bd29 Privacy Policy — How We Handle Your Data

01 Introduction

bd29 is an offshore online betting and casino platform serving adult players in Bangladesh and other permitted jurisdictions. We are committed to handling all personal data with the highest standards of care, security, and transparency. This Privacy Policy applies to all personal data collected through the bd29 website at bd29.io, including through account registration, player activity, payment processing, customer support interactions, and any other point of contact between you and bd29.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between documents, the Terms & Conditions take precedence, except where this Privacy Policy sets out additional protections for your personal data.

If you have questions about how bd29 uses your data, please contact our support team at [email protected] before submitting any personal information.

02 Data Controller

For the purposes of applicable data protection legislation, bd29 acts as the data controller in respect of all personal data collected through the platform. This means bd29 determines the purposes for which personal data is collected and the manner in which it is processed. bd29 operates as an offshore entity; the specific legal jurisdiction governing data processing is set out in the Governing Law section of our Terms & Conditions.

Where bd29 engages third-party service providers to process data on its behalf — such as payment processors, KYC verification providers, and game software suppliers — those providers act as data processors and are contractually obligated to process data only on bd29's documented instructions and in accordance with applicable data protection standards.

03 Data We Collect

bd29 collects personal data across several categories. The table below summarises each category and the specific data types involved:

3.1 Data You Are Not Required to Provide

Certain data fields — such as phone number and city of residence — are optional during registration. Providing them may improve your experience (e.g., faster support response times) but withholding them will not prevent you from accessing the core features of bd29, unless that data is specifically required by KYC processes triggered at the point of withdrawal.

04 How We Collect Data

bd29 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support;
• Automated collection: Technical and behavioural data collected automatically as you navigate and interact with the bd29 platform, including through cookies and server logs;
• Third-party sources: Identity verification data returned by our KYC/AML service providers after you submit documents; transaction confirmation data returned by payment gateways such as bKash, Nagad, Rocket, and Upay; and fraud-risk scores provided by third-party fraud prevention tools;
• Public sources: In limited circumstances related to AML compliance, bd29 may reference publicly available information to verify the identity or legitimacy of a player or transaction.

05 Legal Basis for Processing

bd29 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to provide the bd29 service to you under our Terms & Conditions — including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with AML, KYC, and other applicable regulatory or legal obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and customer support quality assurance — where those interests are not overridden by your rights and interests;
• Consent: Where we send optional marketing communications or use non-essential cookies, we rely on your freely given consent, which you may withdraw at any time.

06 How We Use Your Data

6.1 Account Management

Your identity and contact data are used to create and maintain your bd29 account, authenticate your bd29 login sessions, send you transaction confirmations, and communicate important platform updates. bd29 does not share account credentials with any third party.

6.2 Payment Processing

Financial data is used exclusively to process deposits and withdrawals via your chosen payment method — including bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, and Mastercard — and to investigate and resolve any payment disputes. bd29 does not store full card numbers or full mobile banking PINs.

6.3 Identity Verification & AML Compliance

bd29 is committed to preventing money laundering and the financing of illegal activity. Identity and financial data are used to conduct KYC checks at the point of withdrawal and whenever transaction patterns trigger our internal AML monitoring thresholds. Verified KYC data is retained for a minimum of five years to satisfy record-keeping obligations.

6.4 Responsible Gaming

Behavioural data — including session duration, wagering frequency, and deposit patterns — is monitored to identify players who may be showing signs of problem gambling. This data is used to trigger responsible gaming interventions such as limit recommendations and, where necessary, account cooling-off measures. See our Responsible Gaming Policy for full details.

6.5 Platform Security & Fraud Prevention

Technical data, including IP addresses and device fingerprints, is used to detect unauthorised account access, bot activity, multi-accounting, and payment fraud. bd29 reserves the right to suspend accounts where technical data indicates a high risk of fraudulent activity, pending investigation.

6.6 Customer Support

Communications data from your support interactions is retained to facilitate dispute resolution, quality assurance reviews, and staff training. Support records are not shared outside of bd29 and its contracted support service providers.

6.7 Marketing Communications

With your consent, bd29 may send you promotional emails regarding new games, seasonal offers (such as Eid or BPL season promotions), and deposit bonuses. You may withdraw consent and unsubscribe from marketing communications at any time by following the unsubscribe link in any promotional email or by contacting support.

07 Sharing Your Data

bd29 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and cryptocurrency network providers receive only the transaction data necessary to process your deposit or withdrawal;
• KYC/AML service providers: Identity verification documents are shared with our contracted KYC provider for the sole purpose of confirming your identity and age;
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and bet data necessary to deliver game sessions and calculate outcomes. They do not receive your name, email, or payment details;
• Fraud prevention tools: Technical identifiers (IP address, device hash) may be shared with contracted fraud prevention services;
• Legal authorities: Where required by applicable law, court order, or regulatory instruction, bd29 may be obligated to disclose personal data to competent authorities. We will notify you of such disclosure unless prohibited from doing so by law.

08 Cookies & Tracking

8.1 What Cookies bd29 Uses

bd29 uses a limited set of cookies to operate the platform effectively. These fall into three categories:

• Essential cookies: Required for core platform functionality including session management, bd29 login state, CSRF protection, and load balancing. These cookies cannot be disabled without breaking platform functionality;
• Analytics cookies: Used to understand aggregate traffic patterns, page performance, and feature usage — without tracking individual identities. bd29 uses privacy-respecting analytics and does not share raw analytics data with third parties;
• Fraud detection cookies: Used to detect and prevent multi-accounting, bot activity, and payment fraud by associating sessions with device fingerprints.

8.2 What We Do Not Use

bd29 does not use third-party behavioural advertising cookies, social media tracking pixels, retargeting cookies, or cross-site tracking scripts. Your browsing activity on bd29 is not shared with advertising networks.

8.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in to your bd29 account and using core platform features. Browser-level cookie management instructions vary by browser — please consult your browser's help documentation for guidance.

09 Data Retention

bd29 retains personal data for the periods set out below. At the end of each retention period, data is securely deleted or anonymised unless a longer period is required by a specific legal obligation.

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years after account closure, to satisfy AML and KYC record-keeping obligations;
• Transaction records: Retained for a minimum of five years after the date of each transaction;
• Support communications: Retained for three years after the resolution of the relevant query or dispute;
• Technical and device data: Retained for twelve months from the date of collection, after which it is anonymised or deleted;
• Marketing consent records: Retained for the duration of your consent and for two years after you withdraw consent, as evidence of your prior consent status.

10 Security Measures

bd29 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bd29's servers;
• Encryption at rest for all sensitive account and financial data stored in bd29's databases;
• Role-based access controls ensuring that only authorised personnel with a documented operational need can access personal data;
• Multi-factor authentication requirements for all bd29 staff with access to player data systems;
• Regular security audits and penetration testing conducted by contracted third-party security specialists;
• Automated monitoring for unusual access patterns, data exfiltration attempts, and credential-stuffing attacks.

While bd29 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bd29 login credentials and for notifying us immediately at [email protected] if you suspect your account has been compromised.

11 Your Rights

Subject to applicable law and to the extent consistent with our regulatory obligations, you have the following rights with respect to your personal data held by bd29:

• Right of access: You may request a copy of all personal data bd29 holds about you;
• Right to rectification: You may request that inaccurate or incomplete data be corrected. For basic account details, you can update these directly via your account settings;
• Right to erasure: You may request deletion of your personal data where we have no ongoing legal obligation to retain it. Note that AML/KYC retention obligations will prevent immediate erasure of identity and financial data;
• Right to restrict processing: You may request that bd29 restrict processing of your data in certain circumstances, such as while you contest the accuracy of your data;
• Right to data portability: You may request that bd29 provide your data in a structured, machine-readable format where technically feasible;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on bd29's legitimate interests where your individual circumstances warrant it.

12 Protection of Minors

bd29 is strictly prohibited to individuals under the age of 21. We do not knowingly collect, process, or retain the personal data of anyone under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the relevant data, and return any funds held in that account.

If you believe that a minor has registered on bd29, please notify us immediately at [email protected] with as much detail as possible so that we can take swift action.

13 International Data Transfers

As an offshore platform, bd29 operates infrastructure and engages service providers that may be located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, bd29 takes steps to ensure that an appropriate level of data protection is in place, including through:

• Contractual data processing agreements incorporating internationally recognised data protection clauses;
• Use of service providers that maintain recognised data security certifications;
• Internal data transfer policies that restrict cross-border data flows to the minimum necessary for operational purposes.

By registering and using bd29, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh for the purposes described in this Privacy Policy.

14 Policy Changes

bd29 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes, we will publish the updated policy on this page with a revised "Last Updated" date. Where the changes significantly affect your rights or how we use your data, we will make reasonable efforts to notify registered players by email prior to the changes taking effect.

Your continued use of bd29 following the publication of any updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this page periodically to remain informed of how bd29 protects your data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bd29's data practices, please contact our support team. We are available around the clock and will respond to all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Subject Line for Data Requests: "Data Rights Request"

For responsible gaming related concerns — including requests for self-exclusion, deposit limits, or account cooling-off periods — please visit our dedicated Responsible Gaming page.