26bd9 Privacy Policy

This Privacy Policy ("Policy") describes how 26bd9 ("26bd9", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of users ("you", "your", "Player") who access and use the 26bd9 platform at https://26bd9.io, including all associated games, betting markets, payment services, and support channels.

26bd9 is committed to handling your personal data responsibly and transparently. We process personal data in accordance with applicable data protection legislation and the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.

By registering a 26bd9 account or using any part of the 26bd9 platform, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use the 26bd9 platform. This Policy should be read alongside the 26bd9 Terms & Conditions and Responsible Gaming Policy.

26bd9 collects personal data from you directly (when you register, deposit, or contact support), automatically (when you use the platform), and from third parties (such as payment processors and identity verification services). The categories of personal data we collect include the following:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless you voluntarily disclose such information in the context of a responsible gaming support request, in which case it is handled with the highest level of care and used solely to assist you.

26bd9 uses your personal data only for the purposes for which it was collected, or for purposes that are compatible with those original purposes. The primary purposes for which we process your personal data are as follows:

• Account Management: To create, verify, maintain, and close your 26bd9 player account, including identity verification processes required prior to withdrawal or account upgrade.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate transaction records for accounting and dispute resolution purposes.
• Service Delivery: To provide you with access to cricket betting, live casino games, slots, Dragon and Tiger, racing, and all other 26bd9 platform services and features.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bot usage, and other prohibited conduct as defined in the 26bd9 Terms & Conditions.
• Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and lawful requests from competent authorities.
• Responsible Gaming: To implement and monitor responsible gaming tools including deposit limits, self-exclusion periods, session time reminders, and account closure requests, and to identify players who may be at risk of problem gambling.
• Customer Support: To respond to your queries, complaints, and feedback submitted via email to [email protected] or through in-platform support channels, and to maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, usability, and content of the 26bd9 platform, including game selection, payment flow optimisation, and interface design.
• Marketing Communications: To send you promotional offers, bonus notifications, tournament announcements, and seasonal promotions (such as Eid or BPL season specials) where you have provided consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time.

26bd9 processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform the contract between you and 26bd9 — specifically, the 26bd9 Terms & Conditions you accepted at registration. This includes account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal obligations, including AML/KYC regulations, financial record-keeping requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for 26bd9's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, analytics, and customer service improvement.
• Consent: Processing based on your freely given, informed consent — specifically, direct marketing communications. You may withdraw your consent to marketing at any time by contacting [email protected] without any detriment to your account status.

26bd9 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal data with third parties only in the following limited circumstances:

• Payment Processors: We share the financial data necessary to process your deposits and withdrawals with our payment partners, including the operators of bKash, Nagad, Rocket, Upay, and card processing networks. These partners process your data only to complete the transaction and are bound by their own privacy obligations.
• Identity Verification Providers: We may share identity data with third-party KYC service providers to verify your identity and age as part of our mandatory verification processes. These providers are contractually bound to process your data only for verification purposes.
• Game Providers: Technical session data (such as your game session token and account balance) is shared with game providers including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi solely to enable you to play their games on the 26bd9 platform. These providers do not receive your full identity or payment data.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required by applicable law, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of 26bd9, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 26bd9's business assets, your personal data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections as those set out in this Policy.

The 26bd9 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep you securely logged in during your session, and to help us understand how players use the platform so we can improve it. The following types of cookies are used on 26bd9:

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain cookies, or delete cookies that have already been set. Please note that disabling strictly necessary cookies will prevent you from logging in to and using the 26bd9 platform. For detailed instructions on managing cookies in your browser, refer to your browser's official help documentation.

26bd9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following permanent account closure, in compliance with financial record-keeping and AML obligations.
• Transaction and Payment Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial and tax record-keeping requirements.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with AML compliance requirements.
• Customer Support Communications: Retained for a minimum of three (3) years from the date of the last interaction, for dispute resolution, quality assurance, and training purposes.
• Marketing Consent Records: Retained for as long as your consent remains valid, plus one (1) year after consent withdrawal to demonstrate compliance with consent management obligations.
• Technical and Usage Logs: Retained for a maximum of twenty-four (24) months in aggregated or anonymised form for analytics and fraud prevention purposes.

When personal data is no longer required for any lawful purpose, 26bd9 will securely delete or anonymise it so that it can no longer be associated with you. The specific method of deletion depends on the data category and storage medium, but always meets industry-standard secure erasure practices.

26bd9 implements a comprehensive set of technical, administrative, and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your browser or device and the 26bd9 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar.
• Password Hashing: Account passwords are never stored in plaintext. They are hashed using a strong cryptographic algorithm so that even 26bd9 staff cannot view your password.
• Access Controls: Access to player personal data within 26bd9's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations.
• Payment Data Security: Full payment card numbers and mobile financial service credentials are never stored on 26bd9 servers. Payment processing is handled via tokenised connections with certified payment partners.
• Fraud Monitoring: 26bd9 operates real-time fraud detection and anomaly monitoring systems that flag suspicious login attempts, unusual transaction patterns, and potential account takeover activity for immediate investigation.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, 26bd9 will notify affected players without undue delay and take immediate remedial action to contain and address the breach.

As a 26bd9 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact 26bd9 at [email protected] with the subject line "Privacy Rights Request". We will respond within a reasonable timeframe and may need to verify your identity before processing your request.

• Right of Access: You have the right to request a copy of the personal data 26bd9 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by 26bd9 be corrected or completed without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to our legal retention obligations — we cannot erase data we are legally required to retain.
• Right to Restrict Processing: You have the right to request that 26bd9 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to 26bd9, where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to 26bd9's assessment of whether its interests override yours.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The 26bd9 platform is strictly intended for adults aged 21 years and above. 26bd9 does not knowingly collect, store, or process the personal data of any person under the age of 21. All players are required to verify their age as part of the account registration and KYC process.

If 26bd9 becomes aware or has reason to believe that personal data has been collected from a person under the age of 21 — whether through a false declaration during registration or by any other means — that account will be immediately suspended, any balance will be frozen pending investigation, and all associated personal data will be deleted or flagged for lawful authority notification as appropriate.

The 26bd9 platform may reference or display content from third-party game providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi within the game interface. These providers operate under their own privacy policies and data processing terms, which govern the limited technical session data shared with them to enable gameplay.

26bd9 does not embed third-party social media widgets, advertising networks, or tracking pixels from unaffiliated companies on the platform. 26bd9 has no responsibility for the privacy practices of any third-party websites or services that are not directly operated by 26bd9, and your interactions with any such third-party service are governed solely by that third party's own terms and privacy policy.

26bd9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. Any changes will be published on this page with a revised effective date clearly displayed at the top of the Policy.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — 26bd9 will notify registered players by email to the address on file or via an in-platform notification prior to the changes taking effect. For non-material clarifications and formatting updates, the revised Policy will be published without individual notification.

Your continued use of the 26bd9 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you may close your account by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 26bd9 handles your personal data, please contact our support team using the details below. All privacy-related queries are handled with priority and in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Rights Request" or "Data Query"
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh national holidays
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy rights requests are acknowledged within 24 hours and resolved within 30 days of receipt

For urgent account security concerns — including suspected unauthorised access or a data breach affecting your account — please mark your email "URGENT: Security" so it is prioritised by our compliance team.