17bd Privacy Policy —
How We Handle Your Data
This Privacy Policy explains what personal information 17bd collects from players in Bangladesh, how that information is used, stored, and protected, and what rights you hold over your own data when using the 17bd platform at 17bd.io.
Our Privacy Commitments at a Glance
Six core principles that define how 17bd approaches the privacy and security of your personal information
Minimal Data Collection
17bd collects only the personal information that is strictly necessary to operate your account, process your payments, verify your identity, and comply with applicable legal obligations. We do not collect data beyond what is needed for these purposes.
SSL Encryption Throughout
All data transmitted between your device and the 17bd platform is protected using industry-standard TLS/SSL encryption. Your login credentials, payment details, and personal records are never transmitted in plain text at any point in the process.
No Selling of Your Data
17bd does not sell, rent, or trade your personal information to third parties for marketing purposes. Data shared with service providers is limited to what those providers need to deliver their services to 17bd and is governed by strict contractual obligations.
You Control Your Data
As a 17bd player you have the right to access, correct, export, and in certain circumstances request deletion of your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected].
Marketing Opt-Out
Promotional communications are only sent to players who have opted in to receive them. You may withdraw your consent and unsubscribe from marketing emails at any time by using the unsubscribe link in any communication or by updating your account preferences.
Defined Retention Periods
17bd retains your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Once your data is no longer required, it is securely deleted or anonymised in accordance with our data retention schedule.
- 1. Who We Are
- 2. Data We Collect
- 3. How We Collect Data
- 4. How We Use Your Data
- 5. Legal Basis for Processing
- 6. Sharing Your Data
- 7. Cookies & Tracking
- 8. Data Security
- 9. Data Retention
- 10. Your Rights
- 11. Children's Privacy
- 12. International Transfers
- 13. Third-Party Links
- 14. Policy Updates
- 15. Contact Us
1 January 2026
Please read this Privacy Policy carefully before using the 17bd platform. By registering an account, making a deposit, or otherwise using any service at 17bd.io, you confirm that you have read and understood how your personal information will be handled as described in this policy. If you do not agree with any part of this policy, you should discontinue use of the platform.
This Privacy Policy is published by the operator of the 17bd platform, accessible at 17bd.io (referred to throughout this document as "17bd", "we", "us", or "our"). 17bd operates an online casino and sports betting platform that is primarily designed to serve players located in Bangladesh, with all services denominated in Bangladeshi Taka (৳) and all communications conducted in English.
For the purposes of this Privacy Policy, 17bd acts as the data controller in respect of personal information collected from registered players and site visitors. As data controller, 17bd is responsible for determining the purposes and means by which your personal data is processed.
If you have any questions about this Privacy Policy or about how 17bd handles your personal data, please contact our dedicated support team using the contact details provided in Section 15 of this document. All privacy-related enquiries will be handled in English and responded to within 7 business days of receipt.
17bd collects personal data across several categories, depending on how you interact with the platform. The following table describes the categories of personal data we collect and the specific types of information within each category:
| Category | Types of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, gender, national identity card (NID) number, passport number, or driver's licence number. |
| Contact Data | Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number. |
| Account Data | Username, encrypted password, account creation date, account status, preferred language, and communication preferences. |
| Financial Data | Payment method identifiers (bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, Visa/Mastercard last four digits), transaction history, deposit amounts, withdrawal amounts, and balance records. |
| Gaming Data | Betting history, game session records, wager amounts, winnings and losses, bonus usage, game preferences, and responsible gaming tool settings. |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, pages visited, referring URL, and unique device identifiers. |
| KYC Documents | Scanned copies or photographs of identity documents, proof of address documents, and proof of payment method documents submitted during the verification process. |
| Communications Data | Records of support tickets, live chat transcripts, email correspondence, and any other communications you send to or receive from 17bd. |
17bd does not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless specifically required for a legally mandated purpose such as verifying a self-exclusion request submitted on health grounds.
17bd collects personal data through the following means:
3.1 — Direct Collection
You provide data directly to 17bd when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, respond to a survey or promotion, or update your account settings. This direct collection forms the primary source of identity, contact, and financial data held by 17bd.
3.2 — Automated Collection
When you visit or use the 17bd platform, we automatically collect technical data using cookies, web beacons, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, session timestamps, and navigation patterns within the platform. This automated collection occurs regardless of whether you are logged into your account. Please refer to Section 7 for full details of our cookie practices.
3.3 — Third-Party Sources
17bd may receive personal data about you from third-party sources in limited circumstances, including:
- Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard) — transaction confirmations and fraud screening signals.
- Identity verification services — results of automated document verification checks conducted during KYC processing.
- Fraud prevention and AML screening services — risk scores and watchlist screening results related to anti-money laundering obligations.
- Game technology providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — game session data and RNG outcome records necessary for dispute resolution and regulatory compliance.
17bd uses your personal data for the following purposes. Each purpose is mapped to the lawful basis under which that processing activity is conducted, as described in detail in Section 5.
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your registered account, authenticating your identity at login, and managing your account preferences and settings. |
| Payment Processing | Processing deposits via bKash, Nagad, Rocket, Upay, and bank partners; processing withdrawal requests to verified payment methods; maintaining transaction records. |
| KYC & Age Verification | Verifying that you are aged 21 or above and that your identity matches the information provided during registration, in compliance with responsible gaming and AML obligations. |
| Customer Support | Responding to your enquiries, resolving disputes, investigating complaints, and providing account assistance via email and live chat. |
| Responsible Gaming | Monitoring gaming activity for signs of problem gambling, applying deposit limits and self-exclusion requests, and administering responsible gaming tools at your request. |
| Fraud Prevention & AML | Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover attempts, bonus abuse, and other prohibited activities. |
| Platform Improvement | Analysing aggregated usage data to understand platform performance, identify technical issues, improve user experience, and develop new features. |
| Marketing Communications | Sending promotional emails, bonus notifications, and event announcements (e.g., BPL season promotions, Eid offers, Pohela Boishakh specials) to players who have opted in to receive such communications. |
| Legal Compliance | Meeting obligations under applicable law, responding to lawful requests from authorities, and maintaining records required for audit and compliance purposes. |
17bd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing that is necessary to perform the contract between you and 17bd — specifically, to operate your account, process your transactions, and deliver the gaming services you have registered to access.
- Legal Obligation: Processing that is required to comply with applicable laws and regulations, including identity verification, anti-money laundering screening, record-keeping obligations, and responses to lawful authority requests.
- Legitimate Interests: Processing that is necessary for 17bd's legitimate business interests, including fraud prevention, platform security, IT system administration, and improving our services, provided those interests are not overridden by your rights and interests.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Where 17bd relies on legitimate interests as the legal basis for processing, we have conducted an assessment to ensure that our interests do not unduly override your rights. You may request a summary of that assessment by contacting [email protected].
17bd does not sell your personal data. We share your data only with the categories of recipients listed below, and only to the extent necessary for the specified purpose:
6.1 — Service Providers
17bd engages carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, banking partners), identity verification providers, cloud infrastructure providers, email delivery platforms, fraud prevention services, and customer support tooling providers. All service providers are contractually prohibited from using your data for any purpose other than delivering their services to 17bd.
6.2 — Game Technology Providers
Game session data (including player identifiers, wager amounts, and round outcomes) is shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to the extent necessary to deliver game functionality, resolve technical disputes, and maintain game integrity records. These providers operate under their own privacy standards and data security frameworks.
6.3 — Legal and Regulatory Authorities
17bd may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where required to do so by applicable law, court order, or in connection with the prevention, detection, or prosecution of criminal activity including fraud and money laundering. 17bd will notify you of any such disclosure where legally permitted to do so.
6.4 — Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving the 17bd business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 17bd will take reasonable steps to ensure that the acquiring entity commits to processing your data in a manner consistent with this Privacy Policy.
17bd uses cookies and similar tracking technologies to operate the platform, improve your experience, and gather analytics data. A cookie is a small text file stored on your device by your web browser when you visit a website.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Essential for platform operation — maintaining your login session, remembering your account preferences, and enabling secure payment flows. | Yes — cannot be disabled |
| Functional | Remember your language preference, game history display settings, and responsible gaming tool configurations between sessions. | Optional |
| Analytics | Collect aggregated, anonymised data on how players navigate the platform, which pages are visited most frequently, and where technical errors occur, to help us improve the platform. | Optional |
| Marketing | Track whether you clicked through to the platform from a promotional communication, and whether you subsequently registered or made a deposit, to measure campaign effectiveness. | Optional — requires consent |
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair core platform functionality including your ability to log in and place bets. 17bd does not respond to browser "Do Not Track" signals at this time.
17bd implements a layered approach to information security, combining technical, administrative, and physical safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
Key security measures in place at 17bd include:
- TLS/SSL Encryption: All data in transit between your device and our servers is encrypted using Transport Layer Security (TLS) with a minimum of TLS 1.2.
- Encryption at Rest: Sensitive data fields including passwords (stored as salted hashes), payment method identifiers, and KYC document files are encrypted at rest using AES-256 or equivalent standard encryption.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. 17bd staff are granted access only to the data categories required to perform their specific job functions. All access is logged and audited.
- Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication.
- Penetration Testing: 17bd conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: 17bd maintains a data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.
No system is completely immune from security risk. You play an important role in keeping your account secure by using a strong, unique password, never sharing your credentials, and reporting any suspicious activity to [email protected] immediately.
17bd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years following account closure, to satisfy AML record-keeping obligations. |
| Financial & Transaction Records | 7 years from the date of the transaction, in line with financial record-keeping requirements. |
| KYC Documents | 5 years following account closure or the date of the last transaction, whichever is later. |
| Gaming History | 3 years from the date of each session, retained for dispute resolution and responsible gaming monitoring purposes. |
| Support Communications | 3 years from the date of the last communication in a support thread, retained for quality assurance and dispute reference purposes. |
| Marketing Consent Records | Duration of consent plus 2 years following withdrawal, to demonstrate compliance with consent obligations. |
| Technical & Log Data | 13 months from collection, used for platform security monitoring and performance analysis. |
| Self-Exclusion Records | Indefinitely, or for the duration of the exclusion period plus 5 years, to prevent re-registration during an active exclusion. |
Where personal data is no longer required, 17bd will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in respect of your personal data held by 17bd. You may exercise any of these rights at any time by contacting our support team at with the subject line "Data Rights Request".
17bd will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 60 days and will notify you accordingly. 17bd will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
To protect your privacy and prevent unauthorised disclosures, 17bd will need to verify your identity before processing any data rights request. You will be asked to confirm your registered email address and may be asked to provide additional verification depending on the sensitivity of the request.
The 17bd platform is strictly intended for adults aged 21 years and above. 17bd does not knowingly collect, process, or store any personal data from individuals under the age of 21. Our registration process requires all applicants to confirm they are aged 21 or above, and identity verification is conducted to enforce this age restriction.
If 17bd becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and you believe that your child under the age of 21 has registered an account or provided personal data to 17bd, please contact us immediately at so that we can investigate and take appropriate action.
17bd takes the protection of young people seriously. Any attempt to circumvent our age verification controls — including the use of false identity documents — will result in permanent account closure, forfeiture of any funds, and referral to the appropriate authorities where legally required.
17bd's platform serves players across Bangladesh and may utilise cloud infrastructure, service providers, and game technology partners whose servers or operations are located outside of Bangladesh. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside.
Where personal data is transferred internationally, 17bd takes steps to ensure that appropriate safeguards are in place to protect your data in accordance with the principles outlined in this Privacy Policy. These safeguards may include:
- Contractual clauses in data processing agreements with service providers that require them to protect personal data to a standard consistent with applicable data protection principles.
- Transfers to service providers located in jurisdictions that are recognised as providing an adequate level of data protection for the specific processing activity concerned.
- Implementation of supplementary technical and organisational security measures where the legal protections in the destination country are assessed to be insufficient on their own.
By using the 17bd platform, you acknowledge that your personal data may be transferred internationally as described in this section. If you have questions about the specific safeguards applied to international transfers of your data, please contact our support team at .
The 17bd platform may contain references to or integrations with third-party game providers and payment processors. Where you interact with a third-party service — for example, completing a payment through the bKash, Nagad, or Rocket interface — you may be redirected to that third party's environment, which is governed by its own privacy policy and data handling practices.
17bd is not responsible for the privacy practices, content, or security of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the 17bd platform. Links or integrations with third-party services do not constitute an endorsement of their privacy practices.
17bd reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page and in the table of contents sidebar will always reflect the date of the most recent revision.
Where changes to this Privacy Policy are material — for example, changes to the types of data we collect, the purposes for which we use it, or the rights available to you — 17bd will provide advance notice by email to all registered players whose accounts are in good standing, at least 7 days before the revised policy takes effect.
Your continued use of the 17bd platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Privacy Policy, you should cease using the platform and may close your account by contacting support.
The current version of this Privacy Policy is always the version published at 17bd.io/privacy-policy. Previous versions of this policy are available on request from our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 17bd holds about you, please contact us using the details below. All privacy-related correspondence must be submitted in English and will be handled by our dedicated support team.
| Enquiry Type | Contact |
|---|---|
| General Privacy Questions | — subject line: "Privacy Enquiry" |
| Data Rights Requests | — subject line: "Data Rights Request" |
| Data Breach Reports | — subject line: "Security Concern" |
| Marketing Opt-Out | — subject line: "Unsubscribe" or use the unsubscribe link in any marketing email |
| Live Chat Support | Available 24/7 via your 17bd account dashboard |
17bd aims to respond to all privacy-related enquiries within 7 business days of receipt, and to all formal data rights requests within 30 calendar days. All support is provided in English, 24 hours a day, 7 days a week, across Bangladesh Standard Time (BST, UTC+6).
17bd proudly serves players across all regions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Your privacy is protected regardless of which city or region you play from.
Your Data Is Safe — Now Play with Confidence
Now that you understand how 17bd protects your privacy, log in to your account and enjoy cricket betting, live casino games, and slots — all in Bangladeshi Taka with instant bKash and Nagad deposits.