39bdt Privacy Policy

This Privacy Policy ("Policy") sets out how 39bdt ("we", "us", "our") collects, processes, stores, and protects personal data belonging to individuals ("you", "your") who access or use the 39bdt platform at https://39bdt.io and all associated services, including sports betting, live casino, slot games, promotional campaigns, and customer support interactions.

This Policy applies to all players who register and use 39bdt from Bangladesh, including residents of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. By creating an account, depositing funds, or otherwise using the 39bdt platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the 39bdt Terms & Conditions and Responsible Gaming Policy, both of which are published separately on this site and form part of the complete agreement between you and 39bdt.

39bdt acts as the data controller in respect of personal data collected through the 39bdt platform. As data controller, 39bdt determines the purposes and means by which your personal data is processed. All data protection enquiries, access requests, and complaints relating to how 39bdt handles your personal information should be directed to the following contact:

39bdt collects personal data through several channels, including account registration, identity verification, payment processing, platform usage, and customer support interactions. The categories of personal data we collect are as follows:

When you create a 39bdt account, we collect your full name, date of birth, residential address, email address, and the username and password you choose. This information is required to establish and maintain your player account and to verify that you meet the minimum age requirement of 21 years.

To comply with our Know Your Customer obligations and to prevent fraud and money laundering, we may request copies of identity documents such as your National Identity Card (NID), passport, or driving licence, as well as proof of residential address and proof of payment method ownership. These documents are processed securely and retained only for as long as legally required.

We collect records of all deposits, withdrawals, bets placed, and winnings received through your 39bdt account. Where payments are made via bKash, Nagad, Rocket, or Upay, we receive transaction reference numbers and the mobile number associated with the transaction. Where payments are made via Visa, Mastercard, or bank transfer, we receive tokenised payment references provided by our certified payment partners. Raw account credentials and full card numbers are never stored by 39bdt directly.

When you access the 39bdt platform, our servers automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, time spent on each page, and session timestamps. This data is used for security monitoring, fraud detection, platform performance optimisation, and aggregate analytics. It does not by itself identify you personally but may be combined with other data we hold to do so.

If you contact 39bdt customer support by email, live chat, or any other channel, we retain records of that correspondence, including the content of your messages and our responses. This data is used to resolve your enquiry, to improve service quality, and for internal training and compliance purposes.

Where you have opted in to receive promotional communications from 39bdt, we retain a record of that consent together with the date and method by which it was given. We also record any subsequent opt-out requests so that we can ensure your preferences are honoured promptly and consistently.

39bdt uses the personal data we collect for the following purposes:

• To create and manage your 39bdt player account, including processing your registration, verifying your identity, and maintaining your account settings and preferences.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks, and to maintain accurate financial records of all transactions.
• To verify that you meet the minimum age requirement of 21 years and to comply with our Know Your Customer obligations.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account registration, and any other conduct that is prohibited under the 39bdt Terms & Conditions.
• To personalise your platform experience, including surfacing relevant game recommendations, promotional offers, and sports betting markets based on your activity history.
• To send you service-related communications, including transaction confirmations, security alerts, account notifications, and updates to our Terms & Conditions or Privacy Policy.
• To send you marketing and promotional communications where you have provided your consent to receive them, including seasonal promotions related to BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh.
• To monitor platform usage, diagnose technical problems, and improve the performance, security, and usability of the 39bdt platform.
• To comply with applicable legal obligations, including financial record-keeping requirements and any lawful requests from competent authorities.
• To enforce our Terms & Conditions and to exercise or defend any legal claims arising from your use of the platform.

39bdt processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and 39bdt, including account creation, transaction processing, and KYC verification.
• Legitimate interests: Processing carried out for 39bdt's legitimate business interests, such as fraud prevention, security monitoring, platform analytics, and service improvement, provided those interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable laws, including financial record-keeping and responses to lawful authority requests.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

39bdt does not sell your personal data to any third party. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard partner processors receive the transaction data necessary to complete deposits and withdrawals.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and Spribe receive a player session token and account-level data necessary to load and operate their games within the 39bdt platform. They do not receive your full identity or payment details.
• Identity verification partners: Third-party KYC service providers may receive copies of your identity documents for the purpose of automated verification. These providers are bound by strict data processing agreements.
• Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity partners may have access to platform data as part of their service delivery. All such partners operate under contractual data protection obligations.
• Legal and regulatory authorities: We may disclose personal data to competent authorities where we are required to do so by law, court order, or lawful regulatory request. We will notify you of any such disclosure where we are legally permitted to do so.

39bdt uses cookies and similar tracking technologies on the platform for the purposes of session management, security, performance measurement, and user experience optimisation. The types of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable you to log in, navigate between pages, and maintain your session state. These cookies cannot be disabled without impacting core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the 39bdt platform, including which pages are visited most frequently and how long sessions last. This data helps us identify areas for improvement.
• Functional cookies: These cookies remember your preferences, such as your selected language and notification settings, so that you do not need to re-enter them each time you visit.
• Security cookies: These are used to detect and prevent fraudulent activity, including bot traffic and credential stuffing attempts. They are a component of 39bdt's broader security infrastructure.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent certain features of the 39bdt platform from functioning correctly. For further information about how to manage cookies, please refer to your browser's help documentation.

39bdt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest, including identity document references and financial records.
• Role-based access controls that restrict access to personal data to only those staff members who require it to perform their job functions.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for all staff accessing internal systems that hold personal data.
• Automated security monitoring and intrusion detection systems that alert our security team to unusual access patterns in real time.
• Regular staff training on data protection obligations and secure data handling practices.

While 39bdt takes all reasonable precautions to secure your personal data, no internet-based platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 39bdt will notify affected players without undue delay in accordance with applicable notification obligations.

39bdt retains personal data for the periods set out below, after which it is securely deleted or anonymised unless a longer retention period is required by law:

• Account and registration data: Retained for the duration of your active account plus five years following account closure, to support the resolution of disputes and regulatory enquiries.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for the duration of your account plus five years following closure, or longer if required by applicable law.
• Technical and usage logs: Retained for up to 12 months in identifiable form, after which they may be retained in anonymised aggregate form for analytical purposes.
• Customer support correspondence: Retained for three years from the date of the final interaction, unless the correspondence relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for the period during which consent is active plus three years following withdrawal, to demonstrate compliance with consent obligations.

As a player whose personal data is processed by 39bdt, you hold the following rights in respect of your personal information. To exercise any of these rights, please contact us at support@39bdt.io:

39bdt will respond to all rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it. We do not charge a fee for the exercise of your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The 39bdt platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been submitted by an individual who does not meet our minimum age requirement, we will immediately suspend the relevant account, delete the data collected, and take appropriate remedial action.

If you are the parent or guardian of a minor and believe that your child may have submitted personal data to 39bdt, please contact us immediately at support@39bdt.io. We will investigate the matter promptly and take the necessary steps to remove the data and close the account. We encourage parents and guardians to make use of parental control tools and internet filtering software to prevent underage access to online gambling platforms.

39bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we provide. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where the changes are significant, we will notify registered players by email or via an in-platform notification.

Your continued use of the 39bdt platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how 39bdt protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 39bdt has handled your personal data, please contact our data protection team using the following details:

• Email: support@39bdt.io (plain text — not a clickable link)
• Response time: Acknowledgement within 2 business days; substantive response within 30 calendar days.
• Support hours: 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with our response to your enquiry or complaint, you have the right to escalate the matter through the formal dispute process described in the 39bdt Terms & Conditions. 39bdt takes all data protection complaints seriously and is committed to resolving them in a fair, transparent, and timely manner.