56bd Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

This Privacy Policy ("Policy") sets out the basis on which 56bd ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data obtained from individuals ("you", "your", "the player", "the user") who access or use the 56bd website at 56bd.io, including all associated services, betting features, casino game offerings, account management tools, and promotional features made available through the Platform.

56bd operates as an online betting and casino platform serving adult players aged 21 and above across Bangladesh, with primary audiences in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We handle personal data responsibly and in accordance with applicable data protection principles.

This Policy applies to all forms of personal data collected and processed in connection with the 56bd Platform. By registering an account, depositing funds, placing bets, or simply visiting 56bd.io, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue your use of the Platform immediately.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 56bd, operating the Platform at 56bd.io. As the data controller, 56bd determines the purposes and means by which your personal data is processed. All data protection queries, access requests, erasure requests, and formal complaints should be directed to the 56bd support team in the first instance.

Where 56bd engages third-party service providers — including payment processors, game studios, identity verification providers, and infrastructure partners — to process personal data on our behalf, those parties act as data processors under contractual arrangements that require them to handle your data securely and in accordance with instructions provided by 56bd. 56bd remains the controller and retains full accountability for how your data is used.

56bd collects a range of personal data in order to operate the Platform, process financial transactions, verify identity, comply with anti-money laundering obligations, and deliver a personalised user experience. The categories of personal data we collect are set out in the table below.

56bd does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information as a standard part of the registration or KYC process, unless specifically required by law enforcement or regulatory authorities.

56bd collects personal data through several distinct channels depending on the nature of your interaction with the Platform:

• Direct Submission: Data you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or responding to a survey.
• Automated Technical Collection: Data collected automatically as you navigate the Platform, including IP addresses, session identifiers, browser fingerprints, click paths, and device information, collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank when you execute a deposit or withdrawal.
• Identity Verification Providers: Confirmation or rejection signals from third-party KYC verification services engaged by 56bd to validate identity documents.
• Game Providers: Aggregated session and outcome data from game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, relating to your casino game activity on the Platform.
• Fraud Prevention Partners: Risk assessment scores and device reputation data from third-party fraud detection services used to protect both the Platform and our players from unauthorised activity.

56bd uses the personal data we collect for a defined set of purposes, all of which are necessary to deliver a safe, compliant, and high-quality betting and casino service to players across Bangladesh. The primary purposes for which we process personal data are as follows:

• Account Creation and Management: Setting up and maintaining your 56bd player account, including processing registration details, managing login credentials, and maintaining account history.
• Identity Verification and KYC Compliance: Verifying that you meet the age requirement (21+), confirming your identity through document checks, and fulfilling our anti-money laundering obligations.
• Payment Processing: Facilitating deposits and withdrawals in BDT (৳) via your chosen payment method, reconciling transaction records, and investigating disputed transactions.
• Betting and Gaming Services: Enabling you to place sports bets, participate in live casino games, play slot titles, and access all other game content available on the Platform.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling behaviour, applying player-requested limits and self-exclusions, and contacting players where responsible gaming interventions are warranted.
• Fraud and Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bot activity, money laundering, and other abuse of the Platform.
• Customer Support: Responding to support queries, resolving disputes, processing complaints, and maintaining records of communications.
• Regulatory Compliance: Fulfilling obligations under applicable laws, responding to lawful requests from government authorities, and maintaining records required by financial regulators.
• Platform Improvement: Analysing usage patterns and behavioural data to improve the Platform's features, performance, game selection, and user experience.
• Marketing (with consent): Sending promotional offers, bonus notifications, and event announcements via email, SMS, or in-platform notification to players who have given explicit consent to receive marketing communications.

56bd processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are:

• Contractual Necessity: Processing required to perform the contract between 56bd and the player — including account creation, payment processing, and delivery of betting and gaming services — is lawful on the basis that it is necessary to fulfil that contract.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, anti-money laundering record-keeping, and responding to lawful authority requests — is lawful on the basis of legal obligation.
• Legitimate Interests: Processing undertaken for fraud prevention, platform security, abuse detection, and internal analytics is lawful on the basis of 56bd's legitimate interests, provided those interests are not overridden by the fundamental rights of the data subject.
• Consent: Processing for marketing communications, optional cookies, and personalisation features is lawful on the basis of your freely given, specific, informed consent. Consent may be withdrawn at any time without penalty.

56bd does not sell your personal data. We share personal data with third parties only to the extent strictly necessary to operate the Platform and comply with our legal obligations. The categories of third parties with whom we share data are described below:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals. These providers are subject to their own data protection obligations.
• Identity Verification Partners: Third-party KYC providers receive copies of identity documents and personal details for the sole purpose of verifying your identity. Document copies are not retained by these providers beyond the verification window.
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a player session token and account identifier when you launch their games. They do not receive your full personal profile. Their data practices are governed by their own privacy policies.
• Fraud Prevention and Security Services: Anonymised or pseudonymised technical data (IP address, device fingerprint, risk score) is shared with fraud detection partners to protect the Platform and its users.
• Regulatory and Law Enforcement Authorities: 56bd will disclose personal data to competent authorities where required by law, court order, or in response to a lawful request from a government or regulatory body. We will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and accountants engaged by 56bd may access personal data on a need-to-know basis, subject to strict confidentiality obligations.

56bd retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. Our standard retention periods by data category are as follows:

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player. Where data is anonymised rather than deleted, the anonymised data set may be retained indefinitely for analytical purposes.

56bd maintains a comprehensive set of technical and organisational security measures to protect personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between player devices and 56bd servers.
• AES-256 encryption for personal data stored at rest within 56bd's infrastructure.
• Multi-factor authentication (OTP-based) for player accounts accessed from new or unrecognised devices.
• Role-based access controls ensuring that 56bd staff and contractors can only access personal data to the extent required for their specific job function.
• Regular third-party penetration testing and vulnerability assessments of the Platform's infrastructure.
• Automated anomaly detection systems that flag unusual account activity for review by the security team.
• Strict data minimisation practices — we collect only the personal data we genuinely need for each stated purpose.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 56bd will take immediate steps to contain and assess the breach, notify affected individuals without undue delay where the breach is likely to result in high risk to them, and take remedial action to prevent recurrence. All breach incidents are documented internally regardless of severity.

56bd uses cookies and similar tracking technologies to operate the Platform and improve the experience for all users. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programmes or deliver viruses to your device. The types of cookies used by 56bd are categorised as follows:

• Strictly Necessary Cookies: Essential for the basic functioning of the Platform — including maintaining your login session, remembering your account preferences, and enabling secure page navigation. These cookies cannot be disabled without severely impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the Platform — including which pages are visited most frequently, how long users spend on each section, and where users arrive from. This data helps us improve Platform performance and content relevance.
• Functional Cookies: Allow the Platform to remember your preferences (such as preferred language, currency display, and table limit preferences) to provide a more personalised experience across sessions.
• Marketing and Targeting Cookies: Used only with your explicit consent to deliver promotional content relevant to your interests, both on and off the 56bd Platform. These cookies track your activity across web sessions to build a preference profile.

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will affect core Platform functionality. Disabling performance, functional, or marketing cookies will not prevent you from using the Platform but may limit personalisation features.

As a data subject, you hold a defined set of rights in relation to the personal data that 56bd processes about you. 56bd is committed to honouring these rights in full and in a timely manner. Your rights are as follows:

• Right of Access: You may request a copy of all personal data 56bd holds about you. Requests will be fulfilled within 30 days. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating a contact number) can be made directly via account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Erasure may not be possible where retention is required by law.
• Right to Restriction of Processing: You may request that 56bd restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that personal data you have provided to 56bd be returned to you in a structured, commonly used, machine-readable format, or transmitted directly to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You have an absolute right to object to processing for direct marketing purposes, which 56bd will honour immediately upon receipt of an objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact the 56bd support team via live chat or by email using the address displayed in the footer. Please include your registered account username and a clear description of the right you wish to exercise. 56bd will acknowledge all rights requests within five (5) business days.

The 56bd Platform is strictly intended for adults aged 21 years and above. 56bd does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account, submit personal data, or use any feature of the 56bd Platform.

As part of our registration and KYC process, all players are required to provide proof of age. 56bd reserves the right to suspend or permanently close any account where there is reasonable suspicion that the registered player is under the age of 21, pending completion of a full age verification review. Any funds deposited by a player who is subsequently confirmed to be under 21 will be refunded in full, and no winnings generated during the period of underage use will be paid out.

If you believe that a minor has registered an account on the 56bd Platform or has submitted personal data without authorisation, please contact our support team immediately via live chat or by email so that we can investigate and take appropriate action without delay.

56bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable laws or regulations, changes to the Platform's features, or modifications to our relationships with third-party service providers. All changes will be published on this page with an updated "Last Updated" date at the top of the document.

Where changes to this Policy are material — meaning they significantly affect your rights or how your personal data is used — 56bd will notify registered players by email and/or via an in-platform notification at least 14 days before the changes take effect. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically to stay informed about how 56bd protects your personal data. The version number and effective date at the top of the document will always confirm whether you are reading the most current version.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 56bd has handled your personal data, please get in touch with us using one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the 56bd Platform. Live chat is the fastest way to reach the support team for privacy-related queries.
• Email: [email protected] — please include "Privacy Query" or "Data Rights Request" in the subject line so your message is directed to the correct team member promptly.

56bd aims to resolve all privacy-related queries and formal complaints within 28 calendar days of receipt. If you are not satisfied with the resolution provided by 56bd, you retain the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction.