Privacy Policy — How 57bdt Handles Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") explains how 57bdt ("we", "us", "our", or "the Platform") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the Player") who register an account, make a deposit, place a bet, or otherwise interact with the 57bdt online betting and casino platform accessible at 57bdt.io and its associated sub-domains and mobile interfaces.

57bdt is an online betting platform primarily serving players located in Bangladesh. This Policy is written in English and is the authoritative version. Where any translation of this Policy is provided for convenience, the English language version prevails in the event of any ambiguity or conflict.

This Policy covers all personal data collected through the following channels:

• The 57bdt website and all pages hosted under the 57bdt.io domain;
• The 57bdt mobile-optimised browser interface;
• Communications between players and the 57bdt support team via live chat and email;
• Data received from payment partners when processing deposits and withdrawals;
• Data received from identity verification service providers during the KYC process.

This Policy does not apply to third-party websites or services that may be linked from the 57bdt platform. Those entities operate under their own privacy policies, and 57bdt accepts no responsibility for their data practices.

2 Data Controller

For the purposes of this Privacy Policy, 57bdt acts as the data controller in respect of personal data collected from players and visitors to the platform. As data controller, 57bdt determines the purposes and means by which personal data is processed.

Where 57bdt engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, and cloud hosting providers — those parties act as data processors under contractual agreements that bind them to process data only as instructed by 57bdt and in accordance with applicable data protection standards.

All data rights requests, privacy concerns, and data-related queries should be directed to the 57bdt support team using the contact details provided in Section 15 of this Policy.

3 Data We Collect

57bdt collects personal data in three primary ways: data you provide directly, data generated automatically through your use of the platform, and data received from trusted third parties. The categories of data collected are as follows:

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, mobile phone number, and email address provided when creating your 57bdt account.
• KYC verification documents: Copies of identity documents (National Identity Card, passport, or driving licence) and address verification documents (utility bill, bank statement, or government correspondence) submitted during the identity verification process.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and payment card details (Visa, Mastercard) submitted when making deposits or requesting withdrawals. Full card numbers are not retained by 57bdt; they are processed and tokenised by our payment processing partners.
• Support communications: The content of messages you send to the 57bdt support team via live chat or email, including any personal data contained within those messages.
• Responsible gaming preferences: Deposit limits, session time limits, self-exclusion requests, and reality check settings that you configure on the platform.

3.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Session and activity data: Login timestamps, session duration, pages visited, game sessions played, bet amounts, wagering history, win/loss records, and navigation paths through the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used to ensure compliance with jurisdictional access restrictions.
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.

3.3 Data Received From Third Parties

• Payment verification data: Transaction confirmation, payment status, and fraud screening results received from payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors.
• Identity verification results: Identity match scores, document authenticity assessments, and watchlist screening results received from third-party KYC service providers.
• Fraud and risk data: Device fingerprint data and fraud risk signals received from anti-fraud technology partners to protect the integrity of the platform.

4 How We Use Your Data

57bdt uses personal data for the following specific and documented purposes:

57bdt does not use personal data for automated individual decision-making that produces legal or similarly significant effects on players, except where such processing is strictly necessary for fraud prevention or account security purposes, in which case players retain the right to request human review of any automated decision.

5 Legal Basis for Processing

Every instance of personal data processing at 57bdt rests on one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between 57bdt and the Player — including account creation, payment processing, KYC verification, and customer support.
• Legitimate interests: Processing required for purposes that are in the legitimate interests of 57bdt or its players and do not override the player's fundamental rights — including fraud detection, platform security, responsible gaming monitoring, and internal analytics.
• Legal obligation: Processing required to comply with applicable legal or regulatory obligations — including anti-money-laundering record-keeping, age verification mandates, and responding to lawful requests from competent authorities.
• Consent: Processing carried out on the basis of freely given, specific, informed, and unambiguous consent from the player — primarily marketing communications and non-essential cookie placement. Consent may be withdrawn at any time by contacting the 57bdt support team or adjusting cookie preferences.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. 57bdt uses cookies and similar tracking technologies (including web beacons, pixel tags, and session storage) to operate essential platform functions, improve user experience, and where consent has been given, to analyse platform usage and deliver relevant communications.

6.2 Categories of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These enable login sessions, maintain your account state during a betting session, and process secure transactions. These cookies cannot be disabled without impairing the use of the platform.
• Performance and analytics cookies: Collect anonymised or aggregated data about how players use the platform — such as which games are most visited and where users encounter difficulties. Used to improve platform design and performance.
• Functional cookies: Remember your preferences such as language settings, responsible gaming configurations, and display preferences to personalise your experience across sessions.
• Security cookies: Support fraud detection, bot prevention, and account security functions by tracking device consistency and flagging anomalous access patterns.

6.3 Managing Cookies

You may control non-essential cookie placement through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impair certain platform functions. Strictly necessary and security cookies cannot be disabled via browser settings without affecting your ability to use the platform. Withdrawing consent for performance cookies does not affect data already collected prior to withdrawal.

7 Third-Party Data Sharing

57bdt does not sell, rent, or otherwise commercially exploit personal data. We share personal data only with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa and Mastercard network acquirers, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to process deposits and withdrawals. Data shared is limited to transaction amounts, account identifiers, and the minimum personal data required to complete the transaction.
• KYC and identity verification providers: Third-party services that perform document authentication, identity matching, and watchlist screening as part of the 57bdt player verification process.
• Anti-fraud technology partners: Services that provide device fingerprinting, behavioural analytics, and fraud risk scoring to protect the platform and its players from fraudulent activity.
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Nolimit City receive the minimum session data required to deliver their games within the 57bdt platform environment and to verify fair play.
• Cloud infrastructure and hosting providers: Companies that provide the server infrastructure on which 57bdt data is stored and processed. These providers act as data processors under binding contractual agreements and do not access player data for their own purposes.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful regulatory request, 57bdt will disclose personal data to competent authorities. 57bdt will notify the relevant player of such a disclosure where legally permitted to do so.

All third-party data processors engaged by 57bdt are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with 57bdt's written instructions.

8 International Data Transfers

57bdt's primary platform infrastructure and data storage are configured to serve the Bangladesh market. However, certain third-party service providers — including cloud infrastructure partners, KYC verification services, and game content studios — may process or store data on servers located outside of Bangladesh.

Where personal data is transferred internationally, 57bdt ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy. Such safeguards include contractual data protection clauses incorporated into agreements with all data processors, security certification requirements, and access controls limiting who within a third-party organisation may access the data.

Players who wish to obtain information about the specific safeguards applied to international transfers of their personal data may submit a request to the 57bdt support team as described in Section 15.

9 Data Retention

57bdt retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, it will be isolated and access-restricted until the matter is resolved.

10 Your Data Rights

All registered 57bdt players hold the following rights in respect of their personal data. These rights may be exercised at any time by contacting the 57bdt support team as described in Section 15. 57bdt will respond to all data rights requests within 30 days of receipt. There is no charge for exercising any of these rights.

11 Security Measures

57bdt implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Encryption: All data transmitted between your device and the 57bdt platform is protected by TLS 1.3. Personal data stored on 57bdt servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive mandatory data protection training and are bound by confidentiality obligations.
• Two-factor authentication: Internal 57bdt systems that hold personal data require multi-factor authentication for staff access. Players are strongly encouraged to use all available account security features.
• Regular security audits: 57bdt conducts periodic internal and third-party security reviews of its data processing systems to identify and address vulnerabilities.
• Incident response: 57bdt maintains a documented data breach response procedure. In the event of a data breach that poses a risk to players' rights and freedoms, affected players will be notified without undue delay.
• Pseudonymisation: Where practicable and consistent with the purpose of processing, personal data used for analytics and platform improvement is pseudonymised or aggregated to reduce privacy risk.

While 57bdt takes all reasonable steps to protect personal data, no internet transmission or electronic storage system is entirely free from risk. Players are responsible for maintaining the security of their own login credentials and must notify 57bdt immediately if they suspect unauthorised access to their account.

12 Children & Minors

The 57bdt platform is strictly restricted to individuals who are 21 years of age or older. 57bdt does not knowingly collect personal data from any person under the age of 21. Age verification is applied at the registration stage and is reinforced through the KYC verification process.

If 57bdt becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted to the extent permitted by applicable law , and any funds deposited will be returned to the payment source used.

Parents and guardians who believe that a minor in their care has registered an account with 57bdt are urged to contact the support team immediately using the contact details in Section 15. 57bdt will treat all such reports as urgent and act upon them within 24 hours of receipt.

13 Marketing Communications

57bdt may, with your prior consent, send you marketing communications about promotions, bonuses, new game launches, seasonal offers, and platform updates. These communications may be delivered by email or, where you have provided a mobile number and consented to SMS contact, by text message.

Consent to receive marketing communications is entirely voluntary and is separate from the consent required to operate your 57bdt account. Withdrawing marketing consent will not affect your ability to use the platform or to receive service-related communications such as transaction confirmations, KYC notifications, and account security alerts.

13.1 Withdrawing Marketing Consent

You may withdraw your consent to receive marketing communications at any time by any of the following methods:

• Clicking the unsubscribe link included in every marketing email sent by 57bdt;
• Contacting the 57bdt support team via live chat and requesting removal from marketing lists;
• Sending a written request to the support email address provided in Section 15.

57bdt will process all marketing opt-out requests within 5 business days. Please note that you may continue to receive marketing emails that were already in the dispatch queue at the time of your opt-out request; these do not represent a failure to honour your request.

13.2 What We Do Not Do

57bdt does not share your personal data with third-party advertisers or marketing agencies. We do not engage in targeted advertising on third-party platforms using data collected from the 57bdt platform. All marketing communications sent by 57bdt are sent directly by 57bdt or by a contracted email delivery service acting exclusively on 57bdt's behalf.

14 Policy Amendments

57bdt reserves the right to amend this Privacy Policy at any time. Amendments may be made in response to changes in applicable law or regulation, changes in our data processing practices, the introduction of new platform features, or feedback from players and regulators.

When material amendments are made to this Policy, 57bdt will notify registered players by email to their registered email address at least 14 days before the updated Policy takes effect. The updated Policy will also be published on the 57bdt platform with the effective date clearly stated at the top of the document.

Continued use of the 57bdt platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must close your account and cease using the platform before the effective date. Account closure requests should be submitted to the 57bdt support team.

The version history of this Policy — including the date of each revision and a summary of material changes — is maintained internally by 57bdt and is available to players on request.

15 Contact & Data Rights Requests

All questions, concerns, data rights requests, and formal privacy complaints relating to this Policy or to 57bdt's data processing practices should be directed to the 57bdt support team using the following contact details. All communications must be submitted in English.

Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the 57bdt platform. Average first-response time is under 5 minutes. Live chat is the fastest channel for general privacy queries and is available in Bangladesh Standard Time (BST, UTC+6) around the clock.

Email: support at 57bdt.io (plain text — not a clickable link). Please allow up to 48 hours for responses to email queries. For formal data rights requests submitted by email, 57bdt will acknowledge receipt within 5 business days and complete the request within 30 days.

When submitting a data rights request, please include the following information to allow your request to be processed efficiently:

• Your full registered name and 57bdt account username;
• The email address associated with your 57bdt account;
• A clear description of the right you wish to exercise (e.g., access, erasure, portability);
• Any relevant reference numbers (e.g., KYC reference, transaction ID) where applicable.

57bdt may request additional identity verification before processing data rights requests to ensure that personal data is not disclosed to or modified by unauthorised parties. This verification requirement is a security measure in your interest and does not constitute a refusal of your request.