Privacy Policy

1. Introduction

This Privacy Policy describes how 23bd9 ("we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "your") who access our website at https://23bd9.io (the "Platform") or use our services. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

23bd9 is committed to protecting your privacy and handling your personal data with care. We recognize that trust is earned through transparent communication about our data practices, robust security measures, and respect for your privacy rights. This policy applies to all users of the Platform, including visitors, registered account holders, and any person who interacts with our services in any capacity.

If you do not agree with the terms of this Privacy Policy, you must immediately cease using the Platform and refrain from providing any personal information. For questions regarding this policy or our data practices, please contact us at the email address provided in the Contact Information section below.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a 23bd9 account, we collect personal information that you voluntarily provide, including but not limited to:

• Account Information: Full legal name, date of birth, email address, phone number, residential address, username, and password
• Identity Verification Documents: Government-issued photo identification (national ID card, passport, driver's license), proof of address (utility bills, bank statements), and proof of payment method ownership
• Payment Information: Payment method details including bKash/Nagad/Rocket mobile numbers, bank account information, credit/debit card numbers (processed through secure payment gateways), and transaction history
• Communication Data: Content of messages you send to customer support, feedback forms, survey responses, and any other communications with 23bd9 staff

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information
• Log Data: IP address, access times, pages viewed, time spent on pages, referral URLs, clickstream data, and other diagnostic data
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdictional restrictions
• Betting and Gaming Activity: Bets placed, games played, wager amounts, winnings, losses, deposit and withdrawal activity, and gameplay patterns
• Cookies and Tracking Data: Information collected through cookies, web beacons, and similar tracking technologies (see Section 6 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors (bKash, Nagad, Rocket, banks), identity verification services, fraud prevention providers, and game providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi). This information is used to verify your identity, process transactions, prevent fraud, and comply with legal obligations.

3. How We Use Your Information

23bd9 processes your personal information for the following purposes:

• Account Management: Creating and maintaining your account, authenticating your identity, and managing your user profile
• Service Provision: Enabling you to place bets, play casino games, access live dealer tables, participate in tournaments, and use all features of the Platform
• Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, and card payments; managing your account balance; and maintaining transaction records
• Identity Verification & KYC: Verifying your age (21+ requirement), confirming your identity, preventing underage gambling, and complying with Know Your Customer (KYC) regulations
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, collusion, bonus abuse, account takeovers, and other security threats
• Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, tax reporting, responding to lawful requests from authorities, and maintaining required records
• Customer Support: Responding to your inquiries, resolving technical issues, handling complaints, and providing assistance through live chat, email, and phone support
• Platform Improvement: Analyzing usage patterns, conducting research, testing new features, optimizing user experience, and improving Platform functionality
• Marketing Communications: Sending promotional offers, bonus notifications, tournament announcements, and other marketing materials (only with your consent, and you may opt out at any time)
• Responsible Gaming: Monitoring for signs of problem gambling, implementing deposit limits, facilitating self-exclusion requests, and promoting responsible gaming practices

4. Data Sharing & Disclosure

4.1 Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the Platform, including payment processors (bKash, Nagad, Rocket, banks, card networks), identity verification services, fraud detection providers, game providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi), hosting and cloud storage providers, customer support platforms, and analytics services. These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures.

4.2 Legal Requirements

We may disclose your information to law enforcement agencies, regulatory authorities, courts, or other governmental bodies when required by law, when necessary to comply with legal process, to respond to lawful requests, to enforce our Terms & Conditions, to protect our rights and property, to prevent fraud or illegal activity, or to protect the safety of our users or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving 23bd9, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

4.4 What We Do Not Do

23bd9 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertisers or data brokers. We do not use your information in ways not disclosed in this Privacy Policy.

5. Data Security Measures

23bd9 implements robust technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Strict role-based access controls ensure that only authorized personnel with legitimate business needs can access personal data. All access is logged and monitored.
• Secure Infrastructure: Our Platform is hosted on secure servers with firewalls, intrusion detection systems, and regular security updates. We conduct vulnerability assessments and penetration testing.
• Payment Security: Payment information is processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers on our servers.
• Account Security: User accounts are protected by encrypted passwords. We offer two-factor authentication (2FA) for additional security and monitor accounts for suspicious activity.
• Employee Training: All 23bd9 staff members receive training on data protection, privacy practices, and security protocols. Employees sign confidentiality agreements.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit the Platform. We use cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your experience, analyze usage patterns, and provide personalized content.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including authentication, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the Platform, which pages you visit, and which features you use. This helps us improve Platform performance and user experience.
• Functional Cookies: Remember your preferences, settings, and login information to provide a personalized experience on return visits.
• Analytics Cookies: Used by analytics services to track user behavior, measure traffic, and understand usage patterns. This data is aggregated and anonymized.

6.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may affect your ability to use certain features of the Platform. To manage cookies, consult your browser's help documentation or visit your browser's settings menu.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus 5 years after account closure to comply with anti-money laundering and financial regulations
• Transaction Records: Retained for 7 years to comply with tax and financial record-keeping requirements
• Identity Verification Documents: Retained for 5 years after account closure as required by KYC regulations
• Communication Records: Retained for 3 years to resolve disputes and improve customer service
• Marketing Consent: Retained until you withdraw consent, at which point your contact information is removed from marketing lists within 30 days

After the applicable retention period expires, we securely delete or anonymize your personal data. Anonymized data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you and information about how we process it
• Right to Rectification: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention requirements
• Right to Restriction: You may request that we limit the processing of your personal data in certain situations
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format for transfer to another service
• Right to Object: You may object to processing of your personal data for direct marketing purposes or based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected] with your account details and a description of your request. We will respond to your request within 30 days. You may also lodge a complaint with a data protection authority if you believe our processing of your personal data violates applicable law.

9. Third-Party Services

The Platform may contain links to third-party websites, services, or applications including game providers, payment processors, and social media platforms. This Privacy Policy applies only to 23bd9. We are not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any external site you visit. When you interact with third-party services through our Platform, your information may be collected by those third parties subject to their own privacy policies.

10. International Data Transfers

23bd9 operates internationally, and your personal information may be transferred to and processed in countries outside of Bangladesh. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

11. Children's Privacy

The Platform is intended for adults aged 21 and over only. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have collected data from someone under 21, we will take immediate steps to delete that information and close the associated account. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Customer Support: Available 24/7 via live chat on the Platform

We aim to respond to all privacy-related inquiries within 48 hours. For data subject access requests and other rights requests, we will respond within the timeframes required by applicable law, typically within 30 days.