Your Privacy Matters at 2kbd
At 2kbd, we take the protection of your personal data seriously. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and what rights you hold as a registered user of Bangladesh's trusted online casino and betting platform.
- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing and Disclosure
- 6. Cookies and Tracking
- 7. Data Retention
- 8. Data Security
- 9. Your Rights
- 10. Children's Privacy
- 11. Third-Party Links
- 12. Policy Updates
- 13. Contact Us
This policy applies to all 2kbd users globally, including players registered from Bangladesh.
This Privacy Policy describes how 2kbd collects, uses, stores, and protects the personal information you provide when using our platform. By registering an account or continuing to use 2kbd, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, you must discontinue use of the platform.
1 Introduction
2kbd ("we", "our", "us") is committed to protecting and respecting the privacy of every individual who accesses or uses the 2kbd platform at https://2kbd.io and all associated subdomains, mobile interfaces, and services. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed.
We operate as an internationally licensed online gambling and entertainment platform serving players across Bangladesh and other permitted territories. As part of our operational and regulatory obligations, we are required to collect certain categories of personal information from registered users. This policy explains what we collect, why we collect it, how we use it, and how long we keep it.
This policy should be read alongside our Terms and Conditions and our Responsible Gaming guidelines, both of which contain additional provisions that govern your use of the 2kbd platform. Together, these documents form the complete framework governing your relationship with 2kbd.
This Privacy Policy was last reviewed and updated on 1 January 2026. Where we make material changes to this policy, we will notify registered users by email and by posting a prominent notice on the platform.
2 Data We Collect
We collect personal data from you in three primary ways: information you provide to us directly during registration and account use; information collected automatically as you interact with the platform; and information we receive from third parties such as payment processors and identity verification providers.
2.1 Information You Provide Directly
- Registration data: full name, date of birth, email address, mobile number, and residential address as provided during account creation.
- Identity verification documents: copies of government-issued photo ID (National ID card, passport, or driving licence) and supporting documents submitted during KYC verification.
- Payment information: mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details, and cryptocurrency wallet addresses used for deposits and withdrawals.
- Communication records: messages, emails, and live chat transcripts exchanged with our customer support team.
- Responsible gaming preferences: deposit limits, self-exclusion settings, cooling-off periods, and session time preferences set within your account.
2.2 Information Collected Automatically
- Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and unique device identifiers.
- Usage and behavioural data: pages visited, games played, bets placed, session duration, navigation paths, and feature interactions within the platform.
- Transaction data: full history of deposits, withdrawals, wagers, wins, losses, bonus activity, and account balance changes.
- Location data: approximate geolocation derived from your IP address, used to verify that you are not accessing the platform from a prohibited territory.
- Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 6 of this policy.
2.3 Information From Third Parties
- Identity verification providers: results and flags returned by our KYC verification partners when processing identity document checks.
- Payment processors: transaction status confirmations, fraud flags, and chargeback notifications from bKash, Nagad, Rocket, Upay, DBBL, and cryptocurrency network providers.
- Fraud and AML screening services: sanctions screening results and politically exposed person (PEP) status indicators from our compliance service partners.
We apply a data minimisation approach — we only collect personal information that is genuinely necessary for the specific purpose for which it is being processed. We do not collect personal data speculatively or in excess of what our operational, legal, and regulatory obligations require.
3 How We Use Your Data
The personal data we collect is used solely for the purposes described in this section. We do not use your personal data for any purpose that is incompatible with the purposes listed below, and we do not sell your personal data to any third party for commercial or marketing purposes under any circumstances.
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Registration data, device data |
| Identity and age verification (KYC) | Identity documents, registration data |
| Processing deposits and withdrawals | Payment information, transaction data |
| Fraud prevention and anti-money laundering compliance | All categories, third-party screening data |
| Customer support and complaint resolution | Communication records, transaction data |
| Responsible gaming monitoring and intervention | Usage data, transaction data, RG preferences |
| Platform security and abuse prevention | Device data, IP address, usage data |
| Service improvement and product analytics | Anonymised usage and behavioural data |
| Regulatory reporting and legal compliance | Registration data, transaction data, KYC records |
| Personalised promotions (where consented) | Usage data, transaction history, preferences |
Where we send you personalised promotional communications, we will always provide a clear and straightforward means to opt out. You may update your communication preferences at any time from within your 2kbd account settings or by contacting our support team.
4 Legal Basis for Processing
We process your personal data only where we have a valid legal basis for doing so. The legal bases on which 2kbd relies when processing personal data are as follows:
4.1 Contractual Necessity
The majority of the personal data we process is necessary for the performance of the contract between you and 2kbd — namely, the provision of our online gambling and entertainment services under the Terms and Conditions you accepted at registration. This includes processing your registration details, managing your account, processing deposits and withdrawals, and providing customer support.
4.2 Legal Obligation
Certain processing activities are required by applicable law and regulatory obligations, including anti-money laundering (AML) checks, Know Your Customer (KYC) identity verification, sanctions screening, and the retention of transaction records for regulatory audit purposes. We cannot waive these requirements regardless of any user preference to the contrary.
4.3 Legitimate Interests
We process certain categories of data on the basis of our legitimate interests as a business, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, abuse detection, responsible gaming monitoring, and the aggregated analysis of anonymised usage data to improve our products.
4.4 Consent
Where we send you optional personalised marketing communications — such as promotional bonus offers, game recommendations, or event-based notifications — we do so on the basis of your consent. You have the right to withdraw this consent at any time, and doing so will not affect the lawfulness of any processing carried out prior to your withdrawal.
5 Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and always subject to appropriate contractual data protection obligations.
5.1 Service Providers and Technology Partners
We engage carefully selected third-party service providers to assist in the delivery of our platform and services. These providers act as data processors on our behalf and are contractually bound to process your data only on our documented instructions, using appropriate security measures, and for no other purpose. Categories of service providers include:
- Identity verification and KYC processing partners
- Payment processing infrastructure providers (including mobile banking gateway operators)
- Cloud hosting and data centre providers
- Customer support platform providers
- Anti-fraud and AML screening services
- Game studio technology providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming)
5.2 Regulatory and Legal Authorities
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where we are legally required to do so, or where disclosure is necessary to establish, exercise, or defend legal claims. Such disclosures are made only to the extent strictly required and in accordance with applicable legal process.
5.3 Business Transfers
In the event that 2kbd undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by us may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected users prior to any transfer and will ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this policy.
2kbd does not and will never sell, lease, or otherwise commercialise your personal data to unaffiliated third parties for their own marketing, profiling, or commercial purposes. Your data is shared only where strictly necessary for the delivery of our services or for compliance with legal obligations.
6 Cookies and Tracking Technologies
The 2kbd platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to gather anonymised analytics data that helps us improve the user experience.
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, fraud prevention signals | Session / up to 24 hours |
| Functional | Language preferences, game lobby layout, notification settings | Up to 12 months |
| Analytics | Anonymised page visit counts, feature engagement, error reporting | Up to 24 months |
| Marketing (consent-based) | Personalised promotion delivery and campaign attribution | Up to 12 months |
6.2 Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled as they are essential to the functioning of the platform. You may manage your preferences for functional, analytics, and marketing cookies through your browser settings. Please note that disabling certain cookie categories may affect the performance and personalisation features available to you on the 2kbd platform.
7 Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The specific retention periods applicable to different categories of data are set out below.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration details | Duration of account + 5 years post-closure | Legal obligation / AML |
| KYC identity documents | 5 years from date of submission | Regulatory compliance |
| Transaction and financial records | 7 years from transaction date | Financial regulation |
| Customer support communications | 3 years from last interaction | Legitimate interests |
| Responsible gaming records | 5 years from account closure | Legal obligation |
| Analytics and usage data (anonymised) | Up to 24 months | Legitimate interests |
| Marketing consent records | 3 years from last consent action | Legal obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised beyond the point of re-identification. Where ongoing legal proceedings require the preservation of specific data beyond the standard retention period, that data will be held until the proceedings are concluded.
8 Data Security
2kbd implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes the following measures:
- 256-bit SSL/TLS encryption applied to all data in transit between your device and 2kbd's servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted during transmission.
- Encryption at rest for all sensitive personal data and financial records stored within our database infrastructure, including KYC documents and payment method details.
- Role-based access controls ensuring that 2kbd staff can only access personal data to the minimum extent required for their specific job function. Access to sensitive data is logged and audited.
- Two-factor authentication (2FA) available to all registered users as an additional layer of protection for account access. We strongly encourage all users to enable 2FA on their 2kbd account.
- Regular security assessments including penetration testing, vulnerability scanning, and independent security audits conducted on a periodic basis.
- Incident response procedures that enable rapid detection, containment, and notification of any data security incident affecting user personal data.
While we maintain robust security measures on our side, the security of your account also depends on you. You are responsible for keeping your 2kbd login credentials confidential and for using a strong, unique password. Never share your password with any third party. If you suspect your account has been accessed without your authorisation, contact us immediately at [email protected].
9 Your Rights
As a data subject whose personal information is processed by 2kbd, you hold a number of rights in relation to your personal data. These rights are summarised below. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 72 hours of receiving a valid request.
Request a copy of the personal data we hold about you and information on how it is being used.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no longer a lawful basis for its retention.
Request that we restrict processing of your data while the accuracy or lawfulness is under review.
Request a machine-readable export of the personal data you have provided to us.
Object to processing based on legitimate interests or for direct marketing purposes.
Please note that certain rights are subject to exceptions where 2kbd is required to retain or continue processing your data to comply with a legal obligation, to establish or defend legal claims, or where the data is necessary for the performance of the contract between us. We will always explain the basis for any limitation we apply to a rights request.
10 Children's Privacy
The 2kbd platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes mandatory age verification steps, and all submitted identity documents are screened to confirm that each applicant meets the minimum age requirement.
If we become aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered an account on 2kbd, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.
Access to the 2kbd platform is restricted to individuals who are 21 years of age or older. This restriction is enforced during registration and periodically reviewed through our ongoing KYC and responsible gaming monitoring processes.
11 Third-Party Links
The 2kbd platform may from time to time contain references to third-party game studios, payment processors, and technology partners. While we take care to partner only with reputable and trusted organisations, we do not control the privacy practices of any third-party website or service. This Privacy Policy applies exclusively to the 2kbd platform and does not extend to any external websites or services that may be accessible via links from within our platform.
We encourage you to review the privacy policies of any third-party service you use in connection with your 2kbd account, including the privacy policies of your chosen mobile banking provider (such as bKash, Nagad, or Rocket) and any identity verification service you interact with during the KYC process. 2kbd accepts no responsibility or liability for the privacy practices of any such third-party service.
12 Policy Updates
We review and update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. The most current version of this policy is always available at https://2kbd.io/privacy-policy, and the effective date of the current version is displayed prominently at the top of this page.
Where we make material changes to this policy — meaning changes that meaningfully affect the way in which we collect, use, or share your personal data — we will notify you by email to the address registered on your account and by displaying a prominent notice on the platform. We will provide reasonable advance notice of material changes before they take effect, except where changes are required immediately by law or regulation.
Your continued use of the 2kbd platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree to the updated policy, you should discontinue use of the platform and may request account closure by contacting our support team.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 2kbd processes your personal data, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within 72 hours.
For all privacy-related enquiries, data subject rights requests, and data protection concerns, please contact:
2kbd Privacy Team
Email: [email protected]
Response time: within 72 hours (Bangladesh Standard Time, UTC+6)
Operating hours: 24 hours a day, 7 days a week
When submitting a data subject rights request, please include your registered email address and a clear description of your request so that we can locate your account records and process your request efficiently. We may need to verify your identity before fulfilling certain types of requests to ensure the security of your account and the personal data we hold.
How 2kbd Protects Your Privacy
Our privacy commitments go beyond policy text. Here is a practical summary of the concrete protections in place for every registered user.
Every connection between your device and the 2kbd platform is secured with 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are protected against interception at every stage of transmission.
2kbd operates a strict zero data sales policy. Your personal information is never sold, rented, or otherwise transferred to unaffiliated third parties for commercial or marketing purposes — not now, not ever. Your data belongs to you.
You retain meaningful control over your personal data at all times. Access, correct, export, restrict, or request deletion of your data through our support team. Marketing preferences can be updated instantly from within your account settings.
Personal data and financial records stored within the 2kbd infrastructure are encrypted at rest. Access to sensitive data is strictly role-based and continuously audited, ensuring that your information is accessible only to authorised personnel with a legitimate need.
We are committed to responding to all data subject rights requests and privacy-related enquiries within 72 hours. Our dedicated privacy support team operates around the clock to address your concerns promptly and professionally.
We apply a strict data minimisation principle across all collection activities. Only the information genuinely necessary to deliver our services, meet our legal obligations, or protect the integrity of the platform is collected — nothing more.
Questions? We Are Here to Help.
If you have any questions about how 2kbd handles your data, or if you would like to exercise your privacy rights, our support team is available 24/7. You can also explore our FAQ, review our Terms and Conditions, or return to the main casino lobby.