227bd Privacy
Policy

1.1 Overview. 227bd collects personal data from players and site visitors in the course of providing the Services described on this platform. The categories of personal data collected depend on how you interact with 227bd — whether as an unregistered visitor, a newly registered player, or a verified, active player using the full range of 227bd's betting and casino services.

1.2 Registration Data

When you create a 227bd account, we collect the following information:

• Full legal name
• Date of birth (to verify the 18+ age requirement)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Mobile phone number
• Email address
• Username and hashed password
• Preferred currency (Bangladeshi Taka, BDT)

1.3 Identity Verification (KYC) Data

As part of 227bd's Know Your Customer (KYC) process, we may request documentary evidence to verify your identity and address. KYC documents may include a copy of your National Identity Card (NID), passport, or driver's licence, plus a recent utility bill or bank statement. These documents are processed solely for the purpose of identity verification and fraud prevention.

1.4 Financial Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, or Mastercard, 227bd collects transaction records including the payment method used, the transaction amount in BDT, the date and time, and relevant transaction reference numbers. Full payment card numbers and mobile banking PINs are never stored by 227bd — these are handled entirely by the respective payment processor.

1.5 Betting and Gaming Activity Data

227bd maintains a record of all bets placed, games played, wagering amounts, wins and losses, bonus usage, and session durations on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and service improvement.

1.6 Technical and Device Data

When you access 227bd, our systems automatically collect technical information including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited, links clicked, and time spent on each page
• Referring URL (the site you visited immediately before 227bd)
• Session identifiers and authentication tokens

1.7 Communications Data

If you contact 227bd via the support email, live chat, or any other communication channel, we retain a record of that correspondence including the content of your messages, the date and time of contact, and any resolution actions taken. This data is used for customer service quality, training, and dispute resolution purposes.

2.1 Purposes of Processing. 227bd processes personal data for the following purposes. For each purpose, the lawful basis on which 227bd relies is identified in the table below.

2.2 Marketing Communications. 227bd will send you promotional emails, SMS notifications, or in-platform messages relating to bonuses, new game releases, cricket and BPL betting markets, and seasonal offers (such as Eid, Pohela Boishakh, or T20 World Cup promotions) only where you have explicitly consented to receive such communications at the point of registration or subsequently through your account preferences. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification settings in your 227bd account or by contacting the support team.

2.3 Automated Decision-Making. 227bd uses automated systems to assist with fraud detection, responsible gaming alerts, and bonus eligibility checks. These systems may flag accounts for review based on behavioural patterns. Where an automated process results in a decision that materially affects your account — such as a temporary suspension — you have the right to request human review of that decision by contacting [email protected].

2.4 Aggregated and Anonymised Data. 227bd may use aggregated, anonymised statistical data derived from player activity to improve the platform, develop new features, and produce internal reporting. Aggregated data does not identify any individual player and is not considered personal data for the purposes of this Policy.

3.1 No Sale of Personal Data. 227bd does not sell, rent, exchange, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Any sharing of personal data is strictly limited to what is operationally necessary to deliver the Services.

3.2 Service Providers and Data Processors. 227bd shares personal data with a limited number of trusted third-party service providers who process data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card processing partners (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and anti-fraud service providers who assist 227bd in verifying player identities and detecting fraudulent account activity.
• Game software providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and stake/win data necessary to operate individual game rounds. They do not receive your full registration or financial profile.
• IT infrastructure providers: Hosting, cloud storage, and content delivery providers who store and transmit platform data under strict data processing agreements.
• Customer support platforms: Third-party live chat or helpdesk software providers who facilitate communications between you and 227bd's support team.

All third-party data processors are contractually bound to process personal data only as instructed by 227bd, to implement appropriate technical and organisational security measures, and not to use the data for any purpose beyond the contracted service.

3.3 Legal Disclosure. 227bd may disclose personal data to competent authorities, law enforcement agencies, or other legally authorised bodies where required to do so by applicable law, court order, or lawful regulatory request. In such cases, 227bd will disclose only the minimum data necessary to satisfy the legal requirement.

3.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of 227bd's business assets, personal data held by 227bd may be transferred to the acquiring entity. You will be notified in advance of any such transfer via the contact details on your account, and the acquiring entity will be bound by the terms of this Privacy Policy.

4.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. 227bd uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate the platform, remember your preferences, maintain your logged-in session, and improve your experience.

4.2 Categories of Cookies Used by 227bd

4.3 Managing Cookies. You can control and delete cookies through your browser settings. Most modern browsers allow you to block or delete all cookies, block third-party cookies only, or clear cookies on exit. Please note that disabling strictly necessary cookies will prevent you from logging into your 227bd account and using core platform features. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

4.4 Do Not Track. Some browsers transmit a "Do Not Track" signal to websites. 227bd does not currently respond to Do Not Track signals in a standardised way, as there is no consistent industry standard for interpreting such signals. The cookie categories and controls described above remain your primary mechanism for managing tracking on 227bd.

5.1 Technical Security Measures. 227bd implements a range of technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 227bd's servers.
• Encryption of sensitive data fields (including KYC document references) at rest.
• Password hashing using industry-standard algorithms — passwords are never stored in readable form.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Intrusion detection systems and continuous server monitoring.
• Regular security assessments and penetration testing of the platform infrastructure.
• Two-factor authentication (2FA) available to all registered 227bd players for account login.

5.2 Organisational Measures. Staff at 227bd who handle personal data are trained in data protection principles and are bound by confidentiality obligations. Access to player personal data is logged and audited. Any staff member found to have accessed personal data without authorisation will be subject to disciplinary procedures.

5.3 Data Retention. 227bd retains personal data for as long as your account is active and for such additional period as is necessary to comply with legal obligations, resolve disputes, and enforce agreements. As a general guide:

• Account and registration data: Retained for the duration of your active account and for a minimum of 5 years following account closure, to comply with anti-money laundering and fraud prevention obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Betting and gaming activity: Retained for the duration of the active account and for 2 years following account closure unless a longer period is required for dispute resolution.
• Support correspondence: Retained for 2 years from the date of the last communication on a given support case.
• Technical and device data (logs): Retained for up to 12 months for security monitoring purposes.

5.4 Data Breach Response. 227bd maintains an internal data breach response procedure. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 227bd will notify those players without undue delay via the email address or mobile number registered to their account. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures 227bd has taken or proposes to take in response.

As a 227bd player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team at [email protected] with the subject line "Data Rights Request". 227bd will respond within a reasonable period and at no charge for standard requests.

7.1 Strict 18+ Policy. The 227bd platform is intended exclusively for adults aged 18 years and above. 227bd does not knowingly collect personal data from persons under the age of 18. Registration on 227bd by any person under 18 is strictly prohibited.

7.2 Age Verification at Registration. All players are required to confirm at registration that they are aged 18 or over. 227bd reserves the right to request documentary proof of age — such as a copy of a National Identity Card or passport — at any time. Where an account is found or reasonably suspected to belong to a person under 18, the account will be immediately suspended and age verification documentation requested. If the player is confirmed to be underage, the account will be permanently closed and any personal data deleted in accordance with the retention obligations in Section 5.3.

7.3 Parental and Guardian Responsibility. If you are a parent or guardian and believe that a person under 18 in your care has registered on 227bd without your knowledge, please contact the support team at [email protected] immediately. 227bd will take prompt action to investigate and, where the claim is substantiated, to close the account and remove any personal data collected.

7.4 Parental Control Tools. 227bd encourages parents and guardians to make use of internet filtering and parental control software to prevent underage individuals from accessing online gambling platforms. Several reputable parental control tools are available for commonly used devices and browsers in Bangladesh.

8.1 Right to Update. 227bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform features, or data processing practices. The "Last Updated" date at the top of this page will be revised each time a change is made.

8.2 Notification of Material Changes. Where a proposed change to this Policy is material — for example, a change to how personal data is shared with third parties, a change to retention periods, or the introduction of a new category of data processing — 227bd will notify registered players in advance via the email address or mobile number held on their account. Non-material corrections (such as typographical fixes or clarifications that do not alter substantive meaning) may be made without prior notice.

8.3 Continued Use as Acceptance. Your continued use of the 227bd platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you must cease using the Services and contact [email protected] to close your account and request deletion of your personal data.

8.4 Contact for Privacy Enquiries. If you have any question, concern, or complaint regarding this Privacy Policy or 227bd's data handling practices, please contact the support team. All privacy-related enquiries are handled with confidentiality and with a commitment to responding promptly. The support email address is [email protected] — please note this is a plain-text reference only and is not a clickable link.