27bd Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how 27bd ("27bd", "we", "us", "our") collects, processes, stores, and protects personal data relating to players and visitors ("you", "your") who use the 27bd platform at 27bd.ws. This Policy applies to all interactions with the 27bd platform, whether through a web browser on a desktop computer or through a mobile browser on an Android or iOS smartphone — including devices commonly used in Bangladesh such as Walton, Symphony, Samsung Galaxy, or Xiaomi handsets.

By registering an account on 27bd or by continuing to use the 27bd platform after this Policy has been published, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the 27bd platform and contact us to request account closure. This Policy should be read alongside the 27bd Terms and Conditions, which form part of the agreement between you and 27bd.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is 27bd. The data controller determines the purposes and means of processing your personal data. All enquiries relating to this Policy should be directed to the 27bd support team using the contact details below.

3. Information We Collect

27bd collects personal data only to the extent necessary to provide a safe, functional, and compliant online gaming service to players in Bangladesh. We collect data through three primary channels: data you provide directly, data generated automatically through your use of the platform, and data received from third-party service providers. The categories of personal data we may collect are as follows:

• Registration data: your full name, date of birth, email address (if provided), and mobile phone number registered in Bangladesh (e.g. a Grameenphone, Robi, Banglalink, or Teletalk number). This information is provided by you directly at the time of account registration and is used to establish and maintain your player account.
• Identity verification data: government-issued identity documents such as a National Identity Card (NID), passport, or driving licence submitted during KYC verification. This category also includes any selfie or photograph submitted as part of a liveness check during the verification process.
• Financial and payment data: records of deposits and withdrawals including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT, transaction timestamps, and the mobile wallet number or card details used. 27bd does not store full card numbers; card data is tokenised by our payment processor.
• Gaming activity data: a complete record of your gaming activity on the 27bd platform, including game sessions, bet amounts, win and loss outcomes, bonus usage, free spin redemptions, and responsible gaming tool activations (such as deposit limit settings and self-exclusion requests). This data is retained for regulatory compliance, fraud prevention, and dispute resolution purposes.
• Device and technical data: IP address, device type and model, operating system version, mobile browser type and version, screen resolution, and general geographic location (country and city level only — 27bd does not collect precise GPS coordinates). On mobile devices, this includes the type of mobile data connection (Grameenphone 4G, Robi 4G, etc.) where determinable from the request headers.
• Communications data: records of any communications between you and the 27bd support team, including live chat transcripts, support ticket history, and email correspondence (where applicable). These records are retained to maintain a clear history of your interactions with 27bd and to facilitate dispute resolution.

4. How We Use Your Personal Data

27bd processes your personal data for the following purposes. In each case, we process only the minimum data necessary to achieve that purpose. We do not process your personal data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account management: to create, verify, maintain, and close your 27bd player account; to authenticate your login sessions; and to ensure that only the authorised account holder can access account features, initiate deposits, and request withdrawals.
• Contract performance: to process deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard); to credit bonus funds to your account wallet; and to ensure accurate settlement of gaming activity.
• Legal and regulatory compliance: to perform KYC verification in compliance with applicable anti-money laundering requirements; to enforce the 27bd minimum age policy of 21 years; to maintain transaction records required by applicable regulations; and to respond to lawful requests from regulatory authorities, courts, or law enforcement agencies.
• Fraud prevention and platform security: to detect and investigate suspected fraudulent activity, bonus abuse, multi-accounting, collusion, and money laundering on the 27bd platform; to protect the security and integrity of player accounts; and to prevent unauthorised access to the platform.
• Responsible gaming: to apply the responsible gaming tools you have requested, including deposit limits, time-out periods, and self-exclusion orders; to monitor gaming patterns for indicators of problem gambling; and to train our customer support team to identify and respond to players who may be at risk.
• Customer support: to respond to your queries, complaints, and support requests; to maintain a record of your interactions with the 27bd support team for quality assurance and dispute resolution; and to provide support in both English and Bangla as advertised.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data to understand how players in Bangladesh use the 27bd platform; to identify technical issues and improve platform performance; and to develop new features and game offerings that better serve the Bangladesh market. Individual player data is not used for this purpose without anonymisation.

5. Legal Basis for Processing

27bd processes your personal data only where a lawful basis for doing so exists. The applicable legal bases for the processing activities described in this Policy are as follows:

• Contract performance: processing your registration data, payment data, and gaming activity data is necessary for 27bd to fulfil its contractual obligations to you as a registered player — specifically, to maintain your account, process your deposits and withdrawals in BDT, and deliver the gaming services you have selected.
• Legal obligation: processing personal data for KYC verification, age verification, anti-money laundering compliance, transaction record-keeping, and responding to regulatory or law enforcement requests is necessary for 27bd to comply with its applicable legal obligations.
• Legitimate interests: processing device and technical data for fraud prevention, platform security monitoring, and anonymised analytics is carried out on the basis of 27bd's legitimate interests in maintaining a secure, fair, and functional platform. These interests have been balanced against your privacy rights and are not overridden by those rights in the context of a regulated gaming platform.
• Consent: where 27bd sends you direct marketing communications (for example, promotional emails regarding new bonuses or seasonal offers during BPL season, Eid, or Ramadan), we do so only on the basis of your prior explicit consent. You may withdraw your consent to marketing communications at any time by contacting [email protected].

6. Sharing Your Personal Data

27bd does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data with third parties only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: 27bd shares transaction data with the payment processors that handle your deposits and withdrawals — including bKash, Nagad, Rocket, Upay, and card processing networks. This sharing is limited to the data strictly necessary to process your specific transaction and is governed by the data processing agreements 27bd holds with each payment partner.
• Game providers and content suppliers: some personal data (primarily your session identifier and gameplay data) is shared with the game providers whose titles are hosted on the 27bd platform — including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, and NetEnt — for the purpose of delivering the game itself, settling bets, and maintaining fair play records. These providers operate under their own privacy policies and data processing agreements.
• Regulatory and legal authorities: 27bd will disclose personal data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where it is legally required to do so — for example, in response to a valid court order, a request from the Bangladesh Financial Intelligence Unit (BFIU), or any other lawful demand. 27bd will notify you of such a disclosure unless legally prohibited from doing so.
• Fraud prevention and security services: 27bd may share limited personal data — such as IP addresses, device fingerprints, and transaction patterns — with specialist fraud prevention and cybersecurity service providers for the purpose of detecting and preventing fraudulent activity on the platform. Such providers are bound by strict contractual confidentiality obligations.

7. Payment Data and Financial Information

27bd treats payment and financial data with the highest level of confidentiality. When you make a deposit or request a withdrawal using a mobile wallet such as bKash, Nagad, or Rocket, or using a Visa or Mastercard card, the relevant transaction details are transmitted over an SSL-encrypted connection. 27bd does not retain full card numbers on its own servers; card numbers are tokenised at the point of entry by our PCI-DSS compliant payment processing partner, and only a masked token is stored by 27bd for the purpose of matching future transactions to your account.

Mobile wallet numbers (bKash, Nagad, Rocket, Upay) associated with your 27bd account are stored in a masked format and are used exclusively for the purpose of processing your withdrawals to the correct destination wallet and for verifying that withdrawal requests originate from the account holder. 27bd does not use your mobile wallet number for any outbound marketing or unsolicited communication. If you believe your payment details have been compromised, contact [email protected] immediately.

8. Cookies and Tracking Technologies

The 27bd platform uses cookies and similar tracking technologies to ensure that the platform functions correctly, to maintain your session while you are logged in, and to collect anonymised analytics data that helps us improve the platform experience for players in Bangladesh. The following categories of cookies are used on the 27bd platform:

• Strictly necessary cookies: these cookies are essential for the 27bd platform to function. They maintain your authenticated session, remember your language preference (English or Bangla), and ensure that security checks are passed correctly. These cookies cannot be disabled without making the platform inoperable, and no consent is required to place them.
• Performance and analytics cookies: these cookies collect anonymised data about how pages on the 27bd platform are accessed and used — for example, which game categories are most popular among players from Dhaka, Chittagong, Sylhet, and other cities in Bangladesh. This data is used in aggregate form only; it cannot be used to identify individual players.
• Functionality cookies: these cookies remember choices you have made on the 27bd platform — such as your preferred display language — so that the platform can provide you with a more personalised experience on your return visits. The data these cookies collect stays on the 27bd platform and is not shared with third parties.
• Session security cookies: these short-lived cookies are used to protect your 27bd account session against cross-site request forgery (CSRF) attacks and session hijacking. They expire automatically when you close your browser or log out of your 27bd account and contain no personally identifiable information.

You may manage or disable non-essential cookies by adjusting your mobile browser settings. On Android (Chrome), go to Settings → Site Settings → Cookies. On iOS (Safari), go to Settings → Safari → Privacy & Security. Please note that disabling strictly necessary cookies will prevent the 27bd platform from functioning correctly and may result in your session being terminated.

9. Data Retention

27bd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulation. The following retention periods apply to the main categories of personal data held by 27bd: account registration data and KYC documents are retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements. Transaction records (deposits, withdrawals, and bet history) are retained for a minimum of 5 years from the date of the transaction. Communications data (support chat transcripts and tickets) are retained for 2 years from the date of the communication. Anonymised analytics data has no fixed retention period, as it cannot be linked back to any individual player.

When your personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, 27bd will securely delete or anonymise that data. Where full deletion is technically impracticable within a short timeframe (for example, data held in encrypted backup systems), the data will be isolated from further processing and deleted at the earliest practicable opportunity.

10. Data Security

27bd implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and the 27bd platform; encryption at rest for sensitive data fields stored in 27bd's databases; access controls that restrict database access to authorised personnel only; regular security audits and vulnerability assessments; and two-factor authentication (2FA) options for player accounts.

Whilst 27bd takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 27bd will notify you without undue delay and will take all practicable steps to mitigate the impact of the breach. If you suspect that your 27bd account has been accessed without your authorisation, please contact [email protected] immediately.

11. Your Privacy Rights

As a player on the 27bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. 27bd will respond to all valid rights requests within a reasonable timeframe. Please note that some of these rights are subject to legal limitations — for example, 27bd cannot delete transaction records that are required to be retained under applicable anti-money laundering law.

• Right of access: you have the right to request a copy of the personal data that 27bd holds about you, together with information about how that data is being used. 27bd will provide this information in a clear, accessible format within a reasonable period of receiving your verified request.
• Right to rectification: if you believe that any personal data 27bd holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as a misspelled name), you may be able to update your details directly through your 27bd account settings. For corrections to identity documents, please contact support.
• Right to erasure: you have the right to request that 27bd delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and no other lawful basis for processing exists. This right is subject to legal retention obligations; 27bd cannot erase transaction records required by law.
• Right to restrict processing: you have the right to request that 27bd restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests pending verification of whether 27bd's interests override yours.
• Right to data portability: where 27bd processes your personal data on the basis of your consent or for contract performance, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you have the right to object to the processing of your personal data where 27bd relies on legitimate interests as its legal basis. You also have the right to object to direct marketing at any time. Where you object to direct marketing, 27bd will cease processing your data for that purpose immediately.

12. Children's Privacy

The 27bd platform is strictly for adults aged 21 and above. 27bd does not knowingly collect, process, or retain personal data from any person under the age of 21. If 27bd discovers or is informed that personal data of a person under 21 has been collected — for example, because a minor has misrepresented their age during registration — that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that a minor in your care has registered on the 27bd platform, please contact [email protected] without delay so that the account can be investigated and closed.

13. Changes to This Privacy Policy

27bd reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the Policy, 27bd will display a prominent notice on the 27bd platform to inform registered players. The updated Policy will take effect from the date stated in the revised document. The current version of the Privacy Policy will always be accessible at 27bd.ws/privacy-policy. We encourage all players to review this Policy periodically, particularly before making a deposit or enabling new account features.

14. Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how 27bd handles your personal data, please contact the 27bd support team. All privacy-related enquiries are handled by our dedicated support team, who are available 24 hours a day, 7 days a week, in both English and Bangla.