Your Privacy Matters at 25bd

This Privacy Policy applies to all personal data processed by 25bd in connection with the operation of the 25bd website, mobile platform, payment systems, customer support channels, and any related services offered to players in Bangladesh and internationally.

25bd is committed to handling personal data in a transparent, fair and secure manner consistent with applicable privacy law. We collect only the data that is necessary for the purposes described in this policy and we retain it only for as long as those purposes require.

This policy covers all users of 25bd, including registered account holders, visitors who browse the site without registering, and individuals who contact the 25bd support team via live chat, email or WhatsApp. References to "you", "your" or "the player" in this document refer to any such individual whose personal data is processed by 25bd.

Throughout this document we use plain English to make our privacy practices as clear as possible. Where legal terms are used, we provide an explanation in accessible language alongside them. If you have any questions about this policy that are not answered below, please contact the 25bd support team via the details provided in section 15.

For the purposes of this Privacy Policy, 25bd acts as the data controller in respect of all personal data collected through the 25bd platform at https://25bd.io. As data controller, 25bd determines the purposes and means by which your personal data is processed.

The 25bd platform is operated as an online sports betting and casino service targeting adult players in Bangladesh. The primary language of the platform and all data-related communications is English. All formal data requests and complaints must be submitted in English to ensure they can be handled accurately and without delay by our compliance team.

For all data-related queries, access requests, correction requests, deletion requests, and formal complaints regarding this Privacy Policy, you may contact 25bd at the support email address displayed in the footer of this page. Please mark the subject line of any formal data request clearly (e.g., "Data Access Request" or "Data Deletion Request") so that it is routed directly to the compliance team.

25bd collects personal data in several categories depending on how you interact with the platform. The table below sets out the main categories of data we collect and typical examples within each category:

25bd does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, except where a specific legal obligation requires it (for example, health data in the context of a responsible gaming self-exclusion request).

25bd collects personal data through the following methods:

• Direct collection: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account preferences, you provide data to us directly.
• Automated collection: When you access the 25bd website or mobile platform, technical data including IP address, device identifiers, browser type and session activity is collected automatically via server logs, cookies and similar tracking technologies (see section 10 for full cookie details).
• Payment provider data: When you make a payment via bKash, Nagad, Rocket, Upay or a bank partner, those providers share transaction confirmation data with 25bd to enable us to credit or debit your account balance correctly.
• Game provider data: Our third-party game suppliers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi) share game session data and outcome records with 25bd for the purpose of account settlement and dispute resolution.
• Identity verification partners: Where automated KYC verification tools are used to check the authenticity of identity documents, those tools may return a verification result and risk score to 25bd alongside the document data you submitted.
• Publicly available sources: In the context of fraud prevention and anti-money laundering investigations, 25bd may consult publicly available sources such as sanctions lists or adverse media databases to verify identity information.

25bd uses the personal data it collects for the following purposes:

• Account registration and management: To create, operate and maintain your 25bd account, including verifying your identity, managing your account preferences, and providing access to all platform features.
• Payment processing: To process deposits and withdrawals via your chosen payment method, maintain accurate account balance records, and comply with financial transaction reporting obligations.
• Sports betting and casino services: To accept, process and settle your bets and game rounds, apply bonus credits, resolve disputes and maintain a complete transaction history.
• Customer support: To respond to your support requests via live chat, email and WhatsApp, to maintain records of communications for quality assurance, and to escalate formal complaints to our compliance team.
• Responsible gaming: To monitor play patterns for signs of problem gambling, to enforce deposit limits, session time limits, cooling-off periods and self-exclusion requests that you or 25bd may activate on your account.
• Fraud prevention and security: To detect, investigate and prevent fraud, money laundering, account sharing, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and regulatory compliance: To meet any applicable legal obligations including anti-money laundering (AML) and know-your-customer (KYC) requirements, and to respond to lawful requests from competent authorities.
• Marketing and promotions: To send you relevant promotional offers, bonus notifications and platform updates by email or SMS, where you have consented to receive such communications or where we have a legitimate interest in contacting you about offers closely related to your existing use of the platform. You may opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, personalise your experience, and develop new features and game content.

25bd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to fulfil our contractual obligations to you as an account holder — including account creation, payment processing, bet settlement, and customer support — is carried out on the basis that it is required for the performance of our agreement with you.
• Legitimate interests: Certain processing activities — including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring — are carried out on the basis of 25bd's legitimate interest in operating a safe, fair and commercially viable platform. Where we rely on legitimate interests, we have assessed that those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable legal obligations — including anti-money laundering checks, KYC verification, and responses to lawful authority requests — is carried out on the basis of legal compliance.
• Consent: Processing for marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time via your account dashboard settings or by contacting the 25bd support team. Withdrawal of consent for marketing will not affect any other aspect of your account or the lawfulness of processing carried out prior to withdrawal.

25bd does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only with parties who are contractually required to protect it:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank and Sonali Bank receive the transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by applicable financial data protection regulations.
• Game technology providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi and other game suppliers receive game session data required to determine game outcomes and enable dispute resolution. These providers are certified third-party suppliers subject to their own data protection obligations.
• Identity verification services: KYC and document verification partners receive identity document data submitted by you during the verification process. These services are used solely for the purpose of verifying your identity and age.
• IT and infrastructure providers: Cloud hosting providers, content delivery networks (CDNs), and cybersecurity service providers who process data on 25bd's behalf under strict data processing agreements.
• Legal and regulatory authorities: 25bd will disclose personal data to law enforcement agencies, financial intelligence units, courts or other competent authorities if required to do so by a legally valid order, subpoena, or applicable law. Where permitted, 25bd will notify the affected player of such disclosure.
• Professional advisors: Legal counsel, accountants and auditors who require access to data in the course of providing professional services to 25bd, subject to confidentiality obligations.

All third parties with whom 25bd shares personal data are required to maintain the confidentiality of that data and to use it only for the specific purpose for which it was shared. 25bd remains responsible for ensuring that such sharing complies with applicable privacy law.

25bd retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

When personal data is no longer required and the applicable retention period has elapsed, 25bd will securely delete or anonymise it so that it can no longer be attributed to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

25bd implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration and disclosure. These measures include:

• SSL/TLS encryption on all data transmission between user devices and the 25bd platform.
• Bcrypt hashing of all user passwords. Passwords are never stored in recoverable plain text.
• Access controls restricting access to personal data to only those 25bd employees and contractors who require it for their specific job function.
• Two-factor authentication (2FA) available to all players from within the account security settings, strongly recommended for all accounts.
• Regular security audits and penetration testing conducted to identify and remediate vulnerabilities in the platform infrastructure.
• Data breach response protocols enabling 25bd to detect, contain and respond to security incidents. Affected players will be notified without undue delay in the event of a breach that is likely to result in a high risk to their personal data rights.
• Secure deletion procedures ensuring that data no longer required is purged using industry-standard deletion methods that prevent recovery.

25bd uses cookies and similar tracking technologies (such as pixel tags and local storage) on its platform to enable core functionality, improve performance, and — where you have consented — to deliver relevant marketing. The following categories of cookies are used on 25bd:

• Strictly necessary cookies: These cookies are essential for the operation of the 25bd platform and cannot be disabled. They include session management cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your language and currency preferences.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the platform — which pages they visit, how long they spend, and which features they interact with. This data is used to improve platform performance and user experience. These cookies are only set where you have provided consent.
• Functional cookies: These cookies remember your personalised settings, such as your preferred game layout, responsible gaming limits, and notification preferences, so you do not have to reset them each time you visit.
• Marketing cookies: If you have consented to marketing communications, these cookies help 25bd understand which promotions and campaigns are most relevant to you based on your activity on the platform. We do not use third-party advertising networks that track you across external websites.

You can manage your cookie preferences at any time from within your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the 25bd platform and prevent you from accessing certain features, including your account dashboard and payment functions.

As a player on the 25bd platform, you have the following rights in relation to the personal data we hold about you. These rights may be exercised by contacting the 25bd support team at the email address shown in the footer of this page. All requests will be acknowledged within 5 business days and fulfilled within 30 calendar days of receipt.

The 25bd platform is strictly intended for adults aged 21 and above. 25bd does not knowingly collect personal data from individuals under the age of 21. All account registrations require the applicant to confirm that they are aged 21 or above, and identity verification procedures are in place to enforce this requirement.

If 25bd becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended and the data will be deleted as quickly as is technically and legally practicable. Any funds held in such an account will be handled in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and you believe that a minor in your care has registered an account on the 25bd platform, please contact the support team immediately using the contact details in section 15 of this policy. We take underage access extremely seriously and will act swiftly to investigate and resolve any such report.

In the course of providing its services, 25bd may transfer personal data to data processors and technology partners located outside of Bangladesh. Such transfers may occur when data is processed by cloud infrastructure providers, game technology suppliers, or identity verification services that operate servers in multiple countries.

Where personal data is transferred internationally, 25bd takes steps to ensure that an appropriate level of data protection is maintained. This includes entering into data processing agreements with all relevant third parties that incorporate obligations equivalent to those set out in this Privacy Policy, and ensuring that international transfers are conducted using recognised safeguards such as standard contractual clauses or transfers to jurisdictions with adequate data protection frameworks.

All payment transaction data relating to bKash, Nagad, Rocket and Upay is processed in accordance with the security and compliance requirements of those respective payment service providers, which operate primarily within Bangladesh. 25bd does not transfer Bangladeshi mobile banking credentials or account data to servers located in jurisdictions without adequate data protection safeguards.

25bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, 25bd will notify active account holders via the email address registered to their account and will update the "Last updated" date at the top of this document.

Your continued use of the 25bd platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated provisions, you should stop using the platform and may request account closure in accordance with our Terms & Conditions. We strongly recommend that you review this policy periodically to stay informed of how your data is being handled.

Previous versions of this Privacy Policy are retained internally and are available upon written request to the 25bd compliance team. Please include "Privacy Policy Version Request" in your subject line when making such a request.

If you have any questions, concerns or requests relating to this Privacy Policy or the way 25bd handles your personal data, please contact the 25bd compliance and support team using any of the following channels:

• Email: [email protected] — please use plain text, do not include sensitive financial information in email correspondence.
• Live Chat: Available 24/7 from within your account dashboard. Average response time under 1 minute during Bangladesh Standard Time (BST, UTC+6) peak hours.
• WhatsApp: Available for account holders. Response time under 5 minutes during BST business hours.

For formal data access requests, rectification requests, deletion requests, or complaints regarding this Privacy Policy, please mark your communication clearly with the nature of your request (e.g., "Data Access Request", "Data Deletion Request", "Privacy Complaint"). Include your registered 25bd username and the email address associated with your account so that our compliance team can locate your records and respond accurately.

All formal privacy complaints will be acknowledged within 48 hours and a full written response will be provided within 30 calendar days of receipt. If you remain unsatisfied following our response, you may escalate the matter to the relevant competent authority in accordance with applicable law.