Official Data Protection

Privacy Policy 299bat

Your personal data is a trust we safeguard with the utmost care. This document transparently explains how 299bat collect, use, store, and protect your information as a member of our platform.

Updated: 1 January 2026
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
100%
Data Stored Securely

299bat Privacy Commitment: We never sell, rent, or transfer your personal data to any third party for marketing purposes without your consent. Your privacy is not merely a legal obligation — it is a moral responsibility we take seriously.

1 Introduction

This Privacy Policy describes how 299bat ("kami", "Platform") collects, uses, stores, and protects your personal information when you use our website at 299bat.plus or our official mobile app.

We understand that your trust is the most valuable asset we hold. That is why we have built a robust data protection system and operate with full transparency — so you know exactly what happens to your information at every stage.

By registering or using the platform 299bat, you agree to the collection and processing of your personal data in the manner described in this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy which together form a comprehensive user protection framework on the 299bat.

2 Information We Collect

We only collect information that is strictly necessary to provide you with a safe, fair, and efficient service. No data is collected excessively or without a clear purpose.

2.1 Information You Provide Directly

  • Registration information: Full name, date of birth, email address, phone number, and your chosen password.
  • Financial information: Bank account number, account holder name, and financial institution name for deposit and withdrawal purposes.
  • Verification documents (KYC): A copy of your ID card, passport, or other identity verification document when required.
  • Communication information: The content of messages you send to our support team.

2.2 Information Collected Automatically

  • Technical data: IP address, device type, operating system, browser version, and screen resolution.
  • Activity data: Pages visited, session duration, games played, and betting history.
  • Transaction data: Deposit history, withdrawals, and all financial activity in your account.
  • Cookie data: Information collected through cookies and other tracking technologies to enhance the user experience.
Data Type Purpose of Collection Retention Period
Personal Information Identity verification & KYC Throughout the active account period + 5 years
Financial Data Payment processing 7 years (legal requirement)
Activity Data Security & platform improvements 2 years
Technical Logs Technical issue diagnostics 90 days
Communication Data Customer support 3 years

3 How We Use Your Information

Every piece of data we collect is used for specific and legitimate purposes. Here are the main ways we use your information:

  • Account management: Create and maintain your account, process registration, and ensure the security of your login.
  • Transaction processing: Process deposits and withdrawals securely and accurately based on the bank information you have registered.
  • Legal compliance: Meet KYC requirements, anti-money laundering (AML) obligations, and other applicable legal requirements.
  • Platform security: Detect and prevent fraud, unauthorised access, and suspicious activity on our platform.
  • Service improvement: Analyse usage patterns to improve the interface, performance, and overall gaming experience.
  • Service communications: Send important account notices, security updates, and promotional information you have opted in to receive.
  • Customer support: Resolve your complaints and enquiries more efficiently using records of previous interactions.

Data Usage Guarantee

We do not use your data to make automated decisions that materially affect your rights without human review. Every significant decision, such as account suspension, involves a manual review by our team.

4 Sharing Information with Third Parties

299bat does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, there are limited situations where we may need to share your information with the following parties:

4.1 Payment Service Providers

Required financial information is shared with authorised payment gateway providers to facilitate the processing of your deposits and withdrawals. All such providers are bound by strict confidentiality agreements and comply with payment industry security standards.

4.2 Game Software Providers

Limited game activity data is shared with our game software providers to ensure game integrity and resolve any technical disputes. This data does not include your financial information or full identity.

4.3 Authorities

We will disclose the necessary information to legal authorities when required by law, court order, or in the context of a financial crime investigation. In such situations, we will notify you unless prohibited from doing so by law.

4.4 Business Transfers

In the event of any merger, acquisition, or sale of company assets, user data may be transferred as part of those assets. You will be notified before your data becomes subject to a different privacy policy.

5 Data Encryption & Security

The security of your data is the absolute priority for 299bat. We continuously invest in the latest security infrastructure to ensure your information is always protected.

5.1 Data Encryption in Transit

All communication between your device and the server 299bat protected with 256-bit SSL/TLS encryption — the same security standard used by major banks and leading financial institutions worldwide. This means no outside party can intercept or read your data in transit.

5.2 Data Encryption at Rest

Sensitive data such as passwords and financial information is stored in a layered encrypted form. Your password is stored using a one-way hashing algorithm that cannot be decrypted — meaning even our internal staff cannot view your actual password.

5.3 Continuous Security Monitoring

Our systems are monitored 24 hours a day, 7 days a week by our cybersecurity team. Any suspicious activity or unauthorized access is detected and addressed immediately. We also conduct regular penetration testing to identify and close any security vulnerabilities.

Shared Responsibility

While we take comprehensive technical measures, the security of your account also depends on your own actions. Use a strong password, never share your login credentials, and always log out from public devices after you finish playing.

6 Cookies & Tracking Technologies

299bat uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login and session management. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collect information about how you use our platform — such as frequently visited pages — to help us improve our services.
  • Functional Cookies: Save your preferences such as language and display settings so you do not need to reconfigure them each time you log in.
  • Security Cookies: Helps detect and prevent fraudulent activity and unauthorised access to your account.

6.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of our platform. Third-party cookies related to performance analytics can be disabled without directly affecting your gaming experience.

7 Data Retention & Deletion

We retain your personal data for as long as your account is active and for any additional period required by law or legitimate business needs. Our data retention schedule is outlined in Section 2 above.

7.1 Account Deletion

When you close your account, we will delete or anonymise your personal data within 30 days, except for data that must be retained to comply with legal requirements — particularly financial data subject to a 7-year retention period based on financial reporting requirements.

7.2 Data Storage Location

Your personal data is stored on secure servers. We ensure that all cross-border data transfers comply with applicable data protection requirements and are protected by appropriate data processing agreements.

7.3 Data Backup

Our systems perform automatic and regular data backups to ensure your data is never lost due to technical failure. These backups are protected with the same level of encryption as our primary data.

8 Your Rights as a User

As a member 299bat, you have important rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

  • Right of Access
    You have the right to request a copy of all personal data we hold about you. This request will be processed within 30 business days.
  • Right to Rectification
    If any of your personal information is inaccurate or outdated, you have the right to request an immediate correction through your account settings or our customer support.
  • Right to Erasure
    You may request the deletion of your personal data upon closing your account, subject to applicable legal retention obligations.
  • Right to Object
    You have the right to object to the processing of your personal data for direct marketing purposes at any time. This request will be honoured without conditions.
  • Right to Data Portability
    You may request your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform if desired.
  • Right to Restriction of Processing
    In certain circumstances, you have the right to request that we restrict the processing of your data while a dispute is resolved or an investigation is carried out.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond within 30 days from the date the request is received.

9 KYC & Identity Verification

The Know Your Customer (KYC) process is an industry-standard requirement in responsible online entertainment. 299bat implements a rigorous KYC process not merely to comply with the law, but to protect you and all members of our platform from fraud and illegal activity.

9.1 When KYC Is Required

  • When your cumulative withdrawal amount reaches a certain threshold.
  • When there is activity inconsistent with the normal usage patterns of your account.
  • When you update your banking information or personal details.
  • When randomly requested as part of our periodic compliance programme.

9.2 Accepted Documents

  • Malaysian Identity Card (MyKad) — front and back.
  • Valid passport.
  • Recent bank statement (not older than 3 months) for financial information verification.
  • Utility bill or other official document as proof of address if required.

9.3 KYC Document Security

All KYC documents you submit are stored with full encryption and accessible only by authorized personnel for verification purposes. They are not shared with third parties unless required by law, and will be deleted according to our data retention schedule once verification is complete.

10 Changes to Privacy Policy

299bat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The latest update date is always displayed at the top of this document.

For any material changes — meaning changes that significantly affect how we use your data — we will provide clear notice via email to your registered address or through an in-platform notification at least 14 days before the changes take effect.

Continued platform use 299bat after the effective date of any policy amendment will be considered your acceptance of the updated terms. We encourage you to review this page periodically.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist.

Live Chat

Reach us directly via live chat on the platform — available 24/7 with minimal wait times.

Privacy Email

[email protected]
Response within 1–2 business days.

For requests related to your personal data rights (access, correction, deletion), please clearly state the type of request and include your registered account number to speed up the review process.

Why Your Data Secure With Us

Six layers of protection we have built to ensure your privacy is maintained at all times.

256-bit SSL Encryption

Every bit of data transmitted between your device and our servers is protected with military-grade encryption. No outside party can intercept or read your communications.

Secure KYC Process

Your identity verification documents are handled under strict security protocols. Only authorised personnel may access KYC documents, and solely for verification purposes.

No Data Sales

We never sell, rent, or transfer your personal data to advertisers or third-party data brokers. Your data remains entirely yours.

24/7 Monitoring

Our security team monitors all platform activity around the clock. Any suspicious patterns are detected and resolved before they can affect your account.

User Rights Respected

You have full control over your data. Request access, correction, or deletion at any time — we will comply within the stipulated timeframe.

Regular Security Testing

Platform 299bat undergoes regular penetration testing and security audits by independent parties to ensure there are no vulnerabilities that could be exploited by malicious actors.

🔒
Play with Safe & Secure

Your privacy is protected, your data is secure. Join over 500,000 Malaysian players who play with full confidence at 299bat every day.

Bahasa Melayu