2999bd Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by 2999bd ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals who access, browse, or register an account on the 2999bd website located at https://2999bd.biz ("the Site"). This Policy should be read alongside the 2999bd Terms & Conditions, which govern your use of the platform more broadly.

We are committed to protecting the privacy of every player and visitor. This Policy describes, in plain language, what personal data we collect, why we collect it, how we use it, who we may share it with, and how long we retain it. It also sets out the rights you hold in respect of your personal data and how to exercise them.

By registering an account on 2999bd or by continuing to use the Site after this Policy has been made available to you, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, please discontinue your use of the platform and contact our support team to request account closure.

2 Data We Collect

2999bd collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the Site, and from third-party payment providers as part of deposit and withdrawal processing. The categories of personal data we collect include:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where age verification documentation incidentally contains such information. In those cases, we process only the data necessary for age verification purposes and do not retain or process the incidental sensitive data for any other purpose.

You are not required to provide all categories of data listed above to access the Site as a visitor. However, providing the required data is a condition of registering an account and accessing real-money gaming and betting features on the 2999bd platform.

3 How We Use Your Data

2999bd uses the personal data it collects for the following purposes. Each purpose is tied to one or more of the legal bases described in Section 4 of this Policy.

• Account Creation and Management: To register your account, authenticate your identity at login, maintain your account settings, and communicate important account-related updates to your registered mobile number.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to verify that payment account names match your registered account name, and to maintain accurate transaction records.
• Identity and Age Verification: To confirm that you meet the 18+ age requirement and to satisfy any applicable know-your-customer (KYC) obligations before processing withdrawal requests above certain thresholds.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour, to apply deposit limits and self-exclusion requests you have made, and to enforce cooling-off periods. This processing is carried out in your interest and is required under our responsible gaming commitments.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, collusion, money laundering, bonus abuse, and the use of automated tools. Usage data and technical data are analysed for anomalies that may indicate prohibited conduct as defined in the Terms & Conditions.
• Customer Support: To respond to your queries submitted via live chat or email, to investigate complaints, and to maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To understand how players navigate and use the platform, to identify and resolve technical issues, and to improve the overall user experience. This analysis is carried out on aggregated or pseudonymised data where possible.
• Legal and Regulatory Compliance: To retain records as required by applicable law, to respond to lawful requests from competent authorities, and to exercise or defend legal rights in the event of a dispute.

2999bd does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated tools are used to flag accounts for fraud investigation, a member of our team reviews all flagged cases before any account action is taken.

4 Legal Bases for Processing

Every instance of personal data processing carried out by 2999bd is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — namely the Terms & Conditions you accepted at registration. This includes account management, payment processing, and delivery of the gaming and betting services you have signed up for.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and record-keeping duties under financial regulations applicable in Bangladesh.
• Legitimate Interests: Processing carried out for purposes that serve 2999bd's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security monitoring, and aggregated usage analysis for service improvement. We apply a balancing test before relying on this basis and do not use it where your interests or fundamental rights take precedence.
• Consent: Where we request your consent before processing — for example, for optional communications — we will make it clear what you are consenting to, and you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing

2999bd does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances set out below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share transaction data with bKash, Nagad, Rocket, Upay, and banking partners solely for the purpose of processing your deposits and withdrawals. These providers act as independent data controllers in respect of transactions processed through their own systems and are subject to their own privacy policies.
• Game Content Providers: Where you play games hosted by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, certain gameplay data (including your player session identifier and bet history for that session) is transmitted to the provider's systems to deliver the game. These providers are bound by contractual data protection obligations with 2999bd.
• Identity Verification Services: Where documentary identity verification is required, we may use a third-party KYC verification service. Documents submitted for verification are processed by the verification service under strict confidentiality terms and are not retained beyond the verification period.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by law, by court order, or in connection with the prevention, detection, or prosecution of financial crime, including money laundering. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the 2999bd business, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the terms under which your data is processed as a result.

All third parties with whom 2999bd shares personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the purposes for which it was shared. 2999bd does not permit third-party service providers to use your personal data for their own independent purposes.

6 Cookies & Tracking Technologies

2999bd uses cookies and similar tracking technologies on the Site to ensure the platform functions correctly and to understand how it is being used. A cookie is a small text file placed on your device by a website server. The types of cookies used on the 2999bd platform are as follows:

Strictly necessary cookies are placed automatically as they are essential for the platform to function. Functional and analytics cookies are set only where you have not opted out through your browser settings. Most modern browsers allow you to refuse or delete cookies through their settings menus. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

2999bd does not use third-party advertising cookies or cross-site tracking technologies. No data collected through cookies on the 2999bd platform is shared with advertising networks or data brokers.

7 Data Security

2999bd implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data in transit between your browser or mobile device and the 2999bd platform is encrypted using SSL/TLS protocols, preventing interception by third parties during transmission.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. 2999bd staff cannot view or retrieve your password in plain text. In the event of a data breach, stored password hashes would not give an attacker direct access to your account.
• Access Controls: Access to systems that hold personal data is restricted to authorised personnel on a need-to-know basis. Administrative access is protected by multi-factor authentication and is subject to regular review.
• Infrastructure Security: Platform servers are hosted in a secured data centre environment with physical access controls, intrusion detection systems, and regular security auditing.
• Incident Response: 2999bd maintains an incident response procedure for data security events. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay.

While we apply robust measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials secure. If you suspect that your account has been compromised, please contact our support team immediately via live chat.

8 Data Retention

2999bd retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following retention periods apply to the main categories of personal data we hold:

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years following permanent account closure, to meet anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory inquiries.
• Financial and Transaction Data: Retained for seven (7) years from the date of each transaction, in accordance with financial record-keeping requirements applicable to payment processing activities.
• Bet and Gaming History: Retained for a period of three (3) years from the date of each gaming session, for the purposes of dispute resolution and responsible gaming monitoring.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Server log data is retained for a maximum of twelve (12) months, after which it is either deleted or fully anonymised for aggregated analytical use.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — which can no longer be linked to any individual — may be retained indefinitely for statistical and platform improvement purposes.

9 Your Rights

As a data subject, you hold the following rights in respect of the personal data 2999bd holds about you. To exercise any of these rights, please contact our support team using the details set out in Section 12.

• Right of Access: You have the right to request a copy of the personal data 2999bd holds about you, along with information about how it is used. We will respond to access requests within a reasonable period and at no charge for routine requests.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as a misspelled name — can be made directly by contacting support. Corrections to identity documents may require you to resubmit verification materials.
• Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing and there is no overriding legitimate interest to continue. This right is not absolute — we may be required to retain certain data for legal compliance reasons even following an erasure request.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing and a determination of overriding interests is pending.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Data Portability: Where processing is carried out on the basis of your consent or for the performance of a contract, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.

2999bd will acknowledge all rights requests within five (5) business days of receipt and will aim to fulfil requests within thirty (30) days. Where a request is complex or involves a large volume of data, we may extend this period and will inform you accordingly.

10 Children's Privacy

The 2999bd platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. Account registration requires confirmation of age eligibility, and identity verification may be requested at any point to confirm that a player meets the minimum age requirement.

If we become aware that personal data has been collected from a person under the age of 18 — whether through a self-report, a third-party notification, or our own verification processes — we will immediately close the relevant account and delete all associated personal data without undue delay, except where retention is required for legal or safeguarding purposes.

Parents and guardians who have reason to believe that a minor has registered an account on 2999bd are encouraged to contact our support team immediately via live chat or email so that the account can be investigated and closed. We treat these reports with the highest priority.

11 Policy Amendments

2999bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered users by posting a prominent notice on the Site and updating the "Effective Date" displayed at the top of this document.

Your continued use of the 2999bd platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to remain informed of how your personal data is being protected and used.

Where a proposed amendment would materially alter the purposes for which your personal data is processed in a way that requires fresh consent, we will seek that consent before applying the new processing purpose to your data.

12 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how 2999bd has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, accessible from within your logged-in 2999bd account. This is the fastest channel for data subject requests and account-related privacy queries.
• Email: [email protected] — please include "Privacy Request" in the subject line of your email along with your registered mobile number so that our team can locate your account efficiently. Responses are provided within 2–6 hours for most queries.

We are committed to resolving all privacy-related concerns promptly and to your satisfaction. If you submit a formal complaint and are dissatisfied with our response, you may escalate the matter through appropriate channels available in your jurisdiction.