Privacy Policy — How 299 vat Collects, Uses & Protects Your Data

When you interact with 299 vat — whether by browsing the site, registering an account, placing a bet, making a deposit, or contacting support — we collect certain categories of personal data. The data we collect depends on how you use the platform, and we apply the principle of data minimisation: we only collect what is necessary for a specific, legitimate purpose.

Account Registration Data: When you create a 299 vat account, we collect your full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), email address, and a mobile phone number. This information is required to verify your identity, establish your account, and comply with our age-verification obligations.

Identity Verification (KYC) Data: Before processing any withdrawal, we require KYC documentation. This may include a scanned copy or photograph of your national identity card (NID), passport, or other government-issued photo identification. We may also request a selfie or a utility bill as proof of address. KYC documents are used solely for identity verification and anti-money laundering compliance.

Financial Transaction Data: We record details of all deposits and withdrawals made to and from your 299 vat account. This includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), transaction reference numbers, amounts in Bangladeshi Taka (৳), timestamps, and processing status. We do not store full card numbers or mobile wallet PINs — all payment processing is handled by our vetted payment partners.

Gameplay and Betting Data: We collect records of every bet placed, game session played, sports event wagered on, and casino game accessed. This data is used to calculate account balances, resolve disputes, detect problem gambling patterns, and improve the platform experience.

Technical and Device Data: When you access 299 vat, our servers automatically log your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, and session timestamps. This data is used to ensure platform security, detect suspicious login attempts, and optimise the platform for the devices most used by our Bangladeshi player base.

299 vat processes your personal data only for the specific, documented purposes set out in this Privacy Policy. We do not use your data for purposes incompatible with those originally stated. The following describes how and why we use the data we collect:

Service Delivery: The primary purpose of data collection is to deliver the 299 vat platform to you. This includes maintaining your account, processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, calculating and crediting winnings, applying bonus offers, and providing access to sports betting markets and casino games.

Identity and Age Verification: We are obligated to verify that all registered players are at least 18 years of age. Your identity data and KYC documents are used to fulfil this obligation. Accounts where age verification cannot be completed will have withdrawal privileges suspended until verification is satisfactorily concluded.

Fraud Prevention and Security: We analyse technical data, transaction patterns, and login behaviour to detect and prevent fraudulent activity, unauthorised account access, money laundering, and bonus abuse. This processing is essential to protect the platform and the wider player community.

Responsible Gaming Monitoring: 299 vat uses gameplay and financial data to identify players who may be exhibiting signs of problem gambling — such as rapidly increasing bet sizes, extended uninterrupted sessions, or repeated self-exclusion requests. Where such patterns are detected, our team may reach out proactively to offer responsible gaming resources. Full details are on our Responsible Gaming page.

Customer Support: When you contact 299 vat via live chat, WhatsApp, or email, we use your account data and communication history to identify you, understand your query, and deliver an appropriate resolution. Support communications are stored for a period of 3 years for quality assurance and dispute resolution purposes.

Marketing and Promotions: With your consent (provided at the point of registration), 299 vat may send you promotional communications about bonuses, seasonal offers (e.g., BPL or IPL promotions, Eid bonus campaigns), and new platform features. You may withdraw your consent to marketing communications at any time by contacting support. Withdrawal of marketing consent does not affect your ability to use the platform.

299 vat does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only with trusted partners and in the limited circumstances described below, and only to the minimum extent necessary to fulfil each stated purpose.

Payment Processors: To process your deposits and withdrawals, we share the minimum necessary payment and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners are subject to their own data protection and financial compliance obligations and may not use your data for any purpose beyond processing the specific transaction.

Game Technology Providers: The games available on 299 vat are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable you to play these games, your account identifier and session data are shared with the relevant provider. Game providers may not use this data to contact you directly or for purposes outside the game session.

KYC and Identity Verification Services: We work with specialist identity verification partners to assist with KYC document authentication. Verification partners receive identity documents only for the purpose of authentication and are contractually prohibited from retaining or using them for other purposes.

Legal and Regulatory Disclosure: 299 vat may disclose your personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons. We will notify you of any such disclosure where legally permitted to do so.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 299 vat business, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will notify all affected players in advance and ensure that the acquiring entity commits to upholding the standards described in this Privacy Policy.

299 vat uses cookies and similar tracking technologies (such as local storage and session tokens) to ensure the platform functions correctly, to maintain your login session, and to gather anonymised analytics data that help us improve the player experience. This section explains the types of cookies we use and how you can manage them.

Essential Cookies: These cookies are strictly necessary for the 299 vat platform to operate. They manage your authenticated session, remember your language and display preferences, and protect against cross-site request forgery (CSRF). You cannot opt out of essential cookies without breaking core platform functionality. These cookies are deleted at the end of your browser session or within 24 hours, whichever is sooner.

Analytics Cookies: We use anonymised analytics cookies to understand how players navigate the platform — which pages are most visited, where users encounter errors, and how long typical sessions last. Analytics data is aggregated and cannot be used to identify individual players. We do not share raw analytics data with third parties.

Functionality Cookies: These cookies remember your platform preferences — such as your preferred deposit method, display settings, and bet slip configuration — so that you do not need to re-enter them on each visit. Functionality cookies are stored for up to 90 days.

Managing Cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will prevent you from logging in to your 299 vat account and using core platform features. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Samsung Internet) are available in each browser's help documentation.

299 vat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law and regulatory obligations. The following retention periods apply to different categories of data:

• Account and Identity Data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC Documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Financial Transaction Records: Retained for 7 years following each transaction to comply with financial record-keeping obligations applicable to payment processors and gaming operators.
• Gameplay and Betting Records: Retained for 3 years from the date of each individual bet or game session, and for 5 years in cases where a dispute has been raised.
• Customer Support Communications: Retained for 3 years from the date of each support interaction.
• Analytics Data: Aggregated and anonymised after 12 months; individual-level analytics data is not retained beyond 12 months.
• Marketing Consent Records: Retained for the lifetime of your account, and for 3 years following account closure or withdrawal of consent, whichever is later.

When data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. We conduct periodic data retention audits to ensure that personal data is not held beyond its required period.

Protecting your personal data is a core operational commitment at 299 vat. We implement a layered security architecture designed to protect against unauthorised access, accidental loss, and deliberate data breaches. The following technical and organisational measures are in place:

• Encryption in Transit: All data transmitted between your device and our servers is protected by TLS 1.2 or higher with 256-bit encryption. Our HTTPS certificate ensures that connections are authenticated and data cannot be intercepted in transit.
• Encryption at Rest: Personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption. Encryption keys are managed via a dedicated key management system with strict access controls.
• Access Controls: Access to systems containing personal player data is granted on a strict need-to-know basis. All staff with data access use multi-factor authentication (MFA) and their access is logged for audit purposes.
• Penetration Testing: 299 vat infrastructure undergoes regular security testing by independent security professionals. Any vulnerabilities identified are triaged and remediated according to a documented security response process.
• Incident Response: We maintain a documented data breach response plan. In the event of a confirmed data breach affecting your personal data, 299 vat will notify affected players as promptly as possible, providing details of what data was affected, what we are doing in response, and what steps you can take to protect yourself.
• Staff Training: All 299 vat staff with access to personal data receive mandatory data protection and security awareness training. Access privileges are reviewed and updated when staff roles change.

As a player on 299 vat, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat, WhatsApp at +880 1700-000299, or by email at [email protected]. We will respond to all valid requests within 30 days.

Right of Access: You have the right to request a copy of all personal data that 299 vat holds about you. We will provide this in a structured, commonly used, machine-readable format (such as CSV or PDF). The first access request per 12-month period is provided at no charge.

Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account details such as email address, phone number, and residential address can be updated by contacting support. KYC-related data corrections may require submission of updated documentation.

Right to Erasure ("Right to Be Forgotten"): You may request that 299 vat delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw consent and no other legal basis applies. Please note that this right is subject to our legal obligations: financial transaction records and KYC data cannot be erased during their legally mandated retention periods.

Right to Restrict Processing: In certain circumstances (e.g., while the accuracy of your data is being contested, or while a complaint is pending), you may request that we restrict our processing of your data to storage only, pending resolution of the matter.

Right to Object to Marketing: You have an unconditional right to object to your personal data being used for direct marketing communications at any time. Opt-out requests are actioned within 48 hours. Please note that opting out of marketing does not affect platform service communications (e.g., account security alerts, transaction confirmations, support responses).

Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a portable format and to transfer it to another data controller where technically feasible.

299 vat reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes to applicable law, or improvements to platform functionality. The most current version of this Privacy Policy is always accessible at https://299-vat.com/privacy-policy.

When we make material changes to this Privacy Policy — such as changes to the categories of data collected, new sharing arrangements with third parties, or changes to retention periods — we will notify all registered players by email to the address on file at least 14 days before the changes take effect. Your continued use of the 299 vat platform after the effective date of the revised policy constitutes your acceptance of the updated terms.

Minor updates — such as formatting corrections, clarifications that do not change the substance of data processing, or updated contact details — may be made without advance notice. The "Effective Date" at the top of this page will always reflect the date of the most recent update.

Contact for Privacy Matters: If you have any questions, concerns, or complaints about how 299 vat handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the 299 vat platform
• WhatsApp: +880 1700-000299
• Response Time: All privacy-related enquiries are acknowledged within 48 hours and resolved within 30 days.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. Questions regarding this policy may be directed to [email protected].