856bd Privacy Policy

Who We Are

856bd is an online casino and sports betting platform operating at 856bd.io, primarily serving players based in Bangladesh. The platform provides access to casino games, live dealer tables, sports betting markets — with particular depth in cricket betting for BPL, IPL, and ICC T20 events — and slot titles supplied by world-leading game studios.

856bd acts as the data controller in respect of personal information collected from players during registration, account use, and identity verification. Where 856bd engages third-party service providers who process data on its behalf, those providers act as data processors under contractual obligations consistent with the standards described in this Privacy Policy.

For all privacy-related enquiries, data subject requests, and complaints, please contact us at [email protected]. Our support team operates 24 / 7 / 365 on Bangladesh Standard Time (BST, UTC+6).

Data We Collect

856bd collects personal data across several categories, depending on the nature of your interaction with the platform. The categories and specific data types are set out below:

2.1 Registration & Identity Data

REQUIRED

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Email address
• Mobile phone number (used for account verification and, where applicable, bKash / Nagad / Rocket payment linkage)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

KYC-TRIGGERED

• Copy of National Identity Card (NID), passport, or driving licence
• Proof of address document (utility bill, bank statement dated within 90 days)
• Screenshot or confirmation of payment account ownership (e.g., registered bKash, Nagad, or Rocket account in your name)
• Source of funds documentation (requested for high-value withdrawals above applicable thresholds)

2.3 Financial & Transaction Data

REQUIRED

• Deposit and withdrawal transaction records (amount in BDT, timestamp in BST, payment method)
• Payment account references (mobile wallet numbers for bKash, Nagad, Rocket, Upay; card type for Visa / Mastercard — full card numbers are never stored by 856bd)
• Bonus credit and wagering activity records
• Account balance history

2.4 Gaming & Betting Activity Data

OPERATIONAL

• Game session logs (game title, provider, session start/end time, stake, outcome)
• Sports bet records (event, market, odds, stake, settlement outcome)
• Responsible gaming tool usage (deposit limit settings, session time alerts, cooling-off periods, self-exclusion requests)

2.5 Technical & Device Data

AUTOMATIC

• IP address and approximate geographic location
• Browser type, version, and language settings
• Device type (desktop, mobile, tablet) and operating system
• Session cookies and authentication tokens
• Pages visited, navigation paths, and time spent on platform sections

2.6 Communications Data

AS GENERATED

• Support ticket content (including live chat transcripts and email correspondence)
• Formal complaint records
• Survey or feedback responses (where voluntarily submitted)

How We Collect Data

856bd collects personal data through the following primary channels:

• Direct submission: Data you provide actively when creating your account, completing KYC, making a deposit, requesting a withdrawal, contacting support, or submitting a formal complaint.
• Automated collection: Technical and device data collected automatically when you access the 856bd platform, via session cookies, server logs, and analytics tools operating on anonymised or pseudonymised data.
• Payment processors: Transaction confirmation data relayed to 856bd by payment gateways including bKash, Nagad, Rocket, Upay, and card processing partners. 856bd never receives raw card numbers; it receives only tokenised references and transaction status confirmations.
• Game providers: Aggregated game session and outcome data provided by third-party studios including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of resolving disputes and maintaining fair play records.
• KYC verification partners: Where 856bd uses a third-party identity verification service to validate documents submitted during the KYC process, the result (verified / not verified) and relevant metadata are returned to 856bd. Document images are processed in accordance with the verification partner's own privacy policy and applicable data processing agreements.

Purposes & Legal Basis for Processing

856bd processes personal data only where a clear purpose and appropriate basis exists. The table below sets out the primary processing activities, their purposes, and the legal basis on which each rests:

Data Sharing & Third Parties

856bd does not sell, rent, or lease your personal data to third parties for their own marketing or commercial purposes. Data is shared only in the following controlled circumstances:

5.1 Service Providers & Processors

856bd engages vetted third-party processors to deliver specific platform functions. All processors are bound by data processing agreements that prohibit them from using your data for any purpose other than the specified service:

• Payment gateways: bKash, Nagad, Rocket, Upay, and card processing partners receive only the transaction data necessary to execute and confirm payments.
• KYC verification services: Identity documents are submitted to the verification partner solely for the purpose of confirming your identity and age eligibility.
• Game providers: Session and outcome data is shared with studios such as Evolution Gaming, Pragmatic Play, PG Soft, Spribe, and others solely for dispute resolution and game integrity purposes.
• Platform hosting & infrastructure: Server and cloud infrastructure providers with whom 856bd holds data processing agreements and who operate appropriate technical safeguards.

5.2 Legal & Regulatory Disclosure

856bd may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required by applicable law, a valid legal order, or to protect the rights, property, and safety of 856bd, its players, or the public. In such cases, 856bd will disclose only the minimum data necessary to fulfil the legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 856bd's assets, personal data held by 856bd may form part of the transferred assets. Registered players will be notified via their registered email address prior to any such transfer, and the successor entity will be required to honour the terms of this Privacy Policy or provide adequate notice of any material changes.

Cookies & Tracking Technologies

856bd uses cookies and similar lightweight tracking technologies to deliver a functional, secure, and well-performing platform experience. The cookies used by 856bd fall into three categories:

856bd does not use advertising cookies, cross-site tracking pixels, or third-party social media cookies. Analytics data is anonymised before processing and is not linked back to individual player identities.

Most browsers allow you to manage cookie preferences through their settings panel. Restricting strictly necessary cookies will impair your ability to use the 856bd platform. For functional and analytics cookies, you may opt out without affecting core platform functionality.

Data Retention

856bd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• Game and betting activity logs: Retained for a minimum of three years for dispute resolution and responsible gaming audit purposes.
• Support communications: Retained for a minimum of two years from the date of the last communication in a given ticket or conversation thread.
• Marketing consent records: Retained for the duration of your consent and for one year following any opt-out, to evidence that consent was properly managed.
• Anonymised analytics data: May be retained indefinitely as it cannot be attributed to any individual player.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods.

Data Security

856bd employs a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures in place include:

• SSL/TLS encryption: All data in transit between your device and 856bd's servers is encrypted using current-generation TLS protocols.
• Encrypted storage: Sensitive data at rest — including KYC documents, passwords (stored as salted hashes), and payment account references — is encrypted using AES-256 or equivalent standards.
• Access controls: Strict role-based access controls limit which internal personnel can access personal data, based on the minimum-necessary principle. All access is logged and audited.
• Two-factor authentication: Available to all players for account login security. Strongly recommended.
• Penetration testing & vulnerability management: 856bd's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 856bd maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights, affected players will be notified without undue delay via their registered email address.

Your Rights as a Data Subject

As a registered player on 856bd, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username] — [Right Being Exercised]". 856bd will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You may request a copy of the personal data 856bd holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it is shared.
• Right to Rectification: If any personal data 856bd holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Note that corrections to identity data must be supported by appropriate documentary evidence.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to overriding legal retention obligations — for example, financial transaction records that must be kept for anti-money laundering compliance cannot be deleted on request.
• Right to Restriction of Processing: You may request that 856bd temporarily restrict processing of your data in certain circumstances, for example while the accuracy of data is being verified or a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes. 856bd will assess the objection against its legal obligations and respond accordingly.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Children & Minors

The 856bd platform is strictly for adults aged 21 and above. 856bd does not knowingly collect or process personal data from individuals under the age of 21. If 856bd becomes aware that personal data has been collected from a person under 21, that account will be closed immediately, all data will be deleted as soon as legally permissible, and any funds in the account will be handled in accordance with applicable policy.

If you are a parent or guardian and believe that a minor in your care has registered an account on 856bd, please contact us immediately at [email protected]. 856bd takes underage gambling extremely seriously and operates a zero-tolerance policy in this regard.

International Data Transfers

856bd's primary operations are directed at players based in Bangladesh, and the platform is optimised for the Bangladesh market including BDT transactions and BST operating hours. However, certain third-party service providers engaged by 856bd — including game studios and technical infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to processors operating outside Bangladesh, 856bd ensures that appropriate safeguards are in place, including contractual data processing agreements that require the receiving party to maintain equivalent protections to those described in this Privacy Policy. 856bd does not transfer personal data to jurisdictions with materially inadequate data protection standards without first implementing appropriate contractual or technical safeguards.

Changes to This Privacy Policy

856bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, registered players will be notified via the email address on their account at least 14 days before the changes take effect. Continued use of the 856bd platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.

The effective date at the top of this page will always reflect when the current version of the Privacy Policy came into force. We recommend reviewing this page periodically to stay informed of how 856bd handles your personal data. Archived versions of previous Privacy Policy documents are available on request by contacting [email protected].

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how your personal data has been handled by 856bd, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line format: "Privacy Enquiry — [Your Username]" or "Data Rights Request — [Your Username] — [Right Being Exercised]"
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Operating hours: 24 / 7 / 365 — Bangladesh Standard Time (BST, UTC+6)

856bd is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with the outcome of a complaint submitted to 856bd, you may have the right to escalate the matter to a relevant supervisory authority depending on your jurisdiction.