39bd Privacy Policy

This Privacy Policy ("Policy") describes how 39bd ("39bd", "we", "us", "our") collects, uses, stores, and protects personal data provided by or collected from users ("you", "your", "User", "Player") of the online betting and casino platform accessible at 39bd.io. This Policy applies to all services offered through the 39bd website, including cricket betting, live casino, slot games, instant games, and all related account and payment functions.

39bd is an internationally operated offshore online gaming platform serving the Bangladeshi market in English. We are committed to handling your personal data with care, transparency, and in accordance with recognised data protection principles. We do not sell your personal data to third parties for commercial marketing purposes.

This Policy should be read alongside the 39bd Terms and Conditions and Responsible Gaming Policy, both of which are available on this website. Together, these documents form the complete agreement governing your use of 39bd services.

39bd operates as an offshore online gaming platform. For the purposes of this Privacy Policy, 39bd is the data controller responsible for the personal data of its registered players and website visitors. As data controller, 39bd determines the purposes and means by which personal data is processed.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights described in Section 9 of this Policy, you may contact the 39bd data protection team using the details provided in Section 14 of this document.

39bd collects personal data in order to operate the platform, verify player identity, process transactions, maintain account security, and fulfil our obligations under applicable law. The categories of personal data we collect are set out in the table below.

39bd does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, biometric data used for identification purposes, or health data, except where such data is voluntarily provided by you in the context of a responsible gaming self-exclusion request.

39bd collects your personal data through the following means:

• Direct provision at registration: When you create a 39bd account via the 39bd Login page, you provide identity and contact data directly through the registration form.
• Account activity: All betting activity, deposits, withdrawals, and bonus claims generate gaming and financial data records associated with your account automatically.
• KYC document submission: When you submit government-issued documents for identity verification, 39bd collects and stores a copy of those documents for compliance purposes.
• Payment processor integration: When you deposit via bKash, Nagad, Rocket, or Upay, relevant transaction reference data is passed to 39bd by the payment processor to confirm and record the transaction. 39bd does not store full mobile financial service PINs or passwords.
• Automated technical collection: Technical and usage data is collected automatically via server logs, session tracking, and standard web analytics mechanisms when you access the 39bd website.
• Support interactions: Any communication you initiate with the 39bd support team — whether via live chat or email — is recorded and stored as part of your account history.
• Third-party game providers: Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may transmit game session data back to 39bd as part of the game integration. This data is used for dispute resolution and account integrity purposes.

39bd processes your personal data only where we have a legitimate reason to do so. The primary purposes for which your data is used are described below, along with the applicable legal basis in each case.

• Account creation and management: To set up and maintain your 39bd player account, process login requests, and manage your account preferences. Legal basis: contractual necessity.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with anti-money laundering obligations. Legal basis: legal obligation and contractual necessity.
• Processing deposits and withdrawals: To receive and process BDT deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests to your verified payment method. Legal basis: contractual necessity.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in the 39bd Terms and Conditions. Legal basis: legitimate interest and legal obligation.
• Responsible gaming compliance: To monitor betting patterns for signs of problem gambling, to implement and enforce deposit limits and self-exclusion requests, and to contact players who may be at risk. Legal basis: legal obligation and legitimate interest in player welfare.
• Customer support: To respond to your queries, complaints, and support requests through live chat and email. Legal basis: contractual necessity.
• Promotional communications: To send you information about 39bd bonuses, promotions, and seasonal offers (such as BPL season promotions or Eid special bonuses) where you have opted in to receive such communications. Legal basis: consent.
• Platform analytics and improvement: To understand how players use the 39bd platform, identify usability issues, and improve the quality of our services. Legal basis: legitimate interest.
• Legal compliance: To comply with applicable laws, court orders, and regulatory requirements including anti-money laundering and counter-terrorism financing obligations. Legal basis: legal obligation.

39bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of third parties solely to the extent necessary for the purposes described in Section 5 of this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum data necessary to process deposit and withdrawal transactions initiated by you.
• Identity verification providers: Third-party KYC service providers may receive copies of your identity documents and basic personal data for the sole purpose of performing identity verification checks on behalf of 39bd.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive session and account reference data necessary to operate their games within the 39bd platform. These providers are contractually prohibited from using this data for purposes beyond game operation.
• IT infrastructure and hosting providers: Our technology and cloud infrastructure partners may process personal data as part of platform hosting, data storage, and security monitoring services. All such providers operate under strict data processing agreements with 39bd.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, 39bd may disclose personal data to law enforcement bodies, financial intelligence units, or other competent authorities. 39bd will only disclose the minimum data required to fulfil the specific legal obligation.
• Professional advisers: Lawyers, accountants, auditors, and insurers retained by 39bd may have access to personal data on a strictly need-to-know basis and are bound by confidentiality obligations.

39bd retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status and for a minimum of five years following account closure, in order to meet anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five years from the date of the transaction.
• Support communications: Live chat transcripts and email records are retained for a minimum of two years from the date of the communication, or longer where a formal complaint or legal matter is ongoing.
• Technical and usage data: Log files and anonymised usage analytics data are retained for up to twelve months from the date of collection, after which they are aggregated or deleted.
• Self-exclusion records: Records of self-exclusion requests and their effective dates are retained permanently to prevent re-registration by self-excluded players.

Where personal data is no longer required for any lawful purpose, 39bd will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.

39bd takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 39bd platform is protected using industry-standard SSL/TLS encryption. The 39bd.io website uses HTTPS exclusively — unencrypted HTTP connections are not permitted.
• Password hashing: Account passwords are never stored in plain text. All passwords are stored using strong, salted cryptographic hashing algorithms.
• Access controls: Access to personal data held within the 39bd platform is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and periodically audited.
• Payment data isolation: 39bd does not store full mobile financial service credentials. Payment transaction data is handled exclusively through the secure APIs of the respective payment processors.
• Intrusion detection: 39bd employs server-side monitoring systems to detect and respond to unusual access patterns, potential account takeover attempts, and other security anomalies.
• Regular security reviews: Our platform undergoes periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.

As a user of the 39bd platform, you have the following rights in relation to your personal data held by 39bd. To exercise any of these rights, please contact the 39bd support team at [email protected] (plain text, not a clickable link).

• Right of access: You have the right to request a copy of the personal data that 39bd holds about you. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data held by 39bd is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections to contact data can be made by contacting support directly.
• Right to erasure: In certain circumstances, you have the right to request that 39bd delete your personal data. This right is subject to limitations — for example, where data must be retained to comply with anti-money laundering obligations or to resolve an outstanding dispute, erasure may not be possible for those specific data categories.
• Right to restriction of processing: You may request that 39bd restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending the outcome of that objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have the right to object at any time to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

39bd will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no fee for submitting a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

39bd uses cookies and similar tracking technologies to ensure the proper functioning of the platform, to remember your preferences, and to understand how players use the site. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on 39bd.io:

• Essential cookies: These cookies are strictly necessary for the 39bd platform to function correctly. They enable core features such as session management, login state, and secure account access. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language and display options — to provide a more personalised experience on the platform.
• Analytics cookies: These cookies collect aggregated information about how players navigate the 39bd website. The data is used to identify pages that perform well or poorly and to improve the overall user experience. No individually identifiable data is collected via analytics cookies.
• Security cookies: These cookies help 39bd detect and prevent fraudulent activity, account takeover attempts, and other security threats by identifying unusual patterns of behaviour across sessions.

You may control or disable non-essential cookies through your browser settings. Most modern browsers allow you to block cookies, delete existing cookies, or receive a notification before a new cookie is placed. Note that disabling essential cookies may prevent you from accessing certain features of the 39bd platform.

The 39bd platform integrates with a range of third-party service providers to deliver games, process payments, and verify identity. Each of these providers operates its own privacy policy and data protection practices. 39bd is not responsible for the privacy practices of third-party providers, but we only engage providers who meet appropriate standards of data security and confidentiality.

Key third-party integrations relevant to your personal data include:

• Game providers — Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi operate the game software accessed through the 39bd platform. These providers may process game session reference data to deliver game content and resolve disputes.
• Payment processors — bKash, Nagad, Rocket, and Upay process mobile financial service transactions. Bank transfer partners including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank process bank-to-bank transactions. Each processor handles only the data necessary to complete and verify the specific transaction.
• KYC verification services — Identity document verification is performed by third-party KYC technology providers under strict data processing agreements. Submitted identity documents are stored securely and used only for verification purposes.

The 39bd website does not contain links to external third-party websites. If you navigate away from 39bd.io to any external site, your use of that site will be governed by that site's own privacy policy, over which 39bd has no control.

39bd operates exclusively for adults aged 21 years and above. The platform does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration requirement, and 39bd conducts age verification checks as part of its KYC process to enforce this restriction.

If 39bd discovers or has reason to believe that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended. Any funds held in the account may be forfeited in accordance with the 39bd Terms and Conditions, and all personal data associated with the account will be securely deleted once the investigation is concluded.

39bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, the "Last Updated" date at the top of this page will be revised and, where appropriate, registered players will be notified via email or an in-platform notification.

Your continued use of the 39bd platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this page periodically — particularly before making any deposit or withdrawal — to ensure you remain comfortable with how your data is handled.

For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data held by 39bd, please use the following contact channels:

• Live Chat: Available 24 hours a day, 7 days a week, through the 39bd platform. Live chat is the fastest way to reach the support team for general privacy queries. Average first response time is under three minutes during Bangladesh Standard Time (BST, UTC+6) peak hours.
• Email: [email protected] — this is a plain text address and is not a clickable link. For formal data rights requests, please use the subject line "Data Privacy Request — [Your Account Username]". We aim to acknowledge all email queries within 48 hours and to provide a full response within 30 calendar days.

39bd takes all privacy-related queries and complaints seriously. If you are not satisfied with the response you receive, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.