Privacy Policy
of 2bdt

When you register for, access, or use the 2bdt platform, we collect certain categories of personal data in order to operate our Services, verify your identity, process transactions, and comply with our legal obligations. The categories of data we collect are described below.

1.1 Registration & Account Data

When you create a 2bdt account, we collect the information you provide directly, including your full name, date of birth, email address, mobile phone number, username, and password (stored in hashed form — we never store plaintext passwords). You may also be required to provide your residential address and National ID card number for identity verification purposes.

1.2 Identity Verification Data

To comply with our age verification and Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents such as your National ID card, passport, or driving licence, as well as proof-of-address documents such as a recent utility bill or bank statement. These documents are processed and stored securely in line with applicable data protection standards.

1.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and wagers made on your account. This includes payment method identifiers (such as your bKash, Nagad, Rocket, or Upay mobile number or registered bank account number), transaction amounts in Bangladeshi Taka (BDT), timestamps, and transaction reference numbers. We do not store complete payment credentials — only the identifiers necessary to process and reconcile transactions.

1.4 Usage & Device Data

We automatically collect certain technical data when you visit or interact with the 2bdt platform, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, session duration, and clickstream data. This information is collected via server logs and analytics tools.

1.5 Communications Data

If you contact our customer support team — by email, live chat, or any other channel — we retain a record of that correspondence, including your name, contact details, the content of your message, and any attachments you provide. This data is used to resolve your query and improve our support quality.

2bdt processes your personal data only for defined, lawful purposes. We do not sell your personal data to third parties. The following table summarises our primary processing activities and the legal basis on which we rely for each:

Where we rely on your consent as the legal basis for processing — most commonly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To opt out of marketing emails or SMS notifications from 2bdt, contact us at [email protected].

2bdt does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with carefully selected third parties in the following circumstances:

3.1 Service Providers

We engage third-party service providers who process personal data on our behalf to help us deliver the Services. These include payment processing partners (bKash, Nagad, Rocket, Upay, and affiliated banking institutions), identity verification and KYC service providers, cloud hosting and infrastructure providers, analytics and fraud detection platforms, and customer support tooling vendors. All service providers are bound by contractual data processing agreements that restrict them from using your data for any purpose other than providing the contracted service.

3.2 Game Content Providers

Certain games available on the 2bdt platform are supplied by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, limited technical data (such as a session token and your account identifier) may be transmitted to the relevant provider to load and operate the game. Game providers are contractually prohibited from using this data for independent marketing or profiling purposes.

3.3 Legal & Regulatory Disclosure

2bdt may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are required or permitted to do so by applicable law — for example, in connection with an investigation into money laundering, fraud, or match-fixing. We will notify you of any such disclosure where we are legally permitted to do so.

3.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 2bdt's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice of any such transfer and inform you of any material change to how your data will be processed.

The 2bdt platform uses cookies and similar tracking technologies (such as local storage objects and pixel tags) to operate certain core functions of the website, remember your preferences, analyse usage patterns, and improve your overall experience.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as session management, login authentication, and secure payment processing. These cookies cannot be disabled without severely impairing your ability to use the Services.
• Functional Cookies: These remember your preferences and settings — such as your preferred language or display options — so that you do not need to re-enter them on each visit.
• Analytics Cookies: We use analytics tools to collect aggregated, anonymised data about how users interact with the 2bdt platform. This helps us identify popular features, diagnose performance issues, and prioritise product improvements.
• Security Cookies: These help us detect unusual or potentially fraudulent account activity by tracking session patterns and flagging anomalous login behaviour.

Most web browsers allow you to control cookie settings through the browser's preferences menu. You can choose to block or delete cookies at any time; however, please note that disabling strictly necessary cookies will prevent you from logging in or using certain features of the 2bdt platform.

2bdt retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, tax, accounting, or reporting obligations.

As a general principle, we apply the following retention periods:

• Active account data (registration details, KYC documents, transaction history): Retained for the duration of your account and for a minimum period of 5 years following account closure, in order to comply with financial record-keeping and anti-money laundering obligations.
• Customer support correspondence: Retained for 3 years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent or account closure.
• Technical and server log data: Retained for 12 months on a rolling basis for security monitoring and fraud detection purposes.
• Analytics data: Retained in aggregated, anonymised form for up to 3 years.

When personal data is no longer required, we securely delete or anonymise it in accordance with industry-standard data destruction procedures. Anonymised data — which cannot reasonably be used to identify you — may be retained indefinitely for statistical and analytical purposes.

As a user of the 2bdt platform, you hold certain rights in respect of the personal data we hold about you. 2bdt is committed to honouring these rights promptly and transparently. Your rights include:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. We will provide this information within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic account information directly from your account settings page, or contact support for more complex corrections.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that this right is subject to our legal obligations to retain certain records (see Data Retention above).
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our use of it for legitimate interest purposes.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to our processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling grounds for continued processing.
• Right to Withdraw Consent: Where we process your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

2bdt implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Our security practices include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the 2bdt platform is encrypted in transit using industry-standard SSL/TLS protocols. Our connection is secured with a valid SSL certificate, identifiable by the padlock icon in your browser's address bar.
• Password Hashing: Account passwords are never stored in plaintext. We apply strong one-way cryptographic hashing algorithms, which means that even 2bdt personnel cannot retrieve your original password.
• Two-Step Verification: We offer optional SMS-based two-step verification to provide an additional layer of protection for your account. We strongly recommend enabling this feature.
• Access Controls: Access to personal data within 2bdt's systems is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are bound by confidentiality obligations and receive regular data protection training.
• Fraud Detection Systems: Our platform runs automated, real-time monitoring to detect unusual account activity, suspicious login patterns, and potential payment fraud.
• Regular Security Audits: We conduct periodic security assessments and penetration testing of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online system is completely immune to security risks. In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, we will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

You also play an important role in keeping your account secure. Never share your password with anyone, use a strong and unique password for your 2bdt account, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 2bdt handles your personal data, please contact us using the details below. We take all privacy enquiries seriously and aim to respond within 48 hours (Bangladesh Standard Time, UTC+6).

Data Protection Officer (DPO)
Email: [email protected]
Subject line for privacy matters: "Privacy Enquiry" or "Data Subject Request"

When submitting a privacy-related request, please include your registered account username and sufficient detail to allow us to identify and locate the relevant data. We may need to verify your identity before fulfilling your request to prevent unauthorised disclosure.

This Privacy Policy applies solely to data collected and processed by 2bdt in connection with the operation of the 2bdt.ws platform and related Services. It does not extend to third-party websites or services that may be referenced on our platform. We are not responsible for the privacy practices of third-party game providers, payment processors, or any external websites you may visit via links from our platform.