2bd9 Privacy Policy — Your Data, Your Rights

1 Data Controller

2bd9 ("we", "us", "our") acts as the data controller responsible for the personal information collected through the 2bd9.io platform and all associated digital services. As data controller, 2bd9 determines the purposes for which your personal data is processed and the means by which that processing takes place.

If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact the 2bd9 data team directly:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: We aim to acknowledge all data-related enquiries within 3 business days and resolve them within 30 calendar days.

2 Data We Collect

2bd9 collects personal data in two primary ways: information you provide directly when using the platform, and information collected automatically as you interact with 2bd9.io. The categories of personal data we process are outlined in the table below.

2bd9 does not collect special-category sensitive data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, unless required by law or provided voluntarily by the user in a support context.

3 How We Use Your Data

2bd9 uses the personal data we collect only for the specific purposes set out below. We do not sell your personal data to third parties for commercial marketing purposes.

• Account management: Creating, maintaining, and securing your 2bd9 account, including password recovery and session management.
• Service delivery: Processing bets, settling winnings, crediting bonus funds, and providing access to all gaming products offered on 2bd9.io.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts. Financial data is shared with payment processors only to the extent necessary to complete each transaction.
• Identity verification (KYC): Verifying your identity and age (you must be 21 or older) to comply with our platform's anti-fraud and responsible gaming obligations.
• Fraud prevention and security: Monitoring account activity for suspicious behaviour, detecting duplicate accounts, and identifying use of bots or automated tools that violate our Terms & Conditions.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance via live chat and email.
• Responsible gaming: Monitoring betting patterns to identify potential signs of problem gambling and, where appropriate, reaching out proactively with responsible gaming information.
• Platform improvement: Using aggregated and anonymised usage data to improve the 2bd9 user experience, fix bugs, and develop new features.
• Legal compliance: Retaining records as required by applicable Bangladeshi law and responding to lawful requests from competent authorities.
• Marketing communications: Sending promotional offers, bonus alerts, and platform updates by email or SMS, subject to your communication preferences. You may opt out at any time by contacting [email protected].

4 Legal Basis for Processing

2bd9 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

1. Contractual necessity: Processing required to perform the contract between you and 2bd9 — for example, processing your bets, settling your winnings, and managing your account balance.
2. Legitimate interests: Processing carried out for 2bd9's legitimate business interests, such as fraud detection, platform security, abuse prevention, and analytics, provided those interests are not overridden by your fundamental rights.
3. Legal obligation: Processing required to comply with applicable legal requirements, including identity verification and record retention obligations under Bangladeshi law.
4. Consent: Processing based on your explicit consent, such as sending you marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

Your personal data may be disclosed to the following categories of recipients:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC service providers engaged to verify the authenticity of identity documents submitted during account verification.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game providers may receive limited technical data (e.g., session tokens) necessary to deliver their games within the 2bd9 platform environment.
• Analytics and fraud detection providers: Anonymised or pseudonymised technical and usage data is shared with analytics platforms to support platform performance monitoring and fraud detection systems.
• IT and infrastructure providers: Hosting, cloud storage, and cybersecurity service providers who process data on 2bd9's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable Bangladeshi law or a lawful order from a competent authority, 2bd9 may disclose personal data without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving 2bd9, personal data held on registered users may be transferred to the acquiring entity, subject to the same or equivalent privacy protections.

All third-party service providers who process personal data on behalf of 2bd9 are required to handle that data in accordance with applicable data protection principles and are contractually prohibited from using it for any purpose beyond the specific service they provide.

6 Cookies & Tracking

2bd9.io uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how users interact with our site. Cookies are small text files placed on your device when you visit 2bd9.io. The types of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as preferred language, currency display (BDT or INR), and notification settings, so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how users navigate 2bd9.io — which pages are visited most frequently, where users enter and exit, and how long sessions last. This data helps us improve the platform experience.
• Marketing and attribution cookies: Track the source of your visit (for example, whether you arrived via a search engine or a promotional link) so we can measure the effectiveness of our marketing activity. These cookies do not identify you personally.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your 2bd9 account. Disabling functional or analytics cookies will not prevent platform access but may affect your user experience.

7 Data Retention

2bd9 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account's active status and for a minimum of 5 years following account closure, to support dispute resolution and legal compliance obligations.
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction, in accordance with financial record-keeping requirements applicable in Bangladesh.
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the most recent identity verification exercise, whichever is later.
• Customer support communications: Retained for 3 years from the date of the final communication in each support interaction.
• Marketing consent records: Retained for the duration of your subscription to marketing communications, plus 2 years following your opt-out, to evidence compliance with consent obligations.
• Technical and server logs: Typically retained for 90 days on a rolling basis, unless a specific log entry is flagged for retention in connection with a fraud investigation or legal proceeding.

When personal data is no longer required for any of the above purposes, 2bd9 will securely delete or anonymise it in accordance with our internal data destruction procedures.

8 Data Security

2bd9 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include, but are not limited to:

• TLS/SSL encryption: All data transmitted between your browser and 2bd9.io is protected by Transport Layer Security (TLS) encryption, ensuring that data in transit cannot be intercepted by third parties.
• Password hashing: User passwords are stored using industry-standard one-way cryptographic hashing algorithms. Plain-text passwords are never stored on 2bd9 systems.
• OTP-based authentication: Sensitive account actions — including large withdrawal requests and account detail changes — require one-time password (OTP) verification sent to your registered mobile number or email address.
• Access controls: Access to personal data within 2bd9's internal systems is restricted on a strict need-to-know basis. Only staff whose role requires access to specific categories of personal data are granted that access.
• Infrastructure security: 2bd9 hosting infrastructure is protected by firewalls, intrusion detection systems, and regular security patching to mitigate known vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, 2bd9 will notify affected users without undue delay, providing details of the nature of the breach and the steps being taken to address it.

While 2bd9 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security against every possible threat. You are responsible for keeping your own login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

9 Your Rights

As a user of the 2bd9 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: You may ask us to correct inaccurate or incomplete personal data held in your account. For basic account details such as your email address or phone number, you can update these directly in Account Settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is otherwise unlawful. Note that certain data must be retained for legal compliance reasons and cannot be erased on request alone.
• Right to restrict processing: You may request that we suspend the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to data portability: Where processing is based on your consent or the performance of a contract with you, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though 2bd9 may be entitled to continue processing where it has compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

10 Third-Party Services

The 2bd9 platform integrates with third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to deliver casino and live dealer games within the 2bd9 environment. When you launch a game provided by one of these studios, limited technical data — such as a session token and your account identifier — is transmitted to the studio's servers to initialise and manage the game session.

These game studios operate under their own privacy policies and data processing arrangements. 2bd9 enters into data processing agreements with all studio partners to ensure that user data shared in the course of game delivery is handled in accordance with applicable data protection standards and is not used by the studio for independent marketing or profiling purposes.

2bd9.io may contain links to third-party websites in promotional content or informational articles. 2bd9 is not responsible for the privacy practices of any third-party website and recommends that you review the privacy policy of any external site you visit.

11 Children's Privacy

The 2bd9 platform is not intended for use by individuals under the age of 21. We do not knowingly collect, retain, or process personal data belonging to anyone under 21 years of age. If we become aware that an account has been registered by an individual who is underage, we will immediately close that account, void all associated balances, and securely delete the personal data collected, retaining only the minimum information necessary to prevent re-registration.

If you are a parent or guardian and believe that a minor in your care has registered on 2bd9.io, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12 Policy Updates

2bd9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes, we will notify registered users by posting a prominent notice on the 2bd9 homepage or by sending a notification to your registered email address, with at least 7 days' advance notice before the revised policy takes effect.

The effective date displayed at the top of this page identifies the version currently in force. We encourage you to review this Privacy Policy periodically, particularly before making a new deposit or providing updated personal data. Your continued use of 2bd9.io after the effective date of any revision constitutes your acceptance of the updated policy.

If you do not accept the revised Privacy Policy, you must cease using the 2bd9 platform and contact [email protected] to request account closure. Any personal data already collected will be retained for the minimum periods required by law and then securely deleted.

Last reviewed: 1 January 2026  |  Version: 2.0  |  Contact: [email protected]