10bd Privacy Policy
How We Protect Your Personal Data

Introduction and Scope

This Privacy Policy ("Policy") describes how 10bd ("we", "us", "our", or the "Platform") collects, processes, stores, and protects the personal information of individuals who register accounts on, visit, or interact with the 10bd website accessible at 10bd.io and all associated subdomains and mobile-optimised endpoints that deliver the 10bd service.

10bd is an English-language online betting and casino platform targeting players in Bangladesh. Our platform offers cricket betting, live casino, slot games, and a range of other gaming products, with deposits and withdrawals processed through local payment services including bKash, Nagad, Rocket, Upay, SureCash, and major Bangladeshi banks. Given the financial and identity-sensitive nature of our service, we take the protection of your personal data extremely seriously.

This Policy applies to all personal data collected through the 10bd website, through our customer support channels, through our KYC and identity verification processes, and through your ongoing use of platform features including betting, casino play, and account management. It applies equally to players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

By registering a 10bd account, you confirm that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein. If you do not agree with any part of this Policy, you must not register an account or continue to use the 10bd platform.

Information We Collect

10bd collects personal information through several distinct channels during the lifecycle of your account. The categories of data we collect are set out below, organised by the context in which they are gathered.

2.1 Account Registration Data

When you register a 10bd account, we collect the following information:

• Full legal name (as it appears on your national identity documents)
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Residential address (street, city, district, and postal code)
• Valid email address
• Mobile phone number (Bangladeshi number format)
• Chosen account username and password (password stored as an irreversible cryptographic hash — never in plain text)
• Preferred currency (Bangladeshi Taka, BDT)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and collect the following documents and associated data:

• Scanned copy or photograph of your national identity card (NID) issued by the Bangladesh Election Commission
• Scanned copy or photograph of your valid Bangladeshi passport
• Scanned copy or photograph of your driving licence issued by the Bangladesh Road Transport Authority
• Proof of address document: a utility bill, bank statement, or official correspondence not older than 3 months, showing your name and current address
• Selfie photograph for facial verification purposes, to confirm that the identity document submitted belongs to the account holder
• Screenshot evidence of payment method ownership, such as bKash or Nagad account confirmation screens

2.3 Transaction and Financial Data

When you make deposits or request withdrawals through the 10bd platform, we collect:

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay, SureCash) — stored in masked format after verification
• Bank account details where bank transfers are used (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history across the lifetime of your account

2.4 Betting and Gaming Activity Data

We collect detailed records of your activity on the 10bd platform, including:

• Bet placement history: markets, selections, stake amounts, odds accepted, and outcomes
• Casino and slot game session records: games played, session duration, rounds played, stakes, and results
• Bonus and promotion claims and usage history
• Responsible gaming tool settings you have activated (deposit limits, session reminders, cooling-off periods, self-exclusion status)

2.5 Technical and Device Data

When you access the 10bd platform, our servers automatically collect certain technical information:

• IP address at time of access
• Device type, model, and operating system
• Browser type and version
• Screen resolution
• Referring URL (the page from which you navigated to 10bd.io, if any)
• Pages visited within 10bd.io, duration of each page visit, and navigation path through the site
• Date and time of each access event in Bangladesh Standard Time (BST, UTC+6)

2.6 Support and Communication Data

When you contact our customer support team, we collect:

• The content of all email communications sent to and received from [email protected]
• Live chat transcripts where live chat is used as a contact method
• The nature of the query or complaint, and all information provided by you in the course of resolving it
• Support ticket reference numbers and resolution timestamps

How We Use Your Information

The personal data 10bd collects is used for the following specific, documented purposes:

10bd does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where such processing is necessary for fraud prevention, in which case you have the right to request human review of any automated decision that affects your account.

Legal Basis for Processing

10bd processes your personal data under the following legal bases, which determine the grounds on which processing is permitted:

• Contract Performance: Processing is necessary to deliver the services you have signed up for — including account management, deposits, withdrawals, betting, and casino access. Without this processing, we cannot provide you with the 10bd service.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including age verification, anti-money laundering (AML) obligations, and the retention of financial transaction records.
• Legitimate Interest: Processing is in the legitimate interests of 10bd to detect and prevent fraud, secure the platform, conduct platform analytics to improve the service, and manage responsible gaming risks — provided those interests are not overridden by your own privacy rights.
• Consent: For optional processing activities such as sending promotional emails or SMS marketing, we rely on your specific, informed, and freely given consent. You may withdraw this consent at any time by contacting [email protected] or by using the opt-out mechanism provided in any marketing communication.

Data Sharing and Third-Party Disclosure

5.1 Game Providers

To deliver casino and slot game services, 10bd shares a minimal set of account data (typically a pseudonymous player identifier, session token, and currency) with licensed game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Habanero, and Spribe. These providers operate their own data processing environments and are contractually required to process player data only as necessary to deliver the game service and to maintain appropriate technical and organisational security measures.

5.2 Payment Processors

When you make a deposit or withdrawal, 10bd shares the minimum transaction data necessary with the relevant payment service provider — for example, your bKash wallet number and transaction amount when processing a bKash deposit. Payment processors are contractually bound to use this data only for the purpose of completing the specific transaction and are prohibited from using it for any secondary purpose including marketing.

5.3 Identity Verification Services

10bd may use specialist third-party identity verification providers to assist with KYC document checks. These providers process the identity documents you submit (NID, passport, driving licence, selfie) for the sole purpose of confirming your identity and age. They are prohibited from retaining your documents beyond the period required to complete the verification check and may not use your data for any other purpose.

5.4 Fraud and Security Services

To protect the platform and its players, 10bd uses third-party fraud detection and cybersecurity services. These services may receive technical data such as IP addresses, device fingerprints, and behavioural signals in order to identify suspicious activity. No betting history, payment account numbers, or government-issued ID data is shared with fraud prevention services.

5.5 Legal and Regulatory Disclosure

10bd may disclose personal data to relevant authorities where required to do so by law, by court order, or pursuant to a valid legal process. In such cases, 10bd will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected account holder of the disclosure.

Payment Data and Financial Information

Payment security is of particular importance given that 10bd processes deposits and withdrawals in Bangladeshi Taka (৳) through mobile financial services including bKash, Nagad, Rocket, and Upay, as well as through bank transfers at institutions including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank.

10bd applies the following specific measures to protect your financial data:

• Mobile wallet account numbers (bKash, Nagad, Rocket, etc.) are stored in masked format following initial verification — only the last four digits are visible to support staff in the account dashboard.
• Bank account numbers are stored encrypted and are accessible only to the payments processing team for the specific purpose of processing your withdrawal request.
• All financial transaction data is transmitted over TLS 1.3 encrypted connections. No financial data is transmitted over unencrypted channels.
• Transaction records are retained for a minimum of 5 years from the date of the transaction to satisfy financial record-keeping obligations, after which they are securely deleted.
• Full payment account credentials (e.g., bKash PINs, bank internet banking passwords) are never requested by 10bd under any circumstances. If you receive a communication purporting to be from 10bd that requests such information, treat it as fraudulent and report it to [email protected] immediately.

Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by the 10bd website when you visit. They allow the platform to remember information about your session, preferences, and activity in order to deliver a consistent, personalised, and secure experience. 10bd also uses similar technologies such as local storage tokens and session identifiers on mobile-optimised pages.

7.2 Cookie Categories Used by 10bd

10bd does not use advertising cookies, tracking pixels, or any cookie technology placed by third-party advertising networks. Analytics data is processed in aggregate and is not used to build individual advertising profiles.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary or security cookies will prevent you from logging in to your 10bd account and using core platform features. Instructions for managing cookies in popular browsers can be found in each browser's help documentation. For questions about cookies on the 10bd platform specifically, contact [email protected].

Data Retention

10bd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When data reaches the end of its applicable retention period, it is securely deleted from active systems and purged from backups on their next scheduled rotation cycle. 10bd does not retain data beyond the periods specified above unless a specific legal hold is in place due to an active investigation, legal proceeding, or regulatory inquiry.

Data Security Measures

10bd implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption at rest: All personal data stored in 10bd databases is encrypted using AES-256 symmetric encryption. Encryption keys are stored in a separate key management system with strict access controls.
• Encryption in transit: All data transmitted between your device and the 10bd servers is protected by TLS 1.3 encryption. HTTP connections are automatically redirected to HTTPS.
• Access control: Access to personal data within 10bd's internal systems is restricted on a role-based, need-to-know basis. Access logs are maintained and reviewed regularly. Multi-factor authentication (MFA) is mandatory for all staff accounts with access to player data.
• Password security: Account passwords are stored as irreversible cryptographic hashes using a modern hashing algorithm with a unique per-user salt. 10bd staff cannot read your password — only you know it.
• Vulnerability management: The 10bd platform undergoes regular security assessments including penetration testing. Identified vulnerabilities are triaged and remediated according to a risk-based priority system.
• Incident response: 10bd maintains a documented data breach response plan. In the event of a confirmed data breach that poses a risk to player rights, affected players will be notified by email within 72 hours of 10bd becoming aware of the breach, along with guidance on protective steps to take.

Your Privacy Rights

As a 10bd account holder and data subject, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, submit your request in writing to [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of Access: You have the right to request a copy of all personal data 10bd holds about you. We will provide a structured data export in a readable format within 30 calendar days of verifying your identity. This export will include your registration data, transaction history, KYC status, gaming activity summary, and any support communications on record.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Common rectification requests include updating a changed email address, correcting a misspelled name, or updating a residential address following a move.
• Right to Erasure ("Right to Be Forgotten"): You may request that 10bd delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the processing was unlawful. Note that this right is subject to overriding obligations — for example, we cannot delete transaction records that we are legally required to retain for 5 years.
• Right to Restriction: You may request that we temporarily restrict the processing of your data while a rectification request is pending, while you contest the lawfulness of processing, or where you need the data preserved for a legal claim even though 10bd no longer needs it.
• Right to Data Portability: For data processed on the basis of your consent or for contract performance, you have the right to receive your data in a structured, commonly used, machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. 10bd will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time with immediate effect. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

All rights requests will be acknowledged within 2 business days and resolved within 30 calendar days. For complex or high-volume requests, this period may be extended by up to a further 60 days, in which case you will be notified of the extension and the reason within the initial 30-day window.

Children and Minors

10bd is strictly an adult platform. You must be 21 years of age or older to register an account, make a deposit, place a bet, or access any casino or gaming feature on the 10bd platform. This age restriction applies uniformly to all players regardless of location within Bangladesh.

10bd does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. As part of our registration and KYC process, we verify date of birth against government-issued identity documents to confirm that all account holders meet the minimum age requirement. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds held will be returned to the payment source, and all account data will be deleted within 7 days of the discovery.

If you are a parent or guardian and believe that a person under 21 in your household has registered a 10bd account, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and resolve the matter as a priority within 24 hours.

International Data Transfers

The 10bd platform primarily serves players located in Bangladesh. However, due to the global nature of online infrastructure, certain data processing activities — particularly those involving third-party game providers such as Evolution Gaming, Pragmatic Play, and Spribe, as well as our platform hosting infrastructure — may involve the transfer of personal data to servers or data processing facilities located outside Bangladesh.

Where such international transfers occur, 10bd ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Safeguards used include:

• Contractual data processing agreements with all third-party processors that impose binding data protection obligations equivalent to those applied by 10bd directly.
• Technical encryption controls that protect data in transit across all international network paths, using TLS 1.3 or stronger.
• Minimisation of data transferred — only the data strictly necessary for the third party to perform their specific service function is transferred internationally. Full account profiles, KYC documents, and payment account details are not transferred to game providers.

By registering a 10bd account and accepting this Privacy Policy, you acknowledge that your data may be transferred and processed outside Bangladesh as described in this clause, subject to the safeguards stated above.

Changes to This Privacy Policy

10bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, changes to the platform's features and services, or changes in the third-party service providers we work with.

When we make material changes to this Policy — meaning changes that affect your rights, the categories of data we collect, or the purposes for which we use your data — we will notify registered account holders by email to the address on file with their account. The notification will be sent at least 14 days before the amended Policy takes effect, giving you the opportunity to review the changes and, if you do not accept them, to close your account before the new Policy applies to you.

Minor and non-material amendments (such as clarifications to existing wording, corrections of typographical errors, or updates to contact information) may be made without advance notice. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

We encourage all 10bd account holders to review this Privacy Policy periodically. Continued use of the 10bd platform after the effective date of any updated version of this Policy constitutes your acceptance of the changes.

Contact and Data Requests

All privacy-related queries, data subject rights requests, consent withdrawal requests, and data breach reports should be directed to the 10bd Data Privacy team using the contact details below. Please use the stated subject line formats to ensure your query is routed correctly and handled within the applicable response timeframes.

Our support team operates 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Victory Day (December 16), Independence Day (March 26), and Eid. All communications are handled in English. When submitting a data rights request, please include your registered username and the email address associated with your account so we can verify your identity before processing the request.