39bdt Privacy
Policy

Information We Collect

When you register for and use a 39bdt account, we collect a range of personal data that is necessary to operate the platform, verify your identity, process your transactions, and comply with our legal and regulatory obligations. The categories of data we collect are described below.

Registration & Identity Data

When you create a 39bdt account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — to verify that you meet the minimum age requirement of 18 years.
• Residential address — including street address, district, division, and postal code within Bangladesh.
• Email address — used for account communications, verification, and support correspondence.
• Mobile phone number — used for account verification and, where applicable, two-factor authentication.
• Username and password — your chosen login credentials for the 39bdt platform. Passwords are stored using one-way hashing and are never accessible in plain text by 39bdt staff.

Identity Verification (KYC) Data

As part of our Know Your Customer process, we may request the following documents at registration or at any subsequent point during your account lifecycle:

• A copy of your National Identity Card (NID), passport, or other government-issued photo ID.
• A recent utility bill, bank statement, or other document confirming your residential address (dated within 3 months).
• For large withdrawals or where AML concerns arise, documentation confirming the source of your deposited funds.

KYC documents are reviewed by our compliance team and stored securely. They are retained for the period required under applicable anti-money laundering obligations and are not used for any purpose other than identity verification and compliance.

Financial Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, or any supported bank, we collect:

• The payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank name).
• Transaction amount in BDT.
• Transaction reference numbers and timestamps.
• The mobile wallet number or bank account number associated with the transaction — sufficient to process the payment and verify ownership, but not your full banking credentials.

39bdt does not store full card numbers or banking passwords. Payment processing is handled via secure payment gateway integrations.

Platform Usage Data

As you use the 39bdt platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country/division level).
• Device type, operating system, and browser version.
• Pages visited, games played, bets placed, and session duration.
• Referral source — how you arrived at the 39bdt platform.
• Error logs and technical diagnostic data used to maintain platform stability.

How We Use Your Data

39bdt uses the personal data we collect solely for purposes that are directly connected to operating the platform, maintaining compliance, and improving the experience for players across Bangladesh. The table below summarises the primary purposes for which your data is used and the corresponding lawful basis for each:

Marketing Communications

39bdt may send you promotional emails or SMS notifications about bonuses, new games, cricket betting markets, BPL promotions, Eid special offers, and other platform news — but only where you have explicitly opted in to receive such communications during registration or subsequently via your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or adjusting your communication preferences in your account settings panel.

Unsubscribing from marketing communications does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent as part of the core service and are not optional.

Data Sharing & Third Parties

39bdt does not sell, rent, or trade your personal data to any third party for commercial gain. We share data with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, 39bdt shares relevant transaction data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners receive only the data required to execute the specific transaction and are bound by their own data protection and financial security obligations. 39bdt does not share your full payment credentials with any partner beyond what is technically required for transaction processing.

Game Software Providers

Certain games available on 39bdt are provided by third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. To enable real-money gameplay, limited session and account data (such as a session token and account balance) is shared with the relevant game provider for the duration of each game session. These providers are contractually obligated to handle this data securely and not to use it for any independent purpose.

Compliance & Legal Authorities

39bdt may be required to disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where we are legally obligated to do so — for example, in connection with an anti-money laundering investigation, a court order, or a formal request from a financial intelligence unit. In such cases, 39bdt will share only the minimum data required to satisfy the legal obligation and, where permitted by law, will notify the affected player of the disclosure.

Service Providers & Data Processors

39bdt engages certain third-party service providers who process data on our behalf to support platform operations. These may include cloud hosting providers, email delivery services, customer support software, and cybersecurity monitoring tools. All such providers are engaged under data processing agreements that require them to handle 39bdt player data securely, confidentially, and exclusively for the purposes specified by 39bdt. They are not permitted to use your data for their own purposes.

Cookies & Tracking Technologies

39bdt uses cookies and similar technologies (such as web beacons and local storage) on its platform. A cookie is a small text file that is stored on your device when you visit a website. Cookies allow 39bdt to recognise your browser, maintain your session, remember your preferences, and gather anonymised analytics about how players use the platform.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the 39bdt platform to function. They enable core features such as maintaining your login session, processing your bets, and remembering items in your account settings. These cookies cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use 39bdt — such as which pages are visited most often, how long sessions last, and which games attract the most play time. This data helps us improve the platform experience. No personally identifiable information is collected through these cookies.
• Functionality Cookies: These cookies remember your preferences — such as your preferred language, display settings, and notification preferences — so you do not have to re-enter them each time you visit.
• Marketing & Targeting Cookies: Where you have consented to receive personalised promotional content, these cookies help us deliver relevant bonus offers and game recommendations based on your activity on the platform. These cookies are only activated with your consent.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will impair your ability to use the 39bdt platform — in particular, you will not be able to maintain a logged-in session or place bets without these cookies enabled. For instructions on managing cookies in your specific browser, refer to your browser's help documentation. For questions about our use of cookies, contact [email protected].

Data Security & Retention

39bdt takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS Encryption: All data in transit between your device and the 39bdt platform is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted at rest.
• Access Controls: Access to personal data is restricted to 39bdt staff who have a legitimate operational need to access it. All staff with data access are subject to confidentiality obligations.
• Password Security: Player passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm so that even our internal team cannot read your password.
• Regular Security Audits: Our platform undergoes periodic security reviews to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: 39bdt maintains an internal data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players and take appropriate remediation steps as quickly as possible.

Data Retention Periods

39bdt retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Once a retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. If you request deletion of your data before a retention period has expired, we will delete what we are legally permitted to delete and explain any data that must be retained for compliance purposes.

Your Privacy Rights

As a 39bdt player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We aim to respond to all rights requests within 30 days. In some cases — for example, where a request is complex or we receive multiple requests simultaneously — we may extend the response period by a further 30 days, in which case we will notify you of the extension.

• Right of Access: You have the right to request a copy of the personal data that 39bdt holds about you. We will provide this in a structured, commonly used format. One copy per 12-month period is provided free of charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your details directly via your account settings panel, or by contacting support.
• Right to Erasure: You have the right to request that 39bdt delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). This right is subject to our legal obligations to retain certain data — for example, financial records and KYC documents that must be retained for AML compliance purposes.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict our processing of your data — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests — in particular, processing for direct marketing purposes. Once you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where we rely on your consent as the lawful basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

Minors & Data Protection

The 39bdt platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration process, and 39bdt reserves the right to request supporting documentation to confirm age at any point.

If 39bdt discovers or has reasonable grounds to suspect that personal data has been collected from an individual under the age of 18, we will immediately suspend the associated account, delete the personal data in question (to the extent permitted by our AML and compliance obligations), and refund any deposits made by the underage individual via the original payment method where technically possible. No winnings generated during underage use will be paid out.

If you are a parent or guardian and believe that a person under your care has registered a 39bdt account without your knowledge or consent, please contact us immediately at [email protected]. We will investigate and take all appropriate steps, including account closure and data deletion, as quickly as possible.

Policy Updates & Contact

39bdt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When we make material changes to this policy, we will publish the updated version on this page with a revised "Last Updated" date at the top of the document. For significant changes, we may also notify registered players via their registered email address.

Continued use of the 39bdt platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed about how 39bdt handles your personal data. If you disagree with any update to this policy, please discontinue your use of the platform and contact us to close your account.

Contact Our Data Team

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 39bdt, please contact our support and data team using the following details. Please note that all contact must be made in writing — we do not handle data rights or privacy enquiries via phone or live chat in order to maintain a clear audit trail.

• Support & Data Enquiries: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for General Privacy Enquiries: "Privacy Policy Enquiry"
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data rights requests within 30 days.
• Operating Hours: Email support is available 24/7. All times are in Bangladesh Standard Time (BST, UTC+6).