299der Privacy Policy — How We Protect Your Data

Data We Collect

299der collects personal data from players at several stages of the account lifecycle — during registration, during active play, during financial transactions, and during interactions with our customer support team. The categories of personal data we collect are described in the table below. We collect only data that is genuinely necessary for the purposes stated and do not gather excessive or irrelevant information.

299der does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data to us, that data will be deleted promptly and the associated account will be closed. Where 299der collects data from third-party identity verification providers as part of the KYC process, that data is subject to the same protections described in this policy.

How We Use Your Data

299der processes your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which 299der processes player data are as follows:

• Account Management: To create, maintain, and administer your 299der player account, including authentication, password resets, and account security monitoring.
• Identity Verification (KYC): To verify your identity and age in accordance with our responsible gaming obligations, ensuring that only eligible adults hold active accounts on the platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and approved bank transfer channels, and to maintain accurate financial records of all transactions in Bangladeshi Taka.
• Fraud Prevention & AML Compliance: To monitor account activity for signs of fraud, money laundering, or other financial crime, and to fulfil our reporting obligations to relevant authorities where required by law.
• Responsible Gaming Monitoring: To identify patterns of play that may indicate a developing gambling problem, and to proactively reach out to players who may benefit from our responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your queries, complaints, and feedback efficiently, and to maintain a record of communications for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated, anonymised behavioural data in order to improve game offerings, optimise platform performance, and enhance the overall 299der player experience.
• Marketing Communications: To send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and platform updates — but only where you have opted in to receive such communications and have not subsequently withdrawn that consent.
• Legal Compliance: To comply with applicable data protection law, anti-money-laundering regulations, and any other legal or regulatory obligations that apply to 299der's operations.

Where 299der relies on your consent as the legal basis for processing your data (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Consent withdrawal requests can be made by updating your communication preferences in your account settings or by contacting [email protected].

Data Sharing & Third Parties

299der does not sell, rent, or trade your personal data to any third party for their independent commercial use. However, in order to operate the platform effectively and meet our legal obligations, we do share specific categories of personal data with a limited set of trusted third-party processors and statutory bodies. All third-party data processors engaged by 299der are contractually bound to process your data only on our documented instructions and to apply security standards no lower than those described in this policy.

The categories of third parties with whom 299der may share player data, and the basis for doing so, are as follows:

1. Identity Verification Providers: Third-party KYC and age-verification services that process identity documents on our behalf to confirm player eligibility. These providers receive only the data necessary to complete the verification check.
2. Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners receive transaction-level data (reference numbers, amounts, wallet identifiers) strictly as needed to process deposits and withdrawals. Full account credentials are never passed to payment partners.
3. Game Software Providers: Casino game studios and sportsbook data feed providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt) may receive pseudonymised player session data necessary to deliver game functionality, calculate results, and audit game fairness. These providers do not receive your full identity or contact data.
4. Platform Infrastructure Providers: Cloud hosting, content delivery network (CDN), and cybersecurity service providers that process technical data (including IP addresses and session logs) in the course of maintaining platform availability and security.
5. Legal and Regulatory Authorities: Where required by applicable law, court order, or the legitimate request of a law enforcement agency, 299der may disclose player data to statutory authorities. We will notify affected players of such disclosures to the extent permitted by law.
6. Responsible Gaming Organisations: Where a player has enrolled in a formal self-exclusion scheme or requested referral to a responsible gaming support service, we may share the minimum data necessary to give effect to that arrangement.

Cookies & Tracking

299der uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your logged-in state, and gather aggregated analytics about how players interact with different areas of the site. This section explains the types of cookies we use and the purpose each serves.

299der does not use third-party advertising cookies or cross-site tracking pixels that follow your activity on websites unrelated to the 299der platform. Most web browsers allow you to manage cookie settings, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using core platform features. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance specific to your device.

Data Retention

299der retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods set out below reflect the minimum standards we apply across different categories of player data:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in compliance with AML regulations and responsible gaming record-keeping obligations.
• Transaction Records: All deposit, withdrawal, and bet history records are retained for a minimum of 5 years after the transaction date to meet financial record-keeping requirements.
• KYC Documents: Identity documents submitted for account verification are retained for 5 years after account closure and are stored in encrypted form throughout that period.
• Customer Support Communications: Support ticket records and chat transcripts are retained for 3 years after the date of the most recent interaction in a ticket thread.
• Session and Technical Logs: IP addresses, device identifiers, and session timestamps are retained for 12 months on a rolling basis, after which they are deleted or fully anonymised.
• Marketing Preferences: Records of your opted-in or opted-out status for marketing communications are retained for the duration of your account and for 2 years after account closure, to demonstrate compliance with consent obligations.
• Self-Exclusion Records: Where you have applied for self-exclusion, your exclusion record is retained indefinitely to prevent inadvertent re-registration, regardless of whether your main account data is otherwise eligible for deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with your identity. Where deletion is not immediately technically feasible (for example, where data exists in encrypted backup archives), we will isolate that data from active processing and ensure it is deleted at the next scheduled backup cycle.

Your Privacy Rights

As a 299der player, you hold meaningful rights over your own personal data. 299der is committed to honouring these rights promptly and without placing unnecessary barriers in your way. The rights available to you include the following:

• Right of Access: You may request a copy of the personal data that 299der holds about you at any time. We will provide a structured, readable response within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as a phone number update) can be made directly from your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that erasure requests may be declined where retention is required by AML law or other legal obligations.
• Right to Restrict Processing: In certain circumstances, you may request that 299der restricts the processing of your personal data — for example, while the accuracy of data is contested or while an objection is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format suitable for transfer to another service provider, where technically feasible and where the processing is based on your consent or on a contract with you.
• Right to Object to Marketing: You may opt out of receiving marketing communications from 299der at any time by updating your preferences in your account settings or by contacting our support team. Opting out of marketing will not affect the delivery of transactional communications such as deposit confirmations and withdrawal notifications.
• Right to Withdraw Consent: Where 299der processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the rights listed above, submit a written request to [email protected] from the email address registered to your 299der account. We may ask you to verify your identity before processing your request. All legitimate requests will receive a substantive response within 30 calendar days. Where a request is complex or voluminous, we may extend the response period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

Data Security Measures

299der takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, accidental loss, destruction, or disclosure. While no digital platform can guarantee absolute security, the measures we maintain represent a substantial and continuously reviewed standard of protection.

Our current data security measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or mobile device and 299der's servers is encrypted using TLS 1.2 or higher, preventing interception by third parties on the network path.
• Encryption at Rest: Sensitive data fields — including identity document scans, national ID numbers, and financial account references — are encrypted at rest within 299der's database infrastructure using AES-256 or equivalent.
• Access Controls: Access to player personal data within 299der's systems is strictly role-based. Only staff members with a documented operational need to access specific data categories are granted that access, and all access events are logged.
• Two-Factor Authentication for Staff: All 299der staff members with access to player data systems are required to use two-factor authentication when accessing internal tools and dashboards.
• Regular Security Audits: 299der conducts periodic security reviews of its platform infrastructure, including vulnerability assessments, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response Plan: In the event of a confirmed data breach, 299der has a documented incident response procedure that includes timely notification to affected players and relevant authorities where required.

Players also have an important role to play in keeping their data secure. We strongly recommend using a strong, unique password for your 299der account, enabling two-factor authentication from your account security settings, and never sharing your login credentials with any other person. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately so that we can take protective action on your behalf.

Policy Updates & Contact

299der reserves the right to update this Privacy Policy from time to time in response to changes in applicable law, platform functionality, data processing practices, or regulatory guidance. All changes will be published at https://299der.com/privacy-policy and the "Effective" date at the top of the page will be updated accordingly.

Where a proposed change materially affects how we use your personal data or reduces your privacy protections, we will provide advance notice of at least 14 days before the change takes effect, delivered via the email address registered to your 299der account. Continued use of the 299der platform after a policy update takes effect constitutes acceptance of the revised policy. If you do not agree with a material change, you should close your account before the change takes effect.

The current version of this Privacy Policy was last reviewed and updated in January 2026. Prior versions are available upon request. If you have any questions about this policy, about how 299der handles your personal data, or about how to exercise any of your privacy rights, you may contact our privacy team at any time:

• General support and privacy enquiries: [email protected]
• Partnership and business enquiries: [email protected]
• Our support team operates 24 hours a day, 7 days a week, in English, and responds to privacy-related email requests within 2 business hours during Bangladesh Standard Time (BST, UTC+6) operating hours.