229det Privacy Policy

1. Introduction

229det ("229det", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://229det.app (the "Platform"). This Privacy Policy describes how 229det collects, processes, stores, shares, and protects personal data relating to individuals who visit, register on, or otherwise interact with the Platform ("Users", "Players", "you").

229det is committed to handling your personal data with transparency, integrity, and care. Our data practices are guided by internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR), even where those regulations do not apply directly, because we believe those standards represent best practice for protecting the privacy of our Bangladesh-based player community.

By accessing the 229det Platform, completing the 229det Login process, or submitting any personal data to us in any form, you acknowledge that you have read and understood this Privacy Policy and that you consent to our data practices as described herein. If you do not agree with this Privacy Policy, you must not use the Platform.

2. Personal Data We Collect

229det collects personal data in the following categories. The precise data points collected will depend on how you use the Platform and which products and features you access:

2.1 Identity & Contact Data

• Full legal name
• Date of birth
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Nationality

2.2 Account & Authentication Data

• 229det username
• Hashed password (we never store passwords in plain text)
• Account creation date and timestamp
• Security question responses (where applicable)
• Two-factor authentication configuration data

2.3 Identity Verification (KYC) Documents

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement dated within 3 months)
• Payment method ownership documentation (where required)
• Selfie or liveness-check images (where our KYC process requires biometric verification)

2.4 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., bKash account number, Nagad wallet number, Rocket number, bank account details)
• Transaction reference numbers
• Account balance history
• Bonus and promotional credit activity

2.5 Gaming & Betting Activity Data

• Bet history, stake amounts, odds accepted, and settlement outcomes
• Casino game session data including game titles, bet sizes, wins, and losses
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
• Bonus wagering progress

2.6 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Session duration and navigation path data
• Referring URL and exit page

2.7 Communications Data

• Content of support tickets, live chat transcripts, and emails exchanged with the 229det support team
• Survey responses and feedback submissions
• Marketing preference settings (opt-in/opt-out records)

3. How We Collect Your Data

229det collects personal data through the following means:

Collection Method	Examples
Direct submission	Registration form, 229det Login, KYC document upload, deposit/withdrawal requests, support contact form, survey participation
Automated technical collection	Cookies, server logs, analytics pixels, session tracking technologies embedded in the Platform
Third-party payment providers	Transaction confirmation data relayed from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank partners
Identity verification partners	KYC verification outcomes returned by third-party identity verification service providers
Game content providers	Session and outcome data from game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming
Fraud prevention services	Risk scores and device fingerprint data from fraud detection partners

4. Why We Use Your Personal Data

229det processes your personal data for the following purposes:

• Account creation and management: To register your 229det account, verify your identity, manage your 229det Login credentials, and maintain your player profile.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment methods; to settle bets and gaming transactions; and to credit bonuses and promotions.
• Legal and regulatory compliance: To conduct Know Your Customer (KYC) verification, fulfill anti-money-laundering (AML) obligations, maintain transaction audit trails, and respond to lawful requests from competent authorities.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, to enforce self-exclusion and deposit limits, and to make welfare-based contact where our systems flag a potential concern.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your queries, resolve disputes, process complaints, and improve the quality of our support services.
• Platform improvement: To analyse usage patterns, test new features, diagnose technical issues, and enhance the overall 229det player experience.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. You may opt out at any time.

5. Legal Basis for Processing

Where data protection law requires 229det to identify a legal basis for processing personal data, we rely on the following grounds:

• Contractual necessity: Processing required to perform the contract between you and 229det — including account operation, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, fraud prevention duties, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional data uses where we have obtained your prior, freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

229det does not sell your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary for each purpose:

6.1 Service Providers & Sub-Processors

We engage trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks), KYC and identity verification providers, fraud detection platforms, cloud hosting providers, customer support software vendors, and analytics service providers. Each provider is contractually required to process data only as instructed by 229det and to maintain appropriate technical and organisational security measures.

6.2 Game Content Studios

When you play games provided by third-party studios — such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, or Microgaming — limited session data (such as player ID and stake information) is transmitted to those studios to facilitate game delivery and outcome settlement. These studios operate under their own data protection frameworks and are contractually bound not to use your data for any purpose beyond game operation.

6.3 Legal and Regulatory Disclosure

229det may disclose personal data where required to do so by applicable law, court order, or at the request of a competent regulatory or law enforcement authority. We will notify you of any such disclosure where we are legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 229det business, your personal data may be transferred to the successor entity as part of that transaction. We will provide reasonable notice of any such transfer and ensure the successor entity is bound by privacy obligations at least as protective as those set out in this Policy.

7. Data Retention

229det retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention periods:

Data Category	Retention Period	Reason
Account and identity data	Duration of account + 5 years after closure	AML compliance and legal claims
KYC documents	Duration of account + 5 years after closure	Regulatory obligation
Transaction records	Duration of account + 7 years after closure	Financial record-keeping obligations
Betting and gaming history	Duration of account + 3 years after closure	Dispute resolution and responsible gaming
Support communications	3 years from last interaction	Quality assurance and legal claims
Marketing preferences	Until opt-out or account closure	Consent management
Technical / device logs	13 months on a rolling basis	Security monitoring and fraud detection

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Cookies & Tracking Technologies

The 229det Platform uses cookies and similar tracking technologies to provide core functionality, improve your experience, and gather analytical insights. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These enable the 229det Login session, maintain your account authentication state, and ensure secure page transitions. They cannot be disabled without breaking Platform functionality.
• Functional cookies: Store your preferences such as language settings, remembered username, and responsible gaming tool configurations so that these are applied consistently across sessions.
• Analytical cookies: Collect anonymised information about how visitors navigate the Platform — which pages are visited most, where users drop off, and how features are used. This data helps us improve the Platform for all players.
• Performance cookies: Monitor Platform load times, identify technical errors, and support our engineering team in diagnosing and resolving performance issues.

You may manage cookie preferences through your browser settings. Disabling cookies other than strictly necessary ones will not prevent you from using the Platform but may reduce the quality of your experience. Note that clearing browser cookies will log you out of your 229det account and reset any saved preferences.

9. Data Security

229det takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption on all data in transit between your device and 229det servers.
• AES-256 encryption at rest for sensitive data stored in our databases, including KYC documents and payment identifiers.
• Password hashing using industry-standard bcrypt algorithms — your password is never stored in readable form.
• Access controls ensuring that 229det staff can only access personal data on a strict need-to-know basis, with all access logged and audited.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures that specify how 229det will respond to, contain, and communicate any data security incident affecting player data.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 229det will notify affected players without undue delay and in accordance with applicable data protection law.

Whilst 229det takes every reasonable precaution to protect your data, no system is completely immune to risk. You are also responsible for keeping your 229det Login credentials confidential and for using a strong, unique password for your account.

10. Your Privacy Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 229det. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many data points directly within your account settings.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request that we delete your personal data. This right is subject to our legal and regulatory retention obligations — where we are required by law to retain data, we cannot erase it ahead of the applicable retention period.
• Right to restrict processing: In certain circumstances, you may request that we limit the way we use your personal data whilst a dispute or review is ongoing.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Upon receiving a valid objection to marketing, we will cease all marketing communications immediately.
• Rights related to automated decision-making: Where 229det uses automated systems to make decisions that significantly affect you (such as automated fraud flags or account restrictions), you have the right to request human review of that decision.

We will respond to all verified privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

11. Children's Privacy

The 229det Platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from any person under the age of 18. If you are under 18, you must not use the Platform or submit any personal data to 229det.

If 229det becomes aware that it has inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. Parents and guardians who believe that their child may have accessed the 229det Platform and provided personal data are encouraged to contact us immediately at [email protected].

We recommend that parents and guardians in Bangladesh install parental control software on household devices to prevent minors from accessing online gambling platforms.

12. Third-Party Links

The 229det Platform may from time to time contain references to third-party services, game providers, or payment partners. This Privacy Policy applies solely to data processed by 229det on the 229det Platform. It does not cover the data practices of any third-party website, application, or service that you may access in connection with using the Platform.

229det accepts no responsibility for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with independently of the 229det Platform.

13. Changes to This Privacy Policy

229det may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the products and services we offer. When we make material changes to this Policy, we will publish the updated version on the 229det Platform and update the "Last Updated" date at the top of this page. Where the changes are significant, we may also notify registered players by email.

Your continued use of the 229det Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how 229det handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Policy Query" or "Privacy Rights Request"
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to acknowledge all privacy-related queries within 24 hours and resolve them within 30 days.