27bd9 Privacy Policy

Overview

Privacy at a Glance

The following six points summarise the most important aspects of how 27bd9 handles your personal data. Full details are provided in the numbered sections that follow.

Section 1

Introduction

27bd9 ("we", "us", or "our") operates the online gaming platform accessible at 27bd9.bet (the "Platform"). We are committed to protecting the privacy and security of the personal data we hold about our users ("you" or "your"). This Privacy Policy describes how 27bd9 collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the Platform, including registration, account management, deposits and withdrawals, gameplay, customer support, and marketing communications.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the 27bd9 Platform. This Privacy Policy should be read together with the 27bd9 Terms and Conditions, which are available at /terms-conditions.

Section 2

Information We Collect

27bd9 collects personal data from three primary sources: information you provide directly to us, information we collect automatically when you use the Platform, and information we receive from third-party service providers. The categories of personal data we collect are set out below.

Information You Provide Directly

When you register an account, verify your identity, make a deposit or withdrawal, or contact customer support, you provide us with the following categories of information:

• Identity data: your full legal name, date of birth, national ID number (NID), and copies of identity documents submitted for KYC verification.
• Contact data: your registered Bangladeshi mobile phone number, which serves as your primary account identifier and the channel for deposit and withdrawal transactions via bKash, Nagad, Rocket, or Upay.
• Account credentials: your chosen password (stored in hashed form only — we do not store plain-text passwords) and any security question responses you elect to set.
• Transaction data: records of all deposits and withdrawals, including transaction amounts in BDT, transaction timestamps, mobile banking reference numbers, and the payment method used.
• Support communications: the content of any messages, emails, or live chat conversations you initiate with the 27bd9 customer support team.

Information Collected Automatically

When you access or use the Platform, our systems automatically record certain technical and behavioural data about your session, including:

• Device and browser data: device type, operating system version, browser type and version, screen resolution, and unique device identifiers.
• Network and connection data: your IP address, mobile network operator, and general geolocation derived from IP (country and city level only — we do not use precise GPS data).
• Usage data: pages visited, features accessed, games played, session duration, navigation paths within the Platform, and clickstream data.
• Cookie and tracking data: session cookies, persistent cookies, and similar technologies as described in the Cookies section of this policy.

Information from Third Parties

27bd9 may receive supplementary personal data about you from third-party sources where this is necessary to operate the Platform and comply with our obligations. These sources include:

• Mobile banking providers (bKash, Nagad, Rocket, Upay): transaction confirmation data shared by your mobile banking provider when you initiate a deposit or withdrawal through the Platform.
• Identity verification and fraud prevention services: third-party KYC and anti-fraud platforms that cross-reference the identity documents you submit against authoritative data sources to verify your identity and detect fraudulent account activity.
• Analytics providers: aggregated and anonymised behavioural analytics data from platform analytics tools that help us understand how users interact with the Platform and improve our service. This data is anonymised at source and does not identify individual users.

Section 3

How We Use Your Information

27bd9 uses your personal data only for the purposes set out below. For each purpose, the table identifies the categories of personal data used and the legal basis on which we rely to process it.

Section 4

Legal Basis for Processing

27bd9 processes your personal data only where a valid legal basis exists. The four legal bases we rely upon are described below:

• Performance of contract: processing is necessary to deliver the services you requested when creating a 27bd9 account, including account registration, payment processing, and gameplay functionality.
• Legal obligation: processing is required for 27bd9 to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and financial record-keeping duties.
• Legitimate interests: processing is necessary for the purposes of 27bd9's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming enforcement, provided these interests are not overridden by your rights and freedoms.
• Consent: where we send you direct marketing communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 5

Disclosure of Your Information

27bd9 does not sell your personal data to third parties. We may share your personal data with third parties only in the limited circumstances described below. All third parties with whom we share personal data are required to handle it in accordance with applicable data protection standards and are permitted to use it only for the purposes for which it was shared.

Service Providers and Data Processors

27bd9 engages third-party service providers to perform functions on our behalf that are necessary to operate the Platform. These providers act as data processors and are contractually prohibited from using your data for any purpose other than providing services to 27bd9. Our service providers include the following categories:

• KYC and identity verification providers: third-party platforms that verify the identity documents you submit during the KYC process. These providers receive only the data necessary to perform the verification function.
• Payment processing infrastructure: technical infrastructure providers that facilitate the secure transmission of transaction data between the Platform and mobile banking services (bKash, Nagad, Rocket, Upay).
• Cloud hosting and infrastructure: providers of the server infrastructure, databases, and cloud computing services on which the Platform operates. These providers store data only within secure, access-controlled environments.
• Anti-fraud and security monitoring: providers of fraud detection, risk scoring, and security monitoring tools that analyse platform activity to identify suspicious behaviour and protect 27bd9 and its users.

Disclosure Required by Law

27bd9 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, a valid court order, or a lawful regulatory demand. In such cases, 27bd9 will disclose only the minimum personal data necessary to comply with the legal requirement and will, where legally permitted to do so, notify you that a disclosure has been made.

Section 6

Payment Data and Mobile Banking Privacy

All financial transactions on the 27bd9 Platform are processed in Bangladeshi Taka (BDT) via mobile banking services including bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, 27bd9 receives a transaction confirmation from your mobile banking provider containing your mobile number, transaction amount, and a unique transaction reference. 27bd9 does not receive, store, or have access to your mobile banking PIN, account password, or full account balance. The mobile banking transaction itself takes place entirely within your mobile banking application and is governed by the privacy policy of the relevant mobile banking provider.

27bd9 retains transaction records for the period required under applicable financial record-keeping regulations. These records are used exclusively for account management, withdrawal verification, dispute resolution, and regulatory compliance purposes. Transaction data is never shared with third parties for commercial or marketing purposes.

Section 7

Cookies and Tracking Technologies

27bd9 uses cookies and similar tracking technologies to operate the Platform, maintain your session, analyse usage patterns, and improve the overall user experience. A cookie is a small text file placed on your device by the Platform when you visit. The cookies used on the 27bd9 Platform fall into four categories:

Types of Cookies We Use

• Essential cookies: strictly necessary for the Platform to function. They maintain your login session, store your language and display preferences, and enable core security features including CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
• Analytical cookies: used to collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where users encounter errors. This data is used solely to improve Platform performance and is never used to identify individual users.
• Functional cookies: remember your preferences and settings (such as your chosen display language) to provide a more personalised experience across sessions. Disabling these cookies may result in a reduced user experience.
• Security cookies: support 27bd9's fraud detection and account security systems by flagging unusual session behaviour, such as logins from unrecognised devices or multiple rapid account access attempts from different IP addresses.

You can control cookie behaviour through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when a new cookie is set. Please note that disabling essential cookies will impair your ability to log in and use core Platform features. 27bd9 does not use third-party advertising or retargeting cookies.

Section 8

Data Retention

27bd9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods that apply to the main categories of personal data we hold are set out below:

• Account data and KYC documents: retained for the full duration of your account and for a minimum period of five (5) years following permanent account closure, to comply with financial record-keeping and anti-money laundering obligations.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial legislation and responsible gaming audit requirements.
• Support communications: retained for two (2) years from the date of the most recent communication in the relevant support thread, after which they are archived or deleted unless they relate to an ongoing dispute or legal proceeding.

When the applicable retention period expires, 27bd9 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where complete deletion is not technically possible (for example, data stored in backup archives), we will ensure the data is isolated from active processing and scheduled for deletion at the next available opportunity.

Section 9

Data Security

27bd9 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include transport layer security (TLS/SSL) encryption for all data transmitted between your device and our servers, encrypted storage for sensitive data including KYC documents and hashed password credentials, role-based access controls that restrict employee access to personal data on a strict need-to-know basis, automated intrusion detection and anomaly monitoring systems, and regular security reviews of our infrastructure and third-party integrations.

Despite the security measures we implement, no method of electronic transmission or storage is 100% secure. 27bd9 cannot guarantee absolute security of your personal data. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 27bd9 will notify you without undue delay using the contact details registered to your account.

Section 10

Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data 27bd9 holds about you. To exercise any of these rights, please contact us at [email protected] with your request. 27bd9 will respond to all valid data subject requests within a reasonable period, typically within thirty (30) calendar days of receipt.

• Right of access: you have the right to request a copy of the personal data 27bd9 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to rectification: if any personal data 27bd9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. You may also update certain account information directly through your account settings dashboard after login.
• Right to erasure: in certain circumstances, you have the right to request that 27bd9 delete the personal data it holds about you. This right is subject to 27bd9's legal obligations to retain certain data categories (e.g., transaction records and KYC documents required under financial regulations).
• Right to restrict processing: you have the right to request that 27bd9 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent (for example, receipt of marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] clearly identifying the right you wish to exercise and providing sufficient information for us to verify your identity and locate your account. 27bd9 will not charge a fee for processing a data subject request unless the request is manifestly unfounded or excessive, in which case a reasonable fee may be applied.

Section 11

Children's Privacy

The 27bd9 Platform is not intended for, and must not be used by, persons under the age of 21. 27bd9 does not knowingly collect personal data from persons under 21 years of age. Age verification is enforced at the point of registration through our KYC process. If 27bd9 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately, the associated account will be permanently closed, and any funds associated with that account will be forfeited in accordance with our Terms and Conditions. If you believe that 27bd9 may have inadvertently collected data from a person under 21, please notify us immediately at [email protected].

Section 12

Changes to This Privacy Policy

27bd9 reserves the right to update or modify this Privacy Policy at any time. The effective date of the most recent revision is displayed at the top of this document. Where a proposed change materially affects how we process your personal data or reduces your privacy rights, we will provide advance notice via the contact details registered to your account before the change takes effect, and will obtain fresh consent where required by applicable law.

Your continued use of the 27bd9 Platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised Privacy Policy, you must cease using the Platform and may request account closure by contacting 27bd9 support. We encourage you to review this Privacy Policy periodically to stay informed about how 27bd9 protects your personal information.

Section 13

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how 27bd9 handles your personal data, please contact our data protection team. All privacy-related queries and data subject requests are handled by the 27bd9 support team and will receive a response within thirty (30) calendar days. Please include your registered mobile number and a brief description of your query or request to help us locate your account and respond efficiently.