2999 Privacy Policy

Introduction

2999 is an online casino and sports betting platform serving players across Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor to our website, or a person who contacts our support team.

This Privacy Policy sets out in clear and transparent terms the categories of personal data we collect, the purposes for which we process that data, the legal basis on which we rely for each processing activity, and the rights available to you as a data subject. It applies to all data processing activities carried out by 2999 in connection with the operation of the platform at https://2999.vu.

This policy should be read alongside the 2999 Terms and Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Privacy Policy and the Terms and Conditions in relation to data processing matters, this Privacy Policy prevails.

Data Controller

For the purposes of applicable data protection law, 2999 acts as the data controller in respect of the personal data collected through the platform. As data controller, 2999 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities are carried out lawfully, fairly, and transparently.

If you have any questions about how 2999 processes your personal data, or if you wish to exercise any of your data rights, please contact us using the details provided in Section 15 of this policy. We will respond to all data-related enquiries within a reasonable timeframe.

Data We Collect

2999 collects personal data across several categories depending on the nature of your interaction with the platform. The categories of data we may collect include, but are not limited to, the following:

3.1 Identity Data

• Full legal name as it appears on official identification documents
• Date of birth and age verification status
• Gender (where voluntarily provided)
• National Identity Card (NID) number or passport number (collected during KYC verification)
• Photographs or scanned copies of identity documents submitted for KYC purposes

3.2 Contact Data

• Email address used for account registration and communications
• Mobile phone number, including the mobile wallet number used for bKash, Nagad, or Rocket transactions
• Residential address, including city, district, and postal code within Bangladesh

3.3 Financial Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay) — account numbers only, not PINs or passwords
• Bank account details provided for withdrawal purposes (account number, bank name, branch name)
• Transaction history including deposit amounts, withdrawal amounts, and dates
• Partial payment card details where Visa or Mastercard is used (last four digits and expiry date only)

3.4 Gaming Activity Data

• Bet history, wager amounts, game selections, and win/loss records
• Session duration, login times, and frequency of play
• Bonus usage history and wagering requirement progress
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical Data

• IP address and geolocation data at the time of login and transaction
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 8)
• Platform interaction logs including pages visited and features used

3.6 Communications Data

• Records of communications between you and the 2999 support team, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records
• Marketing preference settings and communication opt-in or opt-out records

How We Collect Data

2999 collects personal data through several distinct channels depending on the nature of your interaction with the platform:

4.1 Direct Collection

The majority of personal data we hold about you is provided directly by you at the time of registration, during the KYC verification process, when you make a deposit or withdrawal, when you contact our support team, or when you update your account settings. You are not obligated to provide this data, but failure to provide required information may prevent account creation or block access to certain platform features.

4.2 Automated Collection

When you access and use the 2999 platform, certain technical data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, and a record of the pages and features you interact with during each session. This data is collected without requiring any direct action on your part and is used primarily for security monitoring, fraud prevention, and platform performance analysis.

4.3 Third-Party Sources

In limited circumstances, 2999 may receive personal data about you from third-party sources. This includes identity verification data obtained from document verification service providers during KYC processing, and transaction confirmation data received from mobile financial service providers (such as bKash, Nagad, or Rocket) confirming the status of a deposit or withdrawal. Data received from third parties is used only in accordance with the purposes described in this policy.

How We Use Your Data

2999 uses the personal data it collects for clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below:

• Account creation and management: To register your account, authenticate your identity at login, and maintain accurate account records throughout the lifecycle of your relationship with 2999.
• Identity and age verification: To verify that you meet the minimum age requirement of 18 years and to confirm your identity as part of our KYC obligations, preventing underage gambling and protecting platform integrity.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and in a timely manner through your chosen payment method, including bKash, Nagad, Rocket, Upay, and bank transfer.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other forms of abuse on the platform.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour and to administer responsible gaming tools such as deposit limits, session limits, cooling-off periods, and self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account-related issues through live chat, email, and WhatsApp.
• Legal and regulatory compliance: To fulfil obligations imposed by applicable laws, including record-keeping requirements, anti-money laundering regulations, and responses to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the overall experience of the 2999 platform for all players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform news where you have provided consent to receive such communications. You may withdraw this consent at any time through your account settings.

Legal Basis for Processing

Every personal data processing activity carried out by 2999 is grounded in one or more lawful bases. The primary legal bases on which we rely are as follows:

• Contractual necessity: Much of our data processing is necessary for the performance of the contract between you and 2999 — specifically, the account registration agreement and the Terms and Conditions. Without this processing, we cannot provide the services you have requested.
• Legal obligation: Certain processing activities are required by applicable law, including identity verification, transaction record-keeping, anti-money laundering checks, and responding to lawful regulatory or governmental requests.
• Legitimate interests: 2999 processes some data on the basis of its legitimate business interests, including fraud prevention, platform security monitoring, responsible gaming oversight, and general platform analytics. We ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where processing is not required by contract or law, and where it is not covered by a legitimate interest, we will seek your explicit consent before processing. Marketing communications are the primary example. You may withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

Sharing Your Data

2999 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

7.1 Service Providers

We engage trusted third-party service providers to assist with specific operational functions, including identity verification, payment processing, fraud detection, customer support software, and platform hosting. These providers act as data processors on our behalf and are contractually bound to process your data only in accordance with our instructions and this Privacy Policy.

7.2 Payment Partners

When you make a deposit or withdrawal, the relevant transaction data (including your account identifier and transaction amount) is shared with the corresponding payment provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard — as necessary to complete the transaction. Each payment partner operates under its own privacy policy and regulatory framework.

7.3 Legal and Regulatory Disclosure

2999 may disclose personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by court order, or in connection with an investigation into fraud, money laundering, or other unlawful activity. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 2999's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the privacy terms applicable to your data.

Cookies & Tracking Technologies

The 2999 platform uses cookies and similar tracking technologies to deliver, maintain, and improve the services provided to you. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the platform to recognise your device on subsequent visits and to remember your preferences and session state.

8.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as your preferred language settings and display options, so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This information helps 2999 identify areas for improvement and optimise the player experience. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, identify unusual login patterns, and flag potentially compromised accounts for review.

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality and performance of the 2999 platform. Instructions for managing cookies are available in the help section of most major browsers including Chrome, Firefox, Safari, and Edge.

Data Security

2999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 2999 platform
• Encryption of sensitive data at rest within our secure database infrastructure
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific operational role
• Multi-factor authentication requirements for internal staff accessing player account data
• Regular security audits and penetration testing of the platform infrastructure
• Automatic session timeout after a defined period of inactivity to protect unattended accounts
• Continuous monitoring for suspicious login activity and anomalous transaction patterns

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 2999 will notify affected players without undue delay in accordance with applicable legal requirements.

Data Retention

2999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Account data: Retained for the duration of your active account relationship with 2999, plus a minimum of five years following account closure to meet legal and regulatory record-keeping obligations.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven years from the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years following the end of the business relationship, or longer if required by applicable anti-money laundering regulations.
• Support communications: Records of customer support interactions are retained for a minimum of two years from the date of the interaction, or for the duration of any unresolved dispute.
• Marketing preferences: Records of your marketing opt-in or opt-out choices are retained for as long as necessary to honour those preferences and to demonstrate compliance in the event of a regulatory enquiry.
• Technical and analytics data: Anonymised platform usage data may be retained indefinitely for statistical and improvement purposes. Personally identifiable technical data such as IP logs is retained for no longer than 12 months unless required in connection with a fraud or security investigation.

When personal data is no longer required and no legal obligation compels its retention, 2999 will securely delete or irreversibly anonymise that data so that it can no longer be associated with any individual.

Your Rights

As an individual whose personal data is processed by 2999, you hold a number of rights in relation to that data. 2999 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction.

• Right of access: You have the right to request a copy of the personal data that 2999 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. You may also update certain information directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. This right is subject to overriding legal obligations that require 2999 to retain certain data.
• Right to restrict processing: You may request that 2999 temporarily suspend the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests or is used for direct marketing purposes. Where you object to direct marketing, 2999 will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of these rights, please contact the 2999 support team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will acknowledge your request within five business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 60 days, and you will be notified if an extension applies.

Third-Party Links

The 2999 platform may from time to time contain references or informational mentions of third-party services, payment providers, or organisations. This Privacy Policy applies solely to data processed by 2999 through the platform at https://2999.vu. It does not apply to any third-party websites, services, or platforms that you may access independently.

2999 is not responsible for the privacy practices, data handling, or content of any third-party services. If you choose to interact with any third-party service mentioned in connection with 2999 — such as bKash, Nagad, Rocket, or any bank — you should review that organisation's own privacy policy before providing your personal data to them.

Children's Privacy

The 2999 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from an individual under 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has created an account on 2999 or has submitted personal data to the platform, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action without delay.

Changes to This Privacy Policy

2999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this policy, we will notify registered players via a platform notification or by email to the address registered on your account, with reasonable advance notice before the changes take effect.

The effective date shown at the top of this policy will be updated each time a revision is published. We encourage you to review this policy periodically so that you remain informed about how 2999 protects your personal data. Your continued use of the platform following notification of changes constitutes acceptance of the revised Privacy Policy.

If you do not agree with a revised version of this policy, you should discontinue use of the platform and contact our support team to request account closure and, where applicable, the deletion of your personal data in accordance with your rights under Section 11.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 2999 processes your personal data, please reach out to us through any of the following channels. Our support team handles all privacy-related enquiries with the same priority as account and technical queries.

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for faster routing
• Live Chat: Available directly within the 2999 platform — 24 hours a day, 7 days a week
• WhatsApp: +880 1700 000 000

Our support team is available around the clock, including all Bangladeshi public holidays. We aim to acknowledge all privacy-related communications within one business day and to provide a full response within the timelines specified in Section 11. For formal data rights requests, please include your registered account username and a clear description of the specific right you wish to exercise.