20bd Privacy Policy

1 Information We Collect

1.1 Information You Provide Directly

When you create a player account, use the 20bd platform, or communicate with our support team, you provide us with information directly. The categories of personal data you provide include:

• Account registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), email address, and phone number.
• Identity verification data: National Identity Card (NID) number, passport details, or other government-issued identification submitted during KYC verification. Copies of identity documents stored for verification purposes.
• Payment data: Mobile financial service (MFS) account identifiers including bKash, Nagad, Rocket, Upay, SureCash, and Tap account numbers used for BDT deposits and withdrawals. We do not store full MFS PINs or access credentials — only the account numbers necessary to process transactions.
• Support communications: Any personal information you include in messages, emails, or other communications sent to the 20bd support team at [email protected].
• Responsible gaming submissions: Self-exclusion requests, deposit limit settings, and session time-out configurations that you apply to your account.

1.2 Information Collected Automatically

When you access and use the 20bd platform, certain technical information is collected automatically by our systems. This includes:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device language settings.
• Session and usage data: Pages visited on the 20bd platform, time and duration of visits, game titles played, betting history, deposit and withdrawal transaction records, and click interaction data.
• Geolocation data: Approximate geographic location derived from your IP address. We use this to confirm that access is consistent with your registered location in Bangladesh and to detect potentially fraudulent access from unexpected locations.
• Cookie and tracking data: Session identifiers, preference cookies, and anonymised usage analytics as described in the Cookies section of this policy.

1.3 Data from Third-Party Verification Services

In some cases, 20bd may receive data about you from third-party identity verification providers engaged to assist with KYC and anti-money laundering checks . These providers may confirm the validity of identity documents, check names against sanctions databases, or verify that a date of birth is consistent with submitted identification. 20bd selects third-party verification providers that maintain data security standards consistent with our own, and we contractually restrict those providers from using your data for any purpose other than the specific verification task.

2 How We Use Your Data

2.1 Primary Purposes

20bd uses the personal data we collect for the following primary purposes, all of which are necessary to deliver the platform's services to players in Bangladesh:

2.2 Marketing Communications

20bd will send you promotional emails, bonus notifications, and cricket tournament alerts only if you have explicitly opted in to marketing communications during registration or via your account preferences. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawing marketing consent does not affect your ability to use the 20bd platform or receive essential transactional communications such as deposit confirmations and withdrawal receipts.

2.3 Automated Decision-Making

20bd uses automated systems to monitor for suspicious activity, potential fraud, and patterns consistent with problem gambling behaviour. These systems may trigger automated actions such as temporary transaction holds or responsible gaming prompts. Where an automated process results in a significant decision affecting your account — such as a withdrawal suspension — you have the right to request human review of that decision by contacting [email protected].

3 Data Sharing & Third Parties

3.1 Service Providers

To operate the 20bd platform, we engage a limited number of trusted third-party service providers who may process personal data on our behalf. These providers operate under strict contractual data processing agreements and are permitted to use your data only for the specific service they provide to 20bd. Categories of service providers include:

• Payment processors: MFS gateway partners that facilitate BDT transactions via bKash, Nagad, Rocket, Upay, SureCash, and Tap.
• Identity verification providers: Third-party KYC and document verification services used to confirm player age and identity.
• Game content providers: Licensed casino game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) whose game engines process certain session data as part of game delivery.
• Platform infrastructure providers: Cloud hosting, content delivery, and database services that underpin the 20bd platform's technical operation.
• Analytics providers: Anonymised, aggregate-level analytics tools used to understand platform usage patterns and improve the 20bd experience.

3.2 Legal and Regulatory Disclosures

20bd may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities without prior notice where we are legally required to do so, where we have a good-faith belief that disclosure is necessary to prevent fraud or criminal activity, or where disclosure is necessary to protect the safety of any person. Any such disclosure will be limited to the minimum data required to satisfy the legal or regulatory obligation.

3.3 Data We Do Not Share

20bd does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We do not share your data with other gambling operators, advertising networks, data brokers, or any other entity for purposes unrelated to the delivery of the 20bd service.

4 Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on return visits, remember your preferences, and gather information about how you interact with the platform. 20bd uses cookies and similar technologies including local storage to provide a functional, personalised, and secure experience.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You may control cookie settings through your browser's privacy settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential session cookies will prevent you from logging in to your 20bd account and using the platform's core features. Disabling preference or analytics cookies will not affect platform access but may result in a less personalised experience. 20bd does not use third-party advertising cookies or retargeting pixels.

5 Data Security & Storage

5.1 Security Measures

20bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 20bd platform.
• Encrypted storage for all personal data and identity documents held in our systems.
• Role-based access controls ensuring that only authorised 20bd staff can access specific categories of personal data, and only to the extent required for their role.
• Regular security assessments and vulnerability testing of the 20bd platform infrastructure.
• Multi-factor authentication requirements for all internal administrative system access.
• Automated intrusion detection and monitoring systems that flag anomalous access patterns in real time.

5.2 Data Storage Location

Personal data collected by 20bd is stored on secure servers. While 20bd is operated for the Bangladesh market, some technical infrastructure components may be hosted in data centres outside Bangladesh. Where data is processed or stored outside Bangladesh, 20bd ensures that appropriate contractual safeguards are in place and that the receiving jurisdiction or provider maintains data protection standards equivalent to those applied within Bangladesh.

5.3 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to players, 20bd will take immediate steps to contain the breach, assess the scope of affected data, and notify impacted players as quickly as reasonably practicable. Notifications will be sent to the registered email address associated with affected accounts. 20bd maintains an incident response plan specifically addressing data breach scenarios and reviews it regularly.

6 Your Privacy Rights

6.1 Rights You Hold Over Your Personal Data

As a 20bd player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within a reasonable timeframe and may need to verify your identity before processing the request.

• Right of Access: You may request a copy of the personal data that 20bd holds about you, including your account details, transaction history, and any identity documents on file.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For standard account data, you may update most information directly within your 20bd account settings.
• Right to Erasure: In certain circumstances, you may request that 20bd delete your personal data. Note that we may be required to retain certain data categories (such as financial transaction records and KYC documents) for legal and regulatory compliance purposes even after account closure. We will inform you of any data categories that must be retained and the reason for retention.
• Right to Restrict Processing: You may request that 20bd temporarily restrict the processing of your personal data in specific circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request that 20bd provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You may object to 20bd processing your personal data for marketing communications at any time. You may also object to processing based on legitimate interest, though 20bd may continue processing where there are compelling grounds that override your objection.
• Right to Withdraw Consent: Where 20bd processes your data based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7 Data Retention Policy

7.1 Retention Periods

20bd retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following retention periods apply:

7.2 Data Deletion Process

When a retention period expires, 20bd will securely delete or anonymise the relevant personal data using industry-standard data destruction methods. Physical document copies are shredded; electronic records are overwritten or cryptographically erased. Anonymised, aggregate data that cannot be linked back to any individual player may be retained indefinitely for statistical and analytical purposes.

8 Policy Updates & Contact

8.1 Changes to This Privacy Policy

20bd may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or evolving legal and regulatory requirements. When we make material changes to this policy, we will notify registered players by email to the registered contact address and will update the "Last Updated" date at the top of this page. The updated policy will take effect from the date specified in the notification. Continued use of the 20bd platform after the effective date constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 20bd protects your personal data. If you disagree with any update to this policy, you have the right to close your account and request deletion of your personal data, subject to the retention requirements described in Section 7.

8.2 Contact for Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or 20bd's handling of your personal data, please contact our privacy support team directly. All privacy-related enquiries are handled in English and will receive a response within a reasonable timeframe during Bangladesh Standard Time (BST, UTC+6) business hours.

Privacy enquiries and data rights requests: [email protected]

Please use the subject line "Privacy Enquiry" or "Privacy Rights Request" to ensure your message is routed to the correct team promptly. 20bd treats all privacy enquiries with strict confidentiality and will not use the information you provide in a privacy enquiry for any purpose other than addressing your specific request.