bd21 Privacy Policy

1. Introduction

bd21 ("we", "us", "the Platform") is committed to protecting the personal information of all players and visitors who use the bd21 website and mobile platform. This Privacy Policy sets out in detail how we collect, store, use, share, and protect your personal data, and explains the rights available to you with respect to that data.

This Privacy Policy applies to all users of bd21, including registered account holders, visitors browsing the platform without an account, and players who interact with bd21 via mobile browsers. By using the bd21 platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your information as described herein.

2. Privacy at a Glance

3. Information We Collect

bd21 collects personal information in several ways: directly from you when you register or interact with the platform, automatically when you browse or use our services, and in limited circumstances from third-party partners involved in payment processing or identity verification. The categories of information we may collect include the following.

• Identity data: full name, date of birth, gender, and scanned copies of government-issued identification documents (such as your Bangladesh National ID card or passport) provided during the KYC verification process.
• Contact data: registered mobile phone number, email address (if provided), and any correspondence you send to our support team.
• Financial data: deposit and withdrawal transaction records, the payment methods you use (such as bKash, Nagad, or Rocket mobile wallet references), and transaction timestamps. bd21 does not store full payment account numbers or card details.
• Technical data: your device's IP address, browser type and version, operating system, screen resolution, mobile network carrier (where detectable), and session log data including pages visited and time spent on the platform.
• Gameplay data: game history, betting activity, win/loss records, bonus usage, and session duration. This data is used for account management, responsible gaming monitoring, and fraud detection purposes.

4. How We Use Your Information

bd21 uses the personal information we collect for the following specific and lawful purposes. We do not use your data for any purpose beyond those described in this policy without first obtaining your explicit consent.

• Account registration and management: to create and maintain your player account, verify your identity, process your login, and communicate account-related notifications such as deposit confirmations and withdrawal updates.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, and supported bank transfer methods, and to maintain accurate financial records as required by applicable law.
• Legal and regulatory compliance: to fulfil our anti-money-laundering (AML) obligations, perform Know Your Customer (KYC) verification, respond to lawful requests from regulatory or law enforcement authorities, and retain records as required by law.
• Platform security and fraud prevention: to detect and investigate suspicious account activity, prevent unauthorised access, identify and block fraudulent transactions, and protect both players and bd21 from financial crime.
• Responsible gaming: to monitor gameplay patterns that may indicate problematic gambling behaviour, to apply player-requested account restrictions such as deposit limits and self-exclusion, and to deliver responsible gaming communications where appropriate.
• Customer support: to respond to your enquiries, complaints, and requests submitted through our support channels, and to maintain a record of those communications for quality assurance and dispute resolution purposes.

5. Legal Basis for Processing

bd21 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows.

• Contractual necessity: processing your registration data, payment details, and gameplay records is necessary to operate and deliver the services you signed up for under the bd21 Terms & Conditions.
• Legal obligation: certain processing activities — particularly those related to AML checks, KYC verification, and record-keeping — are required by applicable law and cannot be refused or restricted by individual players.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of our legitimate interest in operating a safe and reliable platform, where that interest is not overridden by your privacy rights.
• Consent: where processing is not covered by the bases above — for example, sending you optional promotional communications — we will ask for your explicit consent beforehand and you may withdraw that consent at any time by contacting our support team.

6. Sharing Your Information

bd21 does not sell, rent, or trade your personal data. We share information only in the limited circumstances described below, and only to the minimum extent required for each purpose.

• Payment processors: to facilitate deposits and withdrawals, we share transaction-level data with mobile financial services providers (bKash, Nagad, Rocket) and bank partners. These providers are bound by their own data-protection obligations and are not permitted to use your data for any purpose beyond processing your transaction.
• Game providers: game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive session identifiers and game logs necessary to deliver the game and process game outcomes. They do not receive your full profile, contact details, or financial data.
• Identity verification services: to fulfil KYC requirements, we may share identity documents and verification data with accredited identity verification service providers. These providers operate under strict confidentiality obligations.
• Legal and regulatory authorities: bd21 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or applicable regulatory obligation. We will inform you of any such disclosure unless legally prohibited from doing so.

7. Payment Data and Financial Records

All payment transactions on bd21 are processed through encrypted channels. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or a bank transfer, bd21 records the transaction reference, amount, timestamp, and the last few digits of the sending wallet or account number for reconciliation and fraud-prevention purposes. bd21 does not store full mobile wallet PINs, full bank account numbers, or any card data.

Financial transaction records are retained for a minimum of five years from the date of each transaction, in accordance with applicable anti-money-laundering record-keeping requirements. Players may request a summary of their transaction history at any time by contacting the bd21 support team.

8. Cookies and Tracking Technologies

bd21 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform remember your preferences and improve your experience. We use the following categories of cookies.

• Essential cookies: these are strictly necessary for the platform to function. They enable core features such as session management, login state persistence, and secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: bd21 uses anonymised analytics data to understand how players navigate and use the platform, which pages are most visited, and where technical errors occur. This data is used to improve the platform experience and is not linked to your personal identity.
• Session cookies: temporary cookies that expire when you close your browser. They are used to maintain your login state during a single browsing session and are deleted automatically once the session ends.

9. Data Retention

bd21 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data and identity verification documents are retained for the duration of your account's activity and for a minimum of five years following account closure; financial transaction records are retained for a minimum of five years from the date of each transaction; gameplay and session logs are retained for up to two years for fraud prevention and responsible gaming monitoring purposes; support correspondence is retained for up to three years for quality assurance and dispute resolution purposes.

When your personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, bd21 will securely delete or anonymise the data. Anonymised data — from which you can no longer be identified — may be retained indefinitely for statistical and platform improvement purposes.

10. Data Security

bd21 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the bd21 platform, secure server infrastructure with access controls and audit logging, role-based access restrictions so that only authorised personnel can access player data on a need-to-know basis, and regular security reviews of our systems and third-party integrations.

While bd21 takes all reasonable steps to safeguard your data, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, bd21 will notify affected players promptly and take all necessary steps to contain and remediate the breach.

11. Your Privacy Rights

As a user of bd21, you have the following rights with respect to your personal data. To exercise any of these rights, contact the bd21 support team at [email protected] with your registered mobile number and a description of your request. We will respond within a reasonable timeframe.

• Right of access: you may request a copy of the personal data we hold about you at any time. We will provide this in a clear, readable format within a reasonable period of receiving your request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We will action such requests promptly and confirm the correction once made.
• Right to erasure: in certain circumstances, you may request the deletion of your personal data. Please note that this right is not absolute — where we are legally required to retain data (for example, for AML record-keeping), we cannot action an erasure request for that data.
• Right to restriction: you may ask bd21 to restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while a complaint is under review.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12. Children's Privacy

bd21 is strictly intended for adults aged 21 and above. We do not knowingly collect personal information from persons under 21 years of age. If we become aware that personal data has been submitted by a person under 21, we will delete that data immediately and close the associated account. Parents and guardians who believe that a minor under their care may have accessed or registered on bd21 should contact us immediately.

13. Third-Party Links

The bd21 platform may display references to third-party game providers or payment partners. These third parties operate under their own privacy policies, which bd21 does not control. bd21 is not responsible for the privacy practices of any third-party service whose interface or branding may appear within the platform. Players are encouraged to review the privacy policy of any third-party service they interact with directly.

14. Changes to This Privacy Policy

bd21 reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this policy, we will update the "Last Updated" date displayed at the top of the page and, where the change significantly affects player rights, we will notify active account holders via the platform prior to the change taking effect.

Your continued use of the bd21 platform after any change to this Privacy Policy takes effect constitutes your acceptance of the revised policy. If you disagree with any revised version of this policy, you must stop using the platform and contact bd21 support to request account closure.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd21 handles your personal data, please contact our support team. We are available around the clock to assist players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Cox's Bazar, and Mymensingh.