2bd9 Privacy Policy — Your Data, Your Rights

Introduction

2bd9 ("we", "us", "our") operates the online gaming platform accessible at https://2bd9.org and is committed to protecting the privacy and personal data of all players, visitors, and users ("you", "your") who interact with our platform. This Privacy Policy describes in detail the types of personal information we collect, the purposes for which we use that information, the circumstances under which we may share it with third parties, the measures we take to protect it, and the rights you have in relation to your personal data.

By accessing or using the 2bd9 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Privacy Policy, you should not use the 2bd9 platform. This policy should be read alongside our Terms and Conditions, which govern your use of the platform more broadly.

Our Privacy Commitments at a Glance

Six principles guide how 2bd9 handles your personal data from the moment you first visit the platform to long after you close your account.

1. Information We Collect

2bd9 collects personal information that is necessary to provide you with a safe, fair, and functional gaming experience. The categories of information we collect include:

• Identity DataFull name, date of birth, and government-issued identification details provided during account registration or KYC verification.
• Contact DataRegistered mobile number (required for bKash, Nagad, Rocket transactions and account recovery). Email address if voluntarily provided.
• Financial DataDeposit and withdrawal transaction records, payment method identifiers (e.g. bKash wallet number, last four digits of card), and BDT account balance history.
• Gaming ActivityGame history, betting records, session duration, wager amounts, and responsible gaming tool usage, retained for fair play auditing and regulatory compliance.
• Technical DataIP address, device type, operating system, browser type, screen resolution, and session timestamps collected automatically when you access the 2bd9 platform.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. We do not collect data from or about minors. Any account found to belong to a person under the age of 21 will be suspended immediately and all collected data reviewed in accordance with our minor protection policy.

2. How We Use Your Information

Personal data collected by 2bd9 is used only for the purposes set out below. We do not use your personal data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent.

• Account creation, verification, and ongoing management — including age verification (21+), identity confirmation, and KYC compliance checks required before processing withdrawals above standard thresholds.
• Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate transaction records for each player account.
• Providing and improving the 2bd9 gaming experience, including personalising the game lobby based on play history, optimising platform performance for Bangladeshi mobile networks, and resolving technical issues reported by players.
• Fraud prevention, anti-money laundering (AML) screening, and detection of prohibited activities including bonus abuse, multi-accounting, and use of automated betting software.
• Responsible gaming monitoring — using session data and gaming patterns to identify players who may be showing signs of problem gambling behaviour and, where appropriate, proactively applying account safeguards.
• Sending promotional communications, bonus offers, and platform updates where you have not opted out and where such communications are relevant to your activity on 2bd9. You may withdraw consent for marketing communications at any time by contacting support at [email protected].

3. Legal Basis for Processing

2bd9 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms and Conditions, including account management, payment processing, and game provision.
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, where such processing does not override your fundamental rights and freedoms.
• Consent — sending marketing communications and personalising promotional offers. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Legal obligation — retaining transaction records, supporting anti-money laundering investigations, and complying with any mandatory disclosure requirements applicable to the platform's operations.

4. Sharing Your Information

2bd9 does not sell, rent, or otherwise trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• Payment processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — solely for the purpose of processing your deposit and withdrawal transactions. These providers receive only the minimum data required to complete the transaction.
• Game content providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others) — technical session identifiers may be passed to game servers to enable game loading and fair play verification. These providers do not receive your full identity data.
• Law enforcement and regulatory authorities — where 2bd9 is legally required to disclose personal data in response to a lawful request, court order, or mandatory regulatory reporting obligation. In such cases, 2bd9 will disclose only the minimum information required by the applicable legal instrument and will, where legally permitted, notify the affected player.

5. Payment Data and Financial Information

2bd9 takes particular care with financial data given its sensitivity. Full payment account credentials — such as complete card numbers or full mobile wallet PINs — are never stored on 2bd9 servers. Deposit and withdrawal requests are processed through the secure APIs of the relevant payment providers (bKash, Nagad, Rocket, etc.), and 2bd9 retains only the transaction reference, amount, timestamp, and truncated payment identifier necessary for record-keeping and dispute resolution.

All financial transaction records are retained for a minimum period as required for anti-money laundering compliance and dispute resolution. Players may request a statement of their transaction history at any time by contacting 2bd9 support. Where a dispute arises in relation to a deposit or withdrawal, 2bd9 will use the retained transaction records to investigate and resolve the matter in accordance with our standard complaint handling procedure.

6. Cookies and Tracking Technologies

2bd9 uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session while you are logged in, remember your preferences, and analyse platform usage patterns to improve the experience. The cookies used by 2bd9 fall into the following categories:

• Essential cookies — required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and language preference cookies. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies — used to collect aggregated, anonymised data about how players navigate and use the platform. This information helps 2bd9 identify technical issues, understand which features are most used, and prioritise product improvements. Analytics data is not linked to individually identifiable player profiles.
• Preference cookies — store your platform settings such as notification preferences and display options so that your chosen settings are remembered across sessions without requiring you to re-enter them each time you log in.

You can control cookie settings through your mobile browser settings. Please note that disabling essential cookies will prevent the 2bd9 platform from functioning correctly and you will not be able to log in or place bets. 2bd9 does not use cookies to track your activity on third-party websites outside of the 2bd9 platform.

7. Data Retention

2bd9 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory minimum retention periods. The general retention periods we apply are: account data and identity verification records are retained for the duration of the account relationship and for a minimum of five years following account closure; financial transaction records are retained for a minimum of five years from the date of the transaction; gaming activity records are retained for a minimum of three years; technical log data (IP addresses, session timestamps) is retained for up to twelve months.

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data has been anonymised, it may be retained indefinitely for aggregate statistical analysis without constituting personal data processing. Players who request account closure should note that 2bd9 is not able to delete all data immediately upon account closure due to the legal retention obligations described above.

8. Your Privacy Rights

As a user of the 2bd9 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact 2bd9 support at [email protected]. We will respond to all valid rights requests within a reasonable timeframe and at no charge.

• Right of access — you may request a copy of the personal data 2bd9 holds about you at any time. We will provide this information in a clear, structured format within a reasonable timeframe.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure — you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations that may require 2bd9 to retain certain data for a defined period even after account closure.
• Right to restrict processing — in certain circumstances, you may ask 2bd9 to restrict the processing of your personal data, for example where you have contested the accuracy of the data and are awaiting verification, or where you have objected to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

To exercise any of the above rights, please contact 2bd9 support with your registered mobile number and a clear description of your request. We may need to verify your identity before processing a rights request in order to protect against fraudulent data access attempts.

9. Security Measures

2bd9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and the 2bd9 servers; access controls that restrict internal access to personal data to authorised personnel with a legitimate business need; regular security reviews of the platform's infrastructure; and secure, encrypted storage of all data at rest on 2bd9 servers.

While 2bd9 takes all reasonable steps to secure your personal data, no internet-based platform can guarantee absolute security against all possible threats. You are responsible for keeping your own login credentials secure and for using a strong, unique password for your 2bd9 account. If you suspect that your account has been compromised, contact 2bd9 support immediately at [email protected] so that we can investigate and, where necessary, apply additional account protections.

10. Minors and Age Verification

The 2bd9 platform is strictly for players aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. During account registration, players are required to confirm that they meet the minimum age requirement. Where 2bd9 has reasonable grounds to believe that a registered account belongs to a person under the age of 21, the account will be immediately suspended, gameplay will be voided, and any deposits held in the account will be returned to the source payment method after completing an age verification investigation. If you believe a minor has created a 2bd9 account, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

2bd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify active players via a notification displayed upon login or a message to the registered mobile number. The updated policy will take effect from the date stated in the notification.

The date at the top of this policy ("Last Updated") indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically. Your continued use of the 2bd9 platform after the effective date of any amendment constitutes your acknowledgement of the revised policy.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how 2bd9 handles your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within a reasonable timeframe (Bangladesh Standard Time, UTC+6).

Email: [email protected]