Privacy Policy
2999b — How We Handle Your Data

1 Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal data you provide when using the 2999b platform is 2999b ("2999b", "we", "us", "our"). The 2999b platform is accessible at https://2999b.net and all associated subdomains, mobile interfaces, and application programming interfaces (collectively, the "Platform").

As data controller, 2999b determines the purposes and means by which your personal data is processed. We are committed to processing your personal data lawfully, fairly, and transparently in accordance with applicable data protection laws and the principles set out in this Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2999b handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the 2999b Platform
• Response Time: We aim to respond to all privacy-related enquiries within 72 hours

2 Data We Collect

2999b collects personal data from you in several ways: directly when you provide it during registration or account use, automatically when you interact with the Platform, and from third-party service providers such as payment processors and identity verification providers. Below is a detailed breakdown of the categories of personal data we collect.

Registration & Account Data

When you create a 2999b account, we collect the following information:

• Full legal name — as it appears on your official identity documents
• Date of birth — to verify that you meet the 18+ age requirement
• Email address — used for account communications and security alerts
• Mobile phone number — registered in Bangladesh, used for account verification and two-factor authentication
• Username and password — your chosen login credentials (password stored in hashed form; never stored in plain text)
• Residential address — including division, district, and upazila within Bangladesh, required for KYC compliance

Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect:

• National Identity Card (NID) number and NID document scan or photograph
• Passport number and passport scan (where NID is not available)
• Selfie photograph taken at the time of verification for facial comparison against identity documents
• Proof of address documents, such as a utility bill or bank statement issued within the last three months
• Proof of payment method ownership, such as a screenshot of the bKash or Nagad wallet registered in your name

Financial & Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, we collect:

• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in Bangladeshi Taka (৳)
• Payment method identifiers (e.g., the last four digits of a card, or the mobile number associated with a bKash or Nagad wallet) — we do not store full card numbers or mobile banking PINs
• Account balance history, betting history, and bonus usage records

Technical & Usage Data

When you access the 2999b Platform, our servers automatically collect:

Communications Data

When you contact 2999b via live chat or email, we retain records of the communication, including your messages, the date and time of contact, and any attachments you send. This data is used to resolve your query, improve our support quality, and maintain a record of account-related decisions.

3 How We Use Your Data

2999b uses the personal data we collect for the following purposes. For each purpose, we identify the lawful basis on which we rely to process your data.

Account Management & Service Delivery

We use your registration data to create and maintain your 2999b account, authenticate your identity when you log in, process your deposits and withdrawals, credit bonus offers, and provide access to all games and betting markets on the Platform. The lawful basis for this processing is contractual necessity — we cannot provide the 2999b service without processing this data.

Identity Verification & Fraud Prevention

We use your KYC data, financial transaction records, device fingerprint data, and IP address to verify your identity, confirm that you meet the minimum age requirement of 18 years, detect and prevent fraudulent activity, identify duplicate accounts, and comply with anti-money laundering (AML) obligations. The lawful basis for this processing is legal obligation and legitimate interests (protecting the integrity of the Platform and its users).

Responsible Gaming Monitoring

We use your session data, betting history, deposit patterns, and account activity to monitor for signs of problem gambling behaviour. Where our systems identify patterns that suggest a player may be experiencing difficulty with their gambling, we may reach out proactively or apply responsible gaming interventions. This processing is carried out in your vital interests and under our legitimate interest in promoting safe gambling practices on the Platform.

Customer Support

We use your communications data and account information to respond to your support queries, resolve disputes, and improve the quality of our customer service. The lawful basis is contractual necessity and legitimate interests.

Marketing Communications

With your consent, we may use your email address and/or mobile phone number to send you promotional communications about bonuses, new games, BPL cricket betting markets, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support or clicking the unsubscribe link in any marketing email we send.

Platform Analytics & Improvement

We use aggregated and pseudonymised technical and usage data to analyse how players interact with the Platform, identify areas for improvement, optimise game lobby layout, and assess the performance of promotional campaigns. This processing is carried out under our legitimate interest in continuously improving the 2999b service.

4 Data Sharing & Third Parties

2999b does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers

To process your deposits and withdrawals, 2999b shares necessary transaction data with our integrated payment service providers, including bKash, Nagad, Rocket, Upay, SureCash, and Visa / Mastercard acquiring banks. These providers receive only the transaction data required to execute the payment and are contractually prohibited from using your data for any other purpose.

Identity Verification Providers

For KYC verification purposes, 2999b may share identity documents with third-party identity verification service providers who specialise in document authentication and facial comparison. These providers process your KYC data solely on 2999b's behalf and are bound by strict data processing agreements that prohibit secondary use of your data.

Game Software Providers

Games on the 2999b Platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play their games, these providers may receive your player identifier and session data necessary to operate the game, log your bets, and calculate your winnings. No directly identifiable personal data (such as your full name or NID) is shared with game providers.

Analytics Providers

2999b uses analytics tools to understand Platform performance and user behaviour. Analytics data shared with third-party providers is pseudonymised and aggregated wherever possible. Analytics providers are prohibited from using this data for their own purposes or sharing it with additional parties.

Legal & Regulatory Disclosure

2999b may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where we are required to do so by applicable law, court order, or as part of an investigation into suspected illegal activity such as fraud or money laundering. We will notify you of any such disclosure where legally permitted to do so.

5 Cookies & Tracking Technologies

The 2999b Platform uses cookies and similar tracking technologies to provide core functionality, remember your preferences, and analyse how the Platform is used. This section explains what types of cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and store information about your preferences or session. Cookies can be session-based (deleted when you close your browser) or persistent (stored on your device for a defined period).

Types of Cookies We Use

Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that disabling essential or security cookies may prevent you from logging in or using certain features of the 2999b Platform. Browser-level cookie settings are specific to each browser and device — if you use multiple devices or browsers, you will need to manage settings on each one separately.

6 Data Retention

2999b retains your personal data for as long as necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our Terms & Conditions. The specific retention periods we apply are as follows:

• Account data (registration details, KYC documents): Retained for the duration of your active account, plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records (deposits, withdrawals, betting history): Retained for a minimum of 5 years following the date of the transaction, in compliance with financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the communication, or longer if the communication relates to an ongoing dispute or legal matter.
• Technical and usage data (IP logs, session data): Retained for the periods specified in the data collection table in Section 2, typically 90 days to 24 months depending on the data type.
• Marketing consent records: Retained for the duration of your marketing consent, plus 3 years following withdrawal of consent to demonstrate compliance.

When personal data reaches the end of its retention period, 2999b will securely delete or anonymise it. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregated analytics and platform improvement purposes.

7 Security Measures

2999b takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction.

Technical Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 2999b Platform
• Encryption at rest for all sensitive data stored on 2999b servers, including KYC documents and financial records
• Bcrypt password hashing — passwords are never stored in plain text and cannot be recovered by 2999b staff
• Two-factor authentication (2FA) available for all player accounts to provide an additional layer of login security
• Automated anomaly detection systems that flag unusual login patterns, suspicious transaction sequences, and potential account takeover attempts
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities
• Web Application Firewall (WAF) protection to defend against common web-based attacks including SQL injection and cross-site scripting

Organisational Measures

• Access to personal data is restricted on a strict need-to-know basis. Only authorised 2999b personnel whose role requires access to specific data categories are granted access.
• All 2999b staff with access to personal data receive data protection training upon onboarding and annually thereafter.
• Third-party service providers with access to 2999b player data are subject to data processing agreements that require them to implement equivalent security standards.
• 2999b maintains an Incident Response Plan to ensure prompt action in the event of a data breach, including notification to affected players where required by applicable law.

8 Your Privacy Rights

As a player on the 2999b Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to your request within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that 2999b holds about you. We will provide this information in a structured, commonly used, and machine-readable format. Your account dashboard provides direct access to your betting history, transaction records, and account details. For a comprehensive data export, contact our support team.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details (such as your email address or phone number) directly in your account settings. Changes to identity information (such as your name, as it appears on your NID) must be submitted with supporting documentation via the support team.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and there is no other lawful basis for processing. Please note that this right is subject to limitations where we are required by law to retain data (such as financial records retained for AML compliance). We will inform you clearly if any data cannot be deleted and the legal reason for retention.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of our legitimate interests.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used format and to have it transmitted to another data controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming purposes. You also have the absolute right to object to processing for direct marketing purposes at any time, without providing any reason.

Right to Withdraw Consent

Where processing is based on your consent (such as receipt of marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9 Children's Privacy

The 2999b Platform is strictly an adults-only service. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes mandatory age declaration, and our KYC verification process requires documentary proof of age. If we discover that personal data has been collected from an individual under 18, we will immediately close the account, void all bets placed, return any deposits to the payment source, and securely delete all personal data collected from that individual.

If you are a parent or guardian and believe that a minor has registered an account on the 2999b Platform using false age information, please contact our support team immediately via live chat or at [email protected]. We treat underage gambling with the utmost seriousness and will act on all such reports without delay.

10 Policy Updates & Contact

2999b reserves the right to update or amend this Privacy Policy at any time. We will notify you of any material changes by posting a prominent notice on the Platform and, where we hold your email address, by sending you a direct notification. The updated policy will take effect from the date indicated in the "Last updated" field at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Continued use of the 2999b Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms, to the extent permitted by applicable law.

Version History

• Version 3.1 — 1 January 2026: Current version. Updated data retention periods, expanded security measures section, added data breach notification clause.
• Version 3.0 — 1 July 2025: Added dedicated section on children's privacy and underage gambling prevention. Expanded cookies section with cookie-type table.
• Version 2.0 — 1 January 2025: Major revision to align with updated KYC requirements. Added data portability and right to object sections.
• Version 1.0 — 1 March 2019: Initial Privacy Policy published at platform launch.

Contact Our Data Protection Team

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 2999b, please reach out to us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, via the 2999b Platform
• Response Commitment: We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 days