Your Privacy at 29bd

This Privacy Policy ("Policy") describes how 29bd ("the Platform", "we", "us", "our"), operated at the domain 29bd.io, collects, uses, stores, shares, and protects the personal data of users ("you", "your", "Player") who access or use the 29bd website, mobile interface, betting services, casino games, and associated features. By registering an account or using the 29bd platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use 29bd.

1 Who We Are

29bd is an online betting and casino platform operating at 29bd.io and serving players in the Bangladesh market. The platform provides sports betting markets (including cricket, football, kabaddi, and other sports), casino games supplied by certified third-party studios, and associated account and payment services denominated in Bangladeshi Taka (৳ BDT).

For the purposes of this Policy, 29bd is the data controller responsible for determining how and why your personal data is processed. Any questions, requests, or complaints relating to the privacy practices described in this Policy should be directed to the 29bd data team using the contact details set out in Section 13.

2 Data We Collect

29bd collects personal data in three ways: information you provide directly, information generated automatically when you use the platform, and in limited circumstances, information received from third parties such as payment providers. The categories of data we collect are set out in the table below.

29bd does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where you voluntarily disclose health-related information in the context of a responsible gaming or self-exclusion request, in which case it is used solely for the purpose of applying the requested protective measure to your account.

3 How We Use Your Data

29bd uses collected personal data for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, and manage your account settings, preferences, and security measures.
• Service delivery: To process bets, settle markets, credit winnings, manage your platform balance, and provide access to casino games.
• Payment processing: To facilitate deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to reconcile transaction records.
• Identity verification (KYC): To verify your age (21+ requirement) and identity in order to comply with anti-money laundering and responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, money laundering, and other violations of the 29bd Terms & Conditions.
• Responsible gaming: To monitor account activity for signs of problem gambling, apply player-requested restrictions (deposit limits, session timers, self-exclusion), and fulfil our duty of care obligations.
• Customer support: To respond to your queries, complaints, and requests, and to maintain records of support interactions for quality assurance.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the design, content, and performance of the 29bd platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by SMS or email — but only where you have opted in to receive such communications. You may opt out at any time via your account dashboard notification settings.
• Legal compliance: To retain records, respond to regulatory enquiries, and fulfil any legal obligations applicable to the operation of the 29bd platform.

4 Legal Basis for Processing

29bd processes your personal data on one or more of the following legal bases depending on the purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including account management, bet processing, and payment handling.
• Legal obligation: Processing required to comply with applicable legal requirements, including identity verification, anti-money laundering checks, and record-keeping mandates.
• Legitimate interests: Processing conducted for purposes such as fraud prevention, platform security, responsible gaming monitoring, and service analytics, where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing of your data for direct marketing communications, where your explicit opt-in consent has been obtained and can be withdrawn at any time without affecting the lawfulness of prior processing.

5 Cookies & Tracking Technologies

29bd uses cookies and similar tracking technologies to operate the platform correctly, remember your session, analyse usage patterns, and improve your experience. The types of cookies used on the 29bd platform are described below:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without breaking platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, odds format, and account display options across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This data helps 29bd identify popular features, fix technical issues, and improve the overall user experience. No individual-level data is shared with analytics providers for external use.
• Security cookies: Used to detect and prevent fraudulent account access attempts, bot activity, and other security threats.

29bd does not use third-party advertising cookies or behavioural tracking cookies that share your browsing data with external advertising networks. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the 29bd platform.

6 Data Sharing

29bd does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below:

• Payment service providers: We share transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to protect your data.
• Game providers: When you play a casino game, the relevant game studio (e.g., Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe) receives a session token and game activity data necessary to operate the game. No additional personal data is shared beyond what is technically required to run the game session.
• Identity verification providers: We may share identity and document data with third-party KYC verification services to authenticate your identity during account opening or withdrawal reviews. These providers are contractually bound to use your data solely for verification purposes.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or binding regulatory direction.
• Fraud prevention networks: We may share data with anti-fraud and anti-money-laundering networks operated for the benefit of the online gaming industry to prevent multi-accounting, bonus fraud, and financial crime. Data shared in this context is limited to what is strictly necessary for the stated fraud-prevention purpose.

7 International Data Transfers

Some of 29bd's third-party service providers — including game studios and technical infrastructure providers — operate servers located outside Bangladesh. Where personal data is transferred outside Bangladesh to fulfil a service described in this Policy, 29bd ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to that which applies within Bangladesh.

Safeguards used for international transfers include contractual data processing agreements with all third-party recipients, requiring them to implement technical and organisational measures that protect your personal data from unauthorised access, loss, or misuse. 29bd does not transfer personal data to any jurisdiction where adequate protections cannot be guaranteed.

8 Data Retention

29bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve disputes or enforce agreements. The general retention periods applied by 29bd are as follows:

• Active account data: Retained for the full duration of the account's active status plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Identity verification documents: Retained for a minimum of 5 years from the date the document was submitted or from the date of account closure, whichever is later.
• Support correspondence: Retained for 3 years from the date of the last interaction in each support case.
• Marketing consent records: Retained for as long as the consent remains active and for 2 years following withdrawal of consent.
• Technical and usage logs: Retained for up to 13 months from the date of collection for analytics and security purposes, then aggregated or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

9 Your Rights

As a 29bd player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 29bd support team via live chat inside your account dashboard or by email at [email protected]. We will acknowledge your request within 48 hours and respond in full within 30 days. We will never charge a fee for exercising a data rights request unless it is manifestly unfounded or excessive.

10 Children's Privacy

29bd is strictly a platform for adults. Access to and use of the 29bd platform is prohibited for any individual under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If 29bd becomes aware that an account has been registered by a person under 21, that account will be immediately suspended, the personal data associated with it will be processed solely for the purposes of fulfilling legal obligations and resolving any resulting financial matters, and it will be deleted as soon as those obligations are satisfied.

If you have reason to believe that a minor has registered an account on 29bd, please notify us immediately at [email protected] so that we can investigate and take appropriate action promptly.

11 Security Measures

29bd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 29bd servers.
• Encrypted storage of passwords using industry-standard hashing algorithms. 29bd staff cannot read your password in plain text at any time.
• OTP two-factor authentication required for new-device logins to all 29bd accounts.
• Access controls restricting internal staff access to personal data on a strict need-to-know basis, with access logging and audit trails maintained for all data access events.
• Regular internal security reviews and vulnerability assessments of the 29bd platform infrastructure.
• Contractual data processing agreements with all third-party service providers requiring them to maintain appropriate security standards for any personal data they handle on 29bd's behalf.

While 29bd takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying 29bd immediately if you suspect that your account has been accessed without your authorisation.

12 Changes to This Policy

29bd reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date at the top of the document. Where changes are material — meaning they significantly affect how we use your personal data or reduce your privacy rights — we will notify registered players via the in-platform dashboard notification system at least 14 days before the changes take effect.

Continued use of the 29bd platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you may request account closure by contacting the 29bd support team, and any remaining verified real-money balance will be returned to your registered payment method. We encourage you to review this page periodically to stay informed about how we protect your data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 29bd, please contact us through one of the following channels. All contact details below are provided as plain text — please do not attempt to initiate formal legal proceedings without first contacting us directly to allow us to resolve the matter:

Email (data enquiries):

[email protected]

Live Chat:

Available 24/7 from within your 29bd account dashboard. This is the fastest way to reach our support team for account-specific data requests.

WhatsApp (plain text contact only):

+880 1700 000000

Our data team aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, BST UTC+6) and to provide a full resolution within 30 days. Complex requests involving large volumes of data or multi-party verification may take longer, in which case we will notify you of the expected timeline.