266bd Privacy Policy

When you register or interact with 266bd, you may provide the following categories of personal information:

• Identity information: your full legal name, date of birth and national identification details provided during KYC verification.
• Contact information: your Bangladesh mobile number and, where voluntarily provided, an email address.
• Financial information: payment method details (such as your bKash, Nagad or Rocket wallet number) provided when making deposits or requesting withdrawals. Full payment credentials are handled by the respective payment provider and are not stored on 266bd servers.
• Support communications: the content of messages you send to the 266bd support team, including any attachments or screenshots you voluntarily share to resolve a query.

When you access and use the 266bd platform, certain technical information is automatically recorded by our systems:

• Device and browser information: device type, operating system version, browser type and version, screen resolution and language settings.
• Network information: IP address, mobile network carrier and approximate geographic location derived from IP address (country and city level only; precise GPS coordinates are not collected).
• Session and usage data: pages visited, time and duration of visits, game sessions played, betting history, bonus activity, and actions taken within the account settings.
• Cookie data: session identifiers, preference settings and analytics tokens stored in your browser as described in Section 4 of this Policy.

266bd may receive personal information about you from the following third-party sources in the course of operating the platform:

• Payment providers (bKash, Nagad, Rocket and card processors): transaction confirmation data including transaction reference numbers, amounts and timestamps, used to reconcile deposits and withdrawals against your account ledger.
• Identity verification services: confirmation of identity document authenticity and age verification results, where KYC checks are performed by a third-party verification provider.
• Fraud prevention and anti-money laundering services: risk scores and alert flags provided by fraud detection partners, used to protect the integrity of the platform and the safety of all account holders.

Your personal data is used for the following primary operational purposes:

• Account creation and management: verifying your identity, creating your account, maintaining your account ledger, applying bonuses and processing your gaming activity.
• Payment processing: verifying deposits, initiating withdrawal disbursements to your bKash, Nagad or Rocket wallet, and maintaining an auditable transaction record.
• Security and fraud prevention: detecting and preventing unauthorised access, bonus abuse, collusion, money laundering and other prohibited activities as defined in the 266bd Terms and Conditions.
• Regulatory compliance: fulfilling age verification, KYC and anti-money laundering obligations as required by applicable law, and maintaining records in the form and for the duration required by such obligations.
• Customer support: using your account history, communication records and technical logs to diagnose issues, respond to support enquiries and resolve disputes in a timely and accurate manner.

With your consent or based on legitimate interest, 266bd may also use your information for the following secondary purposes:

• Platform improvement: analysing aggregated, anonymised usage data to improve platform performance, game loading times, navigation design and the overall player experience.
• Personalised promotions: where you have not opted out, using your gaming activity and preferences to tailor bonus offers, promotional notifications and content recommendations to your interests.
• Responsible gaming monitoring: reviewing patterns in your gaming activity — such as rapid increases in deposit frequency, session length or loss amounts — to identify potential problem gambling behaviour and, where appropriate, proactively offering responsible gaming tools or temporarily restricting account activity.

Your personal data may be disclosed to the following categories of recipients:

• Payment service providers: bKash, Nagad, Rocket and card networks receive only the minimum transaction data required to process your payment request. These providers operate under their own privacy policies and data security frameworks.
• Technology and infrastructure partners: hosting providers, content delivery networks and cybersecurity service providers who process data on our behalf under strict contractual data processing agreements.
• Identity and fraud verification providers: third-party KYC and anti-money laundering services that process identity document images and biometric data solely for verification purposes and are prohibited from using that data for any other purpose.
• Law enforcement and regulatory authorities: where 266bd is required by law, court order or regulatory direction to disclose personal data, we will comply to the extent legally required. Where permitted, 266bd will attempt to notify the affected account holder before making such a disclosure.

266bd does not and will not sell, license or otherwise transfer your personal data to advertisers, data brokers, marketing agencies or any commercial third party for the purpose of targeting you with advertising or marketing communications. Any promotional communications you receive from 266bd are generated internally, based on your own account activity and preferences, and are not the result of your data being sold to or processed by an external marketing entity.

The 266bd platform uses cookies and similar lightweight tracking technologies to maintain session state, remember user preferences and collect anonymous usage analytics. The categories of cookies used are:

• Essential cookies: required for the platform to function correctly, including session authentication tokens, CSRF protection tokens and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Preference cookies: store your language setting, display preferences and responsible gaming tool configurations so they persist across sessions without requiring you to re-enter them each time you visit.
• Analytics cookies: collect anonymised, aggregated data about how players navigate the platform — pages visited, time on page, drop-off points — to help us identify and fix usability issues. These cookies do not identify you personally.

You may manage or disable non-essential cookies through your mobile browser settings at any time. Please note that disabling analytics or preference cookies will not prevent you from accessing the platform but may affect the persistence of your display preferences and the relevance of any promotional content shown to you. 266bd does not use third-party advertising cookies or cross-site tracking pixels.

266bd implements a layered approach to data security. All data transmitted between your device and the 266bd platform is protected by 256-bit SSL/TLS encryption. Account passwords are stored using one-way cryptographic hashing and are never stored or transmitted in plain text. Access to production systems containing personal data is restricted to a small number of authorised personnel and is protected by multi-factor authentication and role-based access controls. Our infrastructure undergoes regular vulnerability assessments. Despite these measures, no platform can guarantee absolute security, and 266bd encourages all players to use strong, unique passwords and to contact support immediately if they suspect their account credentials have been compromised.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected account holders, 266bd will act promptly to contain the breach, assess its scope and notify affected players via their registered mobile number or email address as soon as reasonably practicable. Where required by applicable law, 266bd will also notify the relevant authority. Notifications will describe the nature of the breach, the categories of data affected, the likely consequences and the steps 266bd is taking to address it. Players should ensure their registered contact details are kept up to date so that breach notifications can reach them.

266bd retains personal data for as long as your account remains active and for a defined period thereafter as required by applicable legal and regulatory obligations. Account and transaction records — including KYC documents, betting history, deposit and withdrawal records — are retained for a minimum of 5 years following account closure, consistent with standard financial record-keeping requirements. Support communications are retained for 2 years from the date of the last interaction on the relevant ticket. Analytics data that has been fully anonymised and cannot be re-linked to any individual is retained indefinitely for platform improvement purposes. Once a retention period expires, your personal data is securely deleted or irreversibly anonymised. You may request early deletion of non-legally-mandated data by contacting support at [email protected].

You have the following rights in relation to the personal data that 266bd holds about you:

• Right of access: you may request a copy of the personal data we hold about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right of rectification: you may request correction of inaccurate personal data we hold about you. Where data is genuinely inaccurate, 266bd will correct it promptly, subject to any identity verification required to confirm the request is legitimate.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that require 266bd to retain it for a defined period.
• Right to restrict processing: you may request that 266bd temporarily suspend the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to object: you may object to the processing of your personal data for direct marketing or profiling purposes at any time. Once an objection is received, 266bd will cease using your data for that purpose within 10 business days.

To exercise any of the rights described above, send a written request to [email protected] from the mobile number or email address associated with your 266bd account. Include your full name, registered mobile number and a clear description of the right you wish to exercise and the data or processing activity it concerns. 266bd will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notice. Requests are handled free of charge; where requests are manifestly unfounded or excessive, 266bd reserves the right to charge a reasonable fee or decline to respond.

The 266bd platform integrates with third-party payment providers (bKash, Nagad, Rocket) and game content providers (including Pragmatic Play, Evolution Gaming and other licensed studios) to deliver a complete gaming and wagering experience. When you interact with these third-party services, your data may be processed by them under their own privacy policies. 266bd is not responsible for the privacy practices of third-party providers. We recommend that you review the privacy policies of any third-party services you interact with through the 266bd platform. 266bd selects third-party partners who demonstrate an adequate level of data protection and requires all data processors acting on our behalf to comply with contractual data processing obligations consistent with this Policy.

266bd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law or regulatory guidance. When material changes are made, 266bd will notify active account holders via their registered mobile number and will display a prominent notice on the platform for a minimum of 14 days following the change. The revised Policy will take effect from the date indicated at the top of the Policy. Continued use of the 266bd platform after the effective date constitutes acceptance of the updated Policy. We recommend that you review this Policy periodically.

If you have any questions, concerns or complaints about this Privacy Policy or the way 266bd handles your personal data, please contact our support team in writing at [email protected]. Please include your registered mobile number and a clear description of your query so that we can respond efficiently. 266bd takes all privacy-related enquiries seriously and commits to acknowledging receipt within 5 business days and providing a full response within 30 calendar days.