23bd Privacy Policy
At 23bd, protecting the personal data of every player across Bangladesh is a responsibility we take seriously. This Privacy Policy explains in plain English exactly what information we collect, why we collect it, how we use it, and the controls you have over your own data at all times.
Our Commitment
How 23bd Safeguards Your Privacy
We built our data practices around six core principles. These are not just policy statements — they reflect how every system at 23bd is designed and operated.
All data transmitted between your device and 23bd servers is protected by industry-standard TLS/SSL encryption. Whether you are logging in, making a deposit via bKash or Nagad, or updating account details, your connection is always encrypted.
23bd collects only the personal data that is strictly necessary for providing our services, completing identity verification, processing payments, and meeting our compliance obligations. We do not collect data speculatively or for undefined future purposes.
You retain meaningful control over your personal data at 23bd. You can access, update, correct, or request deletion of your personal information at any time by contacting our support team. We respond to all data requests within 30 days of receipt.
23bd does not sell, rent, or trade your personal data to any third party for commercial gain. Data is shared only with trusted service providers (such as payment processors and identity verification partners) under strict data processing agreements.
Promotional communications from 23bd are always opt-in. You may withdraw your consent to receive marketing emails, SMS messages, or in-platform notifications at any time by updating your communication preferences inside your account dashboard or by contacting our support team.
23bd retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable compliance and anti-money laundering obligations. Once data is no longer required, it is securely deleted or anonymised in line with our retention schedule.
Section 1
Information We Collect
When you interact with the 23bd platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we may collect certain categories of personal data. The specific data collected depends on the nature of your interaction with the platform. Below is a comprehensive breakdown of the data categories 23bd may collect and the context in which each category is obtained.
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, NID or passport number | Account registration, KYC verification |
| Contact Data | Mobile number, email address, residential address (Dhaka, Chittagong, Sylhet, etc.) | Account registration, profile updates |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, Visa/Mastercard last four digits, transaction history | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatic collection during platform use |
| Usage Data | Games played, bet amounts, win/loss history, session duration, pages visited | Automatic collection during platform use |
| Communications Data | Live chat transcripts, support emails, in-platform messages | Customer support interactions |
| Verification Documents | Scanned NID, passport photo page, proof of address documents | KYC and withdrawal verification |
Data You Provide Directly
The majority of personal data 23bd holds about you is information you have provided directly — for example, when completing the registration form, submitting KYC documents, making a payment, or contacting our support team. Providing accurate information in these contexts is both a contractual obligation under our Terms & Conditions and a requirement under applicable compliance rules.
Data Collected Automatically
When you access the 23bd platform, certain technical and usage data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser fingerprint, and a record of your in-platform activity such as games launched, bets placed, and session duration. This data is used primarily for security monitoring, fraud detection, and platform performance optimisation.
Section 2
How We Use Your Data
23bd uses the personal data we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which 23bd processes personal data are set out below, together with the legal basis on which each processing activity relies.
Service Delivery
The most fundamental use of your personal data at 23bd is to operate and deliver the services you have registered to use. This includes creating and managing your player account, processing your deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment methods, crediting bonuses to your account, and ensuring that your gameplay experience functions correctly. Without processing your personal data for this purpose, 23bd cannot provide its services to you.
Identity Verification & Fraud Prevention
23bd is required to verify the identity of players before processing withdrawals and for ongoing account monitoring. Your identity and financial data is used to conduct KYC checks, screen against sanctions lists and politically exposed persons (PEP) databases, and detect patterns consistent with fraudulent activity or money laundering. These processing activities are necessary to comply with applicable anti-money laundering obligations and to protect the integrity of the 23bd platform for all players.
Responsible Gaming Monitoring
23bd uses your gameplay and usage data to monitor for indicators of problem gambling behaviour, including unusually rapid bet escalation, extended unbroken play sessions, and frequent deposit-to-bet-to-deposit cycling. Where such patterns are detected, our responsible gaming team may proactively reach out to you with information about our self-exclusion tools and player welfare resources. See our Responsible Gaming page for full details.
Marketing Communications
Where you have given explicit consent, 23bd may use your contact data (email address and/or mobile number) to send you information about promotions, bonuses, new game releases, and seasonal offers relevant to players in Bangladesh. You may withdraw your marketing consent at any time without affecting your ability to use the 23bd platform. Withdrawal of marketing consent can be made via your account dashboard or by emailing [email protected].
Platform Improvement & Analytics
Aggregated, anonymised usage data is used by 23bd to analyse platform performance, identify popular game categories, optimise page load times, and improve the overall player experience. This analytics processing does not involve making decisions about individual players and does not use personally identifiable information in a form that could identify you.
Legal & Compliance Obligations
23bd may be required by law, court order, or regulatory authority to process and disclose certain personal data. In such cases, 23bd will comply with its legal obligations while taking reasonable steps to protect your privacy interests to the greatest extent permitted by law.
Section 3
Data Sharing & Third Parties
23bd does not sell, rent, or otherwise trade your personal data to any third party for their own commercial purposes. However, in order to operate the platform and comply with legal obligations, 23bd shares certain categories of personal data with carefully selected third-party service providers. All third parties who process personal data on 23bd's behalf are required to enter into a data processing agreement and are permitted to use the data only for the specific purposes authorised by 23bd.
Payment Processors
When you make a deposit or request a withdrawal, relevant financial data (such as your registered mobile wallet number or card details) is shared with our payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay integrations, as well as card payment gateway providers. These partners process your payment data under their own privacy policies and are independently responsible for the security of payment transactions once data is transmitted to their systems.
Identity Verification Partners
To fulfil our KYC obligations, 23bd works with specialist identity verification service providers. When you submit a Bangladesh National ID card (NID) or passport for verification, the relevant document data is shared with our verification partner's secure system. Verification partners are bound by strict data handling agreements and may not use your identity data for any purpose other than completing the verification check on 23bd's behalf.
Game Technology Providers
The games available on the 23bd platform are supplied by third-party game studios and technology providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and bet records) to facilitate gameplay. Game providers do not receive your full personal profile and are contractually prohibited from using any data received from 23bd for their own marketing or profiling purposes.
Legal & Regulatory Disclosure
23bd may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or legal process. In such circumstances, 23bd will disclose only the minimum data necessary to satisfy the legal obligation and will, where permitted by law, notify the affected player of the disclosure.
Section 5
Data Security Measures
23bd implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to account for evolving threats and best practices in the online gaming industry.
Technical Security Controls
- TLS/SSL Encryption: All data in transit between your device and 23bd servers is encrypted using current-generation TLS protocols. The 23bd platform operates exclusively over HTTPS.
- Database Encryption: Sensitive personal data stored in 23bd databases — including identity documents and payment account references — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within 23bd systems is restricted on a strict need-to-know basis. Staff members who do not require access to personal data for their role cannot access it.
- Two-Factor Authentication: 23bd supports and encourages players to enable two-factor authentication (2FA) on their accounts to add a second layer of login security beyond the standard password.
- Intrusion Detection: 23bd's infrastructure is monitored continuously by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.
Organisational Security Measures
Beyond technical controls, 23bd maintains a set of organisational policies that govern how staff handle personal data. All 23bd employees and contractors who handle personal data are required to complete data protection training. Data handling policies are reviewed annually, and access privileges are audited on a quarterly basis to ensure they remain appropriate to each staff member's current role.
Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 23bd will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as quickly as reasonably practicable. Notification will be made via the email address registered to your 23bd account. 23bd will also take corrective action to prevent recurrence of similar incidents.
Section 6
Data Retention Policy
23bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply to the main categories of personal data held by 23bd:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure | Anti-money laundering compliance obligations |
| Financial Transaction Records | 7 years from date of transaction | Financial record-keeping requirements |
| KYC Verification Documents | 5 years after account closure or last transaction | Anti-money laundering and fraud prevention |
| Support Communications | 3 years from date of communication | Dispute resolution and quality assurance |
| Analytics & Usage Data | 13 months (anonymised after 30 days) | Platform optimisation and performance analysis |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years | Evidence of lawful processing basis |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data must be retained beyond the standard periods due to an active legal dispute, regulatory investigation, or court order, the data will be held until the matter is fully resolved and then deleted promptly thereafter.
Account Closure and Data Deletion
If you close your 23bd account, your personal data will not be immediately deleted. Due to anti-money laundering and financial compliance obligations, 23bd is required to retain certain account and transaction records for the periods specified in the table above. You will receive confirmation of your account closure and a summary of what data will be retained and for how long upon request.
Section 7
Your Privacy Rights
As a player on the 23bd platform, you have a number of rights with respect to the personal data we hold about you. 23bd is committed to honouring these rights and responding to all valid requests promptly and without undue delay. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise.
Request a copy of all personal data 23bd holds about you, together with information about how it is being used.
Request correction of any inaccurate or incomplete personal data held in your 23bd account record.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
Request that 23bd restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
Request your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
Object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
Response Timeframe
23bd will acknowledge all privacy rights requests within 5 business days of receipt and will provide a substantive response within 30 calendar days. Where a request is particularly complex or numerous, 23bd may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day period expires.
Section 8
Policy Updates & Contact
23bd reviews this Privacy Policy at least annually and updates it whenever there are material changes to our data processing practices, applicable legal requirements, or the services we offer. When significant changes are made, the "Effective Date" at the top of this document will be updated, and where the changes are material, we will notify registered players via email or in-platform notification prior to the changes taking effect.
How to Stay Informed
We recommend bookmarking this Privacy Policy page and checking it periodically. Continued use of the 23bd platform after any updates to this Privacy Policy constitutes your acknowledgement of the revised version. If you disagree with any changes to this Privacy Policy, you are entitled to close your account — please contact our support team to initiate the account closure process.
Governing Language
This Privacy Policy is written in English. In the event of any ambiguity or dispute regarding interpretation, the English-language version of this document shall prevail. Any translations made available are for informational convenience only and do not carry legal weight.
Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 23bd handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy enquiries in a thorough and timely manner.
- Email: [email protected] (subject line: "Privacy Enquiry")
- Live Chat: Available 24/7 inside your 23bd account dashboard
- Response Time: Within 2 hours during normal operating hours (BST, UTC+6)
Ready to Play on a Platform You Can Trust?
Now that you understand how 23bd protects your privacy, explore our full game library, visit the FAQ for common questions, or log in to your account to review your privacy settings.