97bd Privacy Policy

1. Introduction

97bd ("we", "us", "the platform") is Bangladesh's premier English-language online casino and sports betting platform, accessible at 97bd.io. We take the privacy and security of your personal data seriously. This Privacy Policy ("Policy") explains what personal data 97bd collects about you, the purposes for which it is used, the circumstances under which it may be shared, and the measures we take to protect it.

This Policy applies to all individuals who visit the 97bd website, create a registered player account, engage with any 97bd product or service, or communicate with our customer support team. By accessing the 97bd platform or by registering an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms & Conditions with respect to data handling, this Policy shall prevail.

2. Data Controller

97bd is the data controller responsible for the personal data processed through the 97bd platform. As the data controller, 97bd determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and complaints should be directed to our support team at [email protected]. We aim to acknowledge all data-related enquiries within 24 hours and to provide a substantive response within five business days.

3. Data We Collect

3.1 Registration Data

When you create a 97bd account, we collect the following information:

• Full legal name
• Date of birth (to verify that you are aged 21 or over)
• Email address
• Mobile phone number
• Preferred username and password (stored in hashed form — we never store plaintext passwords)
• Residential address

3.2 Identity Verification (KYC) Data

To comply with our know-your-customer (KYC) and anti-money laundering (AML) obligations, we may collect copies of the following documents during the verification process:

• National Identity Card (NID) or passport
• Proof of address (utility bill or bank statement dated within the last three months)
• Proof of payment method ownership (e.g., a screenshot of your bKash, Nagad, or Rocket account showing your registered mobile number)
• In certain circumstances, a selfie or video call to confirm that the document holder and the account holder are the same individual

3.3 Financial Data

97bd processes transaction data in connection with deposits and withdrawals. This includes:

• Transaction amounts in Bangladeshi Taka (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, etc.)
• Mobile wallet numbers or bank account references associated with transactions
• Transaction timestamps and reference numbers

97bd does not store full bank card numbers or full mobile banking PINs. Financial data is handled through encrypted channels and retained only as long as required by our AML obligations.

3.4 Usage and Technical Data

When you use the 97bd platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Session start and end times
• Pages visited, games played, and betting markets accessed
• Wager amounts, game outcomes, and win/loss history
• Login frequency and session duration

This usage data is used for responsible gaming monitoring (to identify potentially problematic gambling patterns), fraud prevention, platform improvement, and marketing analytics on an anonymised basis.

3.5 Communications Data

If you contact 97bd via live chat, email, or any other support channel, we collect and retain records of those communications, including the content of messages, timestamps, and the outcome of any query or complaint. These records are used to provide customer support, improve our service quality, and maintain an audit trail for regulatory purposes.

3.6 Data You Choose to Provide

You may voluntarily provide additional information to 97bd — for example, when completing a player survey, participating in a promotion, or providing feedback. Any such data will be used solely for the purpose for which it was provided and will not be retained beyond the completion of that purpose.

4. How We Use Your Data

97bd uses your personal data for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, KYC data
Age verification (21+ requirement)	Date of birth, KYC documents
Payment processing (deposits and withdrawals)	Financial data, KYC data
AML and fraud prevention monitoring	Financial data, usage data, KYC data
Responsible gaming monitoring and intervention	Usage data, session data, wager history
Customer support and complaint handling	Registration data, communications data
Promotional communications (where consent given)	Registration data, usage data
Platform security and abuse prevention	Technical data, usage data
Legal and regulatory compliance	All categories as required
Platform improvement and analytics	Anonymised usage data

97bd does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on players without human review. Where automated tools are used (e.g., to flag unusual betting patterns for responsible gaming purposes), a human reviewer is involved before any action is taken against a player account.

5. Legal Basis for Processing

97bd processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account management, payment processing, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC/AML obligations, age verification, and record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement through anonymised analytics.
• Consent: Processing based on your explicit, freely given consent — for example, sending promotional emails or SMS notifications about offers and bonuses. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing communication.

6. Data Sharing

6.1 Service Providers

97bd shares personal data with carefully selected third-party service providers who process data on our behalf and strictly under our instructions. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other Bangladeshi banking partners — to process deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services that assist with document verification and age checks.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, NetEnt, and other licensed game studios — solely for the purpose of delivering game content and maintaining game-level audit logs.
• IT infrastructure and hosting providers: Cloud and server infrastructure partners who host the 97bd platform under strict data processing agreements.
• Customer support platforms: Third-party live chat and ticketing systems used to deliver player support.

All third-party service providers are required to implement appropriate technical and organisational measures to protect your personal data and are contractually prohibited from using it for any purpose other than the specific service they provide to 97bd.

6.2 Legal and Regulatory Disclosure

97bd may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where such disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent strictly required.

6.3 Business Transfers

In the event that 97bd undergoes a merger, acquisition, restructuring, or sale of assets, personal data held about registered players may be transferred to the successor entity as part of that transaction. In such circumstances, 97bd will notify affected players via their registered email address prior to any transfer, and the successor entity will be required to honour the commitments made in this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status, preferences, and browsing behaviour. 97bd uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform effectively.

7.2 Types of Cookies Used by 97bd

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember items in your game lobby, and enable secure transactions. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the 97bd platform — which games are most popular, how long sessions last, and where errors occur. This data is used to improve the platform experience.
• Functional cookies: These cookies remember your preferences — such as your preferred language, currency display, and notification settings — so you do not need to reset them each visit.
• Marketing cookies: Where you have consented, these cookies are used to deliver relevant promotional content and measure the effectiveness of 97bd's marketing campaigns. You may opt out of marketing cookies at any time.

7.3 Managing Cookies

You can manage or disable cookies through your browser settings. Most modern browsers allow you to refuse cookies entirely, delete existing cookies, or receive a notification before a new cookie is placed. Please note that disabling strictly necessary cookies will affect the functionality of the 97bd platform, including your ability to log in and process transactions.

8. Data Retention

97bd retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. Our standard retention periods are as follows:

Data Category	Retention Period	Reason
Account registration data	5 years after account closure	AML regulatory requirement
KYC / identity documents	5 years after account closure	AML regulatory requirement
Financial transaction records	5 years after each transaction	AML and financial record-keeping
Game and betting history	3 years after account closure	Dispute resolution and audit
Customer support records	3 years after case closure	Quality assurance and complaints
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent
Anonymised analytics data	Indefinitely (no personal identifiers)	Platform improvement

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

9. Security Measures

97bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Bcrypt password hashing — plaintext passwords are never stored.
• Two-factor authentication (2FA) available for all registered accounts and mandatory for all internal 97bd staff accounts.
• Role-based access control (RBAC) — access to player data is restricted to authorised personnel on a strict need-to-know basis.
• Regular penetration testing and security audits conducted by independent security specialists.
• Intrusion detection and monitoring systems operating continuously across our infrastructure.
• Data breach response protocol — in the event of a confirmed breach affecting player data, affected players will be notified within 72 hours via their registered email address.

While 97bd takes every reasonable precaution, no online platform can guarantee absolute security. We strongly encourage players to use a unique, strong password for their 97bd account and to enable two-factor authentication where available.

10. Your Data Rights

As a 97bd player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within five business days. In certain cases, we may need to verify your identity before processing a request.

• Right of Access: You have the right to request a copy of all personal data 97bd holds about you, along with information about how it is used, where it is stored, and with whom it is shared. We will provide this information in a structured, commonly used, and machine-readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You can update basic account details (such as your email address) directly from your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that 97bd delete your personal data. This right is subject to limitations — for example, we cannot delete data that we are legally required to retain under AML regulations. Where erasure is possible, we will complete it promptly.
• Right to Restriction of Processing: In certain circumstances, you may request that 97bd restrict the processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a portable format so that it can be transferred to another service provider, where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection, 97bd will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

11. Protection of Minors

97bd is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the registration and KYC process to enforce this requirement.

If 97bd becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — that data will be deleted immediately, the associated account will be permanently closed, and any funds associated with the account will be dealt with in accordance with our Terms & Conditions and applicable law.

12. International Data Transfers

97bd's primary infrastructure is operated to serve the Bangladesh market. In certain circumstances — for example, where we engage a game provider or KYC service based outside Bangladesh — your personal data may be transferred to and processed in another country. Where such transfers occur, 97bd ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that described in this Policy.

Safeguards for international transfers may include standard contractual clauses, data processing agreements, and supplier due diligence assessments to confirm that recipient organisations maintain adequate security and privacy standards. 97bd does not transfer data to jurisdictions that lack adequate data protection frameworks without implementing compensating contractual safeguards.

13. Changes to This Privacy Policy

97bd reserves the right to update or amend this Privacy Policy at any time. The effective date shown at the top of this document will be updated to reflect the date of any revision. Where amendments are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom it is shared — we will provide advance notice to registered players via their registered email address at least 14 days before the changes take effect.

Continued use of the 97bd platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you disagree with any change, you may close your account by contacting support at [email protected] before the changes take effect.

We encourage you to review this Policy periodically so that you remain informed about how 97bd handles your personal data. Archived versions of previous Privacy Policy editions are available upon request.

14. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 97bd handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly, fairly, and transparently.

Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week, inside your 97bd account dashboard.
Response Time: Typically under one hour during peak hours (Bangladesh Standard Time, UTC+6); data rights requests responded to within five business days.

Formal privacy complaints should be submitted in writing to [email protected] with the subject line "Privacy Complaint — [Your Account Username]". We will acknowledge receipt within 24 hours and provide a substantive response within five business days.