Privacy Policy for 21 bdbajee

When you interact with the 21 bdbajee platform — from browsing the homepage to registering an account, making deposits, placing wagers, or contacting our support team — we may collect personal data in the following categories:

1.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address (required for KYC and AML compliance)
• National Identity Card (NID) number or passport number
• A photograph of your identity document and, where required, a live selfie for biometric verification purposes

1.2 Contact & Communication Data

• Email address used to create your 21 bdbajee account
• Bangladesh mobile phone number registered in your name
• Records of all communications you send to our support team via live chat or email, including timestamps and content

1.3 Financial & Transaction Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals
• Bank account details provided for bank transfer transactions (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Complete transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Betting history: all wagers placed, stakes, outcomes, and game session data across casino, slots, crash games, and sports markets

1.4 Technical & Device Data

• IP address and approximate geolocation derived from it
• Device type, operating system, browser type and version
• Session identifiers, login timestamps, and page interaction logs
• Cookies and similar tracking data (see the Cookies section below for full details)

1.5 Data Collected from Third Parties

In certain circumstances, 21 bdbajee may receive personal data about you from third-party sources, including identity verification providers, fraud detection services, and payment processing partners. This data is used solely to verify your identity, prevent fraud, and fulfil our AML obligations, and is handled with the same level of care as data you provide directly.

21 bdbajee processes your personal data only for legitimate, clearly defined purposes. The following table summarises the primary purposes for which your data is used and the legal basis for each:

Where 21 bdbajee relies on your consent to process personal data — for example, to send you promotional communications about bonuses, new games, or VIP loyalty offers — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing that took place before you withdrew it.

21 bdbajee does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate security and confidentiality.

3.1 Technology and Game Providers

To deliver the full range of games and betting markets available on 21 bdbajee, we work with licensed third-party game studios and platform technology partners including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These providers may receive limited technical and session data necessary to serve game content and record outcomes. They do not receive your financial data or full identity documents.

3.2 Payment Processing Partners

When you make a deposit or request a withdrawal, your transaction data is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, or your selected bank — solely to process the transaction. 21 bdbajee does not store full financial account credentials beyond what is necessary to initiate payment instructions.

3.3 Identity Verification and Fraud Prevention

We use specialist third-party KYC and fraud detection services to verify your identity and protect the platform from financial crime. These providers process identity document data under strict data processing agreements and are not permitted to use your data for any purpose other than verification on behalf of 21 bdbajee.

3.4 Legal and Regulatory Authorities

21 bdbajee may be required by law, court order, or competent regulatory authority to disclose personal data about specific players. In such cases, we will disclose only the minimum information required to satisfy the legal obligation. Where permitted by law, we will notify the affected player of any such disclosure request.

The 21 bdbajee platform uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate the site, remember your preferences, maintain your login session, and analyse how the platform is used. By continuing to use 21 bdbajee after being informed of our cookie practices, you consent to the use of cookies as described in this section.

The following categories of cookies are used on the 21 bdbajee platform:

21 bdbajee does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. Analytics data collected on our platform is used exclusively to improve 21 bdbajee's own services and is not shared with advertising networks.

21 bdbajee retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data — retained for the full duration of your account's active period plus a minimum of 5 years after account closure, in compliance with financial record-keeping and AML obligations.
• Transaction and betting records — retained for a minimum of 5 years from the date of each transaction, as required for financial audit and anti-money-laundering compliance.
• KYC identity documents — retained for a minimum of 5 years after account closure. Originals of uploaded documents are encrypted and stored in secure, access-restricted storage systems.
• Support communications — retained for 3 years from the date of the last message in any given support thread, unless the thread relates to a dispute or legal matter, in which case it is retained for 7 years.
• Analytics and session logs — anonymised or aggregated after 12 months; raw session log data is deleted after 24 months.
• Marketing consent records — retained for the duration of your consent plus 3 years to demonstrate compliance with consent obligations.

When personal data is no longer required beyond the applicable retention period, 21 bdbajee will securely delete or irreversibly anonymise it. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a player on 21 bdbajee, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data held about you by 21 bdbajee. We will provide this in a structured, readable format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that 21 bdbajee delete your personal data. Please note that this right is subject to legal retention obligations — we cannot delete data that we are required to retain under AML or financial regulation. Data that falls outside mandatory retention periods will be deleted within 30 days of a verified erasure request.
• Right to Data Portability: You may request that your personal data be provided to you in a machine-readable format (CSV or JSON) suitable for transfer to another service provider.
• Right to Restrict Processing: In certain circumstances (for example, where you contest the accuracy of data we hold), you may request that we restrict processing of your data while the matter is resolved.
• Right to Object: Where we process your data on the basis of legitimate interest, you have the right to object. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time with effect from the date of withdrawal.

Protecting the personal and financial data of every player on 21 bdbajee is a core operational priority. We employ a layered approach to data security that includes the following measures:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 21 bdbajee's servers is encrypted using TLS 1.3, the current industry gold standard for secure web communication.
• At-Rest Encryption: Sensitive data stored in our databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a verified operational requirement can access player data, and all access is logged and audited.
• Penetration Testing: 21 bdbajee's platform infrastructure is subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities proactively.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their 21 bdbajee account. 2FA significantly reduces the risk of unauthorised account access even in the event of password compromise.
• Incident Response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, 21 bdbajee will notify affected players by email as soon as practicable, and no later than 72 hours after becoming aware of the breach, in accordance with our incident response procedures.

21 bdbajee reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, new services offered on the platform, or feedback from players and regulators. The most current version of this Privacy Policy will always be available at https://21-bdbajee.com/privacy-policy, and the effective date at the top of the document will be updated accordingly.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — 21 bdbajee will notify active account holders by email to the address registered on their account prior to the change taking effect. For minor or clarificatory amendments, updating this page is considered sufficient notice.

Your continued use of the 21 bdbajee platform after any updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with any change, you should cease using the platform and may request account closure and data deletion in accordance with the rights described in Section 6 above.

This Privacy Policy was last reviewed and updated in January 2026. All previous versions of the 21 bdbajee Privacy Policy are superseded by this document. This policy applies to all players and visitors to the 21 bdbajee platform regardless of the device or method used to access it.