80bd Privacy Policy — Your Data, Our Responsibility

80bd collects personal data from players through three primary channels: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors.

1.1 Information You Provide Directly

When you register an account or interact with 80bd's services, you may provide the following categories of personal data:

1.2 Information Collected Automatically

When you access the 80bd platform via a web browser or mobile device, we automatically collect certain technical data necessary to deliver our services securely and optimise your experience:

• Device & Browser Data: Device type, operating system version, browser type and version, screen resolution, language setting.
• Network Data: IP address, approximate geographic location derived from IP (city/district level), internet service provider identifier.
• Usage Data: Pages visited, time spent on each page, game sessions initiated, wagers placed, features accessed, search queries within the platform.
• Session Data: Login timestamps, session duration, logout events, two-factor authentication (2FA) verification events.
• Cookies & Tracking Technologies: As described in detail in the Cookies section of this policy (Article 4).

1.3 Information Received from Third Parties

80bd may receive personal data about you from the following third-party sources:

• Payment Processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard): Transaction confirmation data, including sender mobile number or card reference, transaction amount, and timestamp, to verify deposit and withdrawal processing.
• Identity Verification Services: Results of automated identity and age verification checks conducted against third-party databases where 80bd uses such services to supplement the KYC process.
• Fraud Prevention Partners: Risk signals and device fingerprint data from fraud detection service providers used to protect the platform and its players.

80bd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with external parties only in the specific circumstances described below, and only to the extent strictly necessary for the relevant purpose.

3.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These providers are contractually prohibited from using your data for any purpose other than delivering the specific service for which they were engaged. Categories of service providers include:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard — to facilitate deposit and withdrawal transactions. These providers receive only the minimum data necessary to execute a specific transaction.
• KYC and Identity Verification Providers: Third-party services that cross-reference submitted identity documents against official databases to confirm authenticity and age compliance.
• Fraud Detection and Security Providers: Services that analyse device fingerprints, IP reputation data, and behavioural signals to detect fraudulent account activity and protect the platform.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios may receive anonymised session identifiers to facilitate game functionality. No personally identifiable data beyond a session token is shared with game providers.
• Cloud Infrastructure and Hosting Providers: The 80bd platform infrastructure is hosted on enterprise-grade servers with physical and logical security controls. All data stored on these servers is subject to the same encryption and access control standards described in Article 7.

3.2 Legal Disclosures

80bd may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other official bodies where we are required to do so by applicable law, court order, or regulatory obligation. In such cases, 80bd will disclose only the specific data requested and will, where legally permissible, notify the affected player of the disclosure.

3.3 Business Transfers

In the event that 80bd undergoes a corporate restructuring, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

3.4 No International Transfers Without Safeguards

Where any service provider used by 80bd is located outside Bangladesh, 80bd takes appropriate contractual and technical measures to ensure that personal data transferred to those providers receives a level of protection consistent with the standards set out in this Privacy Policy. 80bd does not transfer personal data internationally without ensuring adequate safeguards are in place.

80bd retains personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, and in compliance with applicable legal and regulatory obligations. The following retention periods apply as a baseline:

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised such that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

5.1 Account Closure and Data Retention

When you close your 80bd account — whether voluntarily or as a result of platform action — your personal data is not immediately deleted. Retention periods as set out in the table above continue to apply from the date of account closure. You may request a copy of your data at any time during this retention period by exercising your Subject Access Right as described in Article 6.

80bd implements a multi-layered security architecture to protect your personal and financial data from unauthorised access, accidental loss, destruction, or alteration. Our security programme is reviewed and updated regularly to address emerging threats.

7.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 80bd servers is encrypted using industry-standard TLS 1.2 or higher. HTTPS is enforced across every page of the platform with HTTP Strict Transport Security (HSTS) headers enabled.
• Encryption at Rest: Sensitive data fields — including payment information, KYC document metadata, and identity numbers — are encrypted at the database level using AES-256 encryption.
• Two-Factor Authentication (2FA): 80bd supports and strongly recommends 2FA for all player accounts. 2FA is enforced by default for withdrawal requests above ৳10,000.
• Intrusion Detection: Automated intrusion detection systems monitor platform infrastructure in real time for anomalous access patterns, brute force attempts, and known attack signatures.
• Regular Penetration Testing: 80bd commissions independent security assessments of the platform on a periodic basis to identify and remediate vulnerabilities before they can be exploited.

7.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Support agents can access only the data categories required to resolve your specific support query.
• All 80bd staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Internal data access is logged and audited. Unauthorised access attempts trigger immediate security review procedures.
• Physical access to server infrastructure is controlled by multi-factor access systems with audit trails.

7.3 Your Role in Account Security

While 80bd maintains robust technical and organisational safeguards, account security is a shared responsibility. Players are strongly advised to use a unique, strong password for their 80bd account, enable 2FA, never share login credentials, and report any suspicious account activity to support immediately. 80bd will never ask you for your password through any channel.