; a password reset flow is required for credential recovery.
• Payment security: Full payment credentials (wallet PINs, card numbers) are not stored by 299bed. Payment transactions are processed directly through the respective payment provider's secure systems.
• Incident response: In the event of a personal data breach, 299bed will assess the risk to affected players and take appropriate action, including notifying affected players where the breach poses a significant risk to their rights and interests.

While 299bed takes data security seriously and applies robust protective measures, no internet-based platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their 299bed account and to contact support immediately at [email protected] if they suspect unauthorised access to their account.

299bed retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any statutory retention obligations that require longer retention periods. The principal retention periods applicable to player data are summarised in the data categories table earlier on this page.

Following the closure of a player's 299bed account — whether at the player's request or by 299bed — the following retention principles apply:

• Financial transaction records (deposits, withdrawals, wager history denominated in BDT) are retained for a minimum of seven years from the date of each transaction in order to comply with financial record-keeping requirements.
• Identity and KYC documentation is retained for five years following account closure to support any post-closure compliance investigations or legal proceedings that may arise.
• Support correspondence and complaint records are retained for three years from the date of the last interaction.
• Technical logs, including IP address and session data, are retained for twelve months from collection and then deleted unless required in connection with an open fraud investigation.
• Cookie and analytics data is anonymised upon account closure such that it can no longer be attributed to any individual player.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players may submit a data deletion request at any time; such requests will be actioned to the extent permitted by applicable retention obligations, with any mandatory retention periods explained to the player at the time of the request.

Registered 299bed players have the following rights in relation to their personal data. To exercise any of these rights, please contact the 299bed support team at [email protected] with a description of your request and sufficient account details to allow us to identify your account.

• Right of access: You have the right to request a copy of the personal data 299bed holds about you. We will respond to verified access requests within 30 days.
• Right to correction: You have the right to request that inaccurate or incomplete personal data held about you is corrected. Certain corrections (such as changes to name or date of birth) require supporting documentation.
• Right to deletion: You have the right to request deletion of personal data that is no longer necessary for the purpose it was collected for, subject to any overriding legal retention obligations. Where data must be retained, we will explain the reason.
• Right to restrict processing: You have the right to request that processing of your personal data be restricted in certain circumstances, such as where you contest the accuracy of the data or object to its use for a particular purpose.
• Right to object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling for fraud prevention purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to data portability: You have the right to receive the personal data you provided to 299bed in a structured, commonly used, machine-readable format, where technically feasible.

299bed will respond to all rights requests within 30 days of receipt. Where a request is complex or numerous, the response period may be extended by a further 60 days, in which case we will notify you within the initial 30-day period and explain the reason for the extension.

The 299bed platform uses cookies and similar browser-based technologies to provide and improve platform functionality. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the operation of the 299bed platform. They maintain your login session, prevent cross-site request forgery, and enable core functionality such as the game lobby and account dashboard. These cookies cannot be disabled without impairing your ability to use the platform.
• Preference cookies: These cookies remember your platform preferences, such as language settings, display options, and recently visited game categories. They improve your experience on return visits.
• Analytics cookies:299bed uses first-party analytics cookies to collect aggregate, anonymised data on how players use the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely for internal platform improvement and is not shared with third-party analytics providers.

299bed does not use third-party advertising cookies, cross-site tracking cookies, or social media tracking pixels. No data collected via cookies on the 299bed platform is shared with advertising networks or used for targeted advertising purposes.

Managing cookies: You can control and delete cookies through your browser settings at any time. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling strictly necessary cookies will impair the functionality of the 299bed platform and may prevent you from logging in or completing transactions.

The 299bed platform is strictly intended for adults aged 18 and over. 299bed does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory component of the 299bed KYC process and is applied to all accounts prior to the approval of withdrawal requests.

If 299bed identifies, through its KYC or ongoing monitoring processes, that an account has been registered by or is being used by a person under the age of 18, that account will be immediately suspended. Any real-money funds deposited by an underage player will be subject to a review process, and account closure will be permanent in accordance with the 299bed Terms & Conditions.

If a parent or guardian believes that their child under the age of 18 has accessed or registered for the 299bed platform, they are urged to contact the support team at [email protected] immediately so that appropriate action can be taken. 299bed takes underage access seriously and cooperates with parental requests to close underage accounts promptly.

299bed reserves the right to update or amend this Privacy Policy at any time. When material changes are made, 299bed will notify registered players by email to their registered address and/or by displaying a prominent notice on the platform. The effective date at the top of the policy will be updated to reflect the date of the most recent revision.

Your continued use of the 299bed platform after a Privacy Policy update constitutes your acknowledgement of and agreement to the revised policy. If you do not agree with the updated policy, you should cease using the platform and contact [email protected] to request account closure before the effective date of the changes.

Minor changes that do not materially affect the rights of players or the manner in which 299bed processes personal data may be made without advance notice. A summary of all changes is maintained internally and is available to players on request.

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all previously published versions of the 299bed Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 299bed has handled your personal data, please contact the 299bed support team using the following details. Email addresses listed below are plain text — they are not clickable links.

• Email: [email protected]
• Live Chat: Available 24/7 through the platform interface
• Support Hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week

When submitting a privacy-related enquiry or rights request, please include your registered account username or email address, a description of your request, and any relevant reference information. 299bed will acknowledge receipt within 48 hours and provide a substantive response within 30 days.

If you are dissatisfied with 299bed's response to a privacy complaint, you have the right to escalate your complaint through whatever dispute resolution channel is applicable to you. 299bed will cooperate fully with any such process and provide the information requested within a reasonable timeframe.