23bd Privacy Policy — Your Data, Your Rights

This Privacy Policy describes how 23bd ("we", "us", "the Platform") collects, uses, stores, and protects the personal information of users ("you", "Player") who access or use the 23bd website and services. 23bd is committed to handling your personal data with transparency, security, and respect for your rights as a player based in Bangladesh.

By registering an account on 23bd, making a deposit, or continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the 23bd platform and contact support to request account closure.

23bd collects personal data in three main categories: information you provide directly, information collected automatically during your use of the platform, and information obtained from third-party services where applicable.

Information You Provide Directly

• Account registration data: mobile phone number, full name, date of birth, and any additional fields required to complete KYC identity verification (such as a copy of your National ID card or passport).
• Payment information: transaction references, payment method identifiers (such as the last four digits of a bKash or Nagad mobile account number), and transaction amounts. 23bd does not store full card numbers or full mobile wallet credentials.
• Communications you send us: support tickets, chat messages, complaint submissions, and any other correspondence directed to the 23bd support team.
• Responsible gaming submissions: self-assessment responses, self-exclusion requests, deposit limit requests, and cooling-off period activations submitted via your account settings or to support.

Information Collected Automatically

• Device and browser data: device type, operating system version, browser type and version, screen resolution, and mobile network operator. This data is collected to optimise platform performance for the Android and iOS devices most commonly used in Bangladesh.
• Usage data: pages visited, game sessions started, betting activity, session duration, and navigation patterns within the 23bd platform. This data is used in aggregated and anonymised form for product improvement purposes.
• Technical logs: IP address, connection timestamps, error logs, and session identifiers. These are retained for security monitoring and fraud prevention purposes.

Information from Third Parties

• Payment verification data returned by payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming the status of a deposit or withdrawal transaction.
• Identity verification results from KYC service providers, where 23bd uses a third-party service to verify a player's identity documents against official records.
• Fraud and risk signals from industry-standard fraud prevention systems, used to protect the integrity of the platform and the security of player accounts.

23bd uses the personal data we collect for the following specific and lawful purposes:

• Account creation and management: to register your account, authenticate your identity at login, and maintain the ongoing functionality of your player account on 23bd.
• Payment processing: to process deposits and withdrawal requests made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions on your account.
• KYC verification and age verification: to verify that you meet the 21+ age requirement and to comply with our obligations to prevent underage gambling and financial crime.
• Responsible gaming compliance: to monitor gameplay patterns for signs of problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off tools as requested by players.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct on the platform.
• Customer support: to respond to your enquiries, process your complaints, and provide assistance through the 23bd support team.

23bd does not use your personal data for automated profiling that produces legal or similarly significant effects on you, and does not engage in targeted advertising using your personal data.

23bd processes your personal data on the following legal bases:

• Contractual necessity: processing required to fulfil our contractual obligations to you as a registered player, including account management and payment processing.
• Legal obligation: processing required to comply with applicable legal requirements, including anti-money laundering obligations, KYC verification requirements, and responsible gaming regulations.
• Legitimate interests: processing carried out in pursuit of 23bd's legitimate interests in platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Consent: processing carried out on the basis of your explicit consent, including the sending of promotional communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

23bd does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited and defined circumstances:

• Payment processors: we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposit and withdrawal requests.
• KYC and identity verification providers: we share identity documents and related data with our KYC verification partner solely for the purpose of verifying your identity and age in accordance with our legal obligations.
• Game content providers: game providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, PG Soft) may receive a player session token and account identifier to initialise game sessions. They do not receive your full personal profile.
• Law enforcement and regulatory authorities: we may disclose personal data to law enforcement or regulatory bodies where we are legally compelled to do so, or where disclosure is necessary to prevent or investigate suspected criminal activity, money laundering, or serious harm.

In all cases where data is shared with third parties, 23bd requires those parties to handle your data securely and only for the specific purpose for which it was shared. Third-party processors engaged by 23bd are bound by data processing agreements that prohibit them from using your data for any other purpose.

23bd processes payment data strictly for the purpose of executing your deposit and withdrawal transactions. Full payment credentials — including complete bKash and Nagad mobile wallet numbers, full card numbers, CVV codes, and banking passwords — are never stored on 23bd servers. Payment transactions are processed through the secure APIs of the relevant payment providers, which maintain their own PCI-DSS compliant security environments.

Transaction records — including the amount, date, time, payment method used, and transaction status — are retained as part of your account financial history. These records are necessary for auditing, dispute resolution, and compliance with financial record-keeping requirements. Players may view their transaction history within their 23bd account at any time.

23bd retains personal data for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following general retention periods apply: active player accounts — personal data is retained for the duration of the account relationship; closed or suspended accounts — personal data is retained for a minimum of 5 years following account closure to satisfy anti-money laundering record-keeping requirements; KYC documents — retained for a minimum of 5 years from the date of verification or the date of last transaction, whichever is later.

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes without constituting personal data processing.

23bd uses cookies and similar local storage technologies on its platform. Cookies are small data files stored on your device that help the platform function correctly and improve your experience. The following categories of cookies are used:

• Essential cookies: required for core platform functionality, including maintaining your logged-in session, remembering your language preference, and enabling secure payment flows. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: used to measure how players navigate the platform, which game categories are most visited, and where technical errors occur. Data collected by these cookies is aggregated and anonymised before analysis.
• Functional cookies: used to remember your preferences such as your chosen language version of the platform (English or Bengali) and any display settings you have configured.

You may manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will affect the functionality of the 23bd platform and may prevent you from logging in or completing transactions. 23bd does not use third-party advertising cookies or cross-site tracking technologies.

As a player on 23bd, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 23bd support team at [email protected]. We will respond to all valid requests within a reasonable period.

Please note that some rights are subject to conditions and exceptions under applicable law. For example, the right to erasure does not apply where retention is required by law (such as anti-money laundering record-keeping). 23bd will clearly explain any limitation that applies when responding to your request.

23bd implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers, access controls that restrict internal access to personal data on a strict need-to-know basis, regular security assessments of our platform infrastructure, and monitoring of account activity for signs of unauthorised access or suspicious behaviour.

While 23bd takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security against all threats. You are responsible for keeping your account login credentials — including your mobile number and password — confidential and for notifying 23bd immediately if you believe your account security has been compromised.

The 23bd platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If 23bd discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be securely deleted, and any balance associated with the account will be forfeited. If you believe that a minor has registered an account on 23bd, please contact our support team immediately at [email protected].

23bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When we make a material change to this policy, we will update the effective date shown at the top of this page and, where the change significantly affects your rights, we will endeavour to notify you directly via your registered contact details.

Your continued use of the 23bd platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. We recommend that you review this page periodically to stay informed of how 23bd protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 23bd handles your personal data, please contact our support team. We take all privacy-related enquiries seriously and will respond promptly.

Support email: [email protected]