Your Privacy Matters at 26bd

26bd ("we", "us", "our", "the Platform") operates the website located at https://26bd.club and is the data controller responsible for the personal information collected from users ("you", "Player", "User") of the Platform. As data controller, 26bd determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through your use of the 26bd website, mobile-optimised platform, customer support channels, promotional communications, and any other interaction you have with 26bd. It covers data collected when you browse the site as a guest, when you register an account, when you make deposits or withdrawals, and when you contact our support team.

By accessing or using 26bd, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this policy, you should immediately discontinue your use of the Platform.

26bd collects personal data through several channels. The categories of data we collect, and the context in which each category is gathered, are set out below.

2.1 Registration Data

When you create a 26bd account, we collect the following information:

• Full legal name (as it appears on a government-issued ID)
• Date of birth (to verify you meet the 18+ age requirement)
• Residential address (including district, division, and postcode)
• Email address
• Mobile phone number (used for account verification and support)
• Username (chosen by you at registration)
• Hashed password (we never store passwords in plain text)

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to verify your eligibility, we may request:

• A copy of a government-issued photo ID (National Identity Card, passport, or driving licence)
• A recent utility bill, bank statement, or similar proof of address (dated within the last 3 months)
• A selfie photograph or short video for liveness verification in certain cases

2.3 Transaction Data

Each time you make a deposit or request a withdrawal, we record:

• Transaction amount in BDT
• Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer)
• Transaction reference number provided by the payment gateway
• Timestamp and transaction status
• The mobile number or bank account identifier associated with the payment (last 4 digits only for card-based methods)

2.4 Gameplay & Betting Data

• Game sessions played, bet amounts, win/loss outcomes, and session durations
• Sports betting selections, stake values, and settlement outcomes
• Bonus balances, wagering progress, and promotional participation history

2.5 Technical & Device Data

When you access 26bd, our servers automatically collect:

• IP address and approximate geographic location (city/region level)
• Browser type and version, operating system, and device type
• Referring URL and pages visited within 26bd
• Session duration, click patterns, and scroll depth (via analytics tools)
• Cookie identifiers (see the Cookies section below)

2.6 Communications Data

When you contact 26bd support via email or WhatsApp, we retain a record of the correspondence, including the content of messages, timestamps, and any attachments you send. This data is used to resolve your query, maintain support quality, and comply with dispute resolution obligations.

26bd processes your personal data for the following clearly defined purposes:

26bd processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil our contract with you (the Terms & Conditions you agreed to at registration), including account creation, payment processing, and platform provision.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including age verification, anti-money laundering checks, and record-keeping obligations.
• Legitimate interests: Processing based on 26bd's legitimate business interests, including fraud detection, platform security, and improving our services — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where processing is based on consent, you will be given a clear opportunity to opt in before that processing begins. Withdrawal of consent can be exercised through your account settings or by contacting [email protected].

26bd does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We share personal data with third parties only in the limited circumstances described below.

5.1 Service Partners

We work with third-party service providers who process personal data on our behalf to deliver the 26bd platform. These include:

• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — game session data is shared with the relevant provider to operate live and RNG-based games.
• Payment processors (bKash, Nagad, Rocket, Upay, and banking partners) — transaction data is shared as necessary to process deposits and withdrawals.
• KYC / identity verification providers — document images and identity data may be passed to a third-party verification service to conduct automated or manual identity checks.
• Analytics providers — anonymised or pseudonymised technical data (device type, page views, session duration) may be shared with analytics platforms to help us understand and improve platform performance.
• Customer support tools — support ticket content and communication history may be stored in a third-party helpdesk platform to facilitate efficient query resolution.

All service partners are bound by data processing agreements that require them to handle your data securely, use it only for the specified purpose, and not disclose it to any further third parties without 26bd's prior written authorisation.

5.2 Legal Disclosure

26bd may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, court injunction, or applicable law. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permissible, will notify you of the disclosure.

26bd uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies are used to remember your preferences, maintain your login session, and help us understand how players use the site.

You may control non-essential cookies through your browser settings. Disabling analytics or marketing cookies will not prevent you from using the Platform, but may affect how well certain features (such as personalised promotions) function. Note that disabling essential cookies may prevent the Platform from operating correctly.

26bd retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data (registration details, gameplay history, transaction records): retained for the duration of your account's active lifetime plus 5 years following account closure, to comply with financial record-keeping obligations.
• KYC documents (ID copies, proof of address): retained for 5 years following the completion of the identity verification process or account closure, whichever is later.
• Customer support communications: retained for 3 years from the date of the interaction, to enable dispute resolution and quality assurance.
• Technical logs (IP addresses, access logs): retained for up to 12 months, after which they are anonymised or deleted.
• Marketing preference records (opt-in / opt-out logs): retained for the lifetime of your account and for 2 years following account closure, to demonstrate consent compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data (with no link back to any individual) may be retained indefinitely for statistical and analytical purposes.

If you close your 26bd account, data subject to a mandatory retention period will be archived in a restricted-access environment and will not be used for any purpose other than compliance with the retention obligation.

As a user of the 26bd platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and your registered username or email address.

• Right of Access: You may request a copy of the personal data 26bd holds about you, together with information about how it is used, where it comes from, and with whom it has been shared.
• Right to Rectification: If any personal data 26bd holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine profile data (email address, phone number), you may update these directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent was the legal basis). Erasure requests are subject to 26bd's legal retention obligations — data that must be kept to comply with anti-money laundering or financial record-keeping law cannot be deleted until the mandatory retention period has elapsed.
• Right to Restriction of Processing: You may request that 26bd restricts the processing of your data (i.e., stores it but does not actively use it) while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Object: You may object to the processing of your personal data where 26bd relies on legitimate interests as the legal basis. 26bd will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

26bd takes the security of your personal data seriously. We implement a multi-layered approach to protecting your information from unauthorised access, disclosure, alteration, or destruction.

9.1 Technical Safeguards

• SSL/TLS encryption: All data in transit between your device and 26bd's servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Password hashing: Account passwords are stored as one-way cryptographic hashes using a modern hashing algorithm. Even 26bd's internal teams cannot retrieve your plain-text password.
• Encrypted data storage: Sensitive data categories (KYC documents, payment references) are stored in encrypted form at rest.
• Access controls: Internal access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based access controls enforced at the system level.
• Intrusion detection: 26bd's infrastructure includes automated intrusion detection and anomaly monitoring systems that alert the security team to suspicious activity patterns in real time.

9.2 Organisational Safeguards

• All staff and contractors with access to personal data receive data protection and security awareness training at onboarding and on an annual basis thereafter.
• Third-party service partners are vetted for security standards before being granted access to any 26bd player data.
• Data breach response procedures are in place; in the event of a breach that poses a risk to your rights, affected players will be notified without undue delay.

26bd reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via email (to the address on file) and/or by displaying a prominent notice on the Platform at next login. The "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Privacy Policy periodically to stay informed about how 26bd protects your personal data. Your continued use of the Platform after the effective date of any updated policy constitutes your acceptance of the revised terms.

For all privacy-related enquiries — including data access requests, correction requests, erasure requests, objections to processing, or general questions about how 26bd handles your data — please contact us using the details below:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support hours: 09:00–23:00 BST (UTC+6), 7 days a week

Please include your registered username or account email address in any privacy request so that we can locate and verify your account before processing the request.