10bd Privacy Policy — How We Collect, Use, and Protect Your Data

1. Data We Collect

10bd collects personal data from players through multiple touchpoints during the account lifecycle — from initial registration through to account closure. The categories of data we collect, and the circumstances in which we collect them, are detailed below.

1.1 Registration Data

When you create a 10bd account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (used to verify the 18+ age requirement)
• Residential address in Bangladesh (city, district, postal code)
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account communications and password recovery)
• Username and encrypted password (your chosen account credentials)

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify player age, 10bd may request the following documents from you:

• National Identity Card (NID) issued by the Bangladesh Election Commission — front and back copy
• Valid Bangladeshi passport — photo page copy
• Proof of residential address — a utility bill or bank statement issued within the last 90 days
• Selfie photograph — for liveness verification, matching the submitted ID document

KYC documents are processed by 10bd's internal compliance team and, where applicable, by a certified third-party identity verification service provider. Documents are stored securely and retained in accordance with the data retention schedule in Section 5 of this Policy.

1.3 Transaction Data

Every financial transaction conducted on the 10bd platform generates a transaction record. This includes deposit amounts, withdrawal requests, bKash/Nagad/Rocket transaction reference numbers, bank transfer details, bonus credits applied, and the timestamps of each transaction. This data is retained for anti-money-laundering compliance and dispute resolution purposes.

1.4 Gameplay and Betting Data

10bd automatically records gameplay activity including game sessions played, bets placed, wagers won or lost, bet amounts, game types accessed, and session durations. This data is used for account management, responsible gaming monitoring, bonus wagering verification, and fraud detection. It is not used to build advertising profiles.

1.5 Technical and Device Data

When you access the 10bd platform, our servers automatically collect certain technical data including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited within the platform, and session timestamps. This data is used for security monitoring, fraud prevention, and aggregate platform analytics.

1.6 Communications Data

If you contact 10bd via live chat, email, or any other support channel, we retain a record of that communication including the content of messages exchanged, the date and time of the interaction, and the resolution outcome. These records are used for quality assurance, dispute resolution, and staff training purposes.

2. How We Use Your Data

10bd processes personal data only for specific, legitimate purposes. We do not process your data in any manner that is incompatible with the purposes listed below. Our legal bases for processing are: contractual necessity (to deliver the services you have requested), legal obligation (to comply with AML and regulatory requirements), legitimate interest (to maintain platform security and prevent fraud), and consent (for non-essential communications, where applicable).

2.1 Marketing Communications

10bd will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, offers, and new game launches if you have explicitly opted in to receive such communications during registration or subsequently through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your account notification preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

3. Data Sharing & Disclosure

10bd does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Personal data is shared only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, 10bd must share relevant transaction data with the applicable payment service provider. This sharing is limited to what is technically necessary to execute the transaction and is governed by each provider's own data processing terms.

3.2 Identity Verification Partners

Where 10bd uses a certified third-party KYC service provider to assist with identity and age verification, your submitted identity documents and associated personal data are transmitted to that provider via an encrypted connection. The provider is contractually bound to process your data only for the purposes of identity verification and not to retain or use it for any other purpose.

3.3 Game Studio Providers

Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver game content directly within the 10bd platform environment. These providers may receive a limited set of session data (such as a player session token and bet amounts) necessary to run the game. They do not receive your full profile data or payment details.

3.4 Law Enforcement and Regulatory Authorities

10bd will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or formal legal process. In cases of suspected serious criminal activity including money laundering or fraud, 10bd may proactively report account information to the relevant Bangladeshi authorities without prior notice to the account holder.

3.5 Business Transfers

In the event that 10bd undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a platform announcement or email to your registered address, and your rights under this Privacy Policy will be preserved by any successor entity.

3.6 No Cross-Border Transfers Without Safeguards

Where personal data is transferred to a third party operating outside of Bangladesh, 10bd takes reasonable steps to ensure that adequate data protection safeguards are in place, including contractual data processing agreements that impose equivalent privacy obligations on the recipient.

4. Cookies & Tracking Technologies

10bd uses cookies and similar browser-based technologies to operate the platform, maintain your login session, protect against fraudulent access, and gather aggregate analytics data. This section explains the types of cookies we use and how you can manage them.

4.1 Cookie Categories

4.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) provide controls under their privacy or security settings menus that allow you to block, clear, or restrict cookies on a per-site basis. Please note that disabling certain functional cookies may affect your experience on the 10bd platform, including the ability to remain logged in between sessions.

4.3 No Third-Party Advertising Cookies

10bd does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. We do not participate in cross-site behavioural advertising networks. Any analytics tools used by 10bd are configured in privacy-preserving mode with IP anonymisation enabled where applicable.

5. Data Retention

10bd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of personal data processed by 10bd:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data has been anonymised, the resulting aggregate dataset may be retained indefinitely for statistical and platform improvement purposes without privacy implications.

6. Data Security

10bd implements a layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include the following safeguards, which are reviewed and updated on a regular basis:

• Transport Encryption: All data transmitted between your browser or app and the 10bd platform is protected using TLS 1.2 or TLS 1.3 encryption. Our SSL certificate is maintained and renewed to ensure continuous protection.
• Data-at-Rest Encryption: Sensitive personal data stored on 10bd servers — including payment details, KYC documents, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within 10bd's internal systems is restricted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and undergo regular privacy and security training.
• Two-Factor Authentication: 10bd offers two-factor authentication (2FA) for player accounts and mandates it for all internal administrative access to player data systems.
• Penetration Testing: 10bd's platform infrastructure undergoes periodic security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, 10bd will notify affected players within a reasonable timeframe and take immediate steps to contain, investigate, and remediate the incident.

7. Your Privacy Rights

As a registered player on the 10bd platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact 10bd support via live chat or by email at support@10bd.im. We will respond to all verifiable privacy requests within 30 days of receipt.

7.1 Minors

The 10bd platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If 10bd discovers or is notified that personal data has been collected from a person under 18, the account will be immediately closed, the data will be deleted (subject to any legal retention requirements applicable to the relevant transaction records), and the matter will be investigated in accordance with our responsible gaming obligations.

8. Contact & Data Queries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 10bd handles your personal data, you are encouraged to contact us in the first instance through our 24/7 live chat support available within the platform. Our support team can escalate privacy-specific enquiries to the appropriate internal team for review.

8.1 Written Privacy Requests

For formal written privacy requests — including requests to exercise your rights under Section 7, data subject access requests, or complaints about data handling — you may contact 10bd by email. Please include your registered account username, a description of your request, and a copy of your identity document so that we can verify your identity before processing your request.

8.2 Policy Updates

10bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. The "Effective Date" at the top of this Policy will be updated accordingly. Continued use of the 10bd platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically. Previous versions of this Policy may be requested from our support team if needed for reference purposes.