Privacy Policy — How 2999b Protects Your Data

This Privacy Policy applies to all personal data collected and processed by 2999b ("we", "us", "the Platform") in connection with the website at https://2999b.io and all associated services, including sports betting, live casino, slot games, the 2999b Wallet, the Earn Money programme, and customer support channels.

2999b is committed to handling personal information with care, transparency, and respect. This policy is designed to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the platform.

By registering a 2999b account, accessing the platform, or using any of its services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to arrange deletion of any data we hold about you.

This policy should be read alongside the 2999b Terms & Conditions and the Responsible Gaming Policy, both of which are available on the 2999b website.

2999b collects the following categories of personal data in the course of operating the platform:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information except where expressly required by applicable law or responsible gaming obligations (for example, where a player discloses a gambling problem during a self-exclusion request).

2999b collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, initiating deposits or withdrawals, contacting customer support, or responding to surveys and promotions;
• Automated technical collection: Data gathered automatically when you access the 2999b platform, including IP addresses, device identifiers, browser fingerprints, and session activity via cookies and similar tracking technologies (see Section 9);
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks when processing deposits and withdrawals;
• Identity verification providers: Results and flagging data from KYC and anti-fraud screening services used to verify the authenticity of identity documents you submit;
• Game providers: Aggregated game session data shared by third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in connection with gameplay conducted through the 2999b platform.

2999b uses your personal data only for the following clearly defined purposes:

• Account management: Creating and maintaining your 2999b account, authenticating your identity at login, and providing access to the platform's services;
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and partner banks, and processing withdrawal requests to verified accounts in your name;
• Identity verification (KYC): Complying with anti-money laundering and fraud prevention obligations by verifying your identity before processing large withdrawals or at any point where verification is required;
• Service delivery: Operating cricket betting markets, live casino games, slot games, the 2999b Wallet, and the Earn Money programme in a fair and reliable manner;
• Customer support: Responding to account queries, payment disputes, technical issues, and responsible gaming requests submitted via email or live chat;
• Promotions and communications: Sending you relevant promotional offers, bonus notifications, and platform updates where you have opted in to marketing communications. You may opt out at any time via account settings or by contacting support;
• Responsible gaming: Monitoring account activity to identify signs of problem gambling, enforcing deposit limits, cooling-off periods, and self-exclusion requests, and complying with our responsible gaming obligations;
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised access to the platform;
• Legal compliance: Meeting any legal or regulatory obligations applicable to the operation of the 2999b platform.

2999b does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

2999b processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between you and 2999b, including account creation, payment processing, and service delivery;
• Legitimate interests: Processing necessary for 2999b's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the quality of our services, provided those interests are not overridden by your rights;
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations and identity verification requirements;
• Consent: Processing based on your freely given, specific, and informed consent, such as the receipt of optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

2999b may share your personal data with the following categories of third parties:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, solely to process your deposit and withdrawal transactions;
• KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents and screen against fraud and anti-money laundering databases;
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios, to the extent required to deliver game content and settle game outcomes through the 2999b platform;
• IT and platform infrastructure providers: Hosting, content delivery, and cybersecurity service providers who process data solely on 2999b's instructions and under strict data processing agreements;
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate regulatory request, 2999b may disclose personal data to competent authorities.

All third-party service providers engaged by 2999b are contractually obligated to process personal data only for the specified purpose, to maintain appropriate security standards, and not to disclose data to any further parties without prior authorisation.

2999b retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Following the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual. Where anonymised data is retained for statistical or analytical purposes, it no longer constitutes personal data and is not subject to this policy.

2999b applies a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the 2999b platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the platform;
• Password hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. 2999b staff cannot retrieve your password in plaintext form;
• Access controls: Personal data is accessible only to authorised 2999b personnel who require it to perform their designated functions. Access is governed by a role-based permission system and logged for audit purposes;
• Fraud and anomaly detection: Automated systems monitor account activity for signs of suspicious behaviour, including unusual login locations, abnormal transaction patterns, and multi-accounting indicators;
• Secure data storage: Personal data is stored on secured servers with restricted physical and network access. Regular security reviews and vulnerability assessments are conducted to maintain platform integrity.

While 2999b takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your 2999b login credentials and for logging out of your account on shared devices. If you suspect that your account has been compromised, contact us immediately at [email protected].

2999b uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the 2999b website. Cookies help us recognise your browser, maintain your session, remember your preferences, and analyse how the platform is used.

The following categories of cookies are used on the 2999b platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. These cannot be disabled without impairing your ability to use the platform;
• Functional cookies: Remember your preferences, such as language settings and display preferences, to personalise your experience across visits;
• Analytical cookies: Collect aggregated, anonymised data about how visitors use the platform — such as which pages are visited most frequently — to help us improve the site's structure and content. No personally identifiable data is shared with analytics providers in an identifiable form;
• Marketing cookies: Used to deliver promotional content relevant to your interests, where you have provided consent for marketing communications. You may withdraw marketing consent at any time via your account settings.

As a 2999b player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the 2999b support team at [email protected] with the subject line "DATA REQUEST — [Right Type]". We will respond within a reasonable timeframe and in any case within 30 days of receiving your request.

The 2999b platform is strictly intended for adults aged 21 years and above. 2999b does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an underage individual, the account will be closed immediately and all associated data will be deleted in accordance with our retention policy, except where retention is required by law.

If you believe that an underage person has registered a 2999b account, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

The 2999b platform may contain references to third-party game providers and payment services. While 2999b takes care to work only with reputable partners, we are not responsible for the privacy practices of any third-party service that operates outside the 2999b platform environment. When you interact directly with a third-party service — such as a payment provider's own application — that party's own privacy policy governs the collection and use of your data.

We encourage you to review the privacy notices of any third-party services you use in connection with your 2999b account, including your bKash, Nagad, or Rocket mobile wallet applications.

2999b reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players via email or an in-platform notification prior to the changes taking effect. The updated policy will be published on the 2999b website with a revised "Last updated" date.

Your continued use of the 2999b platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use of the platform and may request deletion of your account and associated data.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 2999b holds about you, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "DATA REQUEST — [Right Type]" (e.g., "DATA REQUEST — Access")
• Availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Response time: Privacy and data requests are acknowledged within 48 hours and resolved within 30 days
• Time zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming enquiries, including self-exclusion requests, deposit limit settings, or account cooling-off periods, please visit the Responsible Gaming page or include "RESPONSIBLE GAMING" in your email subject line.