Your Privacy at
21winbd

1 Data We Collect

21winbd collects personal data in several ways: directly from you when you register an account or contact support, automatically through your use of the platform, and occasionally from third-party verification partners where required for identity or age checks. The categories of data we may collect include the following:

We do not knowingly collect sensitive personal data such as biometric data, religious beliefs, political opinions, or health information beyond what is strictly required for responsible gaming assessments (for example, voluntary self-reported information submitted when a player requests a self-exclusion or deposit limit). Any such information is handled with additional care and stored with restricted access.

2 How We Use Your Data

All personal data collected by 21winbd is used for one or more of the following lawful purposes. We do not use your data for any purpose that is inconsistent with what is described here, and we do not use automated decision-making that produces significant legal effects on you without human oversight.

• Account creation and management: To register your player account, verify your identity and age (18+ requirement), and maintain the accuracy of your account profile throughout your relationship with 21winbd.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other accepted payment methods, and to maintain accurate financial records of all transactions in BDT.
• Platform security and fraud prevention: To monitor account activity for suspicious patterns, detect potential fraud, money laundering, or multi-accounting behaviour, and to protect the integrity of our games and sports betting markets.
• Responsible gaming compliance: To identify players who may be showing signs of problem gambling, apply self-imposed deposit limits or self-exclusion requests, and flag accounts that require a welfare check or intervention outreach.
• Customer support: To respond to your queries, complaints, and requests submitted via email or our support system, and to maintain a record of those interactions for quality assurance and dispute resolution.
• Legal and regulatory compliance: To fulfil any obligations imposed by applicable laws, including anti-money laundering (AML) requirements, record-keeping mandates, and lawful requests from competent authorities.
• Service improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, user experience, and navigation design. This analysis does not involve identifying individual players.
• Marketing communications (where consented): To send promotional offers, bonus announcements, and seasonal incentives to players who have explicitly opted in to receive marketing communications. You may withdraw this consent at any time by contacting support@21winbd or updating your account notification preferences.

The legal basis for processing your data varies by purpose. Account management, transaction processing, and fraud prevention are processed on the basis of contractual necessity (i.e., we need the data to deliver the service you signed up for). Legal and regulatory compliance is processed on the basis of legal obligation. Marketing communications are processed on the basis of your consent. Service improvement analytics are processed on the basis of our legitimate interest in operating a well-functioning platform, balanced against your privacy interests.

3 Data Sharing & Disclosure

21winbd does not sell your personal data to any third party. We may share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment processors and mobile money providers: When you make a deposit or withdrawal, the minimum necessary transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your Bangladeshi bank) to execute the transfer. These providers are independent data controllers and are subject to their own privacy terms.
• Game content providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Ezugi), a pseudonymous player identifier and game session data are shared with that provider's servers to run the game. Your full name, payment details, and contact information are never transmitted to game studios.
• Identity verification services: To fulfil age and identity verification requirements, we may share document scans and identity data with a trusted KYC (Know Your Customer) verification partner. These partners are contractually bound to process your data only for the purposes of verification and to delete it once the check is complete.
• Fraud and security services: We use third-party security tools to detect and prevent fraudulent activity, including IP reputation services and device fingerprinting providers. These tools may process your technical data to generate a risk score. They do not receive your full identity or financial data.
• Legal and law enforcement authorities: 21winbd will disclose personal data to competent legal or regulatory authorities where required to do so by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent serious harm or illegal activity. We will, where legally permissible, notify you of such a request before complying.

4 Cookies & Tracking Technologies

21winbd uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with different areas of the site. A cookie is a small text file placed on your device by our web server when you visit the platform. Cookies do not contain executable code and cannot be used to access other files on your device.

We use the following categories of cookies:

We do not use advertising or third-party retargeting cookies. We do not share cookie data with advertising networks for the purpose of serving you targeted advertisements on other websites.

To manage or delete cookies, you can adjust your browser settings. Most modern browsers allow you to block all cookies, accept only certain types, or delete existing cookies at any time. Please be aware that disabling strictly necessary or fraud detection cookies may prevent you from logging in or using certain features of 21winbd.

5 Data Retention

21winbd retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Active account data (identity, contact, financial, and usage data) is retained for the full duration of your active relationship with 21winbd, plus a further period of up to 5 years following account closure to meet anti-money laundering record-keeping requirements.
• Transaction records (deposit and withdrawal history, bet records) are retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping obligations.
• Customer support communications are retained for up to 3 years from the date of the last interaction, to support dispute resolution and quality assurance processes.
• Identity verification documents (national ID scans, passport copies) are retained for the duration of the account and for up to 5 years after account closure, in line with KYC compliance requirements.
• Marketing consent records are retained for the duration of your consent and for up to 2 years following withdrawal of consent, to demonstrate compliance with opt-in obligations.
• Analytics and technical data is retained in anonymised or aggregated form indefinitely for platform improvement purposes. Individual-level technical data is deleted or anonymised within 12 months.

When personal data is no longer required, we take appropriate steps to securely destroy, delete, or anonymise it so that it can no longer be associated with any identifiable individual. Where we are legally required to retain data beyond your account closure, that data is stored in restricted-access archives and is not used for any active operational purpose.

6 Data Security

21winbd implements a layered approach to data security, applying technical and organisational measures that are proportionate to the sensitivity of the data we hold and the risks associated with its processing. Key security measures in place include the following:

• SSL/TLS encryption: All data transmitted between your browser or device and 21winbd servers is encrypted in transit using industry-standard SSL/TLS protocols. This prevents interception of your login credentials, payment details, and personal information during transmission.
• Encrypted data storage: Sensitive personal data — including identity documents, financial records, and authentication credentials — is stored in encrypted form at rest. Passwords are stored using strong one-way hashing and are never stored in plain text.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised 21winbd personnel with a legitimate operational requirement may access player data, and all such access is logged for audit purposes.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. 21winbd supports 2FA for all registered accounts.
• Fraud monitoring systems: Automated real-time monitoring tools scan account activity and transaction patterns to detect anomalies indicative of unauthorised access, fraud, or money laundering. Suspicious activity triggers an immediate security review.
• Staff training: All 21winbd personnel who handle personal data receive regular training on data protection obligations, privacy best practices, and incident response procedures.

While we apply rigorous security standards, no digital platform can guarantee absolute security against all threats. You can help protect your account by using a strong, unique password, enabling 2FA, never sharing your login credentials with anyone, and contacting support@21winbd immediately if you suspect any unauthorised activity on your account.

7 Your Privacy Rights

As a player of 21winbd, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at support@21winbd with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data we hold about you, together with information about how it is being processed and on what legal basis.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): Subject to our legal retention obligations (described in Section 5), you may request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent on which processing is based.
• Right to restrict processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we temporarily stop processing your data without deleting it.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing of your data for direct marketing purposes at any time, with no justification required. You may also object to processing based on legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We will never charge a fee for processing a legitimate privacy rights request, and we will never discriminate against players who exercise their privacy rights — your gaming experience will not be affected in any way by making such a request.

8 Contact & Policy Updates

If you have any questions, concerns, or complaints about how 21winbd handles your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact our data protection team using the details below. We ask that you include your registered email address and a brief description of your request or concern so we can respond as efficiently as possible.

Data Protection Contact:
support@21winbd
Response time: within 5 business days (Bangladesh Standard Time, UTC+6)

21winbd reviews this Privacy Policy periodically to ensure it remains accurate and reflects any changes to our data practices, applicable law, or platform functionality. When we make material changes to this policy, we will update the effective date displayed at the top of this page and, where the changes are significant, notify registered players via their registered email address.

We encourage all players to revisit this Privacy Policy from time to time to stay informed about how we are protecting their data. Continued use of 21winbd after an updated Privacy Policy has been published constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you may request account closure and data deletion as described in Sections 5 and 7.

Last reviewed and updated: 1 January 2026. This Privacy Policy applies to all players registered on 21winbd regardless of their location at the time of access.