2bdt Privacy Policy

1 Introduction

2bdt operates the online betting and casino platform accessible at https://2bdt.io (hereinafter referred to as "the Platform"). This Privacy Policy explains how 2bdt collects, stores, uses, discloses, and otherwise processes the personal data of players, registered account holders, and visitors to the Platform.

This Privacy Policy forms part of the overall legal framework governing your use of the Platform and should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2bdt takes its data protection obligations seriously. We collect only the information we genuinely need to operate the Platform, provide our services, and meet our compliance responsibilities. We do not monetise your personal data by selling it to third-party advertisers or data brokers.

This Privacy Policy was last reviewed and updated on January 1, 2026. The most current version will always be available at https://2bdt.io/privacy-policy.

2 Data We Collect

2bdt collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Mobile phone number (used for account access, OTP verification, and communications)
• Email address (where provided during registration)
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued National Identity Card (NID) number and document image
• Passport details (where NID is not available)
• Driver's licence details (where applicable)
• Proof of address documentation
• Selfie or live photograph (where required for liveness verification)
• Payment method ownership documentation (e.g., screenshot of bKash or Nagad account in your name)

2.3 Financial Data

• Deposit transaction records including amount, date, time, and payment method used
• Withdrawal request records including amount, destination account, and processing status
• Account balance history
• Bonus credits, wagering activity, and promotional usage records

2.4 Gaming & Betting Activity Data

• All bets placed, games played, results received, and stakes wagered
• Session durations, login timestamps, and platform navigation patterns
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, session reminders)

2.5 Technical & Device Data

• IP address at the time of login and each session
• Device type, operating system, and browser type
• Screen resolution and device identifiers (where applicable)
• Cookie identifiers and session tokens (see Section 7)

2.6 Communications Data

• Records of all support conversations, emails, and live chat transcripts between you and the 2bdt support team
• Complaints submitted and their resolution status
• Survey responses and feedback, where voluntarily submitted

3 How We Collect Data

2bdt collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically — through cookies, server logs, and tracking technologies when you browse or use the Platform (see Section 7).
• From third-party service providers — including identity verification agencies, payment processors (bKash, Nagad, Rocket, Upay, and partner banks), and fraud detection services. These providers share only the information necessary for the purpose they are engaged to fulfil.
• From publicly available sources — in limited circumstances, such as confirming a reported address or cross-referencing identity details submitted during KYC against public records available in Bangladesh.

4 How We Use Your Data

The table below sets out the primary purposes for which 2bdt uses your personal data and the corresponding lawful basis for each use:

2bdt will not use your personal data for any purpose that is materially different from those listed above without first obtaining your explicit consent or establishing a separate lawful basis.

5 Legal Basis for Processing

2bdt processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our contractual obligations to you as a registered player — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, financial record-keeping obligations, and age verification mandates under Bangladeshi law.
• Legitimate Interest: Processing is necessary for purposes that are in 2bdt's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, and service improvement through anonymised analytics.
• Consent: Where processing is based on your consent — such as receiving promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

6.1 Service Providers

2bdt shares personal data with trusted third-party service providers who assist in operating the Platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to process deposits and withdrawals.
• Identity verification providers: Third-party KYC agencies used to verify player identity documents and confirm age compliance.
• Fraud detection services: Specialist providers who analyse transaction patterns and device data to identify potentially fraudulent or suspicious activity.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only anonymised session data necessary for game delivery and do not receive your personal identity information.
• Cloud infrastructure providers: Hosting and data storage providers who process data on 2bdt's behalf under strict data processing agreements that prohibit independent use of your data.

All third-party service providers are contractually bound to process your personal data only for the purposes for which it was shared, to maintain appropriate security standards, and to refrain from disclosing it to any further parties without 2bdt's prior written consent.

6.2 Legal & Regulatory Disclosure

2bdt may disclose personal data to law enforcement authorities, government bodies, or regulatory agencies in Bangladesh where required to do so by law, court order, or regulatory direction. In such circumstances, 2bdt will disclose only the minimum information legally required and will, where legally permissible, notify the affected player of the disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other business reorganisation involving 2bdt, player data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and the associated privacy implications via the email address associated with your account prior to the transfer taking effect.

6.4 No Sale of Data

2bdt does not, under any circumstances, sell, rent, trade, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing agencies. Your data is not a revenue stream for 2bdt — it is a responsibility.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. 2bdt uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, remember your preferences, maintain your logged-in session, and gather anonymised analytics data.

7.2 Types of Cookies Used

• Essential / Functional Cookies: Required for the Platform to operate. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without affecting your ability to use the Platform.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the Platform, enabling 2bdt to identify areas for improvement. Data collected via analytics cookies does not identify you personally.
• Preference Cookies: Store your language, display, and notification settings so you do not need to reconfigure them on each visit.
• Security Cookies: Help 2bdt detect and prevent fraudulent login attempts, unusual session behaviour, and account takeover attacks.

7.3 Managing Cookies

You can control or disable non-essential cookies through your browser settings. Note that disabling essential cookies will prevent the Platform from functioning correctly — including the ability to log in, maintain a session, or process transactions. Clearing cookies will log you out of your account. 2bdt does not use cookies to serve third-party advertising or to track your activity across other websites.

8 Your Rights

As a player using the 2bdt platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data 2bdt holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-critical data such as name and date of birth, updated documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data once your account has been closed and all legal retention obligations have been satisfied. Certain data may be retained for up to five (5) years to comply with financial regulations.
• Right to Restriction: You may request that 2bdt restricts the processing of your personal data while a dispute or correction request is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) to transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where that processing is based on 2bdt's legitimate interest — for example, in relation to analytics or fraud detection profiling.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting any prior processing. Withdrawal can be completed via account settings or by contacting support.

9 Data Retention

2bdt retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any applicable legal retention requirements. The following retention periods apply:

Once the applicable retention period expires and no legal obligation requires continued storage, 2bdt will securely delete or irreversibly anonymise the relevant data.

10 Data Security

2bdt implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS Encryption: All data in transit between your device and 2bdt's servers is encrypted using Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. Plaintext passwords are never stored or accessible to any 2bdt employee.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff who handle KYC documents or financial records undergo background checks and operate under confidentiality agreements.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. Support staff use mandatory 2FA to access internal systems containing personal data.
• Data Minimisation: 2bdt collects only the personal data strictly necessary for the stated purposes. Unnecessary data fields are not collected or stored.
• Regular Security Reviews: 2bdt conducts periodic internal reviews of its data handling practices, access logs, and security configurations to identify and address potential vulnerabilities.

Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you suspect that your account has been compromised, contact 2bdt immediately at [email protected] so that appropriate action can be taken to secure your account.

11 Children & Minors

The 2bdt Platform is strictly for use by individuals aged 21 years or older. 2bdt does not knowingly collect, process, or store personal data from anyone under the age of 21. Age verification is a mandatory step of the account registration and KYC process, and 2bdt applies age-verification checks to all accounts.

If 2bdt discovers or has reason to believe that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all data associated with that account will be reviewed, and the account will be permanently closed. Any funds deposited by an underage player will be returned to the source payment method after deducting any outstanding losses.

If you are a parent or guardian and believe that a minor in your care has registered an account on 2bdt, please contact us immediately at [email protected] so that the account can be identified and closed without delay.

12 Third-Party Links

The 2bdt Platform does not contain links to third-party websites for browsing or promotional purposes. However, in limited contexts — such as responsible gaming resources or payment partner portals — references to third-party services may appear. 2bdt is not responsible for the privacy practices, content, or data security of any third-party website or service. If you navigate away from the 2bdt Platform to a third-party site, that site's own privacy policy governs any data collected.

13 Policy Amendments

2bdt reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, how data is shared, or the legal basis for processing — 2bdt will use reasonable efforts to notify registered players via the mobile number or email address associated with their account prior to the changes taking effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you must cease using the Platform and may request account closure by contacting support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2bdt handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours a day, 7 days a week, in English
• Response Time: Within 30 calendar days for formal data rights requests; typically within 1 hour for general enquiries during Bangladesh Standard Time (UTC+6) business hours