Privacy Policy — How 72bd Protects Your Data

1Introduction

72bd ("we", "us", "our") operates the online betting and casino platform accessible at https://72bd.io (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you", "your") who interact with our Platform.

This Privacy Policy sets out in clear and transparent terms what personal data we collect from you, the purposes for which we process that data, the legal bases on which we rely to do so, how long we retain your data, with whom we may share it, and the rights available to you in respect of your personal information.

This policy applies to all personal data collected through the 72bd website, mobile interface, and any associated services, promotions, or communications. It does not apply to third-party websites or services that may be linked from our Platform — those services operate under their own privacy policies, and we encourage you to review them independently.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into our overall agreement with you.

2Data We Collect

72bd collects personal data from you through various points of interaction with the Platform. The categories of personal data we may collect are detailed below.

2.1 Registration and Account Data

When you create an account on the 72bd platform, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 21 or older)
• Residential address, including city, district, and postal code
• Email address
• Mobile phone number
• Chosen username
• Preferred currency (Bangladeshi Taka, ৳ / BDT)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations, we may request copies of official documents including:

• National Identity Card (NID)
• Passport
• Driving licence
• Proof of address (such as a utility bill or bank statement dated within 90 days)
• Proof of payment method ownership (such as a screenshot of a bKash or Nagad account registered in your name)

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (mobile wallet numbers for bKash, Nagad, Rocket, Upay; partial card numbers for Visa and Mastercard; bank account identifiers for Dutch-Bangla Bank and City Bank transactions)
• Transaction reference numbers
• Account balance history

2.4 Activity and Behavioural Data

• Betting and gaming history, including stakes placed, markets selected, game sessions, and outcomes
• Bonus and promotion usage
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion preferences)
• Customer support interactions, including the content of emails and chat transcripts

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Session duration and pages visited within the Platform
• Referring URL (the page from which you navigated to 72bd)

3How We Use Your Data

The personal data collected by 72bd is used exclusively for the following purposes:

We will not use your personal data for any purpose that is materially different from those listed above without first providing you with notice and, where required, obtaining your consent.

4Legal Basis for Processing

72bd processes your personal data on the following legal bases, depending on the specific activity:

• Contractual Necessity: Processing your registration data, KYC documents, transaction data, and activity history is necessary to fulfil our contractual obligations to you under the Terms & Conditions you accepted at the time of registration.
• Legal Obligation: Certain processing activities — particularly those related to identity verification, anti-money laundering checks, and record-keeping — are required by applicable law. We are obligated to carry out these activities regardless of consent.
• Legitimate Interests: We process certain technical and behavioural data on the basis of our legitimate business interests, including fraud prevention, platform security, and service improvement. We apply a balancing test to confirm that our legitimate interests are not overridden by your privacy rights in each case.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent for these activities at any time without affecting the lawfulness of processing carried out before withdrawal.

5Data Sharing

72bd does not sell, rent, or otherwise commercially share your personal data with third parties. We may however share your data with the following categories of recipient where strictly necessary:

• Payment Processors: To process deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and banking partners. These providers are contractually required to process your data only as instructed by 72bd and in compliance with applicable data protection standards.
• Identity Verification Providers: We use third-party KYC service providers to assist with document verification and identity authentication. These providers process your data solely for the purpose of identity verification and are bound by strict data processing agreements.
• Game Content Providers: Live casino and slot game providers (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe) receive limited technical data necessary to authenticate your session and deliver game content. They do not receive your financial or identity documents.
• Regulatory and Law Enforcement Authorities: We are legally required to share certain information with authorities upon receipt of a lawful request. We will comply with such requests and, where permitted, will notify you of any disclosure.
• Professional Advisers: We may share information with our legal advisers, auditors, and accountants on a strictly need-to-know basis and under obligations of confidentiality.

6Cookies & Tracking Technologies

72bd uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that allow us to recognise your browser and remember certain preferences and session information.

Categories of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and fraud prevention checks. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences (such as your preferred language setting and responsible gaming tool configurations) to provide a more personalised experience. They are not used for tracking across third-party sites.
• Performance and Analytics Cookies: We use anonymised analytics data to understand how users navigate the Platform, identify performance issues, and improve features. This data is aggregated and does not identify individual users.
• Marketing Cookies: Where you have opted in to marketing communications, we may use cookies to measure the effectiveness of promotional campaigns and to avoid showing you the same promotional message repeatedly.

You may control non-essential cookies through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. For details on managing browser cookies, refer to your browser's help documentation.

7Data Retention

We retain your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your account being active and for a period of 5 years following account closure, in line with standard financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of submission, as required by applicable anti-money laundering regulations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction to satisfy legal record-keeping requirements.
• Betting and Gaming History: Retained for 2 years after account closure for dispute resolution purposes, after which activity data is anonymised or deleted.
• Customer Support Records: Retained for 2 years from the date of the last interaction to assist with follow-up queries and quality assurance reviews.
• Marketing Preferences: Retained until you withdraw your consent for marketing communications, at which point marketing-specific data is deleted within 30 days.
• Technical and Device Data: Retained in aggregated, anonymised form for up to 12 months for platform analytics and security purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised using industry-standard methods so that it can no longer be associated with an identifiable individual.

8Data Security

72bd takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 72bd platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can verify this by the padlock symbol displayed in your browser's address bar.
• Secure Password Storage: Account passwords are hashed using a cryptographically secure algorithm. Plain-text passwords are never stored.
• Access Controls: Access to systems that hold personal data is restricted to authorised 72bd personnel on a strict need-to-know basis. All staff with access to personal data are trained in data protection responsibilities.
• Fraud Monitoring: Our security team operates real-time monitoring systems to detect and respond to suspicious account activity, including unusual login patterns, multiple account indicators, and atypical transaction behaviour.
• Regular Security Reviews: We conduct periodic reviews of our security practices and infrastructure to identify and address vulnerabilities before they can be exploited.

While we implement robust security measures, no method of data transmission or storage is completely infallible. In the unlikely event of a personal data breach that poses a risk to your rights, we will notify you and relevant authorities as required by applicable law.

9Your Rights

You have the following rights in relation to the personal data 72bd holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of your request. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data 72bd holds about you and to receive information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note that we may be required to retain certain data for legal compliance reasons even following a valid erasure request.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being reviewed.
• Right to Data Portability: You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and to request that we transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

10Children's Privacy

The 72bd platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps specifically designed to prevent underage access.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the relevant personal data (subject to any retention obligations under anti-money laundering regulations), and return any deposits made, less any winnings which will be forfeited.

If you are a parent or guardian and have reason to believe that a person under the age of 21 has registered an account on the 72bd platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11Third-Party Links

The 72bd platform may, from time to time, contain references to or display content from third-party game providers and payment partners. These third-party services operate independently of 72bd and are governed by their own privacy policies.

72bd is not responsible for the privacy practices of any third-party service provider whose products or services you access through the Platform. We encourage you to review the privacy policies of any third-party service you use in connection with your 72bd account. Our responsibility is limited to the data we directly collect and process as described in this Privacy Policy.

Links to third-party services are provided for operational purposes only. The inclusion of any third-party service does not constitute an endorsement of that party's privacy practices.

12Changes to This Privacy Policy

72bd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. The date of the most recent revision is always displayed at the top of this document.

Where changes are material — meaning they significantly affect your rights or the way in which we use your personal data — we will provide notice by email to the address registered on your account at least 14 days before the changes take effect. For minor clarificatory changes, we may update the policy immediately and note the revision date.

We encourage you to review this Privacy Policy periodically to stay informed about how 72bd is protecting your information. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, please discontinue use of the Platform and contact us to request account closure.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 72bd processes your personal data, please reach out to our support team using the contact details below. We are committed to addressing all privacy-related enquiries promptly and thoroughly.

• Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Website: https://72bd.io
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 24 hours for general enquiries; within 30 days for formal data rights requests

Please include your registered username and a clear description of your request in all privacy-related correspondence. This helps us locate your account records efficiently and provide an accurate, timely response.

All privacy-related correspondence must be in English. 72bd's support team is not able to provide legal advice — if you require legal guidance on data protection matters, please consult a qualified legal professional.