Data Protection

Privacy Policy – 299bad Online Casino

Your privacy matters to us. This policy explains exactly what data 299bad collects, why we collect it, and how we keep it safe.

Effective: 1 January 2026 256-bit SSL No Data Sales
Effective Date: 1 January 2026
Last reviewed: 1 January 2026. This policy supersedes all prior versions.

This Privacy Policy ("Policy") describes how 299bad ("299bad", "we", "us", "our"), the operator of the online casino and sports betting platform at https://299bad.onl, collects, uses, stores, and discloses the personal information of users ("you", "Player") who access or use our Platform, including all associated pages, services, and applications.

By registering an account or using the 299bad Platform, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. This Policy forms part of, and should be read alongside, the 299bad Terms and Conditions. If you do not agree to this Policy, you must not use the Platform.

🎯
Purpose Limitation
We only collect data that is necessary for the specific purposes described in this Policy. We do not collect data speculatively or in bulk.
🔐
Security First
All data is stored on servers protected by 256-bit SSL encryption, firewalls, and access controls. Only authorised personnel may access personal data.
🚫
No Data Sales
299bad does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances.
⏱️
Retention Limits
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
✅
Accuracy
We take reasonable steps to keep your personal data accurate and up to date. You may update your account information by contacting our support team.
👤
Your Rights
You have the right to access, correct, and request deletion of your personal data. Full details are set out in Section 7 of this Policy.

1. Data We Collect

299bad collects personal data through a variety of channels, including account registration, ongoing use of the Platform, identity verification procedures, payment processing, and customer support interactions. The categories of personal data we collect are as follows:

Identity Data
Full legal name, date of birth, nationality, and a copy of your government-issued photo ID (National Identity Card, passport, or driving licence) collected during KYC verification.
Contact Data
Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number.
Financial Data
Payment method details including bKash and Nagad mobile wallet numbers, Rocket account references, bank account information for BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, Sonali Bank, and masked card numbers for Visa or Mastercard transactions. Full card numbers are never stored by 299bad.
Transaction Data
Records of all deposits, withdrawals, wagers, game results, bonus claims, and account balance movements associated with your account.
Technical Data
IP address, browser type and version, device type, operating system, time zone (Bangladesh Standard Time, UTC+6), session duration, and pages visited within the Platform.
Communications Data
Records of your correspondence with our support team via email or live chat, including the content of messages and the date and time of each interaction.
Cookies and Tracking: 299bad uses first-party cookies and similar technologies to maintain session integrity, remember your preferences, and analyse usage patterns. We do not deploy third-party advertising cookies. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect Platform functionality.

2. How We Use Your Data

299bad processes your personal data for the following specific purposes, each supported by a lawful basis:

  • Account Management: To create, maintain, and administer your player account, including verifying your identity through our KYC process and ensuring compliance with our age-restriction policy (21 years and above).
  • Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and other Platform features — and to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks.
  • Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other illegal or prohibited activities.
  • Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to administer self-exclusion and deposit limit requests, and to communicate responsibly with players who may be at risk.
  • Legal Compliance: To comply with applicable anti-money-laundering obligations, record-keeping requirements, and any lawful requests from competent authorities.
  • Service Improvement: To analyse aggregated, anonymised usage data in order to improve Platform performance, fix technical issues, and develop new features.
  • Direct Communications: To send you transactional notifications (deposit confirmations, withdrawal status updates, security alerts) and, where you have opted in, promotional communications about new games, bonuses, and seasonal offers tied to events such as Eid, Pohela Boishakh, or BPL and IPL cricket tournaments.
Marketing Opt-Out: You may withdraw your consent to receive promotional communications at any time by contacting our support team at [email protected]. Transactional and security-related communications cannot be opted out of while your account remains active, as they are essential to the safe operation of your account.

3. Data Sharing and Disclosure

299bad does not sell or rent your personal data to any third party. We may share your data only in the following limited circumstances:

  • Game Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical data (such as a pseudonymous player session token) that is necessary to deliver their games within our Platform. These providers are contractually prohibited from using such data for any purpose other than game delivery.
  • Payment Processors: Your financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, and banking partners) solely to the extent necessary to process your deposits and withdrawals. These processors operate under their own privacy and security frameworks.
  • Identity Verification Services: Where required for KYC compliance, identity document data may be processed by specialist verification partners operating under strict data-processing agreements with 299bad.
  • Legal Authorities: We may disclose personal data to law enforcement agencies, regulators, or other competent authorities where required to do so by law, court order, or in the legitimate exercise of our legal rights to protect the Platform and its users from fraud or other criminal conduct.
  • Business Transfers: In the event that 299bad undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to a successor entity, provided that such entity agrees to be bound by terms no less protective than those set out in this Policy.

In all cases where data is shared with third parties, 299bad requires that those parties maintain appropriate technical and organisational security measures and process personal data only for the specified purpose.

4. Data Security

299bad takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • SSL Encryption: All data transmitted between your device and the 299bad Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon visible in your browser confirms this encryption is active during your session.
  • Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised 299bad personnel whose job functions require access to specific data categories are permitted to view or process that data.
  • Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. 299bad staff cannot view your password in plain text and will never ask you to provide it.
  • Infrastructure Security: Our server infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular security audits.
  • Incident Response: In the event of a data breach that poses a risk to your rights and interests, we will notify affected users as promptly as possible and take all reasonable steps to contain and remediate the incident.
Your Responsibility: While 299bad maintains robust server-side security, you are also responsible for protecting your account. Use a strong, unique password, do not share your credentials, and log out of your session when using a shared device. If you suspect your account has been compromised, contact our support team immediately.

5. Data Retention

We retain your personal data for as long as your account remains active and for a reasonable period thereafter to allow us to address any post-closure queries, disputes, or regulatory obligations. Specific retention periods are as follows:

  • Account and Identity Data: Retained for the duration of your account relationship with 299bad, plus a minimum of five years following account closure to meet anti-money-laundering record-keeping obligations.
  • Transaction Records: Retained for a minimum of five years from the date of each transaction.
  • Communications Data: Support correspondence is retained for up to two years from the date of the last interaction, after which it is securely deleted or anonymised.
  • Technical and Usage Data: Aggregated and anonymised analytical data may be retained indefinitely. Identifiable technical logs are deleted after 12 months.
  • Self-Excluded Accounts: Records relating to self-excluded accounts are retained for the duration of the exclusion period and for a further period consistent with our anti-money-laundering obligations to prevent re-registration during the exclusion window.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

6. Cookies and Similar Technologies

299bad uses cookies — small text files stored on your device — and similar technologies (local storage, session storage) to operate the Platform efficiently, maintain your login session, remember your language and display preferences, and gather anonymised analytics on how the Platform is used.

Types of Cookies We Use

  • Strictly Necessary Cookies: These are essential for the Platform to function and cannot be switched off. They include session authentication cookies that keep you logged in as you navigate between pages.
  • Preference Cookies: These remember settings you have chosen — such as your preferred deposit method or notification settings — so you do not need to re-enter them on each visit.
  • Analytics Cookies: First-party analytics cookies allow us to understand which pages are most visited, how long users spend on each section, and where technical errors occur. This data is aggregated and anonymised and is used solely to improve the Platform.

We do not use third-party advertising or re-targeting cookies. You can control cookie behaviour through your browser settings. Blocking strictly necessary cookies will prevent you from logging in and using the Platform.

7. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that 299bad holds about you:

👁️
Right of Access
Request a copy of the personal data we hold about you.
✏️
Right to Rectification
Ask us to correct inaccurate or incomplete personal data.
🗑️
Right to Erasure
Request deletion of your data where we no longer have a lawful basis to retain it.
⏸️
Right to Restriction
Ask us to restrict processing of your data in certain circumstances.
📦
Data Portability
Receive your data in a structured, machine-readable format where technically feasible.
🚫
Right to Object
Object to processing carried out on the basis of our legitimate interests.

To exercise any of the above rights, please contact our support team by email at [email protected]. We aim to acknowledge all data rights requests within 72 hours and to fulfil them within 30 calendar days. We may ask you to verify your identity before processing a request in order to protect your data from unauthorised third-party access.

Note on Erasure: Where we are required by law to retain certain records (for example, transaction records for anti-money-laundering purposes), a right-to-erasure request cannot override that legal obligation. In such cases, we will restrict processing of your data to the minimum required by law and inform you of the reason we are unable to fully comply with your erasure request.

8. Minors and Age Restriction

The 299bad Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account without prejudice.

Parents and guardians who believe their child may have registered on the Platform should contact us immediately at [email protected] so that we can investigate and take appropriate action.

9. Updates to This Privacy Policy

299bad reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify active account holders by email.

We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of a revised Policy constitutes your acceptance of those changes.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how 299bad handles your personal data, please contact our support team. Email: [email protected] (plain text — not a clickable link). We aim to respond to all privacy enquiries within one business day (Bangladesh Standard Time, UTC+6).