31bd Privacy Policy

This Privacy Policy ("Policy") is issued by 31bd ("31bd", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://31bd.io and its associated subdomains and mobile interfaces (collectively, the "Platform"). It applies to all individuals who access or use the Platform, including registered account holders and casual visitors.

31bd is committed to protecting the privacy and personal data of all users. This Policy describes the categories of personal information we collect, the purposes for which we use that information, the circumstances under which we may share it, and the measures we take to keep it secure. It also explains the rights you have in relation to your personal data and how to exercise those rights.

This Policy should be read alongside the 31bd Terms & Conditions, which together form the complete agreement governing your relationship with the 31bd Platform. Capitalised terms not defined in this Policy have the meanings given in the Terms & Conditions.

By registering an account on 31bd, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

31bd collects personal data in the following categories. We collect only the information that is necessary for the stated purpose — we do not collect data speculatively or beyond what is required.

We do not collect special category data (such as health, biometric, religious, or political information) except where it is strictly necessary for responsible gaming compliance and only with your explicit consent.

31bd collects personal data through the following channels:

• Direct submission: Information you provide when creating an account, completing identity verification, making deposits or withdrawals, contacting customer support, or submitting feedback.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, server logs, and analytics tools. See Section 7 (Cookies and Tracking) for more detail.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and other integrated payment partners when you initiate a financial transaction.
• Identity verification services: Where 31bd engages a third-party KYC provider to verify your identity documents, that provider may share verification outcomes and document metadata with 31bd.
• Fraud and security tools: Data received from fraud detection, device fingerprinting, and IP reputation services that 31bd uses to protect the integrity of the Platform.
• Publicly available sources: In limited circumstances related to fraud investigation or compliance, 31bd may cross-reference information against publicly available records or sanctions lists.

31bd uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your 31bd account, including processing login requests and account setting changes.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with our KYC obligations.
• Payment processing: Facilitating deposits to and withdrawals from your 31bd wallet via your chosen payment method, and maintaining accurate transaction records.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming regulations, including filing reports with relevant authorities where legally required.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, collusion, match-fixing, bonus abuse, and other conduct that violates our Terms & Conditions.
• Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and proactively reaching out where welfare concerns arise.
• Customer support: Responding to your enquiries, complaints, and support requests in a timely and effective manner.
• Platform improvement: Analysing aggregated usage data to improve the Platform's performance, user experience, and game offering.
• Marketing communications: Sending you promotional offers, bonus notifications, and updates about new features — but only where you have given your consent, and always with a clear option to unsubscribe.
• Legal proceedings: Using personal data as evidence in legal, arbitration, or regulatory proceedings where 31bd is a party or is required to cooperate.

31bd processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between 31bd and you as a registered user — including account creation, payment processing, game access, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and responding to lawful requests from authorities.
• Legitimate interests: Processing carried out for 31bd's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, including sending marketing communications and processing any special category data. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

31bd does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the following defined circumstances:

• Payment service providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, and our banking partners solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual obligations to protect your data.
• Game suppliers: Technical identifiers (such as a pseudonymous player ID) may be shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable game session authentication. No directly identifying information such as your full name or mobile number is shared with game suppliers.
• KYC and identity verification providers: Where a third-party service is engaged to verify your identity documents, we share the relevant document data with that provider for verification purposes only. The provider is contractually prohibited from using that data for any other purpose.
• Fraud and security services: IP addresses, device identifiers, and behavioural signals may be shared with fraud prevention and security tool providers to protect the Platform and its users.
• Legal and regulatory authorities: 31bd will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required by applicable law, pursuant to a court order, or where 31bd determines in good faith that disclosure is necessary to protect the rights, property, or safety of 31bd, its users, or the public.
• Business successors: In the event of a merger, acquisition, restructuring, or sale of all or part of 31bd's business, personal data held by 31bd may be transferred to the successor entity, provided that the successor is bound by privacy obligations no less protective than those in this Policy.

All third parties who receive personal data from 31bd are required to handle that data in accordance with applicable privacy standards and are prohibited from using it for purposes beyond those for which it was shared.

31bd uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device by the Platform's server. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without impairing core Platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language setting and display options — so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated information about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the Platform experience and is not linked to individual identifiable users.
• Security and fraud-detection cookies: Used by 31bd's security systems to identify anomalous access patterns, detect bot activity, and prevent unauthorised account access.

31bd does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites for the purpose of serving you targeted advertising.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to remain logged in across sessions.

31bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, to comply with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial record-keeping obligations.
• KYC verification documents: Retained for the duration of your account and for a minimum of five (5) years following account closure.
• Customer support communications: Retained for three (3) years from the date of last interaction, or longer if the communication is relevant to an ongoing dispute or legal proceeding.
• Technical and usage logs: Retained for up to twelve (12) months from collection, after which they are either deleted or anonymised.
• Marketing consent records: Retained for the period during which consent is active and for two (2) years following withdrawal of consent, as evidence of the consent history.

Where data is no longer required for any active purpose and its retention period has expired, 31bd will securely delete or anonymise it using industry-standard data destruction methods.

The specific security measures 31bd employs include:

• SSL/TLS encryption: All data transmitted between your device and the 31bd Platform is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. Look for the padlock icon in your browser address bar when accessing 31bd.
• OTP verification: Sensitive account actions — including withdrawal requests, password changes, and contact detail updates — require one-time password (OTP) verification sent to your registered mobile number, preventing unauthorised changes even if your password is compromised.
• Access controls: Personal data held by 31bd is accessible only to authorised personnel who require it for their job function. Access is controlled via role-based permissions and is subject to regular review.
• Encrypted data storage: Sensitive stored data, including identity documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Security monitoring: 31bd operates continuous security monitoring systems to detect and respond to anomalous access patterns, potential breaches, and attempted intrusions in real time.
• Vendor security standards: All third-party service providers with access to personal data are required to maintain security standards commensurate with those of 31bd and to notify 31bd promptly in the event of any data incident.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 31bd will notify affected users without undue delay and will take all reasonable steps to contain and remedy the breach.

You play an important role in keeping your account secure. Always use a strong, unique password for your 31bd account, never share your login credentials with anyone, and contact our support team immediately if you suspect unauthorised access.

As a user of the 31bd Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected] (plain text — do not send sensitive documents to this address without requesting a secure upload link first).

31bd will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further sixty (60) days, in which case 31bd will notify you of the extension and the reason for it. Exercising your data rights is free of charge. We may request proof of identity before processing a data rights request to ensure we do not disclose personal data to the wrong person.

If 31bd becomes aware that personal data has been collected from a person under 21 years of age without appropriate parental or guardian consent, 31bd will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the 31bd Platform, please contact our support team immediately so that we can take appropriate action.

31bd employs age verification processes at registration and during the KYC review stage to detect and prevent underage use of the Platform. We take this obligation seriously as part of our broader responsible gaming commitment.

31bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of the Platform. When material changes are made, 31bd will update the "Last updated" date at the top of this page and will, where practicable, notify registered users via the contact details associated with their account.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle your personal data. Your continued use of the 31bd Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

If you have any questions or concerns about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security issue, please contact the 31bd privacy team through any of the following channels:

For non-urgent privacy queries, our support team targets a response within 5 business days. For formal data rights requests (access, erasure, portability), the 30-day response window described in Section 10 applies from the date we receive your verified request.

For urgent security concerns — such as suspected unauthorised access to your account — please use the live chat facility available within your account dashboard for the fastest possible response.