Your Privacy Matters to
256bd — Here's Our Commitment

Introduction

256bd is committed to protecting the privacy and personal data of all individuals who interact with our Platform. This Policy has been written in clear, plain English so that every player in Bangladesh can fully understand how their information is handled — not just legal professionals.

We operate as a safe and reliable platform and treat data protection as a core operational responsibility rather than a compliance formality. Every member of the 256bd team who handles personal data is trained on their obligations under this Policy and is bound by confidentiality requirements.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and those documents on a data-related matter, this Policy takes precedence.

Data Controller

For the purposes of this Policy, 256bd is the data controller in respect of personal data collected from players using the Platform. As data controller, 256bd determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, access requests, correction requests and deletion requests should be directed to our Data Protection contact at:

• Email: [email protected]
• Subject Line: DATA REQUEST — [Your Account Username]
• Response Time: We will acknowledge all data-related requests within 5 business days and provide a full response within 30 calendar days.

Data We Collect

The categories of personal data 256bd may collect and hold about you are set out in the table below. We have categorised the data by type and indicated the purpose for which each category is collected.

3.1 Special Category Data

256bd does not intentionally collect special category data (sometimes called "sensitive personal data") such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose such information in a support communication, we will handle it with heightened care and will not use it for any purpose beyond resolving your specific query.

3.2 Responsible Gaming Data

Where you voluntarily interact with responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or initiating self-exclusion — 256bd records this information specifically to enforce your elected restrictions. This data is treated with the highest level of confidentiality and is not used for marketing, profiling or any purpose beyond operating the responsible gaming protection you have requested.

How We Collect Data

256bd collects personal data through the following channels:

4.1 Directly From You

• When you register an Account on the Platform, providing your name, date of birth, email and contact details.
• When you complete identity verification (KYC) by submitting documentation such as a National ID card, passport or utility bill.
• When you make a deposit or request a withdrawal, providing payment account details.
• When you contact 256bd support via live chat, email or WhatsApp.
• When you set responsible gaming preferences, limits or self-exclusion instructions.
• When you respond to optional surveys, feedback requests or promotional communications.

4.2 Automatically Through Technology

• Through server logs and analytics tools that record IP addresses, device identifiers, browser types and session activity each time you access the Platform.
• Through cookies and similar tracking technologies as described in Section 11 of this Policy.
• Through automated fraud detection systems that analyse patterns of Platform usage, betting behaviour and login activity to identify potentially suspicious account activity.

4.3 From Third Parties

• From payment processors (bKash, Nagad, Rocket, Upay) who confirm transaction status and provide references required to credit your Account.
• From identity verification partners who may assist with KYC document checks where required.
• From third-party game providers (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming) in relation to session data generated during game play on their platforms.

How We Use Your Data

256bd uses the personal data we hold about you for the following specific purposes:

• Account Management: To create, maintain, authenticate and administer your 256bd Account, including processing logins, password resets and account settings changes.
• Service Delivery: To process bets, settle wagers, credit winnings, process deposits and withdrawals, and operate casino and bingo game sessions.
• Identity Verification: To verify that you are who you say you are, that you are at least 21 years of age, and that your payment methods are registered in your own name.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, money laundering, collusion, bonus abuse and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling, enforce self-imposed limits and restrictions, and comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints and provide general support via live chat, email and WhatsApp.
• Legal Compliance: To fulfil obligations under applicable law, including anti-money-laundering requirements, record-keeping obligations and responses to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability and user experience of the Platform.
• Promotional Communications: To send you information about promotions, bonuses and Platform updates where you have given consent to receive such communications. You may opt out at any time.

Legal Bases for Processing

256bd processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing on 256bd is necessary to perform the contract between you and 256bd (i.e., to operate your Account, process bets and handle payments). Without this processing, we cannot deliver our services.
• Legal Obligation: Certain processing is required to comply with applicable law, including identity verification, anti-money-laundering record-keeping, and responses to lawful authority requests.
• Legitimate Interests: 256bd processes Technical Data and Usage Data on the basis of legitimate interests in maintaining platform security, detecting and preventing fraud, and improving service quality. We carry out balancing tests to ensure these interests do not override your privacy rights.
• Consent: Where we send optional promotional communications or deploy non-essential cookies, we rely on your consent as the legal basis for that processing. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing

256bd does not sell, rent or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to confidentiality obligations:

7.1 Payment Service Providers

We share transaction reference data with bKash, Nagad, Rocket and Upay as necessary to process deposits and withdrawals. These providers operate their own privacy policies and are independent data controllers in respect of data they hold in their own right.

7.2 Identity Verification Partners

Where required for KYC compliance, we may share identity documents with specialist third-party verification partners. These partners act as data processors under written agreements that bind them to handle your data only as instructed by 256bd and to maintain appropriate security standards.

7.3 Game Providers

Third-party game providers (such as Evolution Gaming, Pragmatic Play and Ezugi) receive a session token and pseudonymous player reference to operate game rounds. They do not receive your full name, payment details or contact information from 256bd.

7.4 Legal and Regulatory Authorities

256bd will disclose personal data to law enforcement agencies, courts or regulatory bodies where required to do so by applicable law, a valid legal order, or to protect the rights, property or safety of 256bd, its players or third parties. We will notify you of such disclosure where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of 256bd's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

International Transfers

256bd's primary infrastructure is hosted on servers with strong data protection standards. In some circumstances, data may be processed by our service providers in countries outside Bangladesh. Where such transfers occur, 256bd takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Safeguards for international data transfers may include standard contractual clauses incorporated into our data processing agreements with third-party providers, binding corporate rules where applicable, or transfers to countries recognised as providing an adequate level of data protection.

If you would like further information about the specific safeguards applied to any international transfer of your data, please contact us at [email protected].

Data Retention

256bd retains personal data for the periods set out in the table below. These periods reflect our operational needs, legal obligations and the principle of data minimisation.

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and purged from backups within the next scheduled backup cycle. Where immediate deletion is not technically feasible, the data is isolated from active processing until deletion is completed.

Security Measures

256bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard SSL/TLS protocols.
• AES-256 Encryption at Rest: Sensitive data fields stored in our databases, including payment references and identity documents, are encrypted at rest.
• Password Hashing: Account passwords are never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt) with per-user salts to store password credentials securely.
• Two-Factor Authentication (2FA): 256bd offers optional two-factor authentication for all Account holders and strongly encourages its use.
• Access Controls: Access to personal data within 256bd's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Infrastructure Security: Our hosting infrastructure is protected by firewalls, intrusion detection systems and regular vulnerability assessments. Security patches are applied promptly upon release.
• Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 256bd will notify affected players without undue delay and will take immediate remediation steps.

Cookies & Tracking Technologies

256bd uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device by a website to store information about your session and preferences. We use the following categories of cookies:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core functionality such as session authentication, security token management, and load balancing. Without these cookies, services you have requested — such as logging in or placing a bet — cannot be provided. These cookies cannot be disabled.

11.2 Functional Cookies

These cookies remember your preferences and settings — such as your chosen language, display preferences and responsible gaming settings — so you do not have to re-enter them on each visit. They improve your experience but are not strictly required for the Platform to operate. You may disable them in your browser settings, though some Platform features may be affected.

11.3 Analytics Cookies

256bd uses anonymised, first-party analytics cookies to understand how players navigate and use the Platform. This data is aggregated and does not identify individual users. We use this information solely to improve Platform performance and user experience. We do not use third-party analytics providers that track users across external websites.

11.4 Security Cookies

These cookies support our fraud detection and platform security systems. They help us identify suspicious login patterns, detect bot activity and protect player accounts from unauthorised access attempts. They are treated as strictly necessary and cannot be disabled.

11.5 Managing Cookies

Most browsers allow you to refuse cookies, delete existing cookies or be notified when new cookies are set. Please refer to your browser's help documentation for instructions. Note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in and place bets.

Your Rights

As a player whose personal data is processed by 256bd, you have the following rights in relation to your data. To exercise any of these rights, contact us at [email protected] with the subject line DATA REQUEST — [Username].

• Right of Access: You have the right to request a copy of the personal data 256bd holds about you, along with information about how it is processed. We will provide this within 30 calendar days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update basic account details directly within your Account settings.
• Right to Erasure: You may request that 256bd delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — for example, we are required to retain KYC and financial records for a minimum period regardless of a deletion request.
• Right to Restriction: You may request that 256bd restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Children & Minors

256bd is strictly an adult platform. Access to and use of the Platform is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

All Account registrations are subject to age verification as part of our KYC process. Where 256bd has reason to believe that a player is under the age of 21, the Account will be immediately suspended pending verification. If it is confirmed that the Account holder is under 21, the Account will be permanently closed and any funds deposited will be returned to the source payment method after completing any applicable AML checks. Winnings generated during an underage playing session will be forfeited.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account with 256bd, please contact us immediately at [email protected] so that we can take prompt action.

Third-Party Links

The 256bd Platform may, from time to time, contain references to third-party content or services — for example, game providers whose products are accessible through the Platform. 256bd does not control the privacy practices of third-party game providers or payment processors and is not responsible for their privacy policies.

We encourage you to review the privacy policies of any third-party service you interact with, including bKash, Nagad, Rocket and Upay, when using their payment services in connection with your 256bd Account. These providers operate as independent data controllers in respect of data they hold directly.

256bd does not link to external websites for advertising or affiliate purposes from within the Platform interface. Any external content you encounter is solely for the purpose of providing the games and payment services that form part of the 256bd product offering.

Policy Updates

256bd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements or Platform features. The effective date at the top of this page will always reflect the date of the most recent revision.

Where an update materially affects your rights or the way in which we process your personal data, we will notify you by email to your registered address and/or by a prominent notice within the Platform prior to the change taking effect. For minor updates — such as clarifications of existing practices — we may update the Policy without individual notification.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and may request Account closure in accordance with Section 16 of our Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically so that you remain informed about how 256bd handles your personal data.

Contact & Complaints

If you have any questions, concerns or complaints regarding this Privacy Policy or the way 256bd handles your personal data, please contact our support team through any of the following channels:

• Email: [email protected] — please use subject line PRIVACY — [Your Username] for fastest routing
• Live Chat: Available 24 hours a day, 7 days a week, directly within the Platform — average first response under 2 minutes
• WhatsApp: +880 1700 256256 — available during BST (UTC+6) business hours

We take all privacy complaints seriously and will acknowledge your complaint within 5 business days. If you are not satisfied with our response, you may escalate the matter through any applicable dispute resolution mechanism available in your jurisdiction.