Data & Privacy

2299 Privacy Policy – How We Protect Your Personal Data

At 2299, your privacy is not an afterthought — it's built into how we operate. This policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have over your own information.

Last updated: January 2025
256
Bit Encryption
0
Data Sold
24h
Breach Response
7
Your Rights

Six Things 2299 Takes Seriously About Your Privacy

From the moment you register on 2299 to every deposit and withdrawal you make, your data is handled with care. Here's what that looks like in practice.

Data Collection

2299 only collects the personal data that is strictly necessary to operate your account, process payments, and comply with legal obligations. We don't collect data for the sake of it.

Data Security

All data transmitted between your device and 2299 is protected by 256-bit SSL encryption. Your bKash and Nagad payment details are never stored on 2299 servers.

Your Rights

You have the right to access, correct, delete, and export your personal data held by 2299 at any time. Submit a request to our support team and we'll respond within 30 days.

No Data Selling

2299 will never sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information stays within the 2299 ecosystem.

Cookies & Tracking

2299 uses cookies to keep your session active and to improve platform performance. We do not use third-party advertising trackers or cross-site tracking technologies.

Data Retention

2299 retains your account data for as long as your account is active and for a defined period after closure, as required by applicable law. You can request deletion at any time.

01

Introduction

This Privacy Policy explains how 2299 — the online gaming platform available at 2299.one — collects, uses, stores, and protects the personal data of its registered players and website visitors. At 2299, we believe that privacy is a fundamental right, not a legal checkbox. This policy is written in plain English so that every player in Bangladesh can understand exactly how their data is handled.

By registering an account on 2299, using the 2299 mobile app, or simply browsing the 2299 website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how 2299 handles personal data, you should not use the platform. If you have any questions about this policy before registering, contact us at [email protected] — we're happy to explain anything that isn't clear.

This Privacy Policy should be read alongside the 2299 Terms and Conditions and the Responsible Gaming Policy. Together, these three documents form the complete framework that governs how 2299 operates and how it treats its players.

Plain English Commitment: 2299 is committed to writing its policies in language that real people can actually understand. If any part of this Privacy Policy is unclear, reach out to the support team and we'll explain it in plain terms.

02

Data We Collect

2299 collects personal data in three ways: data you provide directly when registering or using the platform, data generated automatically by your use of the platform, and data received from payment providers such as bKash and Nagad during transaction processing.

The following table summarises the categories of personal data that 2299 collects and the source of each category:

Data Category Examples Source
Identity Data Full name, date of birth, national ID number Provided by you at registration
Contact Data Mobile number, email address Provided by you at registration
Financial Data bKash / Nagad account number, transaction reference Payment provider during transactions
Account Data Username, account balance, betting history, bonus usage Generated by platform use
Technical Data IP address, device type, browser, operating system Automatically collected
Usage Data Pages visited, games played, session duration, click patterns Automatically collected
Verification Data Identity documents submitted for KYC verification Provided by you when requested

2299 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or responsible gaming obligations (for example, if you self-declare a gambling problem during a self-exclusion request).

Minimum Data Principle: 2299 only collects data that is genuinely necessary for the purposes described in this policy. We regularly review what data we hold and delete anything that is no longer needed.

03

How We Use Your Data

2299 uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected. The main purposes for which 2299 processes personal data are:

  • Account management: Creating and maintaining your 2299 account, verifying your identity, and managing your account settings and preferences.
  • Payment processing: Processing deposits and withdrawals via bKash and Nagad, verifying payment sources, and maintaining transaction records.
  • Platform operation: Delivering the games and services available on 2299, including Super Fruit Machine, Rugby, PP Live, Muay Thai Champion, Bingo Adventure, and Fortune Bingo.
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and other forms of financial crime on the 2299 platform.
  • Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviour and applying responsible gaming tools where appropriate.
  • Legal compliance: Meeting our obligations under applicable law, including anti-money-laundering regulations and data protection requirements.
  • Customer support: Responding to your queries, complaints, and requests through the 2299 support team.
  • Platform improvement: Analysing usage data in aggregate to improve the performance, design, and features of the 2299 platform.

2299 will never use your personal data to send unsolicited marketing communications from third-party companies. Any promotional communications from 2299 itself will relate only to 2299 offers and updates, and you can opt out at any time by contacting support.

04

Legal Basis for Processing

2299 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

  • Contract performance: Processing that is necessary to fulfil the contract between you and 2299 — for example, processing your deposit so you can play, or processing your withdrawal so you can receive your winnings.
  • Legal obligation: Processing that is required by law — for example, retaining transaction records for anti-money-laundering compliance or verifying your identity as required by applicable regulations.
  • Legitimate interests: Processing that is necessary for 2299's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, and aggregate analytics.
  • Consent: Processing based on your explicit consent — for example, if you opt in to receive promotional communications from 2299. You can withdraw consent at any time.

Questions About Legal Basis: If you want to know the specific legal basis for any particular processing activity carried out by 2299, contact us at [email protected] and we will provide a clear explanation.

05

Payment Data & bKash / Nagad

2299 processes deposits and withdrawals exclusively through bKash and Nagad. When you make a payment, the transaction is processed directly through the relevant payment provider's secure infrastructure. 2299 receives a transaction reference and confirmation from the payment provider but does not receive or store your bKash PIN, Nagad PIN, or full payment account credentials.

The financial data that 2299 does retain includes your registered bKash or Nagad account number (for the purpose of processing withdrawals to the correct account), transaction reference numbers, transaction amounts, and timestamps. This data is retained for the period required by applicable financial regulations.

All payment data held by 2299 is encrypted at rest and in transit. Access to payment data within the 2299 organisation is restricted to authorised personnel who require it for specific operational or compliance purposes. 2299 does not share your payment data with any third party other than the payment provider involved in the transaction and any regulatory authority that has a legal right to request it.

Your Payment Security: 2299 will never ask you for your bKash PIN or Nagad PIN — not by email, not by phone, and not through the platform. If anyone claiming to be from 2299 asks for your PIN, do not provide it and report it to us immediately.

06

Cookies & Tracking

2299 uses cookies — small text files stored on your device — to make the platform work properly and to improve your experience. The cookies used by 2299 fall into the following categories:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while you play and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
  • Performance cookies: Used to collect anonymous data about how players use the 2299 platform — for example, which pages are visited most often and where errors occur. This data is used in aggregate to improve the platform and is not linked to individual players.
  • Preference cookies: Used to remember your settings and preferences on 2299, such as your preferred language or display settings.

2299 does not use advertising cookies, third-party tracking pixels, or any technology designed to track your behaviour across other websites. The cookies used by 2299 are limited to what is necessary to operate and improve the platform itself.

You can manage cookie settings through your browser. However, disabling essential cookies will prevent the 2299 platform from functioning correctly. For most players, the default browser settings are appropriate for using 2299 without any issues.

07

Data Sharing & Third Parties

2299 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Full stop. Your data is shared only in the following limited and necessary circumstances:

  • Payment providers: bKash and Nagad receive the data necessary to process your transactions. Their handling of your data is governed by their own privacy policies.
  • Identity verification services: If 2299 uses a third-party KYC (Know Your Customer) service to verify your identity, the relevant identity documents and data will be shared with that service for verification purposes only.
  • Fraud prevention services: 2299 may share data with fraud detection services to identify and prevent fraudulent activity on the platform.
  • Legal and regulatory authorities: 2299 will disclose personal data to law enforcement, regulatory bodies, or other authorities when required to do so by law or when we believe disclosure is necessary to protect the rights, property, or safety of 2299, its players, or the public.
  • Business transfers: In the event that 2299 is acquired by or merged with another company, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom 2299 shares personal data are required to handle that data in accordance with applicable data protection law and to use it only for the specific purpose for which it was shared.

08

Data Security

2299 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and the 2299 platform
  • Encryption of sensitive data at rest on 2299 servers
  • Strict access controls limiting who within the 2299 organisation can access personal data
  • Regular security audits and vulnerability assessments of the 2299 platform
  • Secure, access-controlled data storage infrastructure
  • Staff training on data protection and security best practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 2299 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. 2299 aims to respond to and contain any confirmed data breach within 24 hours of detection.

Your Role in Security: Data security is a shared responsibility. You can protect your 2299 account by using a strong, unique password, not sharing your login credentials with anyone, and logging out when using a shared device. If you suspect your account has been compromised, contact 2299 support immediately.

09

Data Retention

2299 retains your personal data for as long as your account is active and for a defined period after your account is closed. The specific retention periods depend on the category of data and the legal or operational reason for retaining it:

  • Account and identity data: Retained for the duration of your account and for 5 years after account closure, as required by anti-money-laundering regulations.
  • Transaction records: Retained for 5 years after the transaction date, as required by applicable financial regulations.
  • Game history: Retained for 2 years after the game round, for dispute resolution and audit purposes.
  • Technical and usage data: Retained for 12 months, after which it is anonymised or deleted.
  • Support communications: Retained for 2 years after the last communication, for quality assurance and dispute resolution purposes.

When personal data is no longer required for the purpose for which it was collected and the applicable retention period has expired, 2299 will securely delete or anonymise it. You can request early deletion of your data by contacting support, subject to any legal obligations that require 2299 to retain certain data for a minimum period.

10

Your Rights

As a 2299 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 2299 support team at [email protected]. 2299 will respond to all valid requests within 30 days.

Your 7 Privacy Rights on 2299

These rights are yours. 2299 is committed to honouring every one of them. Submit a request to [email protected] and we'll respond within 30 days.

Right to Access

Request a copy of all personal data that 2299 holds about you. We'll provide it in a clear, readable format within 30 days.

Right to Rectification

Ask 2299 to correct any inaccurate or incomplete personal data we hold about you. We'll update it promptly.

Right to Erasure

Request deletion of your personal data where there is no longer a legal or operational reason for 2299 to hold it.

Right to Restriction

Ask 2299 to restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.

Right to Portability

Receive your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.

Right to Object

Object to 2299 processing your data for legitimate interests purposes. We'll stop unless we can demonstrate compelling grounds to continue.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time. Withdrawal won't affect processing that already took place.

11

Children's Privacy

The 2299 platform is strictly for adults aged 18 and over. 2299 does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register on 2299 or attempt to use the platform in any way.

If 2299 becomes aware that personal data has been collected from a person under the age of 18, that account will be closed immediately, all data associated with the account will be deleted, and any funds deposited will be returned to the payment source. If you believe a minor has registered on 2299, please notify us immediately at [email protected].

Parental Controls: If you are a parent or guardian and are concerned about a minor accessing online gaming platforms, we recommend using parental control software on shared devices. 2299 supports all efforts to keep gaming away from underage individuals.

12

Changes to This Policy

2299 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When we make changes, the updated policy will be published on this page with a revised "Last updated" date at the top.

For significant changes to how 2299 processes your personal data, we will notify registered players by email or through an in-platform notification before the changes take effect. Your continued use of the 2299 platform after any changes to this policy have been published constitutes your acceptance of the updated version.

We recommend reviewing this Privacy Policy periodically — at least once every six months — to stay informed about how 2299 handles your personal data. The date at the top of this page always shows when the policy was last updated.

13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how 2299 handles your personal data, please contact the 2299 support team using the details below. We take every privacy inquiry seriously and will respond within 30 days.

Whether you want to exercise one of your data rights, report a suspected data breach, ask about a specific processing activity, or simply get clarification on something in this policy — we're here to help. The 2299 support team is available around the clock and will always treat your privacy concerns with the seriousness they deserve.

Email: [email protected] — for all privacy-related requests and inquiries. Please include "Privacy Request" in the subject line so we can route your message to the right team quickly.

Trusted & Secure

Play on 2299 — Where Your Privacy Comes First

Now that you know exactly how 2299 protects your personal data, you can play with confidence. Register today and experience a platform built on transparency, security, and trust.