Privacy Policy

1. Information We Collect

2999be collects personal information from you when you register an account, make a deposit, place a wager, contact support, or otherwise interact with the platform. The categories of information we collect are set out below.

We collect information directly from you when you complete forms on the platform, indirectly from your device via cookies and server logs, and in some cases from third-party identity verification providers engaged for KYC purposes. We do not collect sensitive personal data such as health information, religious beliefs, or political opinions.

2. How We Use Your Data

2999be processes your personal information for specific, legitimate purposes. We do not use your data for any purpose incompatible with those stated at the point of collection. The primary purposes for which we use your data are:

• Account Management: To create, maintain, and administer your 2999be account, including verifying your identity, enforcing the 18+ age requirement, and managing your preferences and notification settings.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer channels, including verifying that the payment account is registered in your name.
• Service Delivery: To provide access to casino games, live casino tables, crash games, slots, and sports betting markets, and to record your gaming history accurately.
• Regulatory Compliance: To fulfil anti-money laundering (AML), Know Your Customer (KYC), and other legal obligations that apply to online gaming platforms operating in this market.
• Responsible Gaming: To monitor account activity for signs of problematic gambling behaviour, enforce self-exclusion requests, apply deposit limits, and intervene where player protection obligations require it.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and money laundering. Technical data including IP addresses is used to flag suspicious patterns.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support service based on communication history.
• Platform Improvement: To analyse aggregated usage data and identify opportunities to improve game performance, payment flows, and overall user experience on the 2999be platform.
• Marketing Communications (with consent): To send you promotional emails, SMS notifications about bonuses, and personalised offers where you have opted in to receive such communications. You may withdraw this consent at any time.

The legal basis for processing your data varies by purpose. Account management and transaction processing are necessary for the performance of our contract with you. Regulatory compliance processing is required by law. Fraud prevention and responsible gaming monitoring are legitimate interests of 2999be that we balance against your privacy rights. Marketing communications are processed only with your explicit consent.

3. Data Sharing & Disclosure

2999be does not sell, rent, or otherwise trade your personal information to third parties for commercial purposes. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Transaction reference data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners to process deposits and withdrawals. These providers operate under their own privacy frameworks and are bound by contractual data protection obligations when processing data on our behalf.
• Identity Verification Partners: Where third-party KYC providers are engaged to verify the authenticity of identity documents, the minimum necessary data is shared for that purpose only. Verification partners are prohibited from using your data for any other purpose.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and bet data necessary to operate their games within the 2999be platform. This data is governed by data processing agreements with each studio.
• IT Infrastructure & Security Providers: Hosting, content delivery, and cybersecurity service providers may process technical data as part of platform operations. All such providers are vetted and contractually obligated to maintain confidentiality.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulators, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights and safety of 2999be, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 2999be business, player data may be transferred as part of that transaction. Affected players will be notified in advance wherever reasonably practicable.

4. Cookies & Tracking Technologies

The 2999be website uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the platform, remember your preferences, and understand how players interact with the site. Below is a summary of the cookie categories we use:

Cookies are small text files stored in your browser. They do not contain executable code and cannot be used to access other data on your device. Session cookies are automatically deleted when you close your browser. Persistent cookies remain on your device for a defined period (typically 30–365 days) unless you delete them manually.

You can manage or delete cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the 2999be platform. Disabling analytics or marketing cookies will not affect your ability to play games or process payments.

5. Data Retention

2999be retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure. This retention period supports AML compliance and dispute resolution obligations.
• Financial Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of 7 years from the date of each transaction, in line with financial record-keeping standards.
• KYC Documentation: Copies of identity documents submitted for verification are retained for 5 years post account closure and then securely destroyed unless legal proceedings require otherwise.
• Support Communications: Chat logs and email correspondence are retained for 2 years from the date of the interaction, or longer if the communication relates to an ongoing dispute or investigation.
• Technical & Usage Data: Server logs and session data are retained for 12 months for security monitoring purposes, after which they are aggregated and anonymised.
• Marketing Consent Records: Records of your consent or opt-out are retained for as long as the underlying data is held, so that we can demonstrate compliance with consent requirements.

When retention periods expire, data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes without identifying any individual player.

6. Security Measures

2999be takes the security of your personal data seriously. We employ a layered approach to data protection combining technical, organisational, and procedural safeguards:

• Encryption in Transit: All communications between your browser or app and 2999be servers are encrypted using TLS 1.2 or higher (256-bit SSL). This includes login sessions, payment flows, and support chats.
• Encryption at Rest: Sensitive data fields — including identity document references, payment account references, and passwords — are encrypted at rest using AES-256 encryption in our database infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff are assigned role-based access permissions, and all access to sensitive data is logged and audited.
• Password Security: Player passwords are stored using a one-way cryptographic hashing algorithm with a unique salt per account. 2999be staff cannot view your plaintext password at any time.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, brute-force login attempts, and SQL injection or other common attack vectors. Suspicious activity triggers automated alerts and lockouts.
• Third-Party Security Audits: 2999be engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the platform.
• Incident Response: In the event of a data breach affecting your personal information, 2999be will notify affected players without undue delay and take immediate steps to contain, investigate, and remediate the incident.

7. Your Privacy Rights

As a 2999be player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Privacy Request — [Right Type]". We will respond within 10 business days.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly from within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. Note that this right may be limited where retention is required for legal compliance (e.g., AML record-keeping obligations).
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict processing of your data — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on consent or contract, you have the right to receive your data in a portable format and to have it transmitted to another provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing personalisation. Objection to marketing processing will always be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

2999be will not discriminate against you for exercising any of your privacy rights. Exercising your rights will not affect your ability to access the platform, place wagers, or process payments, subject to any legal obligations that require us to retain certain data.

8. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 2999be processes your personal data, please contact our data team using the following details:

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing to the data team
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 10 business days of receipt
• Language: Enquiries may be submitted in English
• Hours: Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy was last reviewed and updated on 1 January 2026. 2999be reserves the right to update this policy from time to time to reflect changes in our data practices, platform functionality, or applicable legal requirements. We will notify registered players of material changes via email or platform notification prior to the changes taking effect. The current version will always be accessible at https://2999be.app/privacy-policy.

Your continued use of the 2999be platform after a revised Privacy Policy has been published and notified to you constitutes your acceptance of the updated terms. If you do not agree with any updated provisions, you should cease using the platform and contact support to request account closure.