54bd2 Privacy Policy

1Information You Provide Directly

When you register a 54bd2 account, use the platform, or contact our support team, you provide us with personal information directly. This includes:

• Registration information: full name, date of birth, Bangladesh mobile number, and account password (stored in hashed form — the original password is never stored in plain text).
• Identity verification documents (KYC): where required, a copy of a government-issued identity document such as a National ID card (NID) or passport, used solely to verify age and identity as required by our Terms & Conditions.
• Payment information: the mobile wallet number (bKash, Nagad, Rocket, or Upay) linked to your account for processing deposits and withdrawals. 54bd2 does not store full card numbers or wallet PINs.
• Support communications: messages sent to 54bd2 via the platform's messaging system, including details of any issue reported, the account involved, and the resolution provided.

2Information Collected Automatically

When you access the 54bd2 platform, certain information is collected automatically by our systems. This technical data is used for security, fraud prevention, and platform performance purposes:

• Device and browser data: device type (Android or iOS), operating system version, browser type, and screen resolution. This data helps us optimise the platform layout for your device.
• Session data: login timestamps (Bangladesh Standard Time, UTC+6), session duration, pages visited, and in-game actions. Session data is used to detect unusual account activity and provide a complete audit trail where required.
• IP address: your device's IP address at the time of login, used for security monitoring and geographic access controls. IP addresses are not used for targeted advertising.

3Information from Third-Party Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, those payment processors may pass transaction confirmation data to 54bd2 for the purpose of crediting or debiting your account balance. The data received from payment processors is limited to:

• Transaction reference number — a unique identifier for each payment event, used to match the deposit or withdrawal to your account record.
• Mobile wallet number (last four digits only in display) — used to confirm that the payment originated from the wallet registered to your account.
• Transaction amount in BDT — the value deposited or withdrawn, recorded against your account transaction history.

4Purposes and Legal Basis Summary

The table below summarises the primary purposes for which 54bd2 processes your personal data. For each purpose, the specific data categories used and the lawful basis for processing are identified.

5We Do Not Use Your Data for Advertising Profiling

54bd2 does not build advertising profiles based on your personal data, does not use behavioural retargeting technology, and does not share your data with advertising networks or data brokers. Any promotional communications sent by 54bd2 (such as bonus notifications delivered through the platform's own messaging system) are based on your account activity within the 54bd2 platform only, not on data purchased from or shared with external marketing systems.

6Why We Are Permitted to Process Your Data

54bd2 processes personal data only where there is a clear lawful basis for doing so. The applicable bases are:

• Contractual necessity — processing your registration details, payment information, and account activity data is necessary to provide the services you have contracted for by registering a 54bd2 account.
• Legitimate interests — processing device data, IP addresses, and session data for fraud prevention and security monitoring serves the legitimate interests of 54bd2 and its players in maintaining a safe and fair platform.
• Legal obligation — processing identity verification documents and retaining transaction records is required to comply with applicable anti-money laundering and know-your-customer obligations.
• Consent — where 54bd2 sends you optional promotional communications (such as bonus availability notifications), this is done on the basis of your consent, which you may withdraw at any time by contacting support through the platform messaging system.

7Who We Share Your Data With

54bd2 does not sell personal data. We share personal data only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — we share only the transaction data necessary to initiate and confirm deposits and withdrawals. Payment processors receive no other personal data from 54bd2.
• Identity verification service providers — where 54bd2 uses a third-party KYC verification service to authenticate identity documents, that provider receives only the specific document data required for verification. Such providers operate under strict data processing agreements with 54bd2.
• Law enforcement and regulatory authorities — where 54bd2 is required by applicable law, court order, or regulatory authority to disclose personal data, we will comply. Where permitted, 54bd2 will notify the account holder of such a requirement before disclosure.
• Platform technical service providers — providers of hosting, database management, and platform security infrastructure who process data on 54bd2's behalf under contractual data processing terms that prohibit them from using the data for their own purposes.

8How Payment Data Is Handled

54bd2 takes the security of financial data seriously. The following specific rules apply to the handling of payment-related personal data on the platform:

• Full mobile wallet numbers are masked in all 54bd2 platform interfaces — only the last four digits are displayed to you and to support staff. The full number is stored in encrypted form accessible only to the payment processing system.
• Transaction history (deposit and withdrawal records) is retained for a minimum of 5 years from the date of the transaction, in line with anti-money laundering record-keeping requirements. After this period, transaction records are securely deleted unless ongoing legal proceedings require their retention.
• 54bd2 support staff are trained to handle financial data requests. Any request to change a withdrawal wallet number requires identity verification before the change is processed, as an anti-fraud measure.

9No Full Card Storage

54bd2 does not store full Visa or Mastercard card numbers on its own systems. Where card payments are processed, the card data is handled entirely by the card payment processor under PCI-DSS standards. 54bd2 receives only a transaction token and confirmation status — never the full card number, CVV, or expiry date.

10What Cookies 54bd2 Uses

The 54bd2 platform uses a small number of cookies to provide its core functionality. We do not deploy third-party advertising cookies or cross-site tracking pixels. The cookies used by 54bd2 fall into the following categories:

• Essential session cookies — these are strictly necessary for the platform to function. They maintain your logged-in state so you do not have to log in again with each page load. These cookies are deleted when you close your browser session.
• Functional cookies — these remember your platform preferences such as language selection (English or Bengali), so the platform loads in your preferred language on your next visit without requiring you to reselect.
• Security cookies — short-lived cookies used to protect against cross-site request forgery (CSRF) attacks. These are technical security tokens that contain no personal information.

11Managing Your Cookie Preferences

You can manage or delete cookies through your mobile browser settings. Note that disabling essential session cookies will prevent you from remaining logged in to your 54bd2 account and may impair core platform functionality. Disabling functional cookies will mean the platform cannot remember your language preference between visits. 54bd2 does not use a cookie consent pop-up because we deploy only essential, functional, and security cookies — categories that do not require opt-in consent under standard data protection practice.

12How Long We Keep Your Data

54bd2 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data (registration details, KYC documents, payment wallet associations) — retained for the lifetime of the account plus 5 years following account closure, in line with anti-money laundering record retention requirements.
• Transaction records — retained for a minimum of 5 years from the transaction date. Records associated with disputed transactions or ongoing legal proceedings are retained until final resolution plus 1 year.
• Support communications — retained for 2 years from the date of the last message in a support thread, then securely deleted. Support logs involving account fraud investigations are retained for 5 years.

13Rights Available to 54bd2 Account Holders

As a 54bd2 account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team through the platform messaging system or by writing to [email protected] with the subject line "Privacy Rights Request". We will respond within 48 hours and fulfil all valid requests within 30 calendar days.

• Right of access — you may request a copy of all personal data 54bd2 holds about you. We will provide this in a portable, readable format within 30 days.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Changes to core account details (name, date of birth) require supporting documentation.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Note that transaction records and KYC documents are subject to mandatory minimum retention periods and cannot be deleted on request alone.
• Right to restriction of processing — in certain circumstances (for example, where you contest the accuracy of data we hold), you may request that we restrict processing of your data while the matter is resolved.
• Right to withdraw consent — where processing is based on your consent (for example, optional promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

14How to Submit a Privacy Rights Request

To submit a privacy rights request, contact 54bd2 support through the platform's internal messaging system (accessible when logged into your account) or by writing to [email protected] with the subject line "Privacy Rights Request". Include your full name, the mobile number registered to your account, and a clear description of the right you are seeking to exercise. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. In cases of complexity or high volume, we may extend the response period by a further 30 days; if so, you will be notified of the extension within the initial 30-day window.

15How We Protect Your Data

54bd2 implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the 54bd2 platform, ensuring that data in transit cannot be intercepted in readable form.
• Access controls — personal data is accessible only to 54bd2 staff members who require it for their specific job function. All staff access is logged and reviewed. No staff member has unrestricted access to all personal data categories.
• Encrypted storage of sensitive data fields, including password hashes, wallet numbers, and identity document copies, at rest on 54bd2's secured server infrastructure.

16Players Under 21 Are Not Permitted

54bd2 does not knowingly collect or process personal data from individuals under the age of 21. The platform is strictly for adults aged 21 and above. If 54bd2 becomes aware that personal data has been collected from a person under 21 — whether through a misrepresented date of birth at registration or any other means — the account will be immediately suspended, all data associated with that account will be flagged for review, and the data will be deleted to the maximum extent permitted by applicable law once any related compliance obligations (such as the reporting of suspected underage gambling) have been discharged. If you believe a person under the age of 21 has registered a 54bd2 account, please report this to [email protected] immediately.

17How We Notify You of Updates

54bd2 may update this Privacy Policy from time to time to reflect changes in how we process personal data, changes in applicable law, or improvements to our privacy practices. When we make a material change to this Policy — that is, a change that significantly affects how your personal data is used or who it is shared with — we will publish a notice on the platform and update the "Last updated" date at the top of this page. Minor changes such as clarifications, typographic corrections, or re-formatting that do not affect the substance of the Policy may be made without specific notice. Your continued use of the 54bd2 platform after any update to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you disagree with any change, you may close your account and request deletion of your data in accordance with Section 8 above.

Support email (plain text, not a link): [email protected]