Your Privacy Matters
at 2f999

Introduction

2f999 is an online betting and casino platform operated at https://2f999.io, serving the adult Bangladeshi market with sports betting, live casino games, slots, Megaways titles, Bingo rooms, and crash games. All services are delivered in English and all financial transactions are denominated in Bangladeshi Taka (BDT).

We understand that privacy is a serious matter. When you register an account, make a deposit via bKash or Nagad, place a bet on a BPL cricket match, or contact our support team, you are sharing personal information with us. This Privacy Policy explains in clear, direct terms how that information is handled from the moment it is collected until the moment it is deleted.

This policy applies to all individuals who visit, register with, or use the 2f999 platform in any capacity, whether through a desktop browser or a mobile device. It applies equally to players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — anywhere in Bangladesh where our services are accessed.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference into our overall player agreement.

Data Controller

For the purposes of this Privacy Policy, 2f999 acts as the data controller in respect of the personal data collected from players and visitors. As data controller, 2f999 determines the purposes for which personal data is collected and the manner in which it is processed.

All enquiries relating to the processing of your personal data, requests to exercise your data rights, or complaints regarding our data handling practices should be directed to our support team. Contact details are provided in Section 15 of this policy.

Data We Collect

The categories of personal data that 2f999 may collect from you are set out in the table below. Not all categories will be collected from every player — the specific data collected depends on how you interact with the platform.

How We Collect It

2f999 collects personal data through the following channels:

• Direct Submission: Data you actively provide by completing the registration form, submitting KYC documents, filling in support chat or email, or updating your account profile.
• Automated Platform Interaction: Technical data collected automatically each time you visit or use the platform, including IP address, device identifiers, session duration, pages visited, and in-game activity logs.
• Payment Provider Callbacks: Transaction confirmation data returned to 2f999 by bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners upon the completion of a deposit or withdrawal instruction. This includes the transaction reference ID, amount, timestamp, and sending/receiving account identifier — never full credentials.
• KYC and Identity Verification Partners: Where 2f999 uses a third-party identity verification service to validate NID documents or age verification, that service returns a verification result (pass/fail) and any relevant extracted data points to the platform.
• Cookies and Similar Technologies: As described in Section 10, we use strictly necessary session cookies and optional analytics tracking. See that section for full details.

How We Use Your Data

The personal data collected by 2f999 is used exclusively for the following purposes:

1. Account Management: Creating, maintaining, and securing your player account, including processing login requests, resetting credentials, and managing account settings.
2. Payment Processing: Verifying and executing deposit and withdrawal transactions in BDT via bKash, Nagad, Rocket, Upay, and other supported payment methods. Matching payment method ownership to account holder identity as part of fraud prevention.
3. Identity Verification (KYC): Confirming that you are 21 years of age or older and that the personal information you provided during registration is accurate and genuine.
4. Gaming Services: Enabling access to cricket betting markets, live casino games, slots, Megaways, Bingo, and crash games; storing bet histories and game session logs; calculating and crediting winnings to your BDT wallet.
5. Bonus and Promotion Administration: Tracking wagering requirements, determining bonus eligibility, crediting promotional offers, and monitoring for bonus abuse in accordance with the Terms & Conditions.
6. Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling; applying deposit limits, cool-down periods, and self-exclusion tools at the player's request; complying with responsible gaming obligations.
7. Customer Support: Responding to queries, complaints, and account issues submitted via live chat or email.
8. Fraud Prevention and Security: Detecting and preventing unauthorised account access, duplicate account registration, money laundering, payment fraud, and other prohibited conduct as defined in our Terms & Conditions.
9. Platform Improvement: Using aggregated, anonymised analytics data to understand how players use the platform and improve features, navigation, and game offerings.
10. Marketing Communications (opt-in only): Sending promotional emails or SMS notifications about new games, deposit bonuses, seasonal offers (e.g., Eid promotions, BPL cricket season specials), and platform updates — only where you have explicitly opted in to receive such communications. You may opt out at any time.
11. Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful requests from courts or law enforcement authorities, and cooperating with anti-money laundering (AML) compliance obligations.

Legal Basis for Processing

2f999 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and 2f999 — including account creation, payment processing, KYC, gaming services, and support. Without this processing, we cannot provide the services you have registered for.
• Legitimate Interests: Processing carried out in pursuit of 2f999's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring, and platform analytics.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML record-keeping requirements and responding to lawful judicial or law enforcement requests.
• Consent: Processing based on your freely given, specific, and informed consent — specifically, the sending of optional marketing communications via email or SMS. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

Data Sharing

2f999 does not sell, rent, or commercially exploit your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and any other payment partner required to process deposit or withdrawal instructions. Data shared is limited to what is necessary to execute the transaction.
• Identity Verification (KYC) Providers: Third-party services used to validate NID documents, passport copies, and proof of age. These providers are bound by strict data processing agreements and may only use your data for the stated KYC purpose.
• Game Studio Providers: When you play a live casino game powered by Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe, certain session data (such as a tokenised player identifier and stake amount) is transmitted to that studio's game servers to run the game. No personally identifiable contact or financial data is shared with game studios.
• Platform Security and Analytics Providers: Trusted technology partners who assist with DDoS protection, fraud detection, and platform performance monitoring, operating strictly under confidentiality agreements.
• Legal and Regulatory Authorities: Where required by a valid court order, applicable law, or a lawful request from a law enforcement authority, 2f999 will disclose the minimum necessary personal data. Where legally permitted, we will notify the affected player.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of 2f999's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections.

Data Retention

2f999 retains personal data only for as long as it is necessary for the purposes set out in this policy or as required by applicable law. Our general retention principles are as follows:

After the relevant retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.

Security Measures

2f999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 2f999 platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar.
• Encrypted Data at Rest: Sensitive data fields (including KYC document files and payment reference data) are encrypted at rest using AES-256 encryption in our database infrastructure.
• Password Security: Player passwords are never stored in plain text. They are stored as salted cryptographic hashes using a modern, slow hashing algorithm. Even 2f999 staff cannot see your raw password.
• Access Controls: Access to personal data within 2f999's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason may access player records, and all such access is logged and audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts for an additional layer of login security. 2FA options are available in account settings.
• Real-Time Fraud Monitoring: 2f999 operates automated systems that monitor transaction patterns, login behaviour, and gaming activity in real time to detect anomalies indicative of account compromise or fraudulent activity.
• Regular Security Reviews: Our platform infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

Cookies & Tracking Technologies

2f999 uses cookies and similar tracking technologies to operate the platform securely and to improve the player experience. The following categories of cookies may be set when you visit the 2f999 platform:

2f999 does not use third-party advertising cookies, tracking pixels from ad networks, or any technology designed to track your browsing behaviour across websites other than https://2f999.io. Strictly necessary and security cookies are set automatically. Functional and analytics cookies are set only where permitted by your preferences.

Most web browsers allow you to view, manage, block, and delete cookies through the browser's settings menu. Please note that blocking strictly necessary cookies will impair your ability to log in and use the platform. For mobile browsers, cookie controls are typically found under the browser's privacy or site settings section.

Your Data Rights

As a player on the 2f999 platform, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data that 2f999 holds about you, along with information about how it is being used and with whom it has been shared. We will provide this in a clear, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data that forms part of a KYC record, correction may require re-submission of supporting documents.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. We will action this request where there is no overriding legal obligation, contractual requirement, or legitimate interest that requires us to retain the data. Note that certain financial and KYC records must be retained for the periods set out in Section 8 regardless of an erasure request.
• Right to Restrict Processing: You may ask us to suspend the active use of your personal data in specific circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing and we are assessing that objection.
• Right to Data Portability: Where processing is based on your consent or on contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to Object: You may object at any time to the processing of your personal data where that processing is based on legitimate interests. You may also object unconditionally to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Minors & Age Policy

The 2f999 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from any individual under the age of 21. Registration on the 2f999 platform requires confirmation that the applicant is at least 21 years old at the time of sign-up.

As part of the KYC process, all players are required to submit valid proof of age — typically a Bangladeshi National Identity Card (NID) or passport — before withdrawals are enabled. This verification step exists in part to prevent minors from accessing the platform.

If 2f999 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be suspended immediately, all associated funds will be reviewed in accordance with our Terms & Conditions, and the personal data will be deleted from our systems as swiftly as reasonably practicable, subject to any legal retention obligations.

International Data Transfers

2f999 primarily stores and processes player data on infrastructure located within or close to the Asia-Pacific region to minimise latency for players in Bangladesh. However, some of our trusted third-party service providers — particularly certain game studio providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe — may process session data on servers located in other jurisdictions.

Where personal data is transferred to a third party operating in a country that does not offer a level of data protection equivalent to that applicable in Bangladesh, 2f999 takes appropriate safeguards to ensure that your data remains protected. These safeguards typically include:

• Binding contractual clauses in our data processing agreements with each third-party provider, requiring them to apply equivalent data protection standards.
• Restricting the type and volume of personal data shared to the minimum necessary for the stated purpose.
• Requiring third-party providers to delete or return data upon termination of their service agreement with 2f999.

As noted in Section 7, game studios receive only tokenised player identifiers and session-specific data — not your full name, NID number, contact details, or financial information. This limits the privacy risk associated with any international data transfer to game server infrastructure.

Policy Changes

2f999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address associated with their account at least 7 days before the revised policy takes effect, unless an urgent change is required for legal or security reasons, in which case the update may take effect immediately.

The "Effective Date" displayed at the top of this page will be updated whenever the Privacy Policy is revised. The most current version of this policy is always the governing document and supersedes all prior versions. We encourage you to review this page periodically so that you remain informed about how 2f999 protects your privacy.

Continued use of the 2f999 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you disagree with any material change, your remedy is to close your account before the revised policy takes effect by contacting [email protected].

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 2f999 handles your personal information, please reach out to our support team using the contact details below.

We serve players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. Our support team communicates in English and is fully trained to handle privacy and data protection queries with care and confidentiality.