bd21 Privacy Policy
How We Collect, Use & Protect Your Data
At bd21, your privacy is not an afterthought — it is a core platform commitment. This Privacy Policy explains precisely what personal information we collect from players across Bangladesh, how we use it, who we may share it with, and the rights you hold over your own data. Please read this document carefully before using our services.
Information We Collect
bd21 collects personal data from players in Bangladesh through several channels — registration forms, account usage, payment processing, and your general interaction with the platform. We collect only the data that is necessary to deliver our services, fulfil our legal obligations, and improve your experience on the platform. This section details the specific categories of personal data we collect and the circumstances under which each category is gathered.
1.1 Registration Data
When you create a bd21 account, you are required to provide your full legal name, date of birth, residential address in Bangladesh, a valid mobile phone number, and a unique username and password of your choosing. This registration data is essential for identity verification, account management, and compliance with our Know Your Customer (KYC) obligations. Providing false or incomplete registration information constitutes a breach of our Terms & Conditions.
1.2 Identity Verification Data
To comply with anti-money laundering (AML) and responsible gaming requirements, bd21 may request copies of government-issued identity documents such as your National ID Card or passport, proof of address documents such as a utility bill or bank statement issued within the preceding three months, and proof of the payment method used on the platform. These documents are processed securely and are used solely for verification purposes.
1.3 Financial & Transaction Data
bd21 records all deposit and withdrawal transactions associated with your account, including the payment method used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the amounts transacted in Bangladeshi Taka (৳), and the timestamps of each transaction. We do not store full card numbers or bKash PINs — sensitive payment credentials are handled directly by our authorised payment processors and are subject to their own data protection policies.
1.4 Behavioural & Usage Data
bd21 automatically collects data about how you use the platform. This includes the games and betting markets you access, the frequency and duration of your sessions, your betting and wagering patterns, the device and browser you use to access bd21, your IP address, and approximate geolocation data derived from your IP address. This data is used to personalise your experience, detect fraud, enforce our responsible gaming policies, and improve the overall platform.
1.5 Communications Data
If you contact our support team, submit a feedback form, or communicate with bd21 through any channel, we retain records of those communications — including the subject matter, the date and time, and any information you voluntarily provide within the communication. This data is used to manage support queries, improve our service quality, and maintain accurate records of player interactions.
Voluntary Data: Certain data you provide to bd21 is entirely voluntary — for example, details you share when responding to a player survey or when participating in a promotional competition. Declining to provide voluntary data will not affect your ability to use the core bd21 platform, though it may affect your eligibility for specific promotions that require that information.
Data Categories at a Glance
- Registration & identity information
- KYC verification documents
- Financial transaction records
- Device & IP address data
- Betting and wagering history
- Support communication records
- Cookie and session tracking data
Document Details
Version: v3.1
Effective: Jan 2026
Language: English
Market: Bangladesh
Currency: BDT (৳)
Contact: [email protected]
How We Use Your Data
bd21 uses the personal data we collect for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The principal lawful bases on which we process your personal data are: (a) the performance of our contract with you as a registered player; (b) compliance with applicable legal obligations; (c) our legitimate interests in operating a safe and commercially viable platform; and (d) your explicit consent where required for specific processing activities.
2.1 Account Management & Service Delivery
Your registration and identity data is processed to create and maintain your bd21 player account, authenticate your login sessions, process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and communicate important account notices to you. Without this processing, we cannot provide the bd21 service to you.
2.2 Fraud Prevention & Security
bd21 uses your IP address, device fingerprint, transaction history, and behavioural data to detect and prevent fraudulent activity, money laundering, multi-accounting, and other forms of platform abuse. Our automated fraud detection systems flag unusual patterns for manual review by our compliance team. This processing is carried out on the basis of our legitimate interest in maintaining a secure platform for all players.
2.3 Responsible Gaming Compliance
bd21 is committed to responsible gambling. We analyse your wagering patterns, deposit frequency, and session duration data to identify players who may be exhibiting signs of problem gambling. Where our systems or support team identify such signs, we may reach out to offer responsible gaming tools, including deposit limits, session time-outs, or self-exclusion. This processing is a legal obligation and a core ethical commitment of the bd21 platform. All responsible gaming-related processing is conducted in English.
2.4 Personalisation & Platform Improvement
Behavioural and usage data collected during your sessions on bd21 is used to personalise your experience — for example, by surfacing cricket betting markets or slot game categories that align with your playing preferences. Aggregated, anonymised usage data is also used for internal analytics to improve platform performance, game selection, and the overall user experience for players across Dhaka, Chittagong, Sylhet, and beyond.
2.5 Marketing Communications
Where you have provided explicit consent to receive marketing communications, bd21 may send you promotional offers, bonus notifications, and tournament announcements by SMS or email. You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.
No Data Sale: bd21 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any data sharing with third parties is limited to what is strictly necessary for service delivery, legal compliance, or fraud prevention — as detailed in Section 4 of this Privacy Policy.
Processing Purposes Summary
| Purpose | Legal Basis |
|---|---|
| Account creation | Contract |
| Payments | Contract |
| KYC / AML | Legal duty |
| Fraud detection | Legitimate interest |
| Responsible gaming | Legal duty |
| Marketing | Consent |
| Analytics | Legitimate interest |
Data Sharing & Third Parties
bd21 does not share your personal data with third parties except in the limited circumstances described in this section. All third parties with whom bd21 shares personal data are required to process that data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.
4.1 Payment Processors
To facilitate deposits and withdrawals, bd21 shares your name, registered mobile number, and transaction details with authorised payment service providers including bKash, Nagad, Rocket, Upay, and card network operators such as Visa and Mastercard. These processors are independent data controllers and are bound by their own privacy policies and applicable financial regulations. bd21 is not responsible for the data practices of these third-party payment processors once data has been transmitted to them for the purpose of completing a transaction.
4.2 Identity Verification Services
bd21 may use third-party KYC verification service providers to validate the identity documents you submit during the account verification process. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose. All KYC verification service providers used by bd21 operate under strict data processing agreements.
4.3 Game Software Providers
Certain technical data — such as your session token and game preferences — is shared with our licensed game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable seamless game delivery. These providers do not receive your full personal profile and process only the minimum data necessary to deliver their game content within the bd21 platform environment.
4.4 Legal & Regulatory Disclosure
bd21 may be required to disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally obliged to do so, or where disclosure is necessary to protect the rights, property, or safety of bd21, its players, or the public. In such cases, bd21 will disclose only the minimum personal data necessary to fulfil the legal requirement.
4.5 Business Transfers
In the event that bd21 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity by a notice on the bd21 platform or by email to your registered address before the transfer takes effect.
Third-Party Recipients
- bKash, Nagad, Rocket, Upay (payment processing)
- Visa & Mastercard networks (card processing)
- KYC verification service providers
- Game studios (session tokens only)
- Law enforcement (when legally required)
We Will Never
- Sell your data to advertisers
- Share your data with unvetted third parties
- Use your data for profiling beyond platform use
- Transfer your data without a legal basis
Data Retention & Security
bd21 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, accounting, or reporting obligations. When personal data is no longer required, we apply secure deletion or anonymisation procedures to ensure it cannot be reconstructed or linked back to you.
5.1 Retention Periods
Account registration data and KYC verification documents are retained for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements. Financial transaction records are retained for a minimum of five years from the date of the transaction. Betting and wagering history is retained for three years from the date of account closure. Support communication records are retained for two years from the date of the last interaction.
5.2 Security Measures
bd21 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data fields at rest, role-based access controls limiting internal access to personal data on a strictly need-to-know basis, regular security audits and penetration testing, and automated intrusion detection systems.
5.3 Data Breach Procedures
In the unlikely event of a personal data breach, bd21 maintains an incident response procedure that includes prompt internal escalation, assessment of the nature and scope of the breach, containment measures, and notification to affected players where the breach is likely to result in a high risk to their rights and freedoms. We will communicate any such notification to you in English via your registered email address as quickly as practically possible.
Your Role in Security: While bd21 implements robust server-side security, you also play an important role in keeping your account data secure. Use a strong, unique password for your bd21 account, enable two-factor authentication where available, never share your login credentials with anyone, and contact our support team immediately at [email protected] if you suspect your account has been compromised.
Retention Schedule
| Data Type | Retention |
|---|---|
| KYC documents | 5 years |
| Transaction records | 5 years |
| Betting history | 3 years |
| Support comms | 2 years |
| Analytics data | Anonymised after 12 months |
| Cookie data | Session or up to 12 months |
Your Privacy Rights
As a bd21 player, you hold a range of rights with respect to the personal data we hold about you. bd21 is committed to honouring these rights promptly and without unnecessary obstacle. All requests to exercise your data rights should be submitted in English to our support team at [email protected], and will be processed within 30 days of receipt. If your request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.
6.1 Identity Verification for Rights Requests
To protect the privacy of our players, bd21 may request proof of identity before processing any data rights request. This is to ensure that we do not disclose personal data to, or delete personal data at the request of, an unauthorised third party. The identity verification step does not affect your substantive right — it is a protective measure applied equally to all rights requests regardless of the player's account status.
6.2 Limitations on the Right to Erasure
The right to erasure is not absolute. bd21 may be required to retain certain categories of personal data beyond your request — most notably financial transaction records and KYC documentation — in order to comply with legal retention obligations under anti-money laundering regulations. Where we are unable to fulfil an erasure request in full, we will clearly explain which data we are retaining, on what legal basis, and for how long.
6.3 Complaints
If you are not satisfied with bd21's response to a data rights request, or if you believe that bd21 has processed your personal data in a manner inconsistent with this Privacy Policy, you have the right to raise a complaint with the relevant data protection authority. bd21 encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concerns before a formal regulatory complaint is made.
How to Submit a Request
- Email [email protected] with subject line "Data Rights Request"
- State clearly which right you wish to exercise
- Provide your registered username and mobile number
- Attach proof of identity if requested
- Receive acknowledgement within 3 business days
- Request fulfilled within 30 days of receipt
Children & Minors
The bd21 platform is strictly intended for adults aged 18 years and above. bd21 does not knowingly collect personal data from any individual under the age of 18. Our registration process includes a date-of-birth verification step, and our KYC procedures are designed to identify and prevent minors from accessing the platform.
7.1 Discovery of Minor's Data
If bd21 discovers or is notified that personal data has been collected from an individual who was under the age of 18 at the time of collection, we will immediately suspend the associated account, delete the relevant personal data as quickly as practicably possible (subject to any overriding legal retention obligations), and refund any deposits made via the minor's payment method to the registered payment source.
7.2 Parental & Guardian Responsibility
Parents and legal guardians are responsible for supervising their children's internet usage and ensuring that minors do not gain access to gambling platforms such as bd21. If you believe a minor has registered or is using a bd21 account, please contact our support team immediately at [email protected] so that we can take prompt action. bd21 recommends that parents and guardians make use of parental control software to restrict access to online gambling sites on shared devices.
18+ Only — Strict Age Policy: bd21 operates a zero-tolerance policy on underage gambling. Any account found to belong to a player under the age of 18 will be permanently closed immediately upon discovery, regardless of the account's balance or activity history. We take our duty of care to minors extremely seriously and encourage all adults in Bangladesh to keep their bd21 login credentials private and inaccessible to children in their household.
Age Restriction Summary
- Minimum age to register: 18 years
- Date of birth verified at registration
- KYC documents confirm player age
- Minor accounts closed immediately on discovery
- Deposits refunded to payment source
- Parents: contact [email protected] to report underage access
Policy Updates & Contact
bd21 reviews this Privacy Policy regularly and may update it from time to time to reflect changes to our data practices, applicable legal requirements, or the services we offer. All updates will be published on this page with a revised effective date. Where changes are material — meaning they could significantly affect your rights or how we use your data — bd21 will notify you directly by email to your registered address or by a prominent notice on the platform.
8.1 Continued Use as Acceptance
Your continued use of the bd21 platform after a revised Privacy Policy has been published and you have been notified of its existence constitutes your acceptance of the updated policy. If you do not agree with any revised terms, you should stop using the platform and request account closure in accordance with the process described in our Terms & Conditions. bd21 will retain your data for the legally required retention periods following account closure regardless of the reason for closure.
8.2 Contacting bd21 About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bd21 holds about you, please contact our dedicated data privacy team in English. Our support team is available 24 hours a day, 7 days a week, and all privacy-related enquiries are handled with priority. We aim to respond to all privacy-related communications within 5 business days Bangladesh Standard Time (BST, UTC+6).
All written privacy communications should be directed to: [email protected] with the subject line "Privacy Enquiry — [Your Username]". Please include your registered username, the mobile number associated with your bd21 account, and a clear description of your enquiry or request so that our team can assist you as efficiently as possible.
Governing Language: This Privacy Policy is written and published in English. In the event of any conflict between this English-language version and any translated summary or excerpt, the English-language version shall prevail. bd21's official communication language for all privacy matters is English, and all formal responses from the bd21 privacy team will be issued in English.
Policy Change Notifications
- Material changes notified by email
- Platform banner displayed for 14 days
- Revised effective date shown at top of page
- Previous versions available on request
- Continued use constitutes acceptance
Privacy Contact Details
Email: [email protected]
Hours: 24 / 7 / 365
Language: English
Response: Within 5 business days
Timezone: BST (UTC+6)
Why Your Privacy Is Safe With bd21
Every privacy measure at bd21 is designed with Bangladesh's players in mind — combining technical security, transparent data practices, and genuine respect for your personal information.
256-Bit SSL Encryption
Every byte of data exchanged between your device and bd21's servers is protected by bank-grade 256-bit SSL/TLS encryption. Your personal details, payment information, and login credentials are fully encrypted in transit at all times.
No Data Selling — Ever
bd21 has a firm, unconditional policy against selling, renting, or trading player personal data to advertisers or data brokers. Your information is used solely to operate your account and deliver the bd21 service — nothing more.
Player-Controlled Data Rights
You hold meaningful rights over your personal data at bd21 — including the right to access, correct, restrict, port, or delete your information. Our dedicated support team processes all rights requests in English within 30 days.
Strict KYC & AML Controls
Our robust Know Your Customer process protects you and the platform equally. By verifying every player's identity, bd21 prevents fraud, money laundering, and unauthorised account access — keeping the platform safe for all Bangladeshi players.
Minimal Data Collection
bd21 applies a data minimisation principle — we collect only the personal data that is genuinely necessary for service delivery and legal compliance. We do not build unnecessary data profiles or collect speculative information about our players.
English-Language Transparency
This entire Privacy Policy is written in plain, clear English — not dense legal jargon. bd21 believes every player in Bangladesh deserves to fully understand how their personal data is handled, in a language they can read and trust.
Your Data Is Protected. Now Enjoy bd21.
With your privacy fully safeguarded, explore everything bd21 has to offer — from live cricket betting and premium slots to our exclusive VIP casino experience. 18+ only. Please gamble responsibly.