28bd Privacy Policy

Our Privacy Commitments

28bd is committed to handling all player data with care, transparency, and in accordance with applicable data protection principles. Here is what you can count on as a 28bd user.

1Who We Are

28bd operates the online casino and sports betting platform at 28bd.ws, serving registered players across Bangladesh. As the data controller for this platform, 28bd is responsible for determining how and why personal data collected through the platform is processed.

If you have any questions about how 28bd handles your personal information, you may contact our support team at any time via the email address listed at the end of this policy. We are committed to responding to all privacy-related inquiries promptly and in good faith.

2Information We Collect

28bd collects personal data directly from you when you register, interact with the platform, make transactions, or contact support. We also collect certain technical data automatically. The categories of data we collect include:

3How We Use Your Information

28bd uses collected personal data only for the purposes described in this policy. We do not process your data for purposes incompatible with those listed below without your explicit consent.

• To register and maintain your 28bd account, verify your identity, and communicate account-related information securely.
• To process deposits, withdrawals, and other financial transactions through our approved payment partners including bKash, Nagad, and Rocket.
• To deliver the platform's gaming, betting, and casino services, including personalised game recommendations and bonus eligibility assessments.
• To conduct KYC verification, fraud prevention, anti-money-laundering checks, and other regulatory compliance activities required under applicable law.
• To send service communications including security alerts, account updates, and notifications about changes to platform terms or policies.
• To analyse platform usage, improve user experience, investigate technical issues, and maintain the security and integrity of the 28bd platform.

4Legal Basis for Processing

28bd processes personal data only where a valid legal basis exists. The applicable bases for our data processing activities are:

• Contractual necessity — processing required to fulfil our obligations to you as a registered player, including account management and transaction processing.
• Legal obligation — processing necessary for 28bd to comply with KYC requirements, anti-money-laundering regulations, fraud detection obligations, and other applicable legal requirements.
• Legitimate interests — processing conducted to protect the security of the platform, prevent fraud and abuse, conduct analytics to improve services, and manage responsible gaming risks.
• Consent — where 28bd sends you optional marketing communications about promotions, bonuses, or new games. You may withdraw consent for marketing communications at any time by contacting support.

5Sharing Your Information

28bd does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors — we share necessary transaction data with approved payment partners such as bKash, Nagad, Rocket, and Upay to process deposits and withdrawals on your behalf.
• Game providers — certified game suppliers (e.g., Pragmatic Play, Evolution Gaming, Spribe) receive session and bet data required to operate their certified games on the 28bd platform.
• Regulatory and law enforcement authorities — where required by applicable law, a court order, or a lawful request from a competent authority, 28bd will disclose relevant personal data to the requesting body.
• Fraud and security service providers — specialist third-party services engaged by 28bd to detect and prevent fraudulent account activity, unauthorised access, and platform abuse.

6Payment Data and Financial Information

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, 28bd receives confirmation of the transaction including the transaction reference, amount, and a partial wallet identifier. Full mobile wallet PINs, full wallet account numbers, and other sensitive payment credentials are entered directly into the payment provider's interface and are never transmitted to or stored on 28bd servers.

28bd retains financial transaction records for the minimum period required by applicable financial regulations. These records are used exclusively for account management, dispute resolution, and regulatory compliance and are not used for commercial profiling.

7Cookies and Tracking Technologies

28bd uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device. The types of cookies we use include:

• Essential cookies — required for core platform functionality such as maintaining your login session, remembering your language preference, and ensuring secure account access.
• Analytics cookies — used to understand how players navigate and use the platform, so we can identify areas for improvement and optimise the overall user experience.
• Preference cookies — store your platform settings such as game display preferences and notification settings so they are remembered between sessions.
• Security cookies — used to detect and prevent fraudulent activity, unauthorised account access attempts, and other security threats to the platform.

Most browsers allow you to control cookies through their settings. Disabling essential cookies may affect platform functionality. Non-essential cookies may be declined without impacting your ability to use core 28bd services.

8Data Retention

28bd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account registration and for any legally mandated retention periods thereafter. Where data is no longer required for its original purpose and there is no legal obligation to retain it, 28bd will securely delete or anonymise it.

Account data is typically retained for a minimum of five years following account closure to meet anti-money-laundering and financial record-keeping obligations. Where a legal dispute, investigation, or compliance review is ongoing, relevant data may be retained for a longer period until the matter is fully resolved.

9Data Security

28bd implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL encryption for all data in transit, encryption of sensitive data at rest, strict internal access controls, and regular security reviews of our platform infrastructure.

While 28bd takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their 28bd account and to contact support immediately if they suspect any unauthorised access to their account.

10Your Data Rights

As a 28bd player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at the email address provided at the end of this policy.

11Protection of Minors

28bd strictly prohibits access to or use of the platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21. Where 28bd discovers that personal data has been collected from a minor, that data will be promptly deleted and the associated account will be permanently closed. Parents or guardians who believe a minor may have registered on 28bd should contact our support team immediately so the account can be reviewed and closed without delay.

12International Data Transfers

Some of 28bd's service providers and game suppliers may be located outside Bangladesh. Where personal data is transferred internationally, 28bd takes steps to ensure that adequate data protection safeguards are in place, consistent with the protections provided under this policy. By using the 28bd platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as part of normal platform operations.

13Third-Party Links and Services

The 28bd platform may reference third-party game providers and payment services. These third parties operate under their own independent privacy policies, which 28bd does not control. 28bd is not responsible for the privacy practices of third-party providers. Players are encouraged to review the privacy policies of any third-party service they interact with in connection with using the 28bd platform.

14Changes to This Privacy Policy

28bd may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. When we make material changes, we will notify registered players via the platform or by email where practicable. We encourage players to review this policy periodically. Your continued use of the 28bd platform after an updated policy has been posted constitutes your acceptance of the revised policy.

15Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how 28bd handles your personal data, please contact our support team. We are available 24/7 and will respond to all privacy-related inquiries as promptly as possible.