290bet Privacy Policy — How Your Data Is Kept Safe

This Privacy Policy explains how 290bet (290bet.click) collects your personal data, why it collects it, where it is stored, and when it is deleted. This policy applies to the 290bet website, mobile app, and all digital services.

290bet operates under a Curacao eGaming license. We follow international GDPR guidelines for handling personal data, although we are legally governed under Curacao jurisdiction. Our goal is to be fully transparent about how your data is managed.

This policy is part of our Terms & Conditions and Responsible Gaming Policy Must be read together with.

290bet collects two types of data — information you provide directly, and data generated automatically while you use the platform.

What You Provide Directly:

• Name, date of birth, nationality (collected at registration)
• Email Address & Mobile Number
• Address (during KYC verification)
• National ID or passport details (for KYC)
• Payment Account Details (bKash/Nagad number, bank account)

Automatically Collected Data:

• IP address and approximate location
• Device type, operating system, and browser information
• Session Duration & Transaction History
• Gameplay activity and session logs
• Cookie & Tracking Data (see Section 5 for details)

290bet uses your data only for specific, legitimate purposes. Each purpose is outlined clearly below:

• Account Management: For registration, login, password reset, and account verification.
• Payment Processing: To securely process deposits and withdrawals, and to detect fraud.
• KYC & Legal Obligations: For identity verification, age confirmation, and compliance with AML regulations.
• Customer Support: To assist with any questions, complaints, or requests you may have.
• Security & Fraud Prevention: To detect suspicious activity and keep your account secure.
• Service Improvement: Anonymous statistical analysis to understand which features are used most.
• Relevant Notifications: To send you bonus offers, important updates, or alerts (where you have given consent).

290bet shares data only in limited and specific circumstances. Before sharing anything with a third party, their privacy and security standards are thoroughly vetted.

• Payment Provider: bKash, Nagad, bank & crypto gateways — only the information necessary to complete transactions.
• Game Provider: Evolution, Pragmatic Play, Spribe — only the data needed to run a game session, never personal identity details.
• KYC Verification Provider: Data is shared with internationally accredited providers for identity and age verification purposes.
• Analytics Tools: Anonymous usage statistics — no personal identity included.
• Law Enforcement Authorities: In cases of legal obligation or court order — only the minimum necessary data is disclosed.

290bet uses cookies. Cookies are small text files stored in your browser that help the platform function correctly and enhance your experience.

Cookies can be managed through your browser settings. However, disabling essential cookies will prevent 290bet from functioning properly. Contact support for a full list of cookies used on our site.

290bet does not retain data longer than necessary. Each category of information has a defined retention period:

• Account Information: For the duration of the active account and for 5 years after closure (as required by law).
• Transaction Records: 5 years — due to AML and tax compliance requirements.
• KYC Documents: 5 years after account closure.
• Log & Session Data: 90 days — then deleted automatically.
• Customer Support Conversations: 3 years — for quality assurance and dispute resolution purposes.
• Analytics Data: Anonymously and indefinitely — without any personal identifiers.

290bet believes you have full rights over your own data. You can exercise the following rights at any time:

To exercise any of your rights, email support@290bet.click or reach us via live chat. Once your identity is verified, we will respond within 30 days.

290bet strictly does not provide services to anyone under 18. We do not knowingly collect data from minors.

• Date of birth is verified at the time of registration.
• Age is re-verified during the KYC process
• Permanently deleted immediately upon confirmation that the data belongs to someone under 18
• If an underage account is detected, all transactions will be voided and the account permanently closed.

Parents can use browser-level filtering tools to keep children away from online gaming. 290bet fully supports the use of these tools.

290bet uses industry-leading technology to protect your data. The key security measures are outlined below:

• SSL/TLS 256-bit Encryption: All communication between your browser and 290bet's servers is encrypted. No one can intercept it in transit.
• Data Encryption at Rest: Data stored on our servers is also encrypted — even if the database were compromised, the data could not be read.
• PCI DSS Standards: Payment card information is stored and processed in compliance with international PCI DSS standards.
• Access Controls: Only authorized personnel can access specific data — and every access is logged.
• Regular Security Audits: External security specialists regularly audit our systems for vulnerabilities.
• Breach Response Plan: In the event of a data breach, there is a process in place to notify affected members within 72 hours.

290bet updates this Privacy Policy from time to time. When changes are made:

• You will be notified via your registered email or SMS before any significant changes take effect.
• The "Last Updated" date at the top of the page will always reflect the most recent version.
• Continued use of the service after any changes will be considered acceptance of the updated policy
• Previous versions are archived — available upon request.

If you have any questions or concerns about this policy:

• Email: support@290bet.click
• Live Chat: The chat button at the bottom right of any page on 290bet.click
• Time: 24 hours a day, 7 days a week, in Bengali