Data Protection Policy

Your 299ba Privacy Our Highest Priority

Everything about how your personal data is collected, stored, and protected is clearly set out here. At 299ba, your data belongs to you.

Last Updated: January 1, 2026 Version 2.4 Reading time: 7 minutes Language: Bengali
GDPR Compliant
Compliance with International Standards
Your data is never sold to third parties
256-bit SSL Encryption Active
Right to Erasure at Any Time
Two-Factor Authentication (2FA) Available
256-bitSSL Encryption
0Data Breach Incidents
24/7Security Monitoring
GDPRCompliant
3+Years of Data Protection

1. Introduction — Why 299ba Publishes This Policy

299ba is an online gaming platform built for people in Bangladesh. We believe that every member's privacy is a fundamental right. This Privacy Policy explains what information 299ba collects, why we collect it, and how we keep it secure.

By using 299ba's website, mobile app, or any other service, you agree to this Privacy Policy. Like our Terms and Conditions, this policy is designed with both Bangladesh's local context and international standards in mind.

We want you to use 299ba with complete peace of mind — nothing is hidden. If you have any questions, our support team is always ready to help.

Simply put: your data belongs to you at 299ba. We only use the information necessary to provide you with the best service.

2. What Data We Collect

299ba only collects information that is necessary. No unnecessary or excessive data is ever requested.

Data Type Example Why It's Collected
Identity Information Name, date of birth, NID KYC Verification & Legal Obligations
Contact Information Phone number, email Security Notices & Support
Financial Information Mobile Banking Number Deposit & Payout Processing
Device Information IP, browser, OS Security & Fraud Prevention
Gaming Activity Bet history, login timestamps Responsible Gaming Monitoring
  • Data collected is always kept to a minimum – we only take what is necessary.
  • No data is collected without your knowledge.
  • No third-party advertising trackers are used.

3. How Your Data Is Used

299ba uses collected data solely for specific, lawful purposes. Each purpose is explained in detail below.

  • Account Management: To keep your login, withdrawals, and profile settings running smoothly.
  • Identity Verification (KYC): To verify the identity of every account holder in compliance with international financial regulations.
  • To ensure security: To prevent fraud, money laundering, and unauthorized access.
  • Customer Support: To resolve your issues and process support tickets.
  • Personalized Experience: To recommend promotions and games tailored to your preferences.
  • Responsible Gaming Monitoring: To identify problematic gaming patterns and provide timely assistance.
  • Legal Compliance: To comply with the directives of the licensing authority.

299ba will never sell your data to advertisers or marketing companies. This is our commitment.

4. Who Your Data Is Shared With

299ba shares your data only when strictly necessary and on a limited basis. Your security is ensured before any data is shared with third parties.

  • Payment Processor: Only the information required to process transactions is shared with providers such as bKash, Nagad, Rocket, and similar services.
  • Game Provider: Minimal data is passed to the technology partner of your selected game solely to manage the game session.
  • Security Partners: Anonymized data is shared with fraud detection technology partners.
  • Law Enforcement: Only when legally required by government or court order.

Every third-party partner is bound by a strict confidentiality agreement. 299ba ensures they uphold the same standards.

5. Data Security Measures

299ba uses bank-grade security measures to protect your data, with protection ensured at both the technical and administrative levels.

SSL/TLS Encryption
All communications are 256-bit encrypted.
Encrypted Database
All stored data is fully encrypted
24/7 Monitoring
Suspicious activity is detected in real time.
Two-Factor Authentication (2FA)
Add an Extra Layer of Security
  • Firewall and intrusion detection systems are active on our servers.
  • Passwords are never stored in plain text — only a hashed version is kept.
  • Access to your data is restricted to authorized personnel only, and all access is logged.
  • Regular security audits and penetration testing are conducted.

6. Cookie Policy

The 299ba website and app use cookies — small text files stored on your device that help improve your experience.

Optional cookies can be disabled in your browser or app settings. However, disabling essential cookies may cause certain site features to stop working.

7. Your Rights

In accordance with GDPR and international privacy laws, 299ba grants you the rights listed below. To exercise any of these rights, please contact our support team.

Right to Access Your Data

You can request to know what information we hold about you at any time.

Right to Rectification

If any information is incorrect, you may request a correction.

Right to Erasure

Upon account closure, all data is deleted except what is legally required to be retained.

Data Portability

You may request a copy of your data in a portable, machine-readable format.

Right to Restrict Processing

In certain cases, you may request that the use of your data be temporarily suspended.

Right to Opt Out of Marketing

You can opt out of promotional emails or SMS at any time.

8. How Long Your Data Is Retained

299ba does not retain your data longer than necessary. Data is stored and deleted in accordance with the guidelines below.

  • Active Account: Data is retained for as long as the account remains active.
  • Closed Account: After account closure, transaction records are retained for up to 5 years in accordance with legal obligations.
  • Gaming History: Retained for up to 3 years for responsible gaming oversight and dispute resolution.
  • Support Ticket: Retained for 2 years, then automatically deleted.
  • Log Files: Security logs are retained for up to 90 days.

Once the retention period expires, data is securely destroyed — never archived.

9. Protection of Minors' Data

299ba does not collect data from or provide services to anyone under the age of 18, under any circumstances.

If we become aware that a minor's information has been collected inadvertently, the account will be closed immediately and all associated data will be permanently deleted.

Parents are urged to contact us immediately if they believe their child is using 299ba support@299ba.ws. We will take prompt action.

10. Contact & Complaints

For any privacy-related questions, requests, or complaints, please contact our Data Privacy Team.

Email
privacy@299ba.ws
Live Chat
24/7 Support

After a complaint is submitted, 299ba will respond within 72 hours. Complex matters will be resolved within 30 days.

The 6 Pillars of Privacy Protection at 299ba

These are the six principles 299ba never compromises on

Data Is Never Sold

299ba never sells your data to third parties — this is our highest priority and a commitment we stand by.

Maximum Encryption

299ba protects your data using the same 256-bit SSL encryption standard trusted by banks.

You're in Control

Your data belongs to you. You can view, correct, or request deletion of it at any time.

Minimal Data Collection

299ba collects only the data that is necessary. We do not ask for more than we need — holding unnecessary information goes against our principles.

Automatic Data Deletion

After the defined retention period, 299ba automatically deletes old data. Nothing is kept in any archive.

No Ad Tracking

299ba does not use third-party ad networks or trackers. Your browsing behavior is never shared with advertising companies.

FAQ

Frequently Asked Questions on Account Security & Privacy

Enabling Two-Factor Authentication (2FA) on 299ba is straightforward. Once active, no one can log in to your account even if they know your password.

Steps to enable:

  • Log in and go to "Profile Settings" or the "Account Security" option.
  • Click the "Two-Factor Verification" or "Enable 2FA" button.
  • SMS or an authenticator app – choose whichever works for you. SMS is more convenient; an authenticator app is more secure.
  • A code will be sent to your registered number, or you will need to scan a QR code.
  • Confirm 2FA is active by entering the verification code.

Once enabled, an OTP will be sent to your phone each time you log in. Without this code, access to your account will not be granted — significantly boosting your account's security. 299ba strongly recommends that all members keep 2FA enabled.

Yes, adult (18+) members of the same household can each open a separate 299ba account, subject to certain conditions.

What is permitted:

  • Different members of the same household can each open a separate account using their own NID.
  • A unique phone number and email address must be used for each account.

What is prohibited:

  • Multiple accounts held by the same person are strictly prohibited.
  • Accounts cannot be opened in a family member's name to claim bonuses or circumvent limits.
  • If multiple accounts are operated from the same device or IP address, 299ba may launch an investigation.

In suspicious cases, 299ba may request KYC verification. For legitimate multiple members, there are no issues once verification is complete.

Privacy Confirm, play safely at 299ba now

Your data is secure, payments are fast, and the experience is enjoyable – all in one place at 299ba.

বাংলা