19bd Privacy Policy

This Privacy Policy ("Policy") describes how 19bd ("the Platform", "we", "us", "our") collects, processes, stores, discloses, and protects personal data relating to registered players and visitors to the 19bd platform at https://19bd.io ("the Site"). It applies to all services offered by 19bd including sports betting, live casino, slots, card games, the Crickex sports exchange integration, and Pool Rummy.

19bd is committed to handling personal data responsibly and transparently. This Policy has been drafted in plain English so that players in Bangladesh can clearly understand how their information is managed. Where technical or legal language is used, we have endeavoured to provide plain-language explanations alongside.

This Policy was last updated in January 2026. Whenever material changes are made, the "Last Updated" date at the top of the page will reflect the revision. We encourage you to review this Policy periodically. Continued use of the 19bd platform following any revision constitutes your acceptance of the updated Policy.

19bd collects personal data across several categories. The specific data points we collect from you depend on how you use the platform and which features you access. A comprehensive summary is provided in the table above; the categories are described in detail below.

Identity Data

When you register an account, we collect your full legal name, date of birth, and a government-issued identification number (Bangladesh National Identity Card number or passport number). We may also request a photograph or scanned copy of your identity document for Know Your Customer (KYC) verification purposes, particularly prior to processing withdrawals above specified thresholds.

Contact Data

We collect your mobile phone number, email address, and general residential location (city and district within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, or Rangpur). This information is used to communicate with you about your account, send transaction notifications, and respond to support requests.

Financial Data

To facilitate deposits and withdrawals, we collect payment account information associated with your preferred method — for example, your registered bKash or Nagad mobile number, Rocket account number, or bank account details for Dutch-Bangla Bank, City Bank, or BRAC Bank transfers. We do not store full card numbers or payment credentials beyond what is minimally required to process transactions.

Technical and Device Data

Our servers automatically log certain technical data when you access the platform, including your IP address, device type (mobile, tablet, or desktop), browser type and version, operating system, and the timestamps of login and logout events. This data is used primarily for security monitoring, fraud detection, and platform performance analysis.

Behavioural and Activity Data

We record data about how you use the platform — including which games you play, your betting history (stakes, markets, outcomes), session durations, pages visited, and navigation patterns. This data is used for responsible gaming monitoring, personalisation of your experience, and product improvement. Bet history forms part of your account record and is retained as described in Section 9.

19bd collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit identity verification documents, contact our support team, or update your account profile.
• Automatically — through server logs, session cookies, and platform analytics tools as you browse and use the Site.
• From payment providers — transaction confirmation data (reference numbers, transaction timestamps, and amounts) is received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate deposits or withdrawals.
• From identity verification services — where third-party KYC tools are used to verify documents or cross-check identity data against authoritative databases, we receive a verification result and associated confidence score.
• From fraud prevention services — we may receive risk scores or flag data from third-party fraud detection partners when a transaction or login event is flagged for review.

19bd does not purchase personal data from data brokers or third-party list providers. We do not collect data from your social media profiles unless you explicitly choose to share such information with our support team.

19bd uses the personal data we hold about you for the following purposes:

• Account management — creating and maintaining your player account, verifying your identity and age (21+ requirement), and processing account closure requests.
• Transaction processing — facilitating deposits and withdrawals via your chosen Bangladeshi payment method and maintaining accurate financial records.
• Platform delivery — providing access to sports betting markets (cricket, BPL, IPL, T20 World Cup), live casino games, slots, Crickex exchange, and Pool Rummy.
• Customer support — responding to enquiries, resolving disputes, and maintaining a record of communications for quality assurance and audit purposes.
• Security and fraud prevention — monitoring for suspicious activity, detecting multi-account abuse, identifying bot usage, and preventing money laundering.
• Responsible gaming — monitoring betting patterns for signs of problem gambling, enforcing self-exclusion and deposit limit tools, and providing intervention where appropriate.
• Legal and regulatory compliance — maintaining records required under applicable financial regulations, responding to lawful requests from authorities, and enforcing our Terms & Conditions.
• Platform improvement — analysing aggregate, anonymised usage data to improve navigation, game selection, and overall player experience.
• Communications — sending account-related notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional messages about relevant offers.

19bd does not use your personal data for automated decision-making that has a significant legal effect on you without providing a mechanism for human review. Responsible gaming interventions and fraud flags are reviewed by trained staff before any material action is taken on your account.

Every data processing activity carried out by 19bd is supported by one or more of the following lawful bases:

• Contract performance — processing is necessary to deliver the services you have contracted with us by registering an account and accepting our Terms & Conditions. This covers account creation, transaction processing, and platform access.
• Legal obligation — processing is required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and financial record-keeping rules.
• Legitimate interest — processing is necessary for 19bd's legitimate business interests where those interests are not overridden by your fundamental rights. This includes fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent — for non-essential processing such as promotional communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time by contacting us at [email protected] or using the opt-out mechanisms in your account settings.

19bd does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary to process your deposit or withdrawal transactions.
• Identity verification providers — third-party KYC and document verification services receive identity data solely for the purpose of confirming that you meet our eligibility requirements.
• Fraud prevention and security partners — technical data (IP address, device fingerprint, transaction metadata) may be shared with fraud detection services to identify and prevent abuse of the platform.
• Game content providers — providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive a session token and game-specific data to enable gameplay. They do not receive your full identity or financial data.
• Legal and regulatory authorities — where required by applicable law or a valid legal request, 19bd may disclose account data to law enforcement agencies, financial intelligence units, or other competent authorities. We will endeavour to notify you of such disclosure where legally permitted to do so.
• Professional advisers — lawyers, auditors, and compliance consultants engaged by 19bd may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

All third parties with whom 19bd shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specified engagement.

19bd uses cookies and similar technologies to operate the platform effectively and to understand how players interact with it. The following cookie categories are used:

• Strictly necessary cookies — these are essential for the platform to function. They maintain your login session, remember your preferences during a visit, and protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies — these remember your account preferences (such as language and display settings) between sessions, improving your experience when you return to the platform.
• Analytics cookies — we use privacy-respecting analytics to understand aggregate user behaviour — which pages are visited most frequently, where players experience difficulties, and how platform performance can be improved. Analytics data is anonymised and aggregated; it is not linked to your individual player account.

19bd does not use advertising cookies, cross-site tracking pixels, or third-party retargeting technologies. We do not permit third-party advertising networks to place cookies on the 19bd platform.

Most modern web browsers allow you to control cookies through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the platform. Disabling functional or analytics cookies will not prevent you from accessing core features.

19bd implements a multi-layered security framework to protect your personal data from unauthorised access, alteration, disclosure, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encryption at rest — sensitive data stored in our databases (including identity documents and financial records) is encrypted at the storage level.
• Access controls — access to personal data is restricted to authorised 19bd personnel on a strict need-to-know basis. All access is logged and periodically audited.
• Regular security audits — our platform undergoes periodic penetration testing and vulnerability assessments conducted by qualified security professionals.
• Incident response — in the event of a data breach that poses a risk to your rights or interests, 19bd will notify affected players promptly and take immediate remediation steps.

While 19bd takes all reasonable steps to protect your data, no internet-based system is entirely immune from risk. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, contact [email protected] immediately.

19bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data — retained for the lifetime of your account plus a minimum of two (2) years following account closure, to allow for the resolution of any outstanding disputes or regulatory enquiries.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, in line with standard financial compliance and anti-money laundering record-keeping requirements.
• Identity verification documents — retained for the period required by applicable KYC and AML regulations, typically five (5) years from the end of the business relationship.
• Communications and support records — retained for a minimum of three (3) years from the date of the communication, for dispute resolution and audit purposes.
• Technical and session logs — retained for up to twelve (12) months, after which they are automatically purged unless required as part of an active investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player.

As a player on 19bd, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within a reasonable timeframe and in any event within 30 days of receipt.

• Right of access — you may request a copy of the personal data 19bd holds about you, along with information about how it is being processed.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to erasure — in certain circumstances, you may request that 19bd delete your personal data. This right is subject to our legal obligations to retain certain categories of data (see Section 9).
• Right to restrict processing — you may request that we temporarily restrict processing of your personal data while a dispute about its accuracy or legality is pending.
• Right to data portability — where processing is based on your consent or on contract performance and is carried out by automated means, you may request a machine-readable copy of your data.
• Right to withdraw consent — where processing is based on consent (e.g., marketing communications, non-essential analytics), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object — you may object to processing based on legitimate interests, including profiling for marketing purposes. 19bd will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Please note that exercising some of these rights may affect your ability to use certain features of the platform. For example, requesting erasure of your identity data will result in account closure, as we are unable to maintain an account without the minimum necessary identity information.

The 19bd platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has created an account or provided personal data to us, we will immediately suspend the account, delete the associated data, and refund any deposits to the originating payment method where technically possible.

If you are a parent or guardian and have reason to believe that a minor in your care has registered with 19bd, please contact us immediately at [email protected]. We take age verification seriously and employ identity verification checks to enforce this requirement.

19bd processes certain categories of behavioural data specifically to support responsible gaming outcomes. This includes monitoring betting frequency, session duration, deposit patterns, and changes in wagering behaviour that may indicate the development of problem gambling. Where our systems identify potential signs of harmful play, trained responsible gaming staff may review relevant account data and, where appropriate, reach out to the player or apply protective restrictions.

If you voluntarily request a self-exclusion or deposit limit via our responsible gaming tools, the data associated with that request — including the restriction type, duration, and any supporting communications — will be retained for the full period of the restriction and for a minimum of two (2) years thereafter, regardless of any separate request for data deletion. This retention is necessary to enforce the restriction effectively and to prevent circumvention through account re-registration.

For more information on the responsible gaming tools available to you, visit our dedicated Responsible Gaming page.

19bd reserves the right to update this Privacy Policy at any time. When changes are material — for example, if we introduce a new category of data collection or a new third-party sharing arrangement — we will provide reasonable advance notice via an announcement on the platform or by email to your registered address.

Minor updates (such as clarifications of existing practices, formatting corrections, or updates to contact details) may be made without prior notice. In all cases, the "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the 19bd platform after any revision constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how 19bd handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, including Bangladeshi public holidays and during Eid, Pohela Boishakh, and other seasonal periods.

Email: [email protected] (plain text — not a clickable link)

When contacting us about a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. This helps us locate your records and respond efficiently. We aim to acknowledge all privacy-related requests within 48 hours and to resolve them within 30 days.