289bet Privacy Policy

1 Introduction

1.1  289bet ("we", "us", "our") is an online casino and sports betting platform serving players across Bangladesh. We are committed to protecting the privacy and security of the personal information entrusted to us by our users ("you", "your", "Player").

1.2  This Privacy Policy sets out the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, the safeguards we apply to protect it, and the rights available to you in respect of your data. This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on the 289bet platform.

1.3  We may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable legal requirements. The most current version of this policy will always be published at https://289bet.biz/privacy-policy, along with the effective date of the latest revision.

2 Data We Collect

2.1  Registration and Identity Data. When you create a 289bet account, we collect your full name, date of birth, residential address, email address, and mobile phone number. This data is required to verify your identity, confirm your eligibility to use the platform, and administer your account.

2.2  Financial Data. To process deposits and withdrawals, we collect details associated with your chosen payment method, such as your bKash or Nagad mobile wallet number, bank account details (where applicable), and transaction reference numbers. We do not store full card numbers on our own servers; payment card data is handled by our PCI-DSS-compliant payment processing partners.

2.3  Verification Documents. Where required for identity or age verification, we may request copies of government-issued identification documents such as your National Identity Card (NID), passport, or driver's licence, along with a recent utility bill or bank statement confirming your address.

2.4  Transaction and Gaming Activity Data. We maintain records of all deposits, withdrawals, bets placed, games played, session durations, and account balance history. This data supports account management, dispute resolution, financial reconciliation, and responsible gaming monitoring.

2.5  Technical and Device Data. We automatically collect certain technical data when you access the platform, including your IP address, browser type and version, operating system, device identifiers, time zone setting, and pages visited. This information is used to maintain platform security, prevent fraud, and optimise the user experience.

2.6  Communications Data. We retain records of any communications you initiate with our support team, including emails, live chat transcripts, and complaint correspondence. This allows us to track the history of your interactions and ensure consistent, high-quality support.

2.7  Marketing Preferences. Where you have opted in to receive promotional communications, we record your preferences and communication history. You may update or withdraw your marketing preferences at any time by contacting [email protected].

3 How We Collect Your Data

3.1  Directly from You. The majority of data we hold is provided directly by you during account registration, identity verification, deposit or withdrawal requests, and communications with our support team.

3.2  Automatically through Platform Use. Technical and device data is collected automatically via server logs, cookies, and similar tracking technologies each time you access the 289bet platform. Please refer to Section 7 (Cookies and Tracking) for further detail.

3.3  From Third-Party Service Providers. We may receive identity verification results, fraud screening outputs, and payment status updates from third-party providers engaged to support platform operations. Data received from such providers is used solely for its stated purpose and is subject to this Privacy Policy.

3.4  From Publicly Available Sources. In limited circumstances — for example, when investigating suspected fraud or verifying business relationships — we may consult publicly available records. We do not purchase data from data brokers or advertising networks.

4 How We Use Your Data

4.1  289bet processes your personal data for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, identity data, communications data
Age and identity verification (KYC)	Identity data, verification documents, date of birth
Processing deposits and withdrawals	Financial data, transaction data, identity data
Fraud detection and prevention	Technical data, transaction data, identity data
Responsible gaming monitoring	Gaming activity data, session data, transaction data
Customer support and complaint handling	Communications data, account data, transaction data
Platform improvement and analytics	Technical data, gaming activity data (aggregated)
Promotional communications (opt-in only)	Contact data, marketing preferences
Legal and regulatory compliance	All categories, as required by applicable obligations

4.2  We will not use your personal data for any purpose not listed above without first providing you with notice and, where required, obtaining your consent.

5 Legal Basis for Processing

5.1  289bet processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract with you — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) requirements, know-your-customer (KYC) checks, and financial record-keeping obligations.
• Legitimate Interests: Processing conducted in pursuit of 289bet's legitimate business interests, such as fraud prevention, platform security, and analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

6.1  289bet does not sell your personal data. We share your information only in the circumstances described below and only to the extent strictly necessary for the stated purpose.

6.2  Payment Processors. To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, we transmit the minimum data required by each payment provider to authorise and complete your transaction.

6.3  Identity Verification Services. Third-party KYC providers may receive copies of your identity documents and personal details to perform age and identity verification checks on our behalf. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.

6.4  Game Software Providers. Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier and session token to deliver their game content within the 289bet platform. These providers do not receive your full name, contact details, or financial information.

6.5  Law Enforcement and Regulatory Authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities when required to do so by applicable law, court order, or binding regulatory directive. We will notify you of such disclosure where we are legally permitted to do so.

6.6  Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial part of 289bet's business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any resulting changes to this Privacy Policy.

6.7  All third-party processors engaged by 289bet are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our written instructions.

7 Cookies and Tracking Technologies

7.1  289bet uses cookies and similar technologies (such as local storage objects and session tokens) to operate and improve the platform. Cookies are small text files placed on your device that allow us to recognise your browser, maintain your session, and remember your preferences.

7.2  We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limit settings. Disabling these may reduce your experience.
• Analytics Cookies: Help us understand how Players navigate the platform, which pages are visited most frequently, and where technical errors occur. Data is aggregated and not used to identify individual users.
• Security Cookies: Support fraud detection by identifying unusual access patterns, multiple simultaneous sessions, or IP address anomalies.

7.3  289bet does not use third-party advertising cookies or behavioural targeting cookies. We do not allow advertising networks to place cookies on our platform for the purpose of building cross-site user profiles.

7.4  Most browsers allow you to control cookies through their settings. However, disabling strictly necessary cookies will prevent you from logging in or using core platform features. Please consult your browser's help documentation for guidance on managing cookie preferences.

8 Data Security

8.1  289bet implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific job function.
• Multi-factor authentication for internal administrative systems.
• Regular security assessments, penetration testing, and vulnerability scanning of the 289bet platform infrastructure.
• Secure data centre facilities with physical access controls, 24/7 monitoring, and redundant systems.

8.2  In the event of a data security incident that affects your personal data, 289bet will notify you without undue delay and will take immediate steps to contain and remediate the incident. We will also notify relevant authorities as required by applicable data protection obligations.

8.3  While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 289bet immediately if you suspect any unauthorised access to your account.

9 Data Retention

9.1  289bet retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention requirements.

9.2  The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of the account and for a minimum of five (5) years following account closure, to meet AML and KYC regulatory requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Communications and Support Records: Retained for three (3) years from the date of the last interaction, to support complaint handling and dispute resolution.
• Technical and Log Data: Retained for up to twelve (12) months, after which it is aggregated or deleted.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.

9.3  When personal data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

10 Your Data Rights

10.1  As a user of the 289bet platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and provide sufficient information to verify your identity.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10.2  289bet will respond to all verified data rights requests within thirty (30) calendar days. In complex or high-volume circumstances, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11 Children's Privacy

11.1  The 289bet platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has registered an account or provided personal data without appropriate parental or guardian consent, we will immediately suspend the account, delete the associated data, and reverse any financial transactions where technically possible.

11.2  If you believe that a minor has created a 289bet account or that personal data of a person under 18 has been submitted to our platform, please contact [email protected] immediately so that we can investigate and take appropriate remedial action.

12 Third-Party Links and Integrations

12.1  The 289bet platform may contain references to third-party game content delivered by licensed game studios. While 289bet takes steps to ensure that such integrations are secure, we are not responsible for the privacy practices or data handling of third-party game providers once you interact directly with their software environments.

12.2  This Privacy Policy applies solely to data collected and processed by 289bet in connection with your use of the 289bet platform. 289bet is not responsible for the privacy policies or practices of any third-party websites that are not operated by 289bet, even if referenced in our platform content.

13 Changes to This Privacy Policy

13.1  289bet reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, data processing practices, or platform features. All updates will be published at https://289bet.biz/privacy-policy with a revised effective date. Where changes are material, we will notify registered Players by email or by a prominent notice on the platform at least seven (7) days before the changes take effect.

13.2  Your continued use of the 289bet platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any changes, you must cease using the platform and may request account closure by contacting [email protected].

14 Contact Us

14.1  If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the 289bet data team using the details below. All privacy-related correspondence must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Website: https://289bet.biz

14.2  We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days of receiving a verified request.