29bd9 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 29bd9 collects, why we collect it, how we use and protect it, and what rights you hold as a registered player on our platform in Bangladesh.
Our Core Privacy Principles
How 29bd9 Approaches Data Protection
The cards below summarise the six principles that guide every data-handling decision at 29bd9. They provide a plain-English overview and do not replace the full legal text that follows. Please read the complete Privacy Policy carefully.
Purpose Limitation
29bd9 collects personal data only for clearly defined, legitimate purposes: account management, payment processing, identity verification, fraud prevention, and responsible gaming compliance. We do not collect data beyond what is necessary for these purposes.
Data Security
All personal data stored and transmitted on the 29bd9 platform is protected by industry-standard SSL encryption. Access to player records is restricted to authorised personnel only, operating under strict confidentiality obligations.
Player Rights
Registered players on 29bd9 retain meaningful rights over their personal data, including the right to access, correct, and — where applicable — request deletion of information we hold. These rights can be exercised by contacting our support team.
No Selling of Data
29bd9 does not sell, rent, or trade your personal information to third-party marketers. Data sharing with third parties is limited strictly to what is required to deliver our services — such as payment processors and certified game studios.
Retention Limits
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised.
Transparency
We are committed to being open about how we handle your data. This Privacy Policy is written in plain English and updated whenever our data practices change in a material way. Registered players are notified of significant updates.
Contents
1 Introduction
29bd9 ("we", "us", "our") operates the online casino and sports betting platform accessible at 29bd9.io (the "Platform"). In the course of providing our services to players in Bangladesh and other permitted markets, we collect and process personal data relating to registered players, prospective players, and visitors to our Platform.
This Privacy Policy sets out in full detail the categories of personal data we collect, the purposes for which that data is processed, the parties with whom that data may be shared, the safeguards we apply to protect it, and the rights that individuals have in relation to their personal data held by 29bd9.
This Privacy Policy applies to all services offered via the 29bd9 Platform, including the online casino game lobby, live dealer tables, sports betting and sportsbook markets, the account registration and verification process, the cashier and payment processing systems, promotional and bonus programmes, and customer support communications.
2 Personal Data We Collect
29bd9 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the principal categories of data we collect and typical examples within each category:
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number, photograph | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address, city (e.g., Dhaka, Chittagong, Sylhet) | Registration & account updates |
| Financial Data | bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, Visa/Mastercard details (masked) | Deposit & withdrawal transactions |
| Transaction Data | Deposit amounts, withdrawal amounts, transaction reference numbers, timestamps, payment method used | Each financial transaction |
| Gaming Data | Games played, wager amounts, win/loss records, session duration, bonus participation history, sports bets placed | Each gaming or betting session |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone setting | Each Platform visit |
| Usage Data | Pages visited, links clicked, features accessed, search queries within the Platform, session start and end times | Continuous during Platform use |
| Communication Data | Live chat transcripts, support ticket content, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, cooling-off period requests, self-exclusion elections, session time alert preferences | Responsible gaming tool usage |
We collect only the minimum personal data necessary to deliver our services, meet our legal obligations, and maintain the security and integrity of the 29bd9 Platform. We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless this is strictly required for identity verification under applicable law and with your explicit consent.
3 How We Collect Your Data
29bd9 collects personal data through the following primary channels:
- Direct provision by you: When you complete the 29bd9 registration form, submit identity verification documents, make a deposit or withdrawal request, contact our customer support team, or update your account profile.
- Automated collection during Platform use: Through server logs, cookies, pixel tags, and similar tracking technologies, we automatically collect Technical Data and Usage Data each time you access the 29bd9 Platform. See Section 6 (Cookies and Tracking) for full details.
- Payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, relevant transaction confirmation data is returned to 29bd9 by the relevant payment processor to confirm the status of your transaction.
- Identity verification providers: Where 29bd9 engages a third-party Know Your Customer (KYC) service provider to assist with identity and age verification, that provider may return verification results and associated data points to 29bd9 in order to complete the verification process.
- Game providers: Certified game studios and live dealer operators who provide games on the 29bd9 Platform may return game-result data, session data, and integrity-monitoring alerts to 29bd9 as part of normal platform operation.
- Publicly available sources: Where necessary for fraud prevention or responsible gaming purposes, 29bd9 may supplement account information with data from publicly available databases, credit reference agencies, or fraud-monitoring services.
4 Purpose of Data Processing
29bd9 processes your personal data for the following defined purposes. Where more than one purpose applies to a category of data, each purpose is identified separately:
- Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain your account profile, and provide you with access to all 29bd9 Platform features.
- Payment processing: To process deposits and withdrawals via your chosen payment method, reconcile transaction records, and maintain an accurate account balance.
- Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, collusion, and other prohibited conduct as defined in the 29bd9 Terms & Conditions.
- Age verification and responsible gaming compliance: To confirm that all registered players are at least 21 years of age, and to administer deposit limits, cooling-off periods, self-exclusion elections, and other responsible gaming tools.
- Legal and regulatory compliance: To meet obligations arising under applicable anti-money laundering regulations, data protection law, and any other legal requirements applicable to 29bd9's operations.
- Customer support: To respond to your enquiries, resolve complaints, process disputes, and provide technical assistance with your account.
- Marketing and promotions: Where you have provided consent, to send you promotional offers, bonus notifications, tournament invitations, and other marketing communications about 29bd9 products and services. You may withdraw marketing consent at any time by contacting support.
- Platform improvement and analytics: To analyse usage patterns, identify technical issues, improve game performance, and enhance the overall player experience on the 29bd9 Platform.
- Dispute resolution: To maintain records of gaming sessions, transactions, and communications that may be required to investigate and resolve disputes between 29bd9 and any player.
5 Legal Basis for Processing
29bd9 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity involved:
- Contractual necessity: Processing that is necessary to perform the contract between you and 29bd9 — specifically, the account registration agreement and the Terms & Conditions you accepted at sign-up. This covers account management, payment processing, and the delivery of gaming services.
- Legal obligation: Processing that is required for 29bd9 to comply with applicable legal obligations, including age verification, identity verification, anti-money laundering record-keeping, and responsible gaming mandates.
- Legitimate interests: Processing that is necessary for the legitimate interests of 29bd9, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security monitoring, internal analytics, and customer service quality assurance.
- Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent. This applies primarily to direct marketing communications. Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
6 Cookies and Tracking Technologies
29bd9 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device on subsequent visits, maintain your session state, and collect usage analytics.
29bd9 uses the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core functionality such as maintaining your logged-in session, storing your account preferences, and processing financial transactions securely. You cannot opt out of strictly necessary cookies without ceasing to use the Platform.
- Analytics cookies: These cookies collect anonymised information about how visitors use the 29bd9 Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data helps us improve the Platform over time. Analytics cookies do not identify you personally.
- Functional cookies: These cookies allow the Platform to remember choices you have made (such as your preferred language or display settings) and provide enhanced features. They may be set by 29bd9 or by our certified game providers.
- Marketing and tracking cookies: Where you have consented to marketing communications, tracking cookies may be used to measure the effectiveness of promotional campaigns and to ensure that marketing content is relevant to your demonstrated interests.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain categories of cookies may affect the performance of some Platform features.
7 Data Sharing with Third Parties
29bd9 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for each stated purpose:
- Payment service providers: We share financial data with payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to the extent required to process your deposit and withdrawal requests.
- Identity and age verification providers: We share identity document data with authorised KYC service providers for the purpose of verifying that you meet the 21+ age requirement and confirming your identity in compliance with applicable regulations.
- Certified game studios and content providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum player-session data necessary to operate their games on the 29bd9 Platform, manage game-round outcomes, and detect integrity violations.
- Fraud prevention and security services: We may share Technical Data and account-activity indicators with specialist fraud-prevention services to identify and block suspicious activity on the Platform.
- Legal authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or legitimate legal process. We will notify you of any such disclosure where we are legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 29bd9's business, player personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects your privacy rights before it takes effect.
8 International Data Transfers
29bd9 may transfer your personal data to, and process it in, countries outside Bangladesh in order to deliver our services. This may occur when game provider servers, payment processing infrastructure, or customer support systems are hosted or operated outside the country.
Where personal data is transferred internationally, 29bd9 takes reasonable steps to ensure that such transfers are carried out in compliance with applicable data protection principles and that an adequate level of protection is maintained for your personal data. Safeguards we apply to international transfers include:
- Entering into standard contractual data transfer clauses with the receiving party that impose data protection obligations equivalent to those applicable to 29bd9.
- Conducting transfer impact assessments where required to ensure that the legal framework of the destination country provides sufficient protection for your personal data.
- Applying technical safeguards including encryption in transit and at rest to all transferred data, regardless of destination.
By registering an account on the 29bd9 Platform and accepting these terms, you acknowledge that your personal data may be processed in countries outside Bangladesh as described in this section.
9 Data Retention
29bd9 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:
- Active account data: Personal data associated with an active 29bd9 account is retained for the full duration of the account relationship, plus a minimum post-closure retention period as described below.
- Transaction and financial records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable anti-money laundering record-keeping requirements.
- Identity verification documents: Copies of identity documents submitted for KYC purposes are retained for a minimum of five (5) years following account closure.
- Customer support communications: Live chat transcripts, support ticket records, and email correspondence are retained for a minimum of three (3) years from the date of the relevant interaction.
- Marketing consent records: Records of marketing consent and withdrawal of consent are retained for as long as is necessary to demonstrate compliance with applicable data protection obligations.
- Responsible gaming records: Records of self-exclusion elections and deposit limit settings are retained for the full duration of the relevant restriction, plus a minimum of five (5) years thereafter, to prevent circumvention of exclusion terms.
Where personal data is no longer required, 29bd9 will securely delete, destroy, or anonymise it in a manner that prevents reconstruction or re-identification.
10 Your Privacy Rights
As a player on the 29bd9 Platform, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact the 29bd9 support team via live chat or by emailing [email protected]. We will respond to all verified requests within thirty (30) days.
Right of Access
Request a copy of all personal data 29bd9 holds about you, along with details of how and why it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your 29bd9 account at any time.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to 29bd9's legal retention obligations.
Right to Restrict Processing
Request that 29bd9 temporarily restricts the processing of your data while a dispute about its accuracy or use is being resolved.
Right to Data Portability
Request a copy of your personal data in a structured, machine-readable format where processing is based on your consent or contract performance.
Right to Object
Object to processing of your personal data for direct marketing purposes at any time, with immediate effect upon receipt of your objection.
11 Children's Privacy
The 29bd9 Platform is strictly intended for adults aged 21 years and above. 29bd9 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the 29bd9 account registration process, and accounts where the player's age cannot be confirmed to 29bd9's satisfaction will be suspended pending documentary verification.
If 29bd9 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, all associated account data will be immediately deleted and any deposited funds will be returned to the source payment method where technically possible. The relevant account will be permanently closed.
If you are a parent or guardian and have reason to believe that an individual under the age of 21 in your care has registered an account on the 29bd9 Platform or provided personal data without your knowledge, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.
12 Security Measures
29bd9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the 29bd9 Platform is encrypted using Transport Layer Security (TLS) protocols. This applies to all personal data, financial data, and session data exchanged during Platform use.
- Encryption at rest: Sensitive personal data and financial records stored in 29bd9's systems are encrypted at rest using industry-standard encryption algorithms.
- Access controls: Access to systems containing personal data is restricted to authorised 29bd9 personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
- Multi-factor authentication: Administrative access to 29bd9's internal systems requires multi-factor authentication to prevent unauthorised access even in the event of credential compromise.
- Penetration testing and audits: 29bd9 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in our technical infrastructure before they can be exploited.
- Incident response: 29bd9 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players as required by applicable law and take immediate remedial action.
- Pseudonymisation and anonymisation: Where appropriate, 29bd9 applies pseudonymisation techniques to personal data used in analytics and testing environments so that individuals cannot be directly identified from the data set.
13 Third-Party Links
The 29bd9 Platform may contain references to third-party services, payment providers, or game studios. While we take care to reference only reputable third parties, 29bd9 does not control and is not responsible for the privacy practices of external organisations. This Privacy Policy applies solely to data processed by 29bd9 in connection with the 29bd9 Platform.
When you interact directly with a third-party service — for example, when you authenticate a bKash payment within the bKash app — that interaction is governed by the third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party service providers with whom you share personal data in connection with your 29bd9 account.
14 Changes to This Privacy Policy
29bd9 reserves the right to update or modify this Privacy Policy at any time. When we make material changes to the way in which we collect, use, or protect your personal data, we will take the following steps to ensure you are informed:
- We will update the "Last Updated" date displayed at the top of this Privacy Policy.
- Where the change is material — for example, where we introduce a new category of data collection or a new third-party recipient — we will notify registered players via email and/or a prominent notice displayed upon next login to the 29bd9 Platform.
- For minor, non-material changes (such as grammatical corrections or clarifications that do not affect your rights), we may update the policy without sending a separate notification.
Your continued use of the 29bd9 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and contact us to request account closure and deletion of your personal data subject to applicable retention obligations.
We recommend that you review this Privacy Policy periodically to stay informed about how 29bd9 is protecting your personal information. The current version of this Privacy Policy is always available at 29bd9.io/privacy-policy.
15 Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which 29bd9 handles your personal data, please contact our support team using any of the following channels:
- Live Chat: Available 24/7 directly from within your 29bd9 account dashboard. This is the fastest way to reach our support team for urgent privacy-related matters.
- Email: [email protected] — please use the subject line "Privacy Request" so that your message is directed to the appropriate team member without delay.
- Support Hours: Our customer support team operates 24 hours a day, 7 days a week, in English, across all Bangladesh Standard Time (BST, UTC+6) time zones.
We are committed to resolving all privacy-related enquiries promptly and transparently. Where your request concerns the exercise of a data subject right as described in Section 10, we will acknowledge receipt within five (5) business days and provide a full response within thirty (30) calendar days of receiving your verified request.
Continue Exploring 29bd9
Ready to Experience 29bd9?
Now that you have reviewed the 29bd9 Privacy Policy, explore what our platform has to offer — from live cricket betting and 500+ casino games to instant bKash and Nagad deposits. For adults aged 21 and above only.