256bd Privacy Policy
At 256bd, we take the privacy of every Bangladesh player seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is stored and protected, and what rights you hold over your information under our platform's data governance framework.
About This Policy: This Privacy Policy applies to all personal data processed by 256bd in connection with your use of the platform at https://256bd.club, including account registration, deposits and withdrawals via bKash, Nagad, Rocket, and other Bangladeshi payment services, sports betting, casino gaming, and customer support interactions. By creating a 256bd account or using our services, you acknowledge that you have read and understood this policy. This policy is written in English and is the authoritative version for all players accessing 256bd from Bangladesh.
256-bit SSL Encryption
Every data transmission between your device and 256bd is encrypted using 256-bit SSL — the same encryption standard employed by leading international financial institutions. Your personal information, payment details, and account credentials are never exposed in transit or stored in unencrypted form on our servers.
No Third-Party Data Sales
256bd does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data shared with third parties is limited strictly to what is necessary for platform operations — such as payment processing via bKash and Nagad — and is governed by binding data-processing agreements with each partner.
Minimal Data Collection
We collect only the personal data that is genuinely necessary to operate your 256bd account securely , verify your identity, process your BDT transactions, and comply with our responsible gaming obligations. We do not collect data speculatively or for undefined future purposes. Every data point we hold on your account has a specific, documented purpose.
KYC Data Handled Securely
Identity documents submitted for Know Your Customer (KYC) verification — including Bangladesh National ID Cards and passports — are stored in an isolated, access-controlled environment. KYC documents are reviewed only by authorised 256bd compliance staff and are never shared with unauthorised parties. Documents are retained only for the period required by our data retention policy.
Your Consent Controls
Where 256bd processes your data on the basis of consent — such as for marketing communications or optional personalisation features — you retain the right to withdraw that consent at any time by contacting support at [email protected] or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Defined Retention Periods
256bd does not hold your personal data indefinitely. Each category of data we collect has a defined retention period tied to its operational or legal purpose. Transaction records are retained for seven years for financial compliance purposes. Account data is retained for the duration of your account's active life plus five years following closure. KYC documents are retained for five years post-closure.
Data We Collect
256bd collects personal data through several channels: directly from you during registration and account use; automatically through your use of the platform; and, in limited circumstances, from third-party sources such as payment processors. The categories of data we collect are set out below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, NID or passport number, photograph (from KYC documents) | Provided by you at registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address in Bangladesh | Provided by you at registration or profile update |
| Financial Data | bKash/Nagad/Rocket account numbers, bank account details, deposit and withdrawal amounts, transaction timestamps, BDT balances | Provided by you during deposit/withdrawal; received from payment processors |
| Account Activity Data | Login timestamps, bet history, game session records, bonus usage, account balance history | Automatically generated by platform systems during account use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration | Automatically collected via cookies and server logs |
| Communications Data | Support chat transcripts, emails sent to [email protected], dispute correspondence | Generated during your interactions with 256bd support staff |
| Responsible Gaming Data | Self-exclusion preferences, deposit limit settings, time-out requests, responsible gaming assessments | Provided by you via account settings or support requests |
Special Category Data
256bd does not intentionally collect special category data — such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond identity document photographs required for KYC compliance. If you voluntarily disclose health-related information to our responsible gaming team in the context of requesting self-exclusion support, that information is treated with the highest level of confidentiality and is used solely for the purpose for which it was disclosed.
Data from Minors
256bd does not knowingly collect personal data from any person under the age of 18. If we become aware that a person under 18 has provided us with personal data, we will delete that data promptly and close the associated account. If you believe a minor has created a 256bd account, please contact us immediately at .
How We Use Your Data
256bd processes your personal data only for specific, documented purposes. Each processing activity is grounded in one of the following legal bases: performance of a contract (your use of the 256bd platform constitutes a contract between you and us); compliance with a legal obligation; our legitimate interests where those interests are not overridden by your privacy rights; or your explicit consent where required.
2.1 Account Operations
We use your identity data, contact data, and account activity data to create and maintain your 256bd account; to authenticate your identity at login; to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks; to settle bets and calculate winnings; and to apply bonuses and promotional credits in accordance with the relevant promotion terms. These processing activities are necessary for the performance of our contract with you and cannot be opted out of while you maintain an active 256bd account.
2.2 Identity Verification and KYC
We use identity data and financial data to verify your age (18+ requirement), confirm that you are the legitimate owner of the payment methods linked to your account, and satisfy our anti-money laundering (AML) obligations. KYC verification is a legal obligation and cannot be waived. Failure to complete KYC will result in withdrawal restrictions being applied to your account.
2.3 Responsible Gaming
We use account activity data and responsible gaming data to monitor betting patterns that may indicate problem gambling behaviour, to enforce self-exclusion periods and deposit limits you have requested, and to contact you proactively if our responsible gaming monitoring systems flag your account for review. This processing is carried out in your interests and in fulfilment of our responsible gaming obligations. For more information, please visit our Responsible Gaming page.
2.4 Fraud Prevention and Security
We use technical data, financial data, and account activity data to detect and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This processing is carried out on the basis of our legitimate interests in maintaining a secure and fair platform for all players.
2.5 Customer Support
We use communications data, account activity data, and financial data to respond to your support queries, resolve transaction disputes, investigate complaints, and improve the quality of our support operations. Support communications are retained for a period of three years from the date of the relevant interaction.
2.6 Marketing Communications
With your consent, we may use your contact data and account activity data to send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers (such as Eid promotions or BPL cricket season offers), and platform updates. You may withdraw your consent to marketing communications at any time by emailing with the subject line "Unsubscribe" or by updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect your ability to continue using the 256bd platform.
2.7 Platform Improvement
We use aggregated, anonymised technical data and account activity data to analyse platform performance, identify and resolve technical issues, improve game load times, and develop new features. Anonymised analytical data cannot be used to re-identify individual players and is therefore not subject to the same restrictions as personal data.
Data Sharing & Third Parties
256bd does not sell, rent, or commercially trade your personal data. We share your data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
3.1 Payment Processors
To process your BDT deposits and withdrawals, 256bd shares the minimum necessary financial and identity data with our approved payment processing partners, including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks. These partners receive only the data required to authenticate and complete the specific transaction you have initiated. All payment processing partners are bound by data-processing agreements that prohibit them from using your data for any purpose beyond completing the transaction.
3.2 Game Providers
256bd integrates casino and sports betting products from third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive a session token and limited technical data (such as your account currency and stake limits) necessary to load and operate their games within the 256bd platform. Game providers do not receive your full identity data, contact data, or financial account details.
3.3 Legal and Regulatory Disclosure
256bd may disclose personal data to law enforcement agencies, financial intelligence authorities, or other government bodies in Bangladesh if we are required to do so by applicable law, court order, or regulatory directive. We will, where legally permitted, notify you of such a disclosure request before complying. We may also disclose data where necessary to protect the legal rights, property, or safety of 256bd, our players, or third parties.
3.4 Business Transfers
In the event that 256bd undergoes a corporate restructuring, merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer by publishing an updated Privacy Policy on this page before the transfer takes effect. The acquiring entity will be required to honour the terms of this Privacy Policy with respect to data collected prior to the transfer.
3.5 No Cross-Border Transfers Without Safeguards
Where personal data is transferred to third parties located outside Bangladesh — for example, internationally hosted game server infrastructure — 256bd ensures that appropriate data transfer safeguards are in place, including contractual data protection clauses consistent with internationally recognised data protection standards, before any such transfer takes place.
Data Processing Agreements: Every third party that receives personal data from 256bd is required to sign a binding data processing agreement before receiving any data. These agreements mandate appropriate technical and organisational security measures, prohibit secondary use of your data, and require the third party to promptly notify 256bd of any personal data breach affecting your information.
Data Security & Retention
256bd implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no platform can guarantee absolute security, our security framework reflects current best practices for online gambling platforms serving the Bangladesh market.
5.1 Technical Security Measures
All data transmitted between your device and 256bd is encrypted in transit using Transport Layer Security (TLS 1.2 or higher) with 256-bit AES encryption. Personal data stored on 256bd servers is encrypted at rest. Access to production databases containing player data is restricted to a small number of authorised technical personnel and is protected by multi-factor authentication and audit logging. Our infrastructure undergoes regular security assessments to identify and remediate vulnerabilities.
5.2 Organisational Security Measures
256bd staff with access to personal data are subject to confidentiality obligations, background screening appropriate to their role, and regular privacy and data security training. Access to personal data is granted on a strict need-to-know basis. KYC documents are accessible only to members of our compliance team and are subject to the most restrictive access controls on the platform.
5.3 Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, 256bd will notify affected players at the email address on their account as soon as practicable after becoming aware of the breach. Our notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 256bd is taking to address it. We will also take all reasonable steps to contain the breach and prevent further unauthorised access.
5.4 Data Retention Schedule
256bd retains personal data for the following periods from the date of account closure or last relevant interaction, unless a longer retention period is required by applicable law:
- Transaction records and financial data: 7 years (financial compliance)
- Identity and KYC documents: 5 years post-account closure
- Account activity and bet history: 5 years post-account closure
- Support communications: 3 years from the date of the interaction
- Marketing consent records: 3 years from withdrawal of consent or account closure
- Technical and log data: 12 months on a rolling basis
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.
Your Privacy Rights
As a 256bd player, you hold a number of rights with respect to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our support team in English at . We will respond to all valid requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Right of Access
You have the right to request a copy of all personal data that 256bd holds about you, together with information about how it is being used. We will provide this information in a structured, commonly used, machine-readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic contact details directly through your account settings at any time.
Right to Erasure
You may request the deletion of personal data we hold about you where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to our legal retention obligations.
Right to Restriction
You may request that 256bd restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests.
Right to Data Portability
Where we process your data on the basis of your consent or contract performance, you have the right to receive that data in a portable format so that you can transfer it to another service provider if you choose to do so.
Right to Object
You have the right to object to 256bd processing your personal data where that processing is based on our legitimate interests — including profiling for fraud prevention or responsible gaming monitoring — unless we can demonstrate compelling legitimate grounds that override your interests.
Identity Verification for Rights Requests
To protect your privacy, 256bd will verify your identity before processing any data rights request. You will be asked to confirm details that match your registered account profile. We may also ask you to provide a copy of your NID or passport if the nature of the request requires a higher level of verification. We will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to apply a reasonable administrative fee.
Children's Privacy
256bd is strictly an adult platform intended for players who are 18 years of age or older. We do not knowingly collect, process, or store personal data from any person under the age of 18. Our registration process includes age verification steps designed to prevent minors from creating accounts. We also encourage parents and guardians in Bangladesh to use internet filtering software — such as Net Nanny, Qustodio, or similar tools — to restrict minors from accessing online gambling platforms.
If 256bd becomes aware at any point that a player who has provided us with personal data is under 18 years of age, we will take the following immediate steps: suspend the account; delete all associated personal data to the extent permitted by our legal obligations; refund any deposits made from the account to the originating payment method where practicable; and, if the circumstances suggest that a third party facilitated the minor's access to the platform, investigate and take appropriate action.
If you are a parent or guardian and you believe a person under 18 in your care has created a 256bd account, please contact us immediately in English at . Include as much detail as you are able to provide — including the account's registered email address if known — so that we can act as quickly as possible.
18+ Policy Enforcement: 256bd takes underage gambling extremely seriously. Age verification is conducted at the point of registration and again at the KYC stage before any withdrawal is processed. Accounts where the registered player is found to be under 18 will be closed immediately with zero exceptions, regardless of account balance or betting history.
Policy Updates & Contact
256bd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will update the Effective Date at the top of this page and, where the changes are significant, notify active players via the email address on their account. We encourage you to review this Privacy Policy periodically to stay informed about how 256bd protects your data.
Continued Use as Acceptance
Your continued use of the 256bd platform after an updated Privacy Policy has been published on this page constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you must stop using the 256bd platform and request account closure by contacting our support team. Any data collected prior to the policy change will continue to be governed by the version of the policy that was in force at the time of collection.
How to Contact Us About Privacy
If you have any questions, concerns, or complaints about this Privacy Policy, about how 256bd processes your personal data, or about how we have handled a data rights request, please contact our support team in English using the details below. All privacy-related communications should be sent in English so that they can be handled efficiently by our compliance team.
- Email: (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week
- Service Timezone: Bangladesh Standard Time (BST, UTC+6)
- Language: English
We aim to respond to all privacy-related enquiries within two Bangladesh business days. For formal data rights requests (access, erasure, portability, etc.), our response deadline is 30 days from the date we receive a complete, verified request as described in Section 6 of this policy.
Privacy Enquiries: For any privacy-related questions about your 256bd account data, email our support team at . Please include "Privacy Policy Enquiry" in your subject line and provide your registered account email address so we can locate your account records promptly. Our team operates in English on Bangladesh Standard Time, 24/7.
Questions About Your Data at 256bd?
Our English-language support team is available around the clock to help with privacy enquiries, data rights requests, or any other account question. You can also explore our FAQ or return to the 256bd homepage.