Privacy Policy for 40bd

Our Privacy Commitments at a Glance

At 40bd, we are committed to handling your personal data with care, transparency, and respect. The five principles below summarise how we approach privacy across the platform. Full details follow in the sections beneath.

1. Information We Collect

40bd collects personal information in three main ways: information you provide directly when registering or using the platform, information generated automatically as you use the service, and information received from third-party service providers who help us operate the platform. We only collect data that is necessary for a specific, identified purpose.

Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you may provide us with:

• Full legal name, date of birth, and gender as they appear on government-issued identification documents.
• Contact details including mobile phone number, email address, and residential address within Bangladesh.
• Copies of identity documents submitted during KYC verification, such as your National ID card or passport.
• Payment method details including your registered bKash, Nagad, Rocket, or Upay mobile number (but never your PIN or full account password).

Information Collected Automatically

When you access 40bd via a web browser or mobile device, we may automatically collect the following technical and behavioural data:

• IP address, device type, operating system version, and mobile browser or app version used to access the platform.
• Gameplay data including the games accessed, bet amounts, session duration, and game outcomes — used for account integrity verification and responsible gaming monitoring.
• Cookies and similar tracking technologies that record session preferences, login state, and platform navigation patterns (see the Cookies section below for full details).
• Referral source information indicating how you arrived at the 40bd platform (for example, from a search engine or a promotional link), used only for internal analytics.

Information from Third Parties

40bd may receive limited personal data from third-party service providers, including identity verification agencies that assist with KYC compliance, payment processors (such as bKash and Nagad) that confirm transaction status, and fraud-prevention partners that flag suspicious activity patterns. Data received from third parties is handled with the same level of care as data you provide directly to 40bd.

2. How We Use Your Information

40bd uses your personal data for the following purposes. Each purpose is matched below with the legal basis on which we rely to process that data:

3. Legal Basis for Processing

40bd processes your personal data under one or more of the following legal bases:

• Contractual necessity — processing is required to fulfil the agreement between you and 40bd when you register an account and use the platform's services.
• Legal obligation — certain data processing is mandated by applicable law, including KYC identity verification and AML transaction monitoring requirements.
• Legitimate interests — 40bd processes certain data for the purposes of platform security, fraud prevention, and service improvement, provided these interests are not overridden by your rights.
• Consent — where you have given explicit consent (for example, to receive marketing communications), you may withdraw that consent at any time by contacting [email protected].

4. How We Share Your Information

40bd does not sell or rent your personal information to any third party. We may share your data only in the following limited and controlled circumstances:

• Payment processors — bKash, Nagad, Rocket, and Upay receive only the minimum data necessary to process your deposit or withdrawal transaction (typically your registered mobile number and transaction amount).
• KYC and identity verification partners — we share identity document data with our accredited verification service providers solely for the purpose of confirming your identity and age in compliance with our legal obligations.
• Regulatory authorities and law enforcement — 40bd may disclose personal data to competent regulatory or law enforcement bodies where required to do so by applicable law, court order, or to protect the rights and safety of 40bd and its users.
• Game and platform technology providers — game studios such as Pragmatic Play, Evolution Gaming, and Spribe may receive anonymised session data for the purposes of game integrity verification and RTP auditing only. They do not receive personally identifiable information.

5. Cookies and Tracking Technologies

40bd uses cookies and similar technologies to deliver a consistent, personalised experience across sessions and to maintain platform security. A cookie is a small text file stored on your device that helps us recognise you when you return to the platform.

Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session state, prevent cross-site request forgery (CSRF) attacks, and ensure that your account remains secure during an active session. You cannot opt out of these cookies while using 40bd, as they are technically required for the service to operate.

Analytics Cookies

40bd uses internal analytics tools to understand how players navigate and use the platform. The data collected by these cookies is aggregated and anonymised — it does not identify you personally. It helps us improve page load performance, identify navigation friction, and prioritise new features requested by our Bangladesh player base.

Preference Cookies

These cookies remember your platform settings — such as your preferred language version and display preferences — so that you do not need to re-select them on every visit. You can clear these cookies at any time through your mobile browser settings, though doing so will reset your preferences.

6. Data Retention

40bd retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The specific retention periods we apply are as follows: account registration data and KYC verification records are retained for a minimum of five years following account closure, in order to meet our AML and legal reporting obligations. Transaction records are retained for a minimum of five years from the date of the transaction. Device and session logs are retained for up to 90 days, after which they are automatically deleted unless required for an active investigation.

When personal data is no longer required, 40bd will securely delete or anonymise it in accordance with industry-standard data destruction practices. Players may request confirmation of the retention period applicable to their specific data by contacting [email protected].

7. Your Data Rights

As a 40bd player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered account details. We will respond to all valid requests within 30 days.

• Right of access — you may request a copy of the personal data 40bd holds about you, together with an explanation of how it is being used.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or update it.
• Right to erasure — you may request that we delete your personal data. This right is subject to our legal retention obligations; for example, we cannot delete AML-required transaction records before the mandatory retention period has expired.
• Right to restrict processing — you may ask us to pause processing of your personal data in certain circumstances, for example while a rectification request is being reviewed.
• Right to data portability — you may request your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent — where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8. How We Protect Your Data

40bd implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, restricted access controls ensuring that only authorised personnel can access personal data, regular security audits of platform infrastructure, and secure, encrypted storage of sensitive data at rest.

While 40bd takes all reasonable steps to protect your data, no online platform can guarantee absolute security. If you become aware of any suspected security breach related to your 40bd account, please report it immediately to [email protected] so that we can take prompt action to protect your account and investigate the incident.

9. Children and Minors

40bd is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to 40bd, please contact us immediately at [email protected]. Upon verification of the report, we will promptly close the account and delete all associated personal data. 40bd reserves the right to request age-verification documents from any player at any time to enforce this policy.

10. Changes to This Privacy Policy

40bd may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make a material change, we will update the effective date at the top of this page and, where appropriate, notify registered players via email or a prominent notice on the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how 40bd protects your information. Your continued use of the platform following any update constitutes your acceptance of the revised Privacy Policy.

11. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the 40bd data support team. The contact email is provided below as plain text only — it is not a clickable link.

Support email: [email protected] — We aim to respond to all privacy-related enquiries within 30 days of receipt, in accordance with our data rights obligations.