Privacy Policy — How 2bd345 Protects Your Data

1. Data We Collect

When you interact with the 2bd345 platform — whether by browsing, registering an account, making a deposit, or contacting support — we may collect the following categories of personal data:

1.1 Account Registration Data

When you create a 2bd345 account, we collect the information you provide directly:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Residential address (including district, division, and postcode within Bangladesh)
• Email address
• Mobile phone number (used for account verification and SMS OTP where enabled)
• Username and password (password is stored in hashed, non-reversible form)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may request additional documents to verify your identity and age. These include:

• National Identity Card (NID) number and a scan or photograph of the document
• Passport (biographical page scan, where NID is not available)
• Proof of address: a utility bill, bank statement, or government-issued document dated within the last three months
• Payment method verification documents (e.g., a screenshot of your registered bKash or Nagad account showing the account holder name and number)

KYC documents are processed securely and retained only as long as necessary to fulfil our verification obligations and legal record-keeping requirements. Copies of identity documents are encrypted at rest.

1.3 Financial Transaction Data

We record transaction-level data for every deposit and withdrawal processed on your 2bd345 account:

• Deposit and withdrawal amounts (in BDT)
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet number or last four digits of card (where applicable) — full card numbers are never stored by 2bd345
• Transaction reference numbers from the payment provider
• Timestamps of all transactions (recorded in Bangladesh Standard Time, BST UTC+6)

1.4 Gameplay and Betting Data

We maintain records of your activity on the platform, including:

• Games played, wagers placed, and outcomes
• Sports betting selections and results
• Bonus offers claimed and wagering progress
• Session duration and frequency of play

This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection. It also enables us to personalise promotional offers where you have consented to receive them.

1.5 Technical and Device Data

When you access 2bd345, our systems automatically collect certain technical information:

• IP address (used for security, geolocation verification, and fraud prevention)
• Device type, operating system, and browser version
• Referring URL (the page you visited immediately before arriving at 2bd345)
• Pages visited within the 2bd345 platform and time spent on each
• Error logs and crash reports

1.6 Communications Data

When you contact 2bd345 via live chat, email, or any other support channel, we retain a record of the communication including the content of messages, timestamps, and the resolution outcome. This is used for quality assurance, dispute resolution, and staff training purposes.

2. How We Use Your Data

2bd345 uses personal data collected from players for the following purposes. For each purpose, we identify the legal basis on which the processing is carried out.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact data	Contractual necessity
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation; contractual necessity
Processing deposits and withdrawals	Financial transaction data	Contractual necessity
Fraud detection and anti-money laundering	Transaction data, IP address, device data	Legal obligation; legitimate interest
Responsible gaming monitoring	Gameplay data, session data	Legal obligation; legitimate interest
Customer support and dispute resolution	Communications data, account data	Contractual necessity; legitimate interest
Sending transactional emails and SMS alerts	Contact data	Contractual necessity
Sending promotional offers and bonuses	Contact data, gameplay data	Consent (opt-in)
Platform analytics and performance improvement	Technical data, gameplay data	Legitimate interest

3. Data Sharing & Disclosure

2bd345 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share data only in the circumstances described below.

3.1 Service Providers

We engage a limited number of trusted third-party service providers to help us operate the platform. These include:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard gateway partners) — to process deposits and withdrawals
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) — who may receive session tokens and bet data necessary to run games
• Identity verification services — to assist with KYC document authentication
• Analytics platforms — to help us understand platform usage and improve user experience
• Fraud prevention services — to detect and prevent account abuse and financial crime

All service providers are contractually required to process your personal data only on our instructions, to maintain appropriate security measures, and not to use your data for any purpose other than providing services to 2bd345. We conduct due diligence on service providers before engagement and review these relationships periodically.

3.2 Legal Obligations

2bd345 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will not disclose more information than is strictly required for the purpose of the legal obligation.

3.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets involving 2bd345, personal data held by 2bd345 may be transferred to the acquiring or successor entity. Players will be notified of any such transfer via email at least 30 days in advance, and the successor entity will be required to honour this Privacy Policy or provide a materially equivalent level of data protection.

3.4 International Transfers

Some of our service providers may be located outside of Bangladesh. Where personal data is transferred internationally, we take steps to ensure that an equivalent level of data protection applies, including contractual safeguards with the receiving entity. By using the 2bd345 platform, you consent to such transfers as described in this Policy.

4. Cookies & Tracking Technologies

The 2bd345 platform uses cookies and similar tracking technologies to provide a functional, secure, and improved user experience. A cookie is a small text file placed on your device when you visit a website. It allows the site to recognise your device on subsequent visits.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential / Session	Maintains your login session, remembers your preferences during a visit, and prevents cross-site request forgery (CSRF). Required for the platform to function.	Session (deleted when browser closes)
Security	Detects unusual login patterns, flags suspicious device changes, and supports fraud prevention systems.	Up to 30 days
Analytics	Collects anonymised data on page views, session duration, and navigation paths to help us improve platform performance. No personally identifiable information is stored.	Up to 12 months
Preference	Remembers your language or display preferences across sessions.	Up to 12 months

2bd345 does not use advertising cookies, retargeting pixels, or any cross-site tracking technology for the purpose of serving third-party advertisements to you outside of the 2bd345 platform. You may disable cookies through your browser settings; however, disabling essential cookies will impair the functionality of the platform and may prevent you from logging in.

5. Data Retention

2bd345 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our legal and compliance obligations. The following retention periods apply:

• Account registration and KYC data: Retained for the lifetime of the account plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping standards.
• Gameplay and betting history: Retained for three years from the date of each session, used for dispute resolution, responsible gaming review, and fraud analysis.
• Customer support communications: Retained for two years from the date of the last interaction in a support thread.
• Technical and device logs: Retained for 90 days on a rolling basis, unless a specific log is flagged as relevant to an ongoing security investigation.
• Marketing consent records: Retained for the duration of the consent and for one year after it is withdrawn, to maintain a defensible audit trail.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with an individual. Anonymised, aggregated data (for example, platform-wide statistics on game popularity) may be retained indefinitely as it does not constitute personal data.

6. Your Privacy Rights

As a player on 2bd345, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within 14 days.

6.1 Right of Access

You have the right to request a copy of the personal data that 2bd345 holds about you. We will provide a summary of your data in a structured, readable format. Identity verification will be required before we can process an access request to ensure data is not disclosed to an unauthorised party.

6.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact email or phone number) can be made directly through your account settings. For more significant corrections (such as a legal name change supported by documentation), please contact support.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that where we are required to retain data by law — for example, financial transaction records retained to meet anti-money laundering obligations — your erasure request cannot be fulfilled in respect of that data until the mandatory retention period has expired. We will inform you clearly which data can and cannot be deleted at the time of your request.

6.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing on the basis of legitimate interest and we are assessing the basis for that processing.

6.5 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transmit that data to another service provider where technically feasible.

6.6 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving such an objection, we will cease all marketing communications immediately. This does not affect transactional communications that are necessary to operate your account (such as payment confirmation emails and security alerts), which will continue to be sent.

7. Data Security

2bd345 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption on all data in transit between your device and our servers
• Encryption at rest for sensitive data fields including identity documents, payment method details, and password hashes
• Role-based access controls ensuring that only authorised 2bd345 personnel can access personal data, and only to the extent necessary for their role
• Regular security audits and penetration testing of the platform infrastructure
• Fraud monitoring systems that flag unusual account activity in real time
• Two-factor authentication (2FA) available to all players via SMS OTP to protect account access
• Incident response procedures to detect, contain, and report data breaches in a timely manner

While 2bd345 applies robust security measures, no online platform can guarantee absolute security. Players are also responsible for maintaining the security of their own account credentials. You should use a strong, unique password for your 2bd345 account and enable two-factor authentication. If you suspect that your account has been compromised, contact [email protected] immediately.

7.1 Data Breach Notification

In the event of a data breach that is likely to result in a high risk to the rights or interests of affected players, 2bd345 will notify affected individuals without undue delay via their registered email address. Notification will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures 2bd345 has taken or proposes to take to address the breach and mitigate its effects.

8. Updates to This Policy

2bd345 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, service offerings, or applicable legal requirements. When we make material changes to this Policy, we will notify you by email to your registered address at least 14 days before the changes take effect, and we will display a prominent notice on the platform.

Minor or clarificatory updates that do not materially affect how we process your data may be made without prior notice, but will always be reflected in the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how 2bd345 handles your personal data.

Continued use of the 2bd345 platform after a material update has taken effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should cease using the platform and contact support to request account closure and deletion of your data in accordance with Section 6.3 above.