Your Privacy Matters to 29be

29be collects personal information from you in two primary ways: information you provide directly when registering or using the platform, and information collected automatically through your interaction with the site. We collect only the minimum data necessary to operate the platform, fulfil our legal obligations, and deliver a high-quality gaming experience to players in Bangladesh.

Information You Provide Directly

When you create a 29be account or interact with our support team, we may collect the following categories of personal data:

Information Collected Automatically

When you browse or interact with the 29be platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device type and operating system, browser type and version, pages visited and time spent on each page, referring URL, and session timestamps. This technical data is used to maintain platform security, detect fraud, and improve the overall user experience.

29be uses the personal information it collects for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first seeking your consent.

• Account management: Creating and maintaining your 29be account, verifying your identity, and managing your account settings and preferences.
• Transaction processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining an accurate record of your financial activity on the platform.
• Platform security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as described in the Terms & Conditions.
• Legal compliance: Meeting our obligations under applicable anti-money laundering regulations, Know Your Customer requirements, and any lawful requests from competent authorities.
• Customer support: Responding to your queries, resolving disputes, and processing complaints in a timely and fair manner.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, and enforcing self-exclusion, deposit limit, and time-out requests that you have activated.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to develop new features and improve existing ones.
• Communications: Sending you important account notifications, security alerts, and — where you have opted in — promotional communications about relevant offers and bonuses. You may opt out of marketing emails at any time by contacting [email protected].

We process your personal data on the following legal bases: performance of a contract (operating your account), compliance with a legal obligation (KYC/AML requirements), and our legitimate business interests (fraud prevention, platform security, and service improvement). Where processing is based on consent — for example, marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

29be does not sell or rent your personal information to any third party. However, in order to operate the platform effectively and meet our legal obligations, we may share certain data with a limited set of trusted third-party service providers and regulatory bodies. All third parties with whom we share data are contractually required to handle your information securely and to use it solely for the stated purpose.

Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction-level financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification services: Third-party KYC providers may receive copies of your identification documents to assist with age and identity verification. These providers are bound by strict data handling and confidentiality agreements.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games within the 29be platform. Personal identity data is not shared with game studios.
• IT infrastructure providers: Hosting, cloud storage, and security service providers that underpin the technical operation of the 29be platform may process data on our behalf under data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or a lawful request from a competent authority, 29be may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units. We will notify you of such disclosures where legally permissible.

The 29be platform uses cookies — small text files stored on your device — and similar technologies such as local storage and session tokens to operate the site, remember your preferences, and monitor platform performance. By continuing to use the 29be platform, you agree to our use of cookies as described in this section.

Types of Cookies We Use

29be does not use third-party advertising cookies or cross-site tracking pixels. You may manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your 29be account and using core platform features.

29be retains your personal data for as long as your account remains active and for a defined period after account closure, in order to meet our legal and regulatory obligations. We do not retain personal data for longer than is necessary for the purposes for which it was collected.

Retention Schedule

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction to support financial auditing and regulatory compliance.
• KYC verification documents: Retained for a minimum of five years from the date of submission. Document images are stored in encrypted form and access is restricted to authorised compliance personnel.
• Support correspondence: Retained for three years from the date of the last communication in a support thread, after which records are anonymised or deleted.
• Technical log data: Server access logs and security event logs are retained for a maximum of 12 months, after which they are automatically purged.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever comes first.

All personal data held by 29be is stored on servers that are protected by industry-standard physical and logical security controls. Where data is processed by third-party service providers on our behalf, those providers are contractually required to apply equivalent security standards.

As a 29be player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with your registered email address and a brief description of your request. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data that 29be holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any personal data held by 29be is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account-level data such as your registered email address or mobile number, you may also update this directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. Please note that erasure requests may be subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restriction: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while we investigate a rectification request or a complaint you have raised.
• Right to data portability: Where processing is based on consent or on a contractual basis, you have the right to receive a structured, machine-readable copy of the personal data you have provided to 29be.
• Right to object to marketing: You have the right to object to the use of your personal data for direct marketing purposes at any time. Send an opt-out request to [email protected] and we will remove you from all marketing communications within five business days.

29be will not charge a fee for processing privacy rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. We will inform you of any applicable fee before proceeding.

29be takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. The following controls are maintained on an ongoing basis:

• SSL/TLS encryption: All data transmitted between your browser and the 29be platform is encrypted using current SSL/TLS standards. Our HTTPS certificate is kept current and monitored for validity.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm before being stored in our database.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their 29be accounts for an additional layer of login security.
• Security monitoring: Our platform infrastructure is monitored around the clock for anomalous activity, intrusion attempts, and other security events. Automated alerts are triggered for patterns consistent with unauthorised access.
• Incident response: In the event of a personal data breach that poses a risk to affected players, 29be will notify impacted users within 72 hours of becoming aware of the breach and will take immediate steps to contain and remediate the incident.

While 29be employs strong security practices, no online system is entirely immune to risk. You also have a role in keeping your account secure — use a strong, unique password, never share your OTP, and contact us immediately at [email protected] if you notice any suspicious activity on your account.

29be reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to the address on file and will display a prominent notice on the 29be website for a period of not less than 14 days prior to the updated policy taking effect.

The effective date of the current version of this Privacy Policy is shown at the top of this page. We encourage you to review this policy periodically to stay informed about how 29be protects your personal information. Your continued use of the platform after the effective date of a revised policy constitutes your acceptance of the changes.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related concern, please contact our support team in writing at [email protected]. We aim to acknowledge all privacy enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.