Privacy Policy — 290bet

📋 1. Information We Collect

290bet collects personal information in the following categories:

290bet does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless required for responsible gaming purposes (e.g., problem gambling self-declaration) with your explicit consent.

🎯 2. How We Use Your Information

290bet uses your personal data for the following clearly defined purposes:

• Account Management: To register your account, verify your identity, process deposits and withdrawals, and maintain your account history.
• Service Delivery: To provide access to casino games, live dealer tables, crash games, slots, and sports betting markets including cricket (BPL, IPL, T20 World Cup), football, and kabaddi.
• Transaction Processing: To execute deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment channels in BDT.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple account registrations, and other prohibited activities as defined in our Terms & Conditions.
• Regulatory Compliance: To comply with applicable anti-money laundering obligations, know-your-customer requirements, and any lawful requests from competent authorities.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour and to action self-exclusion, deposit limit, or cool-off requests submitted by you or on your behalf.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support service.
• Marketing Communications: To send promotional offers, bonus notifications, and seasonal campaign messages (e.g., Eid, Pohela Boishakh, Victory Day specials) where you have opted in to receive marketing emails or notifications. You may opt out at any time.
• Platform Improvement: To analyse aggregate usage patterns, identify technical errors, and improve the user experience on the 290bet Platform.

290bet will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.

🤝 3. Sharing Your Information

290bet does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We may share your information with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive the minimum financial data necessary to process your transaction.
• Game Providers: Third-party studio partners such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous session token to authenticate your game session. They do not receive your full identity data.
• Identity Verification Services: A regulated third-party KYC provider may process your identity documents to verify your age and identity on our behalf. This provider is bound by strict data processing agreements.
• IT & Hosting Providers: The Platform's cloud infrastructure and hosting partners process technical data under contractual obligations that mirror the protections in this Policy.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent authority, 290bet may disclose personal data to law enforcement, financial intelligence units, or regulatory bodies.
• Professional Advisors: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations may access limited personal data during audits or dispute resolution processes.

Any third party receiving your personal data from 290bet is required to handle it in accordance with applicable data protection standards and is prohibited from using it for their own commercial purposes.

🍪 4. Cookies & Tracking Technologies

290bet uses cookies and similar tracking technologies to improve Platform functionality, analyse usage, and support fraud prevention. The categories of cookies used are as follows:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery.
• Analytics Cookies: Aggregate, anonymised data about how users navigate the Platform — which pages are visited most frequently, how long sessions last, and where users drop off. This data is used solely to improve Platform performance.
• Preference Cookies: Remember your account preferences such as language settings and notification choices so you do not need to re-enter them on each visit.
• Security Cookies: Help 290bet detect unusual login patterns, identify device fingerprints associated with fraudulent activity, and enforce one-account-per-person rules.

You may configure your browser to block or delete cookies; however, doing so may impair your ability to log in or access certain features of the 290bet Platform. Essential cookies cannot be disabled without affecting core service functionality.

📅 5. Data Retention

290bet retains your personal data for the periods set out below, after which it is securely deleted or anonymised:

• Account & Identity Data: Retained for the lifetime of your account and for a minimum of five (5) years after account closure to satisfy anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• Activity & Session Logs: Retained for up to two (2) years from the date of the relevant session to support dispute resolution and fraud investigation.
• Support Communications: Retained for up to three (3) years from the date of the last interaction to allow reference in the event of recurring issues or escalations.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical & Analytics Data: Retained in aggregate, anonymised form indefinitely for Platform improvement purposes. Identifiable technical logs are deleted after twelve (12) months.

Where a legal obligation requires 290bet to retain data beyond these standard periods, that obligation takes precedence. We will notify you if this affects your account.

🛡️ 6. Security Measures

290bet employs a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction:

• All data transmitted between your device and the 290bet Platform is protected by 256-bit SSL/TLS encryption.
• Account passwords are stored using one-way cryptographic hashing with a unique salt per account. 290bet staff cannot view your password in plain text.
• Access to personal data within 290bet's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls.
• Payment method data (e.g., bKash wallet numbers, card details) is tokenised and never stored in full on 290bet's servers.
• Automated monitoring systems scan for unusual login patterns, brute-force attempts, and other indicators of account compromise in real time.
• Regular security assessments and internal audits are conducted to identify and remediate vulnerabilities in the Platform's infrastructure.

Despite these measures, no internet transmission or electronic storage system can be guaranteed as 100% secure. If you become aware of any suspected security breach affecting your 290bet account, contact our support team immediately at the email address in the Contact section below.

⚖️ 7. Your Rights

As a 290bet account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team with your account username and a clear description of your request:

• Right of Access: You may request a copy of the personal data 290bet holds about you at any time.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may override this right.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to Object: You may object to the use of your personal data for direct marketing purposes at any time. We will action such requests without delay.

290bet will respond to all verifiable data rights requests within a reasonable period. We may request proof of identity before processing a request to protect your data from unauthorised access.

🌐 8. International Data Transfers

The 290bet Platform serves players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Certain service providers used by 290bet — including cloud hosting infrastructure and game providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred outside Bangladesh, 290bet takes steps to ensure that adequate protections are in place. This includes entering into data processing agreements with service providers that impose data protection obligations consistent with this Policy. 290bet does not transfer personal data to jurisdictions with inadequate data protection standards without implementing appropriate contractual safeguards.

👶 9. Minors & Age Restriction

The 290bet Platform is strictly for individuals who are 21 years of age or older. 290bet does not knowingly collect personal data from persons under the age of 21. If we become aware that a minor has registered an account or provided personal data, that account will be immediately closed and the associated data deleted.

If you believe that a person under 21 has registered on the Platform using false date-of-birth information, please notify our support team at the contact address below so that we may investigate and take appropriate action.

✏️ 10. Changes to This Policy

290bet may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, registered users will be notified via the email address associated with their account or through an in-Platform notification displayed upon next login.

The "Last Updated" date at the top of this page will reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how 290bet protects your personal data. Your continued use of the Platform following notification of any changes constitutes acceptance of the revised Policy.

📩 11. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 290bet holds about you, please contact our support team using the details below. All data-related enquiries will be acknowledged within 48 hours of receipt.