123bd Privacy Policy — Your Data, Your Rights, Our Commitment

Introduction

This Privacy Policy ("Policy") applies to all users ("you", "User") of the 123bd online betting and live casino platform, accessible at https://123bd.io (the "Platform"). It describes how 123bd ("we", "us", "our") collects, processes, stores, and protects personal information in connection with the provision of our services to players in Bangladesh and other eligible jurisdictions.

We take data privacy seriously. The 123bd Platform is built with security-first principles, and every element of our data handling infrastructure — from account registration through to payment processing and customer support — is designed to safeguard your personal information against unauthorised access, loss, or misuse.

By accessing or using any part of the 123bd Platform — including creating an account, making a deposit, placing a bet, or simply browsing the website — you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this Policy, please discontinue use of the Platform immediately.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

Data Controller

For the purposes of this Policy, 123bd acts as the data controller in respect of personal data collected from Users of the Platform. As data controller, 123bd is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection queries, access requests, and formal complaints may be directed to our dedicated privacy team via the contact details set out in Section 14 of this Policy. We endeavour to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 calendar days.

Data We Collect

3.1 Data You Provide Directly

When you register an account, transact on the Platform, or contact our support team, you provide us with personal data including but not limited to:

• Identity data: Full legal name, date of birth, gender, and national identity card (NID) number or passport number.
• Contact data: Email address, mobile phone number, and residential address (city, district, Bangladesh).
• Account credentials: Username and hashed password (passwords are never stored in plain text).
• Financial data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) associated with your account, transaction amounts, and deposit/withdrawal history. Full wallet PINs are never collected or stored by 123bd.
• Verification documents: Copies of identity documents submitted for KYC (Know Your Customer) verification purposes, such as NID photographs or scans.
• Communication records: Correspondence with our support team via live chat, email, or any other channel.

3.2 Data Collected Automatically

When you use the Platform, certain technical data is collected automatically by our systems:

• Device data: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, internet service provider (ISP), and approximate geographic location derived from IP address (country and city level only — not precise GPS location).
• Usage data: Pages visited, time spent on each page, navigation paths, game sessions played, bet histories, and feature interactions.
• Session data: Login timestamps, session duration, and logout timestamps.
• Cookie and tracking data: Data collected via cookies and similar technologies, as further described in Section 7 of this Policy.

3.3 Data from Third Parties

In limited circumstances, 123bd may receive personal data about you from third parties, including:

• Payment processors (bKash, Nagad, Rocket, Upay) confirming transaction status and account holder identity for fraud prevention purposes.
• Identity verification service providers used to validate KYC documents.
• Publicly available sources or fraud-screening databases consulted as part of anti-money-laundering (AML) compliance checks.

3.4 Data You Are Not Required to Provide

You are never required to provide sensitive categories of personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data as a condition of using the 123bd Platform. If any such data is shared with us incidentally (for example, in a support message), it will be handled with heightened care and will not be processed for any purpose other than addressing the specific matter for which it was shared.

How We Use Your Data

123bd uses personal data collected from Users exclusively for the following legitimate purposes:

• Account management: To create, maintain, and manage your 123bd account, including authentication, password recovery, and account security alerts.
• Service delivery: To process deposits and withdrawals, confirm bets, settle winnings, and provide access to all games and features available on the Platform.
• Identity verification (KYC): To verify your age (21+), identity, and payment method ownership as required by our responsible gaming obligations and internal compliance policies.
• Anti-fraud and AML compliance: To detect, investigate, and prevent fraudulent transactions, money laundering, multiple account creation, and other forms of Platform abuse.
• Responsible gaming: To monitor betting behaviour for indicators of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with our Responsible Gaming Policy.
• Customer support: To respond to your queries, complaints, and requests through our live chat and email support channels.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates — but only where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from government or regulatory authorities, and enforce our Terms & Conditions.

123bd does not use personal data to make fully automated decisions that produce legal or similarly significant effects on Users without human oversight.

Legal Basis for Processing

123bd processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including operating your account, processing transactions, and settling bets.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements and lawful requests from authorities.
• Legitimate interests: Processing carried out in furtherance of 123bd's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

123bd does not sell, rent, or trade your personal data to any third party. We share personal data only in the following strictly limited circumstances:

6.1 Service Providers & Partners

We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay — for the purpose of processing deposits and withdrawals.
• Game technology providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt, and other certified providers — for the purpose of delivering casino and betting games. These providers receive only the session and game data necessary to operate the relevant game; they do not receive your full identity or financial data.
• Identity verification providers — for KYC document validation.
• Cloud infrastructure and hosting providers — for Platform operation, data storage, and disaster recovery.
• Analytics platforms — for aggregated, anonymised usage analytics (individual Users are not identifiable in analytics reports).

6.2 Legal & Regulatory Disclosure

123bd may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or other lawful process. In such cases, we will disclose only the minimum information necessary to satisfy the legal requirement and will, where legally permissible, endeavour to notify the affected User in advance.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 123bd's business or assets, personal data held by 123bd may form part of the transferred assets. Users would be notified of any such transfer and of any material changes to data handling that result from it, in advance of the transfer where reasonably practicable.

Cookies & Tracking Technologies

123bd uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session continuity, and gather analytical insights. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other data on your device.

7.1 Types of Cookies Used

7.2 Managing Cookies

You may control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Disabling functional or analytical cookies will not prevent you from using the Platform but may affect certain personalisation features. Instructions for managing cookies in commonly used browsers are available through your browser's help documentation.

Data Retention

123bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, regulatory, or reporting obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Betting and gaming history: Retained for a minimum of 3 years following the conclusion of the relevant bet or game session.
• Customer support communications: Retained for 2 years from the date of the final message in each support interaction.
• Marketing consent records: Retained for as long as the consent remains active plus 2 years following withdrawal of consent, as evidence of the consent having been given.
• Technical and log data: Generally retained for 12 months, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, the resulting information is no longer personal data and may be retained indefinitely for statistical or research purposes.

Data Security

123bd implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 123bd Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• At-rest encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Password hashing: User passwords are never stored in plain text. They are processed using a one-way cryptographic hash function with salting before storage.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data receive regular data protection training and are bound by confidentiality obligations.
• Intrusion detection: Our systems are monitored continuously for suspicious activity, and automated alerts are generated in response to anomalous access patterns.
• Regular security audits: The Platform undergoes periodic security assessments, penetration tests, and vulnerability scans by independent security professionals.

While 123bd maintains robust security practices, no system connected to the internet can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a risk to User rights and freedoms, 123bd will notify affected Users and relevant authorities as required by applicable law, without undue delay.

Your Rights

As a User of the 123bd Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the specific right you wish to exercise. We will respond within 30 calendar days.

Please note that certain rights are subject to exceptions and limitations. For example, the right to erasure does not apply where retention of data is required to comply with a legal obligation (such as AML record-keeping requirements). Where we are unable to fulfil a request in full, we will explain the reason in our response.

Children & Minors

If you are a parent or guardian and believe that a minor in your care may have registered on or interacted with the 123bd Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary remedial action, including account closure and data deletion.

123bd employs age verification procedures at the point of registration and may request documentary proof of age (such as a national identity card or passport) at any time. We take the responsibility of preventing underage gambling with the utmost seriousness.

Third-Party Links

The 123bd Platform does not contain links to third-party websites or external services that fall outside of our control. However, the game content delivered by our certified game technology providers (such as Pragmatic Play, Evolution Gaming, Spribe, and others) is operated by those providers within the Platform environment. When you engage with live casino streams or third-party game interfaces, those providers may process limited technical session data in accordance with their own data handling practices.

123bd is not responsible for the privacy practices of third-party game providers beyond the data processing agreements we maintain with them as described in Section 6. We encourage Users to review the privacy policies of any third-party service they interact with independently of the 123bd Platform.

Changes to This Policy

123bd reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or Platform functionality. When a material change is made to this Policy, we will notify registered Users via their registered email address or via a prominent notice on the Platform, at least 14 days before the change takes effect where reasonably practicable.

The "Last Updated" date displayed at the top of this document and in the hero section of this page reflects the date on which the most recent revision was published. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage Users to review this Policy periodically to stay informed of how 123bd handles personal data.

Previous versions of this Privacy Policy are available upon request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 123bd, please contact our privacy team using the details below. All correspondence should be in English for prompt processing.

• Privacy Enquiries Email: [email protected]  (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" for priority routing
• Support Hours: 24 hours a day, 7 days a week
• Expected Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming assistance, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page or navigate to the relevant tools within your account dashboard.