Privacy Policy for 229bt

1 Introduction

229bt ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy sets out in clear, plain English how we collect, use, store, share, and protect personal information in connection with the operation of the 229bt online betting and casino platform, which is accessible at https://229bt.io and is directed primarily at players based in Bangladesh.

We understand that trust is at the heart of every player relationship. When you deposit real money, verify your identity, or share your contact details with 229bt, you are placing that trust in us. This Privacy Policy is our commitment to honouring that trust by being fully transparent about our data practices.

This policy should be read alongside the 229bt Terms and Conditions, which govern the overall use of the platform, and any specific bonus or promotional terms that may apply to your account. In the event of any conflict between this Privacy Policy and the Terms and Conditions with respect to personal data matters, this Privacy Policy shall prevail.

2 Data Controller

For the purposes of this Privacy Policy, 229bt acts as the data controller in respect of personal data collected from players and visitors. As data controller, 229bt determines the purposes and means by which your personal data is processed.

All data rights requests, privacy complaints, or enquiries relating to this Privacy Policy should be directed to the 229bt data protection contact at:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Include "Privacy" or "Data Request" to ensure your message is routed to the appropriate team
• Response Time: 229bt aims to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 calendar days

3 Personal Data We Collect

229bt collects the following categories of personal data from players and platform visitors. The specific data collected depends on your level of engagement with the platform — a visitor who browses without registering will have far less data collected than a fully verified player with an active wagering account.

Category	Examples of Data Collected	When Collected
Identity Data	Full legal name, date of birth, gender, National ID Card (NID) number, passport number	At registration and during KYC verification
Contact Data	Email address, mobile phone number, residential address (city, district, Bangladesh)	At registration and account updates
Financial Data	bKash/Nagad/Rocket wallet number (masked), transaction amounts, deposit and withdrawal history	During deposit and withdrawal transactions
Betting and Gaming Data	Bet history, game session logs, wager amounts, win/loss records, bonus activity	During active platform use
Technical Data	IP address, device type, browser type and version, operating system, session duration, page views	Automatically, during every platform visit
Identity Verification Documents	Scanned or photographed copies of NID, passport, or driving licence submitted during KYC	During KYC verification process
Communications Data	Content of support tickets, live chat transcripts, emails sent to [email protected]	When you contact 229bt support
Responsible Gaming Data	Deposit limit settings, self-exclusion requests, cooling-off period history, session time alerts	When you use responsible gaming tools

4 How We Collect Your Data

229bt collects personal data through the following channels:

• Direct Collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or submitting a responsible gaming request.
• Automated Collection: Technical data such as your IP address, device identifiers, and session activity data collected automatically by our servers and analytics systems each time you visit or use the 229bt platform.
• Payment Processors: Transaction confirmation data (such as payment reference numbers and transaction timestamps) shared by bKash, Nagad, Rocket, Upay, and our banking partners when you make a deposit or receive a withdrawal.
• Game Providers: Game session data, round results, and RTP logs shared by licensed game providers (such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe) in connection with games played on the 229bt platform.
• Identity Verification Partners: Verification status and document authenticity results shared by third-party KYC service providers engaged by 229bt to process identity documents.
• Cookies and Similar Technologies: Behavioural and preference data collected via cookies, web beacons, and local storage as described in Section 6 of this Privacy Policy.

5 Purpose and Legal Basis for Processing

229bt processes your personal data only where there is a clear, legitimate purpose for doing so. The table below sets out the primary purposes for which we process your data and the legal basis for each processing activity.

Purpose	Legal Basis	Data Categories Used
Account registration and management	Performance of a contract	Identity, Contact
Processing deposits and withdrawals	Performance of a contract	Identity, Financial, Contact
KYC identity and age verification	Legal obligation; Legitimate interest	Identity, Verification Documents
Fraud prevention and security monitoring	Legitimate interest; Legal obligation	Identity, Financial, Technical, Betting
Responsible gaming monitoring and tools	Legal obligation; Legitimate interest	Betting, Responsible Gaming
Customer support	Performance of a contract	Identity, Contact, Communications
Platform analytics and improvement	Legitimate interest	Technical, Betting
Marketing and promotional communications	Consent (opt-in) or Legitimate interest	Contact, Betting
Legal and regulatory compliance	Legal obligation	All categories as required

229bt will not use your personal data for any purpose that is incompatible with the purposes described above without first notifying you and, where required by applicable law, obtaining your consent.

6 Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide website operators with analytical information about how users interact with their platform.

6.2 Cookies Used by 229bt

229bt uses the following categories of cookies on the platform:

• Strictly Necessary Cookies: These cookies are essential for the 229bt platform to function. They include session authentication tokens, security cookies, and cookies that remember your login state. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences on the platform, such as your preferred language, odds format, and previously viewed markets. They improve your experience but are not strictly essential.
• Analytical Cookies: 229bt uses anonymised analytical cookies to understand how players navigate the platform — which pages are most visited, where users drop off, and how long sessions last. This data is used solely for platform improvement and is not linked to your individual identity.
• Marketing Cookies: These cookies track your activity across sessions to allow 229bt to deliver personalised promotional content. Marketing cookies are only set with your consent.

6.3 Managing Your Cookie Preferences

You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging into your 229bt account. For full details on how to manage cookies in your specific browser, refer to your browser's official help documentation.

7 Sharing Your Data with Third Parties

229bt does not sell your personal data to any third party. We share your personal data only with the following categories of third-party recipients, and only to the extent strictly necessary for the specified purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to process your deposits and withdrawals. These providers receive only the transaction data required to complete the payment and are contractually prohibited from using it for any other purpose.
• Game Providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe — to deliver casino and gaming content. Game providers may receive your account identifier and bet data to operate their games and calculate settlements. They do not receive your full identity data.
• KYC and Identity Verification Partners: Third-party identity verification service providers who process your submitted identity documents to confirm your age and identity as part of our KYC obligations.
• IT and Hosting Providers: Cloud hosting and infrastructure providers who store and process platform data on behalf of 229bt. These providers operate under strict data processing agreements and have no independent right to use your data.
• Legal and Regulatory Authorities: Where required by applicable law, a court order, or a legitimate legal request, 229bt may disclose your personal data to law enforcement agencies, anti-money laundering authorities, or other competent governmental bodies in Bangladesh or internationally.
• Fraud Prevention Networks: Where 229bt has reasonable grounds to suspect fraudulent activity, account data may be shared with industry fraud prevention networks to protect the integrity of the platform and to protect other players.

8 International Data Transfers

229bt's primary player base is in Bangladesh, and we process the majority of player data within servers located in the Asia-Pacific region. However, some of our third-party service providers — particularly game providers such as Evolution Gaming, Pragmatic Play, and NetEnt — may process data in jurisdictions outside Bangladesh, including within the European Union, Malta, Gibraltar, or other countries where their operations are based.

Where personal data is transferred internationally, 229bt ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy. These safeguards may include contractual clauses in our data processing agreements with third parties that require them to handle your data securely and only for the specified purposes.

If you would like further information about the specific safeguards in place for any international data transfer involving your personal data, please contact us at [email protected].

9 Data Security

229bt implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the 229bt platform is encrypted using TLS 1.3. Personal data stored on 229bt servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 229bt is restricted on a strict need-to-know basis. Only staff members who require access to personal data to perform their job functions are granted it, and all such access is logged and audited.
• Secure Password Storage: Account passwords are never stored in plain text on 229bt systems. Passwords are hashed using a strong one-way cryptographic algorithm with per-user salting.
• Infrastructure Security: 229bt's hosting infrastructure is protected by firewall systems, intrusion detection systems, and regular security vulnerability assessments.
• Incident Response: 229bt maintains an internal data breach response procedure. In the event of a security incident that is likely to result in a high risk to your personal data rights, 229bt will notify affected players without undue delay.

While 229bt takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for protecting your own account credentials and must not share your 229bt password with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

10 Data Retention

229bt retains your personal data for the following periods, after which data is securely deleted or anonymised:

• Active Accounts: Personal data is retained for the full duration of your account's active status on the 229bt platform.
• Closed Accounts: Following account closure — whether initiated by the player or by 229bt — personal data is retained for a minimum period of five (5) years to meet our anti-money laundering (AML), Know Your Customer (KYC), and fraud prevention obligations.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents (NID copies, passport scans) are retained for the duration of the account and for five years post-closure, after which they are securely deleted.
• Support Communications: Customer support ticket histories and email correspondence are retained for three years after the last interaction, to assist with any follow-up disputes or regulatory enquiries.
• Marketing Data: If you have opted out of all marketing communications, your contact details are retained on a suppression list to ensure you are not re-added to marketing campaigns. This suppression record is kept indefinitely.

After any applicable retention period expires, personal data is either permanently and securely deleted from 229bt systems or irreversibly anonymised so that it can no longer be linked to you as an identifiable individual.

11 Your Data Rights

As a player on the 229bt platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with "Data Request" in the subject line and describe the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data that 229bt holds about you. We will provide this in a structured, commonly used format within 30 calendar days of receiving a valid request.
• Right to Rectification: If any personal data 229bt holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update some information directly through your account profile settings.
• Right to Erasure: You may request that 229bt delete your personal data. This right is subject to legal limitations — we cannot delete data that we are required to retain by law (such as KYC records and financial transaction histories during the applicable retention period).
• Right to Restrict Processing: In certain circumstances, you may request that 229bt restrict the processing of your personal data — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request that 229bt provide your personal data in a machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest grounds, though 229bt may be entitled to continue processing if it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where 229bt processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

229bt will acknowledge all data rights requests within five business days and will aim to resolve them within 30 calendar days. Where a request is complex or where 229bt receives a high volume of requests simultaneously, this period may be extended by up to an additional 60 days, in which case 229bt will notify you of the extension and the reason for it.

12 Children and Minors

The 229bt platform is strictly for adults aged 21 years and above. 229bt does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or use any 229bt services.

If 229bt discovers or is notified that it has collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, delete the data in question, and reverse any financial transactions associated with the underage account to the extent possible.

13 Responsible Gaming Data

229bt collects and processes specific categories of responsible gaming data to fulfil its player protection obligations. This includes records of deposit limits set by players, self-exclusion requests, cooling-off periods, session time alerts, and any communications related to problem gambling support.

Responsible gaming data is treated with the highest level of sensitivity within 229bt's data handling framework. Access to this data is restricted to a small number of authorised staff members who are specifically responsible for player welfare. This data will not be used for marketing profiling, shared with game providers, or included in general platform analytics.

Self-exclusion records are retained permanently so that 229bt can honour a player's self-exclusion request if they attempt to re-register in the future. Deposit limit and cooling-off records are retained for the duration described in Section 10 of this Privacy Policy.

If you would like to discuss how 229bt handles your responsible gaming data specifically, or if you wish to access records of your own responsible gaming history, please contact [email protected] with "Responsible Gaming Data" in the subject line.

14 Marketing Communications

229bt may send you marketing communications including promotional emails, SMS messages regarding bonuses, and in-platform notifications about new games, tournaments, and seasonal offers. These communications are sent only to players who have either opted in to marketing at the time of registration or who have not subsequently opted out.

You can opt out of 229bt marketing communications at any time using any of the following methods:

• By clicking the "Unsubscribe" link included at the bottom of every 229bt marketing email
• By contacting [email protected] with " Unsubscribe Me" in the subject line
• By updating your communication preferences in your 229bt account settings

Please allow up to 5 business days for your opt-out request to take effect across all communication channels. Opting out of marketing communications will not affect transactional messages — you will continue to receive emails and SMS notifications related to your deposits, withdrawals, account security, and KYC verification regardless of your marketing preferences.

229bt does not share your contact details with third-party marketers or advertising networks for the purpose of sending you marketing communications from those third parties.

15 Changes to This Privacy Policy

229bt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes to applicable laws, or improvements to our platform. When we make material changes to this Privacy Policy, we will notify registered players by email to the address on file and by displaying a prominent notice on the 229bt platform for a period of at least 14 days before the changes take effect.

The effective date at the top of this Privacy Policy will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how 229bt protects your personal data. Your continued use of the 229bt platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised terms.

A full version history of this Privacy Policy, showing previous versions and the dates on which changes were made, is available on request by contacting [email protected] with "Privacy Policy Version History" in the subject line.

16 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 229bt handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly, fairly, and transparently.

• Email: [email protected]
• Subject Line: Use "Privacy Enquiry", "Data Request", or "Privacy Complaint" as appropriate
• Response Time: Acknowledgement within 5 business days; resolution within 30 calendar days
• Operating Hours: Support team available 7 days a week, Bangladesh Standard Time (BST, UTC+6)

229bt takes all privacy complaints seriously. If you submit a formal privacy complaint and you are not satisfied with our response, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.