Privacy Policy — 18bd

18bd uses the personal data we collect for the following purposes, all of which are necessary either to perform our contract with you, to comply with our legal obligations, or to pursue our legitimate interests in operating a safe, fair and compliant gaming platform:

• Account creation, maintenance and customer support — to register your account, verify your identity, process your requests and respond to enquiries.
• Payment processing — to facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket and bank transfer, and to maintain accurate financial records.
• Regulatory compliance — to meet KYC, anti-money-laundering (AML) and responsible gaming obligations, including age verification, identity checks and suspicious activity monitoring.
• Platform security and fraud prevention — to detect, investigate and prevent fraudulent transactions, account abuse, money laundering and other prohibited conduct described in our Terms and Conditions.
• Service improvement and analytics — to analyse aggregate usage patterns, identify technical issues and improve the performance and reliability of the platform for players in Bangladesh.
• Responsible gaming monitoring — to identify patterns of play that may indicate a player is experiencing harm, and to proactively offer responsible gaming tools where appropriate.

18bd does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated screening tools flag an account for review, a member of our team will assess the case before any adverse action is taken.

18bd does not sell, rent or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors and financial service providers — bKash, Nagad, Rocket, Upay and partner banks receive only the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification and KYC service providers — third-party identity verification partners may receive the documents and data you submit as part of the KYC process. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
• Law enforcement and regulatory authorities — 18bd will disclose personal data to competent authorities where required to do so by law, court order or regulatory direction. Where permitted by law, we will notify you of such a disclosure. 18bd cooperates fully with lawful requests from law enforcement agencies in connection with fraud, money laundering and other criminal investigations.
• Technology and infrastructure service providers — hosting, database, security monitoring and analytics service providers may process technical data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to 18bd.

18bd requires all third-party service providers who handle your personal data to implement technical and organisational security measures appropriate to the sensitivity of the data concerned. We do not permit our service providers to use your data for their own purposes or to pass it on to further third parties without our written authorisation.

18bd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. All data transmitted between your device and the 18bd platform is encrypted using SSL/TLS technology. Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest. Access to personal data within 18bd is restricted on a need-to-know basis; only authorised personnel whose roles require access to specific categories of data are permitted to view that data, and all such access is logged and audited.

While 18bd takes its data security responsibilities seriously, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 18bd will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its impact and prevent recurrence. We recommend that you use a strong, unique password for your 18bd account and that you contact us immediately if you suspect any unauthorised access.

Subject to applicable law, you hold the following rights in respect of the personal data that 18bd holds about you. To exercise any of these rights, please contact our customer support team with your request. We will respond within a reasonable timeframe and in any event within thirty days of receipt.

To exercise any of the rights above, please contact our support team at [email protected] with the subject line 'Data Request' and a description of your request. We may need to verify your identity before fulfilling your request. There is no charge for exercising your rights in ordinary circumstances.

18bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law or the services we offer. When we make material changes, we will publish the revised policy on this page with an updated effective date and, where appropriate, notify active players by email or via an in-platform notice. Your continued use of the 18bd platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we handle your personal data.