Privacy Policy for 38bd

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the 38bd Platform (https://38bd.bet) is 38bd ("38bd", "we", "us", "our"). As data controller, 38bd determines the purposes for which and the means by which your personal data is processed.

This Privacy Policy applies to all users of the 38bd Platform, including registered account holders and visitors who browse the website without creating an account. It covers all personal data collected through the website, mobile-optimised interfaces, customer support channels, and any other touchpoint through which you interact with 38bd.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our data protection team at:

By using the 38bd Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request account closure.

2. Information We Collect

38bd collects personal data through several channels: directly from you when you register and use the Platform, automatically through technical systems as you interact with the website, and in limited circumstances from third-party sources such as payment processors and fraud prevention services. The categories of personal data we collect are outlined below.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh), email address, and phone number;
• Account preferences: Chosen username, notification preferences, responsible gaming limits, and communication opt-in status;
• KYC verification documents: Government-issued photo ID (National ID card, passport, or driving licence), proof of address documents, and payment method ownership evidence;
• Payment information: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details, or card details (last four digits only — full card numbers are never stored by 38bd directly); transaction reference numbers and amounts;
• Support communications: Messages, attachments, and metadata from any correspondence you send to our support team via email or live chat.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings;
• Usage data: Pages visited, games played, session duration, bet history, deposit and withdrawal history, navigation paths, and click-stream data;
• Cookie and tracking data: Session identifiers, preference cookies, analytics cookies, and fraud detection signals (see Section 4 for full cookie details);
• Geolocation data: Approximate location inferred from your IP address, used to verify that you are accessing the Platform from a permitted region.

Information received from third parties:

• Payment processors: Transaction status confirmations from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks;
• Identity verification services: Results from third-party KYC and age verification providers where we use such services to supplement our in-house verification process;
• Fraud prevention services: Risk scores or flags associated with your device fingerprint or payment method from industry fraud prevention databases.

3. How We Use Your Information

38bd processes your personal data only where a legitimate legal basis exists for doing so. The legal bases we rely on are: contractual necessity (processing required to deliver the services you have signed up for), legal obligation (processing required to comply with applicable laws, including anti-money laundering regulations), legitimate interests (processing that serves 38bd's reasonable business interests without overriding your rights), and consent (processing based on your explicit opt-in, such as marketing communications).

The specific purposes for which 38bd uses your personal data include:

• Account management: Creating and maintaining your 38bd player account, authenticating your 38bd login sessions, and processing your account settings and preferences;
• Service delivery: Enabling you to access and play games, place sports bets, make deposits and withdrawals via bKash, Nagad, Rocket, and other approved methods, and claim bonuses and promotions;
• Identity and age verification: Conducting KYC checks to verify that you are who you say you are and that you meet the 18+ age requirement for access to the Platform;
• Financial compliance: Monitoring transactions for anti-money laundering (AML) compliance, detecting suspicious patterns, and reporting to relevant authorities where legally required;
• Fraud prevention: Detecting and preventing unauthorised account access, multiple account creation, bonus abuse, and payment fraud;
• Responsible gaming monitoring: Analysing your gaming behaviour to identify patterns that may indicate problem gambling, in line with our duty of care obligations;
• Customer support: Responding to your enquiries, resolving disputes, and communicating with you about your account status;
• Platform improvement: Analysing aggregated usage data to understand how players interact with the Platform and to improve game offerings, navigation, and overall user experience;
• Marketing communications: Sending you personalised promotional offers, bonus notifications, and news about new games or features — but only where you have consented to receive such communications. You may withdraw consent at any time by contacting [email protected].

4. Cookies and Tracking Technologies

38bd uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform effectively, maintain your login session, remember your preferences, and gather analytics data to improve the site. A cookie is a small text file stored on your device by your browser when you visit a website.

The categories of cookies used on the 38bd Platform are as follows:

38bd does not use advertising cookies or share cookie data with third-party advertisers. Analytics data is collected in aggregated, anonymised form wherever possible and is used solely to improve the 38bd Platform experience for players in Bangladesh and beyond.

Most browsers allow you to control or disable cookies through their settings. However, disabling strictly necessary cookies will impair your ability to use the 38bd Platform — you may be unable to log in, maintain a session, or complete financial transactions. We recommend keeping strictly necessary cookies enabled for full Platform functionality.

2. Sharing of Personal Data

38bd does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared only where strictly necessary for the delivery of services, compliance with legal obligations, or the protection of 38bd's legitimate interests. The categories of recipients with whom 38bd may share your personal data are described below.

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, and partnered Bangladeshi banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own data protection obligations and financial regulatory requirements;
• Game technology providers: Licensed game studios and platform providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive anonymised session identifiers and gameplay data to deliver game content and ensure RNG integrity. Full personal identity data is not shared with game providers;
• KYC and identity verification services: Third-party identity verification providers may receive copies of your submitted KYC documents to cross-reference against identity databases. These providers operate under strict confidentiality obligations;
• Fraud prevention and security services: Device fingerprint data and risk signals may be shared with fraud detection platforms to identify and prevent bonus abuse, multi-accounting, and payment fraud;
• Legal and regulatory authorities: Where required by applicable law or a valid regulatory order, 38bd may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. 38bd will only make such disclosures to the extent required by law and will notify affected users where legally permitted to do so;
• Business transfers: In the event of a merger, acquisition, or sale of assets involving 38bd, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such change in data controller status.

6. Data Retention Periods

38bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including the maintenance of your active account, compliance with legal and regulatory retention obligations, and the resolution of any outstanding disputes or investigations.

The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations;
• Customer support records: Retained for three (3) years from the date of the last interaction, unless the matter involves an open investigation or dispute;
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely for Platform improvement purposes. Individual usage logs are retained for a maximum of twenty-four (24) months;
• Marketing preferences: Retained until you withdraw consent for marketing communications or request account closure.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical or legal constraints, the data is isolated and protected against further processing until deletion can be completed.

7. Security of Your Data

38bd takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data in transit between your device and the 38bd Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform;
• Encrypted data storage: Sensitive personal data, including payment account details and KYC documents, is stored in encrypted form in access-controlled server environments;
• Access controls: Access to personal data within 38bd is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Two-factor authentication (2FA): 38bd strongly recommends enabling 2FA on your account for an additional layer of login security. This can be configured from your account security settings;
• Regular security audits: 38bd conducts periodic security reviews and penetration testing of its Platform infrastructure to identify and remediate vulnerabilities;
• Incident response procedures: In the event of a data breach that poses a risk to your rights, 38bd will notify affected users promptly and take immediate steps to contain and investigate the incident.

While 38bd employs robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 38bd login credentials (username and password). Do not share your password with anyone and contact [email protected] immediately if you suspect your account has been compromised.

8. Your Data Rights

As a user of the 38bd Platform, you have a number of rights in relation to the personal data we hold about you. 38bd is committed to facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of the personal data that 38bd holds about you, along with information about how it is being used. We will provide this within thirty (30) days of receiving your verified request;
• Right to rectification: If any of your personal data held by 38bd is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account information directly from your account dashboard;
• Right to erasure: Subject to 38bd's legal data retention obligations (see Section 6), you may request the deletion of your personal data. This right applies particularly where your account has been closed and the applicable retention period has expired;
• Right to restriction of processing: You have the right to request that 38bd restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved;
• Right to data portability: Where processing is based on your consent or on a contractual basis, you have the right to receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider;
• Right to withdraw consent: Where 38bd processes your data based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing before the withdrawal;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where you believe it overrides your fundamental rights.

9. Third-Party Services

The 38bd Platform integrates with a number of third-party services to deliver its full functionality, including game content providers, payment processing networks, and analytics tools. While 38bd exercises care in selecting reputable third-party partners, it is important to understand the privacy implications of these integrations.

When you interact with game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, those providers may process certain technical data (such as session identifiers and game event logs) on their own systems in accordance with their own privacy policies. 38bd does not control these providers' data practices and encourages you to review their respective privacy policies if you have concerns about how your data is handled within game environments.

Similarly, when you make a payment via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider processes the transaction on its own infrastructure and is subject to its own privacy and data protection obligations under Bangladesh Bank regulations and applicable financial law. 38bd shares only the minimum data necessary to facilitate each transaction with these providers.

The 38bd website does not contain links to external websites beyond those necessary for the Platform's operation. However, if you navigate away from the 38bd Platform to any external site, your data will be subject to that site's privacy policy rather than this one. 38bd is not responsible for the privacy practices of any third-party websites.

10. Updates to This Policy

38bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players by email to the address on file and by posting a prominent notice on the Platform. The revised Policy will take effect from the updated effective date shown at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how 38bd protects your personal data. If you continue to use the 38bd Platform after a revised Policy has been published and communicated, you will be deemed to have accepted the updated terms. If you do not agree with any change, you must stop using the Platform and request account closure by contacting us at [email protected].

Minor amendments — such as corrections of typographical errors, clarification of existing language, or updates to contact details — may be made without prior notice and take effect immediately upon publication on this page.

11. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how 38bd handles your personal data, please reach out to our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

We aim to acknowledge all privacy enquiries within twenty-four (24) hours and to provide a substantive response within five (5) business days. For complex data rights requests, the timeline is up to thirty (30) days as described in Section 8.

This Privacy Policy was last reviewed and updated on 1 January 2026. If you have any doubts about the authenticity of a communication claiming to be from 38bd, please verify by contacting us directly at [email protected] before sharing any personal information in response.