297bet Privacy Policy

1 Information We Collect

297bet collects personal data from you in three principal ways: information you provide directly during registration and account use, information generated automatically through your use of the platform, and information obtained from verified third-party sources as part of our identity and payment verification processes.

Information You Provide Directly:

• Registration data: Full legal name, date of birth, email address, Bangladeshi mobile phone number, and preferred username;
• Identity verification documents: National ID card (NID), passport, or driver's licence — collected during the KYC (Know Your Customer) process;
• Proof of address: Utility bills or bank statements (no older than three months) submitted to verify your physical address in Bangladesh;
• Payment information: bKash wallet number, Nagad wallet number, Rocket number, Upay details, bank account details (for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank transfers), and Visa or Mastercard details where applicable;
• Communications: Messages, complaints, support requests, and feedback submitted to 297bet via live chat, email, or any other channel.

Information Collected Automatically:

• Device and browser data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences;
• Usage data: Pages visited on the 297bet platform, games played, bets placed, session duration, click paths, and feature usage patterns;
• Transaction logs: Deposit and withdrawal history, bonus activations, wagering activity, and win/loss records;
• Geolocation data: General geographic location derived from your IP address, used to verify that you are accessing the platform from Bangladesh and to comply with jurisdictional restrictions.

Information from Third Parties:

• Identity verification data from regulated KYC service providers;
• Payment confirmation data from mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners;
• Fraud and AML screening results from compliance monitoring services;
• Responsible gaming self-exclusion status from any applicable gaming restriction registers.

2 How We Use Your Data

297bet uses the personal data it collects for the following clearly defined purposes. We do not use your data in ways that are incompatible with these stated purposes without first seeking your consent or establishing a separate lawful basis for doing so.

• Account creation and management: Processing your registration, verifying your identity, enabling login, and maintaining your account profile throughout your relationship with 297bet;
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels, and maintaining accurate transaction records;
• Age and identity verification: Ensuring all players are aged 18 or above, as required by 297bet's responsible gaming obligations, and verifying that player identities match the payment methods used;
• Fraud prevention and security: Monitoring account activity for signs of unauthorised access, money laundering, identity theft, bonus abuse, or other fraudulent conduct, and acting on such signals where detected;
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance through the 24/7 English support channel;
• Personalisation: Tailoring game recommendations, promotional offers, and platform content to your activity and stated preferences — for example, surfacing BPL cricket betting markets during the Bangladesh Premier League season;
• Marketing communications: Sending promotional emails and SMS notifications about new games, bonuses, tournaments, and seasonal offers (such as Eid or Pohela Boishakh promotions), where you have consented to receive such communications. You may withdraw this consent at any time;
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering (AML) regulations, responding to lawful requests from competent authorities, and meeting any other applicable legal obligations;
• Platform improvement: Analysing aggregated and anonymised usage data to identify performance issues, improve game loading times, and enhance the overall user experience.

3 Legal Basis for Processing

297bet processes your personal data on one or more of the following legal grounds, depending on the specific activity involved:

• Contractual necessity: Processing is required to perform the contract between you and 297bet — specifically, to operate your account, process transactions, and deliver the gaming services you have requested;
• Legal obligation: Processing is required to comply with applicable legal requirements, including AML regulations, age verification obligations, and record-keeping requirements under relevant financial regulations;
• Legitimate interests: Processing is carried out in pursuit of 297bet's legitimate business interests — including fraud prevention, platform security, product development, and responsible gaming monitoring — where these interests are not overridden by your data protection rights;
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4 Data Sharing & Third Parties

297bet does not sell, rent, or commercially distribute your personal data to any third party. Data is shared only in the following clearly defined circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Your payment details are shared with the relevant mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners solely to process deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable Bangladeshi financial regulations;
• KYC and identity verification providers: Your identity documents and personal details may be transmitted to regulated third-party verification services for the purpose of age and identity confirmation. These providers are contractually restricted to processing your data only for this purpose;
• Game content providers: To deliver third-party games (such as those supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical data (such as your player ID and session token) may be shared with the relevant game studio to enable game loading and fair-play auditing. No additional personal data is shared with game studios beyond what is technically necessary;
• Fraud and AML compliance services: Transaction data and account activity may be shared with compliance monitoring services for the purpose of detecting and preventing money laundering, fraud, and other illegal activity. 297bet is obligated to report suspicious activity to competent authorities where required by law;
• Legal authorities: 297bet may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, court order, or to protect the rights, property, or safety of 297bet, its players, or the public;
• Business transfers: In the event of a merger, acquisition, or restructuring of 297bet's business, player data may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations.

All third parties with whom 297bet shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the one for which it was shared.

5 Cookies & Tracking Technologies

297bet uses cookies and similar tracking technologies to operate the platform effectively, provide a personalised experience, and gather analytics data that helps us improve the platform for Bangladesh players. The following types of cookies are used:

• Strictly necessary cookies: These are essential for the platform to function. They enable core features such as user authentication, session management, security token validation, and the shopping cart equivalent for depositing. These cookies cannot be disabled without breaking core functionality;
• Performance and analytics cookies: These cookies collect anonymised information about how players use the 297bet platform — such as which pages are visited most frequently, how long sessions last, and which games are loaded most often. This data is used in aggregate form to improve platform performance. No individually identifiable data is extracted from these cookies;
• Functional cookies: These cookies remember your preferences — such as your preferred language (English), display settings, and previously used payment methods — to provide a more convenient experience on return visits;
• Marketing and targeting cookies: With your consent, 297bet may use cookies to track your activity across sessions for the purpose of delivering relevant promotional offers, such as cricket betting promotions during the BPL or IPL season, or Eid bonus campaigns. You may opt out of marketing cookies at any time by contacting the support team.

Most web browsers are set to accept cookies by default. You can adjust your browser settings to block or delete cookies; however, doing so may impair certain functions of the 297bet platform, including the ability to log in or maintain a session across pages.

6 Data Security & Storage

297bet takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Key security measures in place at 297bet include:

• SSL/TLS encryption: All data transmitted between your device and the 297bet servers is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when accessing 297bet;
• Password hashing: Account passwords are never stored in plain text. They are hashed using industry-standard cryptographic algorithms (bcrypt or equivalent) before being stored, meaning that even 297bet staff cannot view your password;
• Two-factor authentication (2FA): 297bet supports optional two-factor authentication via SMS to your registered Bangladeshi mobile number, providing an additional layer of protection against unauthorised account access;
• Access controls: Access to player personal data within 297bet's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role;
• Regular security audits: 297bet conducts periodic security reviews and penetration testing to identify and address potential vulnerabilities in the platform;
• Data minimisation: Internal systems are designed to expose the minimum amount of personal data necessary for each operational function, reducing the risk associated with any single data access event.

While 297bet makes every reasonable effort to protect your personal data, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, 297bet will notify affected players promptly and take immediate steps to contain and remediate the breach.

Player data is stored on secure servers. 297bet does not transfer personal data outside of its controlled server environment except as described in the Data Sharing section of this policy.

7 Your Rights as a Data Subject

As a player registered with 297bet, you hold the following rights with respect to your personal data. 297bet will respond to all valid data subject requests within 30 days of receipt. All requests should be directed to [email protected] with the subject line "Data Subject Request".

• Right of access: You have the right to request a copy of the personal data 297bet holds about you, together with information about how that data is being used. This is commonly referred to as a Subject Access Request (SAR);
• Right to rectification: If any personal data 297bet holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity-related corrections may require submission of updated verification documents;
• Right to erasure ("right to be forgotten"): You may request that 297bet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note that certain data must be retained for legal or regulatory compliance purposes and cannot be deleted on request;
• Right to restriction of processing: You have the right to request that 297bet temporarily suspend the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request;
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format;
• Right to object: You have the right to object to the processing of your personal data where 297bet relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the use of your data for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8 Data Retention Policy

297bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with 297bet plus a period of up to 5 years following account closure, to support dispute resolution and legal proceedings;
• Transaction and financial records: Retained for a minimum of 6 years from the date of the transaction, as required under applicable financial record-keeping and AML regulations;
• Identity verification documents: Retained for the duration of the account relationship and for 5 years after account closure, to support regulatory compliance and audit requirements;
• Support and communication records: Retained for 2 years following the resolution of the relevant enquiry or dispute;
• Marketing preference records: Retained until you withdraw your consent or for 3 years following your last interaction with 297bet marketing communications, whichever comes first;
• Cookie and analytics data: Session cookies are deleted automatically when you close your browser. Persistent analytics cookies are retained for a maximum of 12 months.

At the end of the applicable retention period, personal data is either securely deleted using certified data destruction methods or fully anonymised such that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Children's Privacy

297bet conducts mandatory age verification as part of the account registration and KYC process. Where 297bet discovers or is notified that a user under the age of 18 has registered an account or provided personal data, the following steps are taken immediately:

• The account is suspended pending investigation;
• Any deposits made by the underage individual are returned to the originating payment method;
• Any winnings accumulated during the period of underage use are voided;
• All personal data associated with the underage account is permanently deleted from 297bet's systems, except where retention is required for legal or regulatory reporting purposes.

If you are a parent or guardian and you believe that your child has registered an account with 297bet, please contact the support team immediately at [email protected]. 297bet takes underage gambling extremely seriously and will act on such reports without delay.

297bet also encourages parents and guardians to make use of internet filtering and parental control software to restrict minors' access to online gambling platforms. Information on available parental control tools can be found on the 297bet Responsible Gaming page.

10 Policy Updates & Contact

Policy Updates: 297bet reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 297bet will notify registered players via email at least 7 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how 297bet is protecting your information. Continued use of the 297bet platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

Contact Details: If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by 297bet, please contact the data protection team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support channel: 24/7 English live chat, accessible from the 297bet platform
• Response time: All privacy-related enquiries are responded to within 5 business days. Formal data subject requests are processed within 30 calendar days.

297bet strives to resolve all privacy-related concerns directly and promptly. If you are not satisfied with our response to your enquiry, you may seek further recourse through applicable legal channels in your jurisdiction.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all players registered on the 297bet platform, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.