Privacy Policy — 299bat How We Protect Your Data

This Privacy Policy ("Policy") applies to all services offered through the 299bat online platform, including both our website and mobile app. By using the 299bat website or app, you are agreeing to this Policy.

We believe privacy is a fundamental right. That is why 299bat has been built on a "Privacy by Design" approach from day one — meaning privacy is considered at every stage of feature development.

This policy applies solely to the 299bat platform. Third-party payment gateways and game providers may have their own privacy policies, for which 299bat bears no responsibility.

299bat only collects information that is strictly necessary to operate its services. A detailed breakdown is provided below:

Every piece of data 299bat collects has a specific and legitimate purpose. We never collect information simply to hold on to it.

• Account Creation & Management: Your identity is verified using your name, email, and phone number to keep your account secure.
• Financial Transactions: Payment information is required to accurately process deposits and withdrawals.
• Legal Obligation: KYC data must be retained for anti-money laundering (AML) compliance and age verification purposes.
• Customer Support: We may need to review your account history to resolve issues.
• Platform Security: IP addresses and device information are analyzed to detect and prevent fraud and cyberattacks.
• Personalised Experience: Game suggestions and offers tailored to your preferences (only with your consent).

299bat never sells your personal data. However, limited information may be shared with trusted third parties in specific circumstances:

• Payment Provider: Only the minimum necessary information is shared with bKash, Nagad, Rocket, or banks to process transactions. These partners maintain their own privacy policies.
• Game Provider: Game partners such as Evolution Gaming, Pragmatic Play, and JILI receive only the session data required — not your personal identity details.
• Law Enforcement Agencies: Information may be disclosed to government authorities in compliance with court orders or other legal obligations.
• Fraud Prevention Services: Limited data is shared with authorized providers for AML and KYC verification purposes.

Whenever data is shared with a third party, a Data Processing Agreement (DPA) is in place to ensure restrictions on how that data may be used.

299bat follows the highest industry standards to protect your data, with both technical and organisational safeguards in place.

• SSL/TLS Encryption: All communications are encrypted with 256-bit SSL.
• Database Encryption: Stored sensitive data is encrypted with AES-256.
• Two-Factor Authentication (2FA): An additional layer of security for your account.
• Firewall & DDoS Protection: Advanced security at the server level.
• Regular Security Audits: A third-party security team conducts regular security audits.
• Staff Training: All 299bat staff are trained in data privacy and confidentiality.
• Data Breach Response: In the event of a security breach, affected members will be notified within 72 hours.

Cookies are small text files stored in your browser. 299bat uses certain necessary cookies — not all of them are mandatory.

You can disable analytics and functionality cookies via your browser settings. Please note that disabling essential cookies may affect the performance of 299bat.

You have full control over your personal data on 299bat. All of the following rights belong to you, and we respect every one of them:

If we receive evidence that a minor is using 299bat, their account will be immediately closed and all associated data will be deleted.

Notice to parents: If your child has accidentally registered on 299bat, please email support@299bat.online. We will take immediate action.

299bat does not retain data longer than necessary. A specific retention period is defined for each type of information:

• Account Information: For the duration of active account + 365 days after closure.
• Transaction Records: Up to 5 years where legally required.
• KYC Documents: 5 years after account closure (as required by law).
• Support Conversations: 2 years.
• Session Logs: 90 days.
• Cookie Data: Session cookies are cleared when the browser is closed; others expire after a set period.

299bat may update this Privacy Policy from time to time due to changes in technology, new regulations, or service updates.

• You will be notified by email at least 15 days before any significant changes take effect.
• Any updated policy will be published on this page, and the "Last Updated" date will be revised accordingly.
• If you do not agree to the updated policy, you will have the option to close your account.

For major changes, you will be prompted to review and accept the new policy the next time you log in to the platform.

For any privacy-related questions, complaints, or to exercise your rights, please contact us through the following: