39bdt Privacy Policy — Your Data, Your Rights

1. Introduction

39bdt ("We", "Us", "Our", "Platform") respects your privacy and is committed to protecting the personal data you share with us when you use the 39bdt website at https://39bdt.club and its associated services (collectively, the "Service"). This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the parties with whom we may share it, the security measures we apply to protect it, and the rights you have in relation to your personal data. This policy applies to all users of the Service, including registered account holders and unregistered visitors browsing the platform.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this policy, please do not use the Service. We may update this policy from time to time; the most current version will always be available on this page with an updated effective date at the top.

2. Information We Collect

39bdt collects personal data through several mechanisms during your use of the Service. The categories of information we collect are described below. We collect only what is necessary for the purposes identified in this policy, consistent with data minimisation principles.

• Registration Data

  When you create a 39bdt account, we collect your full name, date of birth, registered mobile number (used as your primary account identifier and for payment processing via bKash, Nagad, or Rocket), and the password you create. This data is required to establish and manage your account.

• Identity Verification (KYC) Data

  Before processing your first withdrawal, we are required to verify your identity. During KYC, we may collect a copy of a government-issued photo identification document (such as a National ID card or passport) and confirmation of your registered mobile number. KYC documents are used solely for identity verification and fraud prevention purposes.

• Transaction Data

  We collect records of all financial transactions conducted through your 39bdt account, including deposit amounts, withdrawal requests, bonus credits and debits, and the timestamps associated with each transaction. Transaction records are retained as required by applicable financial regulations.

• Technical and Usage Data

  We automatically collect certain technical information when you access the Service, including your IP address, device type, operating system, browser type and version, session duration, pages viewed, game activity logs, and referring URL. This data is used to maintain platform security, diagnose technical issues, and improve the Service.

3. How We Use Your Information

39bdt uses personal data collected through the Service for the following purposes. We process personal data only where we have a lawful basis for doing so, and we do not use personal data for any purpose not listed below without first obtaining your consent.

• Account Management

  To register your account, authenticate your identity at login, manage your account settings, process KYC verification, and communicate with you about your account status, transactions, and support queries.

• Payment Processing

  To process your deposits and withdrawal requests via bKash, Nagad, and Rocket, maintain accurate transaction records, and comply with applicable financial reporting obligations. Your mobile number and transaction data are shared with the relevant payment service provider solely to execute your requested transaction.

• Fraud Prevention and Security

  To detect, investigate, and prevent fraudulent activity, money laundering, underage gaming, account sharing, and other policy violations. Technical data including IP addresses and session logs is actively monitored for suspicious patterns that may indicate a breach of our Terms and Conditions.

• Service Improvement

  To analyse aggregated, anonymised usage patterns across the platform in order to improve game selection, payment flow, page performance, and the overall user experience. Anonymised analytics data does not identify individual users and is used only in aggregate form.

4. Legal Basis for Processing

39bdt processes your personal data on the following legal grounds: (a) Contractual necessity — processing required to provide the Service to you under your account agreement, including account registration, payment processing, and KYC verification; (b) Legitimate interests — processing necessary to prevent fraud, maintain platform security, and improve the Service, where those interests are not overridden by your rights; (c) Legal obligation — processing required to comply with applicable laws including anti-money laundering regulations and financial record-keeping requirements; (d) Consent — where we rely on your consent for specific processing activities (such as direct marketing), you may withdraw that consent at any time by contacting our support team.

5. Data Sharing and Disclosure

39bdt does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below.

• Payment Service Providers

  Your registered mobile number and transaction amounts are shared with bKash, Nagad, and Rocket solely to execute the specific payment transaction you have initiated. These providers process your data under their own privacy policies and are bound by data protection obligations.

• KYC Verification Partners

  Where identity verification requires the use of a third-party KYC provider, your identification documents and personal details will be shared with that provider solely for the purpose of verifying your identity. We select KYC partners who are contractually bound to process your data only for verification purposes and to delete or return it once verification is complete.

• Law Enforcement and Regulatory Bodies

  39bdt will disclose personal data to law enforcement agencies, government regulators, and other authorised public bodies where required by applicable law, court order, or regulatory directive. We will also disclose data where necessary to protect the rights, property, or safety of 39bdt, its users, or the public.

6. Cookies and Tracking Technologies

39bdt uses cookies and similar technologies to operate and improve the Service. Cookies are small data files placed on your device when you visit the platform. We use session cookies (which expire when you close your browser) to maintain your authenticated session and remember your in-session preferences. We also use persistent cookies to recognise returning users, analyse aggregated traffic patterns, and improve platform performance. We do not use third-party advertising cookies or cross-site tracking technologies.

Most mobile browsers allow you to control cookie behaviour through your device settings. Please note that disabling certain cookies may affect your ability to use some features of the Service, including maintaining your login session. Because 39bdt operates as a mobile-first platform and does not rely on third-party advertising networks, the practical impact of cookie restrictions on your experience is minimal beyond session management.

7. Data Retention

39bdt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data (registration details, KYC documents, and transaction records) is retained for a minimum of five years following account closure in order to comply with applicable anti-money laundering and financial record-keeping regulations. Technical and usage data (IP logs, session data) is retained for up to 12 months from the date of collection for security and fraud prevention purposes, after which it is deleted or anonymised. Where you exercise your right to erasure (see Section 9), we will delete your personal data except where retention is required by law or necessary to defend against a legal claim.

8. Data Security

39bdt implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. All data transmissions between your device and the 39bdt platform are encrypted using 256-bit SSL (Secure Sockets Layer) technology. Account passwords are stored using one-way cryptographic hashing and are never accessible in plain text — not even to 39bdt staff. Access to personal data within 39bdt is restricted on a strict need-to-know basis; only personnel who require access to perform their specific job function are granted access, and all such access is logged and audited.

While 39bdt takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security against all possible threats. In the event of a data security incident that affects your personal data, we will notify you in accordance with our obligations under applicable law, providing details of the nature of the incident, the data affected, and the steps we are taking to mitigate any harm.

9. Your Rights

As a user of the 39bdt Service, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all valid requests within a reasonable timeframe consistent with applicable law.

• Right of Access

  You have the right to request a copy of the personal data that 39bdt holds about you. We will provide this information in a clear, structured format within a reasonable period of receiving your verified request.

• Right to Rectification

  If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account details directly through your account settings; for KYC-related data, please contact our support team.

• Right to Erasure

  You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Please note that we may be required to retain certain data (particularly transaction records and KYC documents) for a minimum period following account closure under applicable financial regulations.

• Right to Object

  You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Where you raise a valid objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

10. Children's Privacy

The 39bdt Service is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will promptly delete that data and close the associated account. If you believe a minor has created a 39bdt account or provided personal data through the Service, please contact our support team immediately so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

39bdt may update this Privacy Policy from time to time to reflect changes in our data practices, the Service, or applicable law. When we make material changes, we will update the effective date at the top of this page. Where required by applicable law or where changes materially affect your rights, we will provide advance notice through the platform or via your registered mobile number. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 39bdt handles your personal data, please contact our dedicated support team. Our team is available 24 hours a day, 7 days a week via live chat within the platform. You may also reach us at the email address shown below, which is displayed as plain text and is not a clickable link.

Our Privacy Commitments at a Glance