Your Privacy at b2999 — How We Handle Your Data

b2999 ("we", "us", "our", "the Platform") operates an online betting and gaming platform accessible at https://b2999.io, serving players across Bangladesh. As part of delivering our services, we necessarily collect and process certain personal information about the individuals who register and play on our platform.

This Privacy Policy ("Policy") describes our practices with respect to that personal data. It covers the categories of data we collect, the purposes for which we process it, the parties with whom it may be shared, how long we retain it, the security measures we apply to protect it, and the rights you have in relation to it. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between b2999 and its registered players.

We are committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles. If you have any questions about this Policy or about how your data is handled, please contact us at the details provided in Section 15 below.

b2999 collects personal data across several categories. The following table summarises the main categories of personal data we collect and representative examples of each:

b2999 does not knowingly collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) except where this is incidentally contained within identity or verification documents submitted by players for KYC purposes, in which case such data is processed only to the extent necessary to verify identity and is not retained beyond that purpose.

b2999 collects personal data through a number of channels and mechanisms:

• Direct Submission: Data you provide directly when registering an account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access or interact with the b2999 platform, including via cookies, web beacons, server logs, and similar technologies (see Section 7 — Cookies & Tracking).
• Payment Providers: Confirmation and reference data received from payment processing partners such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard in connection with deposit and withdrawal transactions.
• Identity Verification Services: Where b2999 uses third-party identity verification tools to cross-reference submitted identity documents, such tools may return confirmation data that is added to your player profile.
• Fraud Prevention Systems: Risk and fraud screening tools may generate and associate data flags or risk scores with your account based on analysis of your activity and technical data.

b2999 processes your personal data for the following purposes:

• Account Registration and Management: To create and maintain your b2999 player account, verify your identity, and ensure you meet the eligibility requirements set out in our Terms & Conditions (including the 21+ age requirement).
• Service Delivery: To provide you with access to the b2999 platform, including cricket betting, live casino, slots, fishing games, and all other services offered from time to time.
• Financial Transactions: To process your deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank card, etc.) and to maintain an accurate record of your transaction history.
• Customer Support: To respond to your enquiries, resolve disputes, and provide you with assistance in relation to your b2999 account.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling and to apply and enforce responsible gaming tools including deposit limits, session alerts, and self-exclusion measures that you have set or that b2999 is required to apply.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, unauthorised account access, and other illegal or policy-violating activity.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, including requirements relating to identity verification, anti-money laundering, and record-keeping.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality, performance, and content of the b2999 platform.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and updates about new games and events. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

b2999 does not process your personal data for any purpose other than those listed above without first providing you with notice and, where required by applicable law, obtaining your consent.

b2999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and b2999 — specifically, to create and operate your account, process transactions, and deliver the platform's services.
• Legitimate Interests: Processing necessary to pursue b2999's legitimate business interests in fraud prevention, platform security, abuse detection, and service improvement, provided those interests are not overridden by your fundamental rights and interests.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including identity verification, anti-money laundering screening, and record-keeping requirements.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the purpose of sending marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

b2999 does not sell your personal data to any third party. We may share your data with third parties only in the following limited circumstances:

• Payment Processors: We share transaction-relevant data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard) as required to process your deposits and withdrawals.
• Identity Verification Partners: We may share identity document data with third-party KYC and identity verification service providers for the purpose of confirming your eligibility to use the Platform.
• Game Studio Providers: When you play games from third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, the relevant studio's platform may receive a player session token and anonymised game-play data. No personally identifiable data beyond what is technically required for session management is shared with game studios.
• Fraud and Risk Analytics: We may share technical and transactional data with fraud prevention and risk management service providers to screen for suspicious activity.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of b2999, its players, or the public.
• Corporate Transactions: In the event that b2999 undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the successor entity as part of that transaction. We will notify you via your registered email address in advance of any such transfer becoming effective.

All third-party service providers who receive personal data from b2999 are contractually required to maintain appropriate data security standards and to process your data only for the specific purposes for which it was shared. b2999 does not permit any third party to use your data for their own independent marketing purposes.

b2999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website; they help the site remember your preferences and recognise you on return visits.

The following categories of cookies are used by b2999:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as maintaining your b2999 Login session, storing your account authentication token, and remembering responsible gaming settings you have applied. You cannot opt out of these cookies without also opting out of the Platform itself.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, game lobby view, and interface settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — such as which pages are visited most frequently, how long sessions last, and where users navigate from. This data helps us improve the performance and usability of b2999.
• Marketing Cookies: Where you have consented to receive marketing communications, these cookies help b2999 understand the effectiveness of promotional campaigns and may be used to personalise the offers and bonuses shown to you during your session.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies entirely or to delete them after each session. Please be aware that disabling strictly necessary cookies will impair your ability to use the b2999 platform, including your ability to log in and maintain a session.

b2999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted from b2999's systems or irreversibly anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes in its anonymised form.

b2999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and b2999 servers is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your b2999 Login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted Password Storage: Passwords are never stored in plain text. All b2999 Login passwords are hashed using a modern, salted cryptographic algorithm before storage, so that even in the event of a system breach, passwords cannot be recovered in usable form.
• Access Controls: Access to personal data within b2999's operational systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: b2999's platform infrastructure is hosted in secure, access-controlled data centres with physical security measures and redundant systems to ensure continuity and availability.
• Fraud Detection Systems: Automated monitoring systems scan for anomalous account activity, unusual transaction patterns, and signs of unauthorised access in real time, triggering alerts and protective measures where warranted.
• Regular Security Reviews: b2999 conducts periodic reviews of its data security practices and infrastructure to identify and address potential vulnerabilities.

As a player whose personal data is processed by b2999, you have a number of rights in relation to that data. These rights are set out below, along with a description of how to exercise each one:

To exercise any of these rights, please contact the b2999 data protection team at [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and respond in full within 30 calendar days. No fee is charged for exercising these rights under normal circumstances.

The b2999 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Account registration requires confirmation that the applicant is at least 21 years old, and b2999 performs age verification checks as part of the KYC process.

If b2999 discovers or is informed that personal data has been collected from a person under 21, we will take immediate steps to delete that data from our systems, close the relevant account, and return any deposited funds to the payment method from which they were received.

The b2999 platform may contain references to third-party game studios and payment service providers. While b2999 takes care to work only with reputable partners, please be aware that these third parties operate their own platforms and privacy practices independently of b2999.

When you interact with a third-party game studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your in-game session data is processed by that studio's infrastructure. Similarly, when you initiate a payment via bKash, Nagad, or another payment provider, your transaction data passes through that provider's systems. b2999 is not responsible for the privacy practices of these third parties and encourages you to review their respective privacy policies.

b2999's primary operations and data infrastructure are oriented towards serving players in Bangladesh. However, certain third-party service providers — including game studio platforms, identity verification tools, and fraud detection systems — may be based in or process data through servers located outside Bangladesh. Where such international transfers occur, b2999 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Bangladesh, including through contractual data protection clauses with the relevant service providers.

By registering an account on b2999 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to third-party service providers located outside Bangladesh where this is necessary to deliver the services described in this Policy. b2999 will never transfer your personal data internationally for purposes beyond those described in Section 4 of this Policy.

b2999 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players via the email address associated with their account at least 14 days before the changes take effect. The updated Policy will also be published on this page with a revised "Last Updated" date.

Your continued use of the b2999 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way b2999 processes your personal data, please contact our data protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

We take all privacy concerns seriously and aim to resolve every enquiry to your satisfaction. If you feel that your concern has not been adequately addressed, you retain the right to escalate your complaint through any applicable legal or regulatory channel available to you in Bangladesh.