bd21 Privacy Policy — How We Handle Your Data
At bd21, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains exactly what personal information we collect from Bangladeshi players, how we use it, who we share it with, and how you can exercise control over your own data. We are committed to maintaining the trust of every user on the bd21 platform through transparent, responsible data practices.
Introduction
bd21 operates the online casino and sports betting platform accessible at https://bd21.io (the "Platform"). In the course of providing our services to players based primarily in Bangladesh, bd21 necessarily collects, stores, and processes certain personal data relating to our users. This Privacy Policy sets out, in clear and plain language, the full scope of those data practices.
We have written this policy to be as transparent and accessible as possible. We avoid unnecessary legal jargon where we can, and we explain the practical impact of each data practice we describe. If you have questions that this document does not answer, our support team is available 24/7 via live chat on the platform or by emailing [email protected].
This policy covers:
- What categories of personal data we collect from you, and when.
- The specific purposes for which we use each category of data.
- The legal grounds on which we rely to process your data.
- How long we keep your data and when we delete it.
- The circumstances (if any) in which we share your data with third parties.
- The rights you hold over your own data and how to exercise them.
- How we keep your data secure against unauthorised access or misuse.
This Privacy Policy applies to all personal data collected through the bd21 website, any mobile-optimised version of the platform, and all interactions between you and bd21's customer support channels, including live chat and email communications.
Data We Collect
bd21 collects personal data in three broad ways: information you provide to us directly, information we collect automatically as you use the platform, and information we receive from trusted third parties. The following table summarises the categories of data we collect and the context in which each is obtained.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, NID / passport number | Provided by you during registration or KYC verification |
| Contact Data | Mobile number, email address, residential address (district, division, postal code) | Provided by you during registration or account updates |
| Financial Data | bKash / Nagad / Rocket wallet numbers, bank account details, transaction history, deposit and withdrawal amounts in ৳ BDT | Provided by you during deposit / withdrawal, or passed by payment providers |
| Verification Data | Copies of NID, passport, utility bills, bank statements submitted for KYC | Provided by you upon request |
| Usage Data | Games played, bets placed, bet amounts, win/loss history, session duration, login times, pages visited | Collected automatically by bd21 platform systems |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution | Collected automatically via server logs and analytics tools |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Generated when you contact bd21 support |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, reality check preferences, session time-out settings | Provided by you via account settings or support requests |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or data concerning a person's sex life or sexual orientation, except where strictly required by applicable law or anti-fraud regulation. Where any such data must be processed (for example, where a user discloses a gambling-related health concern in the context of a responsible gaming request), it will be handled with heightened care and used only for the disclosed purpose.
bd21 does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly for adults aged 21 and above. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. See Section 10 for our full Children's Privacy policy.
How We Use Your Data
bd21 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with those described below, and we do not sell your personal data to any third party for their own commercial marketing purposes.
Account Management & Service Delivery
We use your Identity Data, Contact Data, and Technical Data to create and manage your bd21 account, authenticate your identity at login, process your deposits and withdrawals, deliver your selected games and betting markets, and provide you with account-related notifications such as deposit confirmations and security alerts.
Identity Verification & Compliance (KYC / AML)
We use your Identity Data, Financial Data, and Verification Data to comply with our Know Your Customer (KYC) obligations and to screen for potential money laundering, fraud, or other financial crime. This includes verifying that you are who you say you are, that the payment methods you use are in your own name, and that your account activity is consistent with lawful, legitimate gambling behaviour.
Responsible Gaming Monitoring
We use your Usage Data and Responsible Gaming Data to monitor your gambling behaviour for indicators of problem gambling. If our systems detect patterns that suggest your gambling may be moving from recreational to harmful, bd21's responsible gaming team may contact you proactively to offer support resources, set limits on your behalf where required by our internal policies, or prompt you to use our self-exclusion tools. This is a service we provide in the interest of your wellbeing, not as a means of limiting your access without cause.
Customer Support
We use your Communications Data, Identity Data, and account history to respond to your support queries, resolve disputes, process complaints, and improve the quality of our support services. Support interactions are logged and may be reviewed for training and quality assurance purposes.
Fraud Prevention & Platform Security
We use your Technical Data, Usage Data, and Financial Data to detect and prevent fraud, bonus abuse, multi-accounting, money laundering, and unauthorised access to accounts. This includes automated pattern detection, device fingerprinting, IP analysis, and, where necessary, manual account review by our security team.
Promotions & Platform Communications
Where you have opted in to receive marketing communications, we will use your Contact Data and Usage Data to send you relevant promotional offers, bonus announcements, seasonal promotions (such as Eid or Pohela Boishakh special offers), and game recommendations tailored to your activity on the bd21 platform. You may opt out of marketing communications at any time by contacting our support team or updating your notification preferences in your account settings.
Platform Analytics & Improvement
We use aggregated and anonymised Usage Data and Technical Data to analyse platform performance, understand how users navigate the site, identify areas for improvement, and develop new features and game offerings. Aggregated analytics data cannot be used to identify any individual user.
Legal Basis for Processing
bd21 processes your personal data only where we have a valid legal basis for doing so. The primary legal bases on which we rely are as follows:
- Contractual necessity: Processing your Identity, Contact, and Financial Data is necessary for us to fulfil the contract we have with you — that is, to provide the bd21 platform services you have signed up for, including account management, deposits, withdrawals, and access to games.
- Legal obligation: We process your Verification Data and certain Financial Data because we are legally required to carry out identity verification and anti-money laundering checks. Failure to comply with these obligations could constitute a legal violation on our part.
- Legitimate interests: We process your Technical Data, Usage Data, and Communications Data on the basis of our legitimate interests in operating a secure, fraud-free, and commercially viable platform. We conduct a balancing assessment to ensure our interests do not override your fundamental data rights.
- Consent: Where we send you marketing communications or use non-essential tracking technologies, we rely on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
- Vital interests: In limited circumstances — specifically in the context of responsible gaming interventions where a user's welfare is at risk — we may process certain data to protect the vital interests of the individual concerned.
Where processing is based on consent, you always have the right to withdraw that consent. Withdrawing consent will not affect our ability to process your data under a different lawful basis (for example, where we are required by law to retain your financial transaction records regardless of your marketing preferences).
Cookies & Tracking Technologies
bd21 uses cookies and similar tracking technologies (including local storage, session storage, and device fingerprinting) to operate the platform, maintain your login session, and improve your experience. The following categories of cookies are used on the bd21 platform:
- Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your Wallet balance display, and enable secure HTTPS communication between your browser and our servers. These cookies cannot be disabled without breaking core platform functionality.
- Functional cookies: These remember your preferences such as display language, notification settings, and recently played games. They are not essential but significantly improve usability. They are set only for the duration of your session or for a short persistent period.
- Analytics cookies: We use anonymised analytics tools to understand how users interact with the bd21 website — for example, which pages are visited most frequently and where users drop off in registration flows. This data is aggregated and cannot identify individual users. Analytics cookies require your consent.
- Security cookies: These support our fraud detection and anti-bot measures. They help us distinguish legitimate user sessions from automated or malicious traffic. They are set as part of our legitimate interest in platform security.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging into your bd21 account. Blocking functional cookies may affect your user experience. Blocking analytics cookies will not affect your ability to use the platform in any way.
bd21 does not use advertising cookies, retargeting cookies, or any cookies that track your activity across third-party websites. Our tracking technologies are limited to what is necessary to operate the bd21 platform itself.
Data Sharing
bd21 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties that are bound by appropriate confidentiality and data protection obligations.
Payment Providers
When you make a deposit or withdrawal, we share the minimum necessary financial and identity information with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your selected bank — to process the transaction. These providers act as independent data controllers for their own services and are subject to their own privacy policies and applicable financial regulation in Bangladesh.
Game Providers
bd21 licenses games from third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, among others. When you play a game powered by one of these providers, your gameplay session data (including bet amounts, game round identifiers, and outcomes) is processed by the provider's Remote Gaming Server (RGS). Game providers do not receive your name, address, or payment details. Data shared with game providers is governed by our licensing agreements, which include strict data processing and confidentiality obligations.
Identity Verification Partners
To fulfil our KYC obligations, bd21 may use a third-party identity verification service provider. Where used, this provider will process copies of your identity documents and compare them against reference databases solely for the purpose of verifying your identity. All such providers are contractually bound to use your data only for verification purposes and to delete it upon completion of the verification task.
Legal and Regulatory Disclosure
bd21 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction in Bangladesh where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. We will not disclose more data than is strictly required for the lawful purpose in question.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bd21's business, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will notify affected users and ensure that the receiving entity is bound by obligations equivalent to those set out in this Privacy Policy before any transfer takes place.
Data Retention
bd21 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our specific retention periods by data category are set out below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & Contact Data | 5 years after account closure | AML / KYC regulatory requirements |
| Financial Transaction Data | 7 years after the transaction date | Financial record-keeping obligations |
| KYC Verification Documents | 5 years after account closure | AML / regulatory compliance |
| Gameplay & Betting History | 3 years after last activity | Dispute resolution, responsible gaming monitoring |
| Support Communications | 2 years after resolution | Quality assurance, dispute resolution |
| Technical / Log Data | 12 months | Security monitoring and fraud detection |
| Marketing Consent Records | Until consent withdrawn + 1 year | Evidence of lawful marketing basis |
| Self-Exclusion Records | Permanently (for permanent exclusions) | To prevent re-registration during exclusion period |
When your data reaches the end of its applicable retention period, bd21 will securely delete or anonymise it in accordance with industry-standard data destruction practices. Anonymised data (data from which all personal identifiers have been irreversibly removed) may be retained indefinitely for aggregate analytics purposes.
Your Rights
As a user of the bd21 platform, you hold a number of rights in relation to your personal data. bd21 is committed to honouring these rights promptly and without undue complication. Your rights are as follows:
- Right of Access: You have the right to request a copy of all personal data that bd21 holds about you, along with information about how it is used. We will provide this information within a reasonable timeframe following a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update many data points directly through your account settings; for others, please contact our support team.
- Right to Erasure: In certain circumstances, you have the right to request that bd21 delete your personal data — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that we may not always be able to comply fully with an erasure request where we are required to retain data for legal or regulatory reasons (such as our AML obligations described in Section 7).
- Right to Restrict Processing: You have the right to ask us to pause the processing of your personal data in certain situations, for example while we investigate a dispute about the accuracy of your data.
- Right to Data Portability: Where processing is based on your consent or on a contract between us, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you wish.
- Right to Object: You have the right to object to the processing of your data where we rely on our legitimate interests as the legal basis for processing. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team or updating your account preferences. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, please contact bd21's support team via live chat on the platform or by sending a written request to [email protected]. We may need to verify your identity before processing your request. We will respond within a reasonable period, and in any event within the timeframe required by applicable data protection law. There is no fee for making a data rights request.
Data Security
bd21 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Key security measures in place at bd21 include:
- 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the bd21 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This means that even if your internet connection were intercepted, the data would be unreadable to any third party.
- Encrypted data storage: Sensitive data fields — including identity document images, payment details, and KYC records — are stored in encrypted form in our databases. Encryption keys are managed separately from the data they protect.
- Access controls: Access to personal data within bd21's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their job functions. All internal data access is logged and subject to periodic audit.
- Two-factor authentication (2FA): bd21 offers 2FA for all user accounts and mandates it for all internal staff accounts with access to user data. We strongly recommend that all bd21 users enable 2FA on their accounts for additional personal account security.
- Intrusion detection and monitoring: bd21's infrastructure is protected by automated intrusion detection systems that monitor for anomalous activity, brute-force login attempts, and other indicators of compromise, 24 hours a day.
- Regular security reviews: bd21 conducts periodic internal security reviews and is committed to addressing identified vulnerabilities promptly.
Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights or freedoms, bd21 will notify affected users without undue delay, and will take all appropriate remedial action.
You also play a role in keeping your data secure. Never share your bd21 password with anyone, enable 2FA on your account, use a strong and unique password, and contact our support team immediately if you suspect that your account has been compromised.
Children's Privacy
bd21 is strictly an adults-only platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect, solicit, or process personal data from any person under the age of 21, and we do not knowingly permit anyone under the age of 21 to register an account or access any feature of the bd21 platform.
We use age verification controls during the registration process, including date-of-birth declaration and, where necessary, documentary identity verification. These controls are designed to prevent underage individuals from accessing the platform.
If bd21 discovers or is notified that personal data has been collected from a person under 21, we will take the following immediate steps: permanently close the associated account, void any bets placed and reverse any deposits where possible, and securely delete all personal data associated with that account as quickly as our legal obligations permit.
Parents and guardians who are concerned about a minor's access to gambling content are encouraged to use reputable parental control and internet filtering tools. If you believe a minor may have registered an account on bd21, please contact our support team immediately at [email protected] so we can investigate and act without delay.
Third-Party Services
The bd21 platform integrates with a number of third-party services in order to deliver its full range of features. These include game content providers, payment processors, identity verification services, and analytics tools. Each of these third parties operates under their own privacy policies and data protection obligations.
While bd21 takes reasonable steps to ensure that all third-party partners we work with uphold appropriate data protection standards — including reviewing their data processing agreements and security certifications — bd21 cannot be held responsible for the independent data practices of third-party service providers once data is within their systems.
bd21 does not permit any third-party service provider to use the data we share with them for purposes beyond the specific service they are contracted to provide to bd21. We do not permit any third party to use your personal data for their own direct marketing, profiling, or commercial purposes without your explicit consent.
The bd21 website does not contain any third-party advertising networks, third-party social media tracking pixels, or affiliate tracking scripts that would allow external parties to build profiles of bd21 users' browsing behaviour across the wider internet.
Policy Updates
bd21 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, changes to our data processing practices, or improvements to our platform that affect how personal data is handled. When we make material changes to this policy, we will update the effective date displayed at the top of this page.
Where changes are significant — for example, where we introduce a new category of data collection or a new purpose for which existing data will be used — bd21 will notify registered users via the platform or by email to the address associated with their account. In such cases, continued use of the platform following the notification will constitute acceptance of the revised policy. If you do not accept the revised policy, you may request account closure by contacting our support team.
We encourage all users to review this Privacy Policy periodically to stay informed about how bd21 protects and uses their personal data. The current version of this policy is always available on this page. Previous versions are not publicly archived but may be provided upon written request.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to bd21's handling of your personal data, please contact us through any of the following channels:
- Email: [email protected] — plain text, not a clickable link
- Live Chat: Available 24 hours a day, 7 days a week, directly within the bd21 platform. Average response time under 5 minutes.
When submitting a data-rights request, please include your registered username and the email address associated with your account so that our team can verify your identity and process your request efficiently. We aim to respond to all privacy-related enquiries within a reasonable timeframe.
For questions specifically about responsible gaming tools, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For general platform information, visit our About Us page.
Privacy at a Glance
Six core principles that guide how bd21 handles your personal data every day.
bd21 collects only the personal data that is strictly necessary for the purpose at hand. We do not collect data speculatively or build profiles beyond what is needed to operate a safe, fair platform for Bangladeshi players.
All data in transit between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive stored data — including KYC documents and payment details — is encrypted at rest with separately managed encryption keys.
Access, correct, delete, or export your data at any time. bd21 honours all data subject rights without unnecessary friction. Submit a request via live chat or email and our team will handle it promptly and professionally.
bd21 never sells, rents, or trades your personal data to third parties for their own marketing or commercial purposes. Your data is used solely to provide and improve the bd21 platform experience.
Every category of data has a defined retention period. When that period expires, your data is securely deleted or irreversibly anonymised. We do not hold data longer than necessary, and we document our retention schedules transparently.
Where our data analysis indicates a user may be experiencing gambling-related harm, bd21 will use that insight proactively to offer support — never to exploit vulnerability. Player wellbeing always takes precedence over platform revenue.
Have Questions About Your Privacy?
Our support team is available 24/7 to answer any questions about how bd21 handles your personal data. You can also explore our other policy pages or head straight to the platform.