Privacy Policy — How t299 Handles Your Data

Who We Are

This Privacy Policy applies to the t299 online casino and sports betting platform, accessible at t299.io. t299 is an online gaming platform operated for players located in Bangladesh, offering casino games, live dealer tables, cricket betting, slots, and related gaming services.

For the purposes of this Privacy Policy, t299 acts as the data controller in respect of the personal information collected from registered players and website visitors. As data controller, t299 is responsible for determining the purposes and means of processing your personal data, and for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how t299 handles your personal data, or if you wish to exercise any of your data rights, please contact our support team using the contact details provided in Section 14 of this policy.

Personal Data We Collect

t299 collects the following categories of personal data from players and website visitors. We collect only what is necessary for the specific purposes described in this policy.

2.1 Identity Data

This includes your full legal name, date of birth, gender, and nationality. Identity data is collected during account registration and may be supplemented through the KYC (Know Your Customer) verification process, during which you may be asked to provide a copy of a government-issued photo ID such as a National ID card or passport.

2.2 Contact Data

This includes your mobile phone number, email address, and residential address. Contact data is used to communicate with you regarding your account, transactions, promotions you have opted into, and important security alerts.

2.3 Financial Data

This includes the mobile banking account numbers or bank account details associated with your preferred payment methods (such as bKash, Nagad, Rocket, or Upay), records of deposits made to your t299 account, withdrawal requests and their processing status, and your account balance history. t299 does not store full card numbers or mobile banking PINs.

2.4 Account & Gaming Data

This includes your chosen username, account creation date, login history (dates, times, and IP addresses), game session records, betting history, bonus activations and wagering progress, and any responsible gaming limits or self-exclusion settings you have applied to your account.

2.5 Technical Data

This includes your IP address, browser type and version, device type (desktop, mobile, or tablet), operating system, screen resolution, and session duration data. Technical data is collected automatically when you access the t299 platform and is used primarily for security monitoring and platform optimisation.

2.6 Communications Data

This includes records of communications between you and the t299 support team — including live chat transcripts, email correspondence, and WhatsApp message records — to the extent necessary to resolve your enquiry, maintain an accurate support history, and ensure quality of service.

How We Collect Your Data

t299 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any form on the t299 platform.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you visit or interact with the t299 website or mobile platform.
• Third-party sources: Identity verification and fraud screening data received from KYC and AML service providers; payment confirmation data received from mobile banking providers such as bKash and Nagad; and device fingerprinting data received from fraud prevention partners.

t299 does not purchase personal data from data brokers or any other third-party commercial data sources.

Why We Use Your Personal Data

t299 uses your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate essential account information to you.
• Payment processing: To process deposits and withdrawals through your nominated payment method, reconcile transaction records, and investigate any payment disputes.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, to conduct customer due diligence (CDD) and enhanced due diligence (EDD) checks, and to respond to lawful requests from law enforcement or regulatory authorities.
• Responsible gaming: To monitor gambling activity for signs of problem gambling, to apply and enforce responsible gaming limits and self-exclusion settings that you have requested, and to provide appropriate support resources where necessary.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, bonus abuse, and other prohibited activities that could harm you or other players.
• Platform improvement: To analyse usage patterns, identify technical issues, improve game performance and platform stability, and enhance the overall player experience.
• Customer support: To respond to your enquiries, resolve complaints, and maintain a record of support interactions for quality assurance purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and personalised recommendations — but only where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time.

Legal Basis for Processing

t299 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, execute your bets and transactions, and deliver the services you have signed up for.
• Legal obligation: Processing required to comply with applicable AML legislation, identity verification requirements, and lawful requests from authorities.
• Legitimate interests: Processing carried out in pursuit of t299's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, such as the receipt of marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

How We Share Your Data

t299 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary and for the purposes described in this policy:

• Payment service providers: Mobile banking operators (bKash, Nagad, Rocket, Upay) and bank partners (Dutch-Bangla Bank, City Bank, BRAC Bank) receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification and document checking services receive the data necessary to confirm your identity and age as part of the account verification process.
• Fraud prevention and AML partners: Specialised fraud screening and anti-money laundering service providers receive limited data to help detect and prevent financial crime.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token necessary to launch their games within the t299 platform. These studios do not receive your full personal profile.
• Law enforcement and regulators: t299 may disclose personal data to law enforcement agencies or regulatory authorities when required to do so by law, court order, or equivalent legal process.
• IT and hosting providers: Secure server hosting and infrastructure partners may process personal data on our behalf under strict data processing agreements that prohibit any use of the data for their own purposes.

Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to store preferences and session information. t299 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

7.2 How t299 Uses Cookies

t299 uses cookies for the following purposes:

• Essential cookies: Necessary for the platform to function correctly. These include authentication cookies that keep you logged in during an active session and security cookies that help detect fraudulent activity.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming limits.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the t299 platform, which pages are most visited, and where technical errors occur. This data is used exclusively for platform improvement.
• Fraud prevention cookies: Used to analyse device characteristics and detect suspicious patterns consistent with bot activity, multiple account creation, or other forms of fraud.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent the t299 platform from functioning correctly and may affect your ability to log in, deposit, or place bets.

Data Retention

t299 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period of up to 5 years following account closure, to satisfy AML record-keeping requirements.
• Transaction records: Retained for up to 7 years following the date of each transaction, in accordance with financial record-keeping obligations.
• KYC documents: Retained for the period of account activity plus a minimum of 5 years post-closure.
• Support communications: Retained for up to 3 years following the resolution of the relevant support case.
• Marketing data: Retained until you withdraw your marketing consent, at which point your details are removed from all active marketing lists without undue delay.
• Technical and analytics data: Typically retained in aggregated or anonymised form for up to 24 months.

When personal data is no longer required, t299 securely deletes or anonymises it in accordance with our internal data disposal procedures.

Your Privacy Rights

As a t299 player, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team using the details in Section 14:

• Right of access: You have the right to request a copy of the personal data that t299 holds about you, together with information about how and why it is being processed.
• Right to rectification: If any of the personal data t299 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that t299 delete the personal data it holds about you. This right is subject to any overriding legal obligations that require us to retain the data (e.g., AML record-keeping requirements).
• Right to restriction of processing: You have the right to request that t299 restrict the processing of your personal data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to t299 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of t299's legitimate interests, including profiling for fraud prevention purposes. t299 will assess your objection and cease the relevant processing unless there are compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

t299 will respond to all data rights requests within a reasonable period. We may need to verify your identity before actioning a request to ensure we are responding to the correct individual.

Data Security

t299 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage of sensitive data fields, including payment method identifiers.
• One-way cryptographic hashing of account passwords — t299 cannot retrieve or view your password in plain text.
• Access controls limiting database and system access to authorised personnel only, on a need-to-know basis.
• Regular penetration testing and security audits conducted by qualified third-party security professionals.
• Intrusion detection systems and real-time security monitoring to identify and respond to anomalous activity.
• Mandatory security training for all staff with access to personal data.

While t299 applies industry-standard security practices, no platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, t299 will notify affected individuals promptly in accordance with applicable notification obligations.

Third-Party Links

The t299 platform does not contain links to third-party websites for general browsing purposes. However, where third-party game content is embedded within the platform (e.g., games provided by Pragmatic Play, Evolution Gaming, or Spribe), those studios operate under their own privacy practices in relation to any data they independently collect during game sessions.

t299 is not responsible for the privacy practices of third-party game studios or payment providers. You are encouraged to review the privacy policies of any third-party service you interact with in connection with your use of the t299 platform.

Children's Privacy

The t299 platform is strictly intended for adults aged 21 years and above. t299 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If t299 discovers that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a person under the age of 21 has provided personal data to t299 without your consent, please contact our support team immediately using the details provided in Section 14. We will investigate and take appropriate action without delay.

Changes to This Privacy Policy

t299 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, t299 will publish a notice on the platform and update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how t299 protects your personal data. Your continued use of the t299 platform following the publication of any amendment constitutes your acknowledgement of the revised policy.

If changes are significant and affect how we process data on which you have previously given consent, we will seek fresh consent from you where required.

Contact Us — Data & Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how t299 handles your personal information, please contact our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the t299 account dashboard
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

t299 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 14 calendar days. Complex requests — such as subject access requests involving large volumes of data — may require up to 30 days to process in full, in which case we will notify you of the extended timeline.