Privacy Policy — Your Data at 29bd

1 Data We Collect

29bd collects personal data that is necessary to operate the platform, verify player identities, process financial transactions, and comply with applicable legal and regulatory obligations. We collect data through three primary channels: information you provide to us directly, information generated automatically through your use of the platform, and information received from third-party payment and identity verification partners.

We do not collect more data than is necessary for the purposes described in this Privacy Policy, and we do not sell your personal information to third parties under any circumstances.

Information You Provide Directly

• Account Registration: Full name, date of birth, email address, mobile number, and chosen username and password when you create your 29bd account.
• Identity Verification (KYC): Copies of government-issued identification documents such as your National ID Card (NID), passport, or driver's licence, as well as a selfie photograph for liveness verification.
• Payment Information: Your bKash or Nagad mobile number, Rocket or Upay account reference, USDT wallet address, or masked Visa/Mastercard details used for deposits and withdrawals. Full card numbers are never stored on 29bd servers.
• Support Communications: Any messages, attachments, or documents you share when contacting 29bd customer support via live chat or email.
• Responsible Gaming Preferences: Deposit limits, session limits, cooling-off periods, or self-exclusion requests submitted through your account settings.

Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifier, screen resolution, and time zone setting.
• Usage and Behavioural Data: Pages visited, games played, session duration, wagering history, deposit and withdrawal transaction logs, and in-game events.
• Log Data: Server logs recording access times, referring URLs, error reports, and performance metrics to assist with platform troubleshooting and security monitoring.
• Cookies and Tracking Technologies: First-party cookies, session tokens, and similar tracking technologies described in further detail in Section 4 of this Policy.

2 How We Use Your Data

29bd uses the personal data we collect only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following sets out each purpose alongside the corresponding legal basis and the categories of data involved.

Primary Purposes

• Account Management: Creating and maintaining your 29bd player account, authenticating your login sessions, and keeping your account details up to date.
• Transaction Processing: Handling deposits via bKash, Nagad, Rocket, Upay, USDT, Visa, and Mastercard, and processing withdrawal requests to your verified payment account.
• Identity Verification & Fraud Prevention: Verifying your age and identity through our KYC process, screening for multi-account fraud, and monitoring transactions for signs of money laundering or financial crime.
• Game Provision: Delivering the games, betting markets, and platform features you use, including crash games like Aviator, live casino, slots, and cricket betting.
• Customer Support: Responding to enquiries, resolving disputes, and providing account assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: Monitoring player behaviour to identify potential signs of problem gambling, enforcing deposit limits and self-exclusion orders, and providing timely interventions where necessary.

Secondary Purposes

• Platform Improvement: Analysing aggregated usage data to identify performance bottlenecks, improve game loading times, and enhance the overall user experience for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Personalised Promotions: Where you have given your explicit consent, sending tailored promotional offers, bonus notifications, and seasonal offers (such as Eid or BPL tournament promotions) by email or on-platform notification.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law-enforcement authorities, and maintaining audit trails for financial transactions.
• Security Monitoring: Detecting and investigating suspicious login attempts, automated bot activity, and other platform security threats using technical and behavioural data.

3 Data Sharing & Disclosure

29bd does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described in this section, and only to the extent necessary for each stated purpose.

Third-Party Service Providers

We work with carefully selected third-party processors who assist us in operating the 29bd platform. These processors act on our instructions and are contractually prohibited from using your data for any purpose other than providing their specified service to us. Categories of processors include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card processing partners who handle the technical routing of your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and anti-fraud services that assist in verifying player identities and screening for financially prohibited persons.
• Game Software Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive limited session and wagering data necessary to deliver their game software. These providers operate under their own privacy frameworks.
• Cloud Infrastructure & Security: Hosting, content delivery, and cybersecurity service providers who store and protect platform data.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics partners to assist with platform performance measurement. No personally identifiable information is included in these transfers.

Legal and Regulatory Disclosure

29bd may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities when required to do so by applicable law, court order, or in response to a lawful investigative request. In such circumstances, we will disclose only the minimum information required to comply with the legal obligation, and we will notify you of the disclosure where we are legally permitted to do so.

4 Cookies & Tracking Technologies

29bd uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to gather anonymised analytics about platform usage. A cookie is a small text file stored on your device by your web browser when you visit a website. It does not contain executable code and cannot access other files on your device.

Types of Cookies We Use

Managing Your Cookie Preferences

You may configure your browser to refuse all cookies, accept only certain categories of cookies, or delete cookies that have already been stored. Please be aware that disabling strictly necessary cookies will impair the functionality of the 29bd platform, including your ability to log in and maintain a gaming session. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

5 Data Security

29bd employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme is designed around the principle of defence in depth, combining technical controls, operational procedures, and staff training to maintain the confidentiality and integrity of all player data.

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the 29bd platform is encrypted using industry-standard TLS 1.3 with 256-bit AES encryption, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Password Hashing: Account passwords are never stored in plain text. We use bcrypt with a high cost factor to hash and salt all passwords before storage, making them computationally infeasible to reverse even in the event of a data breach.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their 29bd accounts. When activated, logging in requires both your password and a time-based one-time code, significantly reducing the risk of unauthorised account access.
• Access Controls: Access to player data within 29bd's internal systems is restricted on a strict need-to-know basis. Staff access is logged, monitored, and reviewed on a regular basis. No staff member has access to your plaintext password.
• Intrusion Detection: Automated systems monitor the platform 24/7 for anomalous login patterns, unusual transaction activity, and other indicators of compromise. Alerts are reviewed by our security team in real time.
• Vulnerability Management: We conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses before they can be exploited.

6 Data Retention

29bd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or regulatory reporting requirements. The retention periods set out below reflect the applicable legal obligations and our legitimate business interests in maintaining accurate records.

When the applicable retention period expires, personal data is securely deleted or permanently anonymised using industry-standard data destruction methods. Anonymised and aggregated data that cannot be re-linked to an individual may be retained indefinitely for statistical and platform improvement purposes.

7 Your Privacy Rights

As a 29bd player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team via live chat or in writing at the email address listed in Section 8 of this Policy.

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update many details directly through your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specific situations, such as while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of the personal data you have provided to 29bd, for the purpose of transferring it to another service provider.
• Right to Object to Marketing: You have the absolute right to object to the processing of your data for direct marketing purposes at any time. We will cease processing for this purpose immediately upon receipt of your objection.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8 Policy Updates & Contact

29bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email and display a prominent notice on the platform for a period of not less than 30 days following publication of the revised Policy. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent changes.

We encourage all players to review this Privacy Policy periodically to stay informed about how 29bd collects, uses, and protects personal data. Continued use of the 29bd platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

Children's Privacy

The 29bd platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account and provided us with personal data without parental consent, we will take immediate steps to delete the account and all associated data. Parents or guardians who believe a minor may have accessed the platform should contact us immediately at the address below.

Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about the way in which your personal data is being handled, please contact the 29bd Privacy Team using the details below. All communications are handled confidentially.