29bd9 Privacy Policy

Data We Collect

When you interact with the 29bd9 platform — whether by registering an account, making a deposit, placing a wager, or contacting support — we collect certain categories of personal data. The table below summarises the main categories, specific data points within each category, and the lawful basis on which we process them.

Special category data: 29bd9 does not intentionally collect special category personal data (such as health information, biometric data, or data about religious beliefs) except where this is strictly required for responsible gaming assessments or where you have voluntarily provided such information in the context of a self-exclusion or problem gambling support request.

How We Use Your Data

29bd9 uses the personal data we collect for a defined set of purposes. We do not use your data for any purpose that is incompatible with those set out below. The primary purposes for which your data is processed are as follows:

• Account creation and management: To register your player account, verify your identity, manage your account settings, and communicate essential account-related information to you.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks; to credit and debit your account balance accurately; and to provide access to casino games, sports betting markets, and promotional offers.
• Identity and age verification: To conduct Know Your Customer (KYC) checks and confirm that you meet the minimum age requirement of 18 years, in compliance with applicable regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and any other activity that may violate these Terms or applicable law.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits or cooling-off periods that you or our responsible gaming team have put in place.
• Customer support: To respond to your queries, complaints, and feedback promptly and accurately, and to maintain records of communications for quality assurance and dispute resolution.
• Legal compliance: To fulfil obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection legislation.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, usability, and content of the 29bd9 platform. Individual player data is not used for this purpose without anonymisation.
• Marketing communications: To send you promotional offers, bonus notifications, and personalised recommendations — but only where you have not opted out of marketing communications. You may opt out at any time via your account settings or by contacting [email protected].

Cookies & Tracking

The 29bd9 platform uses cookies and similar tracking technologies to ensure the website functions correctly, to improve your experience, and to understand how players interact with our services. A cookie is a small text file placed on your device by a web server. It cannot run programs or deliver viruses, and it is not tied to personally identifiable information unless you are logged in.

We use the following categories of cookies on the 29bd9 platform:

• Strictly necessary cookies: These are essential for the platform to operate. They enable core functions such as maintaining your login session, remembering your language and currency preferences, and securing your account during a browsing session. These cookies cannot be disabled without significantly impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the 29bd9 platform — for example, which pages are visited most frequently, how long sessions last, and where users navigate from. This data helps us identify technical issues and improve platform performance. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies remember your preferences and personalisation choices — such as your preferred game lobby view or notification settings — so that you do not need to re-enter them on each visit.
• Targeting and marketing cookies: These cookies track your browsing behaviour across sessions in order to deliver promotional content that is relevant to your interests. They are used only where you have not opted out of marketing communications.

Managing cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling certain categories of cookies — particularly strictly necessary cookies — may prevent some parts of the 29bd9 platform from functioning as intended. Refer to your browser's help documentation for guidance on cookie management.

Session tracking: In addition to cookies, 29bd9 uses server-side session tokens to maintain the security of your authenticated session. These tokens expire automatically when you log out or after a period of inactivity. They are not accessible to third-party scripts and are transmitted only over encrypted HTTPS connections.

Data Sharing & Disclosure

29bd9 treats your personal data with strict confidentiality. We do not sell, rent, or trade your personal information to any third party. However, in order to deliver our services effectively and to comply with applicable legal requirements, we do share certain data with the following categories of recipients:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy and data security policies.
• Identity verification partners: Third-party KYC service providers receive copies of identity documents and related data solely for the purpose of verifying your identity and age as part of our mandatory compliance procedures.
• Game technology providers: Our game studio partners — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive anonymised session and wagering data necessary to deliver and audit game outcomes. They do not receive your full personal profile.
• Fraud prevention services: Specialist fraud detection platforms may receive technical data (IP addresses, device fingerprints, login patterns) to help identify and prevent fraudulent activity on the 29bd9 platform.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, 29bd9 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will notify affected players of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 29bd9 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

International transfers: Some of our technology and payment partners operate servers outside Bangladesh. Where personal data is transferred internationally, 29bd9 ensures that appropriate safeguards are in place — such as contractual clauses or equivalent data protection standards — before any transfer occurs.

Data Retention

29bd9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account relationship and for a defined period after account closure.
• Transaction and financial records: In accordance with anti-money laundering obligations, financial transaction records — including deposit and withdrawal histories and associated identity verification documents — are retained for a minimum of five years from the date of the last transaction or from the date of account closure, whichever is later.
• KYC and identity documents: Copies of identity documents submitted for KYC verification are retained for the period required by applicable AML and regulatory obligations, typically five years after account closure.
• Support communications: Records of support interactions and complaint correspondence are retained for three years after the resolution of the relevant matter, to facilitate dispute resolution and quality assurance.
• Marketing data: If you have opted out of marketing communications, a suppression record of your opt-out preference is retained indefinitely to ensure that marketing messages are not sent to you in future.
• Technical logs: Server logs, IP records, and device data used for security and fraud prevention purposes are retained for up to 12 months, after which they are automatically deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Data Security

29bd9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• Encryption in transit: All communications between your browser or app and 29bd9 servers are protected by TLS 1.2 or TLS 1.3 encryption, using 256-bit cipher suites. This ensures that your login credentials, payment details, and personal data cannot be intercepted during transmission.
• Encryption at rest: Sensitive data stored on 29bd9 servers — including identity documents, KYC records, and payment references — is encrypted at rest using industry-standard encryption protocols.
• Password security: Player passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with per-account salting, ensuring that even in the unlikely event of a data breach, raw passwords cannot be retrieved.
• Access controls: Access to player data within 29bd9's internal systems is strictly limited to authorised personnel who require that access to perform their job functions. Role-based access controls and multi-factor authentication are enforced for all staff with access to production data.
• Regular security testing: 29bd9 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a confirmed data security incident that is likely to result in a risk to your rights and freedoms, 29bd9 will notify affected players without undue delay and will take all reasonable steps to contain and remedy the breach.

Your Privacy Rights

As a player on the 29bd9 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request. We will acknowledge receipt within 48 hours and will provide a substantive response within 30 days. In some cases — particularly for complex or high-volume requests — this period may be extended by up to an additional 30 days, and we will inform you if this applies.

• Right of access: You have the right to request a copy of the personal data that 29bd9 holds about you, along with information about how that data is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data held by 29bd9 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most personal details directly through your account settings; for changes to identity documents or KYC records, please contact support.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis for processing applies. Note that we may be required to retain certain data for legal compliance purposes (such as AML records) even after an erasure request.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we investigate a dispute about its accuracy or while a complaint is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though 29bd9 may be entitled to continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

Identity verification for rights requests: To protect player privacy, 29bd9 will verify your identity before processing any data rights request. We may ask you to confirm information that only the registered account holder would know, or to provide a copy of a government-issued identity document, before acting on your request.

No fees: 29bd9 does not charge a fee for processing data rights requests except in cases where a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply. We will inform you of any applicable fee before proceeding.

Contact & Updates

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which 29bd9 handles your personal data, please contact our support team in the first instance:

Email (plain text — not a link): [email protected]
Support hours: 24/7 via live chat inside your account; email responses within 48 hours.
WhatsApp: Available daily 8:00 AM – 11:00 PM BST (UTC+6). Number shown inside your account settings.

All formal privacy complaints should be submitted in writing to [email protected] with the subject line "Privacy Complaint". 29bd9 will acknowledge receipt within 48 hours and will provide a substantive response within 30 days. If you are not satisfied with our response, you have the right to escalate the matter through any applicable legal or regulatory channels available to you.

Policy updates: This Privacy Policy was last reviewed and updated in January 2026. 29bd9 reviews this policy at least once every 12 months, and more frequently whenever there are changes to applicable law, our services, or our data processing practices that materially affect how your data is handled. When material changes are made, registered players will be notified via the email address registered to their account. The updated policy will be published on this page with a revised effective date. Your continued use of the 29bd9 platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy.