16bd Privacy Policy
— Your Data, Protected
At 16bd, protecting the personal information of every Bangladeshi player on our platform is a responsibility we take seriously. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and processed, and the rights you hold over your own information at all times.
Introduction & Scope
This Privacy Policy ("Policy") is issued by 16bd ("we", "us", "our", "Platform") and applies to all personal data collected, processed, stored, or otherwise handled by 16bd in connection with the operation of the website at https://16bd.im, its subdomains, and any associated mobile applications or services (collectively, the "Platform").
This Policy is addressed to all individuals who interact with the 16bd Platform, including registered account holders ("Players"), visitors who browse the Platform without registering, and prospective players who engage with 16bd marketing communications. By accessing or using the 16bd Platform in any capacity, you acknowledge that you have read and understood this Policy.
16bd is committed to processing personal data lawfully, fairly, and transparently. We collect only the data that is necessary for the purposes described in this Policy, and we do not sell personal data to any third party for their independent marketing use. Our approach to data handling is guided by the principle that your personal information belongs to you, and our role is to be a responsible and accountable custodian of that information for as long as it is in our care.
This Policy should be read together with the 16bd Terms & Conditions and the Responsible Gaming Policy, both of which are accessible from the footer of every page on the Platform. Where any provision of this Policy conflicts with any other document, this Privacy Policy shall take precedence with respect to matters of personal data handling.
Data Minimisation
16bd collects only the personal data that is strictly necessary for the purpose for which it is being gathered. We do not harvest information speculatively or hold data beyond its useful life on the Platform.
No Data Sales
16bd does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. Your data is used solely to operate and improve the 16bd Platform.
SSL Encryption
All data transmitted between your device and the 16bd Platform is protected using industry-standard TLS/SSL encryption. Sensitive fields such as passwords and payment details are additionally hashed or tokenised at rest.
Player Rights Respected
Every 16bd player retains the right to access, correct, restrict, or request deletion of their personal data at any time, subject to our legal obligations to retain certain records for regulatory and fraud-prevention purposes.
Bangladesh-Focused Handling
Our data practices are tailored to the Bangladeshi market. Payment data from bKash, Nagad, Rocket, and other local providers is handled with the same rigour as international card data, in line with our security standards.
Opt-Out Controls
You may opt out of non-essential communications and marketing at any time through your Account Settings or by contacting our support team. Opting out of marketing does not affect your ability to use the 16bd Platform.
Data We Collect
16bd collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically through technical systems as you use the Platform; and from third-party partners where permitted and necessary. The categories of personal data we collect are described below.
Registration & Identity Data
When you create a 16bd account, we collect your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and the email address (if provided) associated with your account. This information is required to establish your identity, verify your age, and comply with our Know Your Customer (KYC) obligations.
KYC & Verification Documents
As part of our KYC process, we collect copies of government-issued identity documents such as your National ID Card (NID), passport, or birth certificate. Where a higher verification tier is required, we may also request proof of address (e.g., a utility bill or bank statement issued within 90 days) and, in limited circumstances, a source-of-funds declaration. These documents are stored securely and accessed only by authorised compliance staff.
Financial & Transaction Data
We collect data about deposits, withdrawals, and in-Platform transactions, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction reference numbers, amounts in BDT, timestamps, and transaction status. We do not store full mobile banking PINs or net-banking passwords — these remain within the respective payment provider's systems.
Gameplay & Betting Data
We collect records of all betting activity, game sessions, wager amounts, win/loss outcomes, and any in-game interactions on the 16bd Platform. This data is used for account management, dispute resolution, bonus monitoring, and the detection of problem gambling patterns through our Responsible Gaming tools.
Device & Technical Data
When you access the Platform, our systems automatically collect technical information including your IP address, device type and model, operating system, browser type and version, screen resolution, session duration, referring URL, and pages visited. This data is used for security monitoring, fraud detection, and Platform optimisation.
Communications Data
We retain records of communications between you and the 16bd support team, including live chat transcripts, email correspondence, and any complaint or dispute submissions. These records are used to resolve queries, train support staff, and maintain an audit trail of account-related interactions.
| Data Category | Examples | Primary Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Name, date of birth, NID number | Account creation, age verification | Contractual necessity; legal obligation |
| KYC Documents | NID scan, passport copy, proof of address | Regulatory compliance, fraud prevention | Legal obligation |
| Financial Data | bKash/Nagad reference, transaction amount | Payment processing, withdrawal verification | Contractual necessity |
| Gameplay Data | Bet history, game rounds, win/loss records | Account management, responsible gaming | Contractual necessity; legitimate interest |
| Technical Data | IP address, device type, browser version | Security, fraud detection | Legitimate interest |
| Communications Data | Live chat logs, email threads | Support, dispute resolution | Contractual necessity; legitimate interest |
How We Use Your Data
16bd uses personal data for specific, clearly defined purposes. We do not use personal data for any purpose that is incompatible with the purposes described below. Where we intend to use your data for a new purpose not covered by this Policy, we will update this document and, where required, seek your consent before proceeding.
Account Management & Service Delivery
The primary use of your personal data is to create and maintain your 16bd account, process your deposits and withdrawals, settle your bets, deliver your game results, and manage your bonus entitlements. Without this processing, we cannot provide the Platform services you have requested.
Identity Verification & Fraud Prevention
We use identity and KYC data to verify that you meet the age requirement of 18 years or older, to confirm that you are who you say you are, and to detect and prevent fraudulent account activity. This includes cross-referencing registration details against internal watchlists and, where required by law, third-party identity verification services.
Responsible Gaming Monitoring
Gameplay and transaction data is analysed by our responsible gaming systems to identify patterns that may indicate problem gambling behaviour — such as rapidly increasing bet sizes, extended uninterrupted play sessions, or repeated failed withdrawal attempts. Where such patterns are identified, our team may proactively reach out to the player and, if necessary, apply protective account restrictions in line with our Responsible Gaming Policy.
Security & Platform Integrity
Technical and device data is used to monitor for suspicious login activity, detect automated bot access, identify IP-based fraud patterns, and protect the Platform from denial-of-service attacks or other security threats. Security-related processing is conducted on the basis of 16bd's legitimate interest in maintaining a safe and fair Platform for all players.
Customer Support
Communications data is used to investigate and resolve your support queries, settle disputes over bet outcomes or transaction failures, and maintain a complete history of account-related interactions. Support interactions may also be reviewed for quality assurance and staff training purposes.
Marketing Communications
With your consent, we may use your contact details to send you information about 16bd promotions, new game launches, BPL cricket betting offers, seasonal bonuses, and other news relevant to your interests as a player. You may withdraw this consent at any time by updating your preferences in Account Settings or by contacting [email protected]. Withdrawing marketing consent does not affect your account or your ability to use the Platform.
Legal & Regulatory Compliance
We are required to retain certain categories of personal data — particularly identity records, transaction logs, and KYC documents — for defined periods to comply with our legal and regulatory obligations. This retention continues even after your account is closed. Please see Section 6 for full details on our retention periods.
Cookies & Tracking Technologies
Cookie transparency: 16bd uses cookies and similar technologies strictly for operational, security, and performance purposes. We do not use advertising networks, cross-site tracking pixels, or third-party behavioural profiling technologies on the Platform.
Cookies are small text files placed on your device when you visit a website. The 16bd Platform uses the following categories of cookies and similar technologies:
Strictly Necessary Cookies
These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences within a single session, enable secure page transitions, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core Platform functionality. They do not collect personal data for marketing purposes and expire at the end of your browser session or within a short fixed period.
Performance & Analytics Cookies
We use first-party analytics tools to understand how players navigate the Platform — which pages are visited most frequently, where users drop off during registration, and which game categories attract the most engagement. This data is aggregated and anonymised; it does not identify you individually. Analytics cookies help us improve the user experience for all 16bd players, including optimising the Platform for mobile devices commonly used by players in Dhaka, Chittagong, and across Bangladesh.
Security & Fraud Detection Cookies
Certain cookies are used by our security systems to detect and prevent fraudulent login attempts, identify suspicious device fingerprints, and flag anomalous browsing patterns that may indicate automated access. These cookies are set automatically when a security risk is detected and are used solely for Platform protection.
Managing Cookies
You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your 16bd account and using core Platform features. Browser-based cookie management instructions are available from the support pages of all major browsers including Chrome, Firefox, Safari, and Edge.
Data Sharing & Third Parties
No data sales: 16bd does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing use under any circumstances.
16bd operates as part of an ecosystem of service providers that are necessary to deliver the Platform. In certain circumstances, we share personal data with trusted third parties, but only to the extent necessary and only under strict contractual data protection obligations. The categories of third parties with whom we may share data are as follows:
Payment Processors
To process your deposits and withdrawals, we share necessary transaction data with payment providers including bKash, Nagad, Rocket (DBBL), Upay (UCB), Dutch-Bangla Bank, City Bank, and BRAC Bank. The data shared is limited to what each provider requires to authenticate and settle the transaction. Each payment provider operates under its own privacy policy and data security standards.
Game Content Providers
The 16bd Platform integrates games from third-party software providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt. When you play a game powered by one of these providers, your gameplay data (such as bet amounts, game round results, and session duration) may be processed by the relevant provider's systems. This is necessary to deliver the game and settle outcomes correctly.
Identity Verification Services
For KYC purposes, we may share identity document data with third-party verification services that specialise in document authentication and age verification. These services process your data solely for the purpose of confirming your identity and are contractually prohibited from using it for any other purpose.
Legal & Regulatory Disclosure
16bd may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we receive a lawful order, warrant, or legal obligation to do so. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify you of the disclosure.
Business Transfers
In the event that 16bd undergoes a merger, acquisition, or transfer of its Platform assets to another entity, personal data held by 16bd may be transferred as part of that transaction. We will notify affected players of any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those in this Policy.
Data Retention & Storage
16bd retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory obligations that require longer retention. The following retention periods apply to the main categories of data we hold:
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation; fraud prevention |
| KYC documents | Duration of account + 5 years post-closure | Regulatory compliance; AML obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping; dispute resolution |
| Gameplay / betting history | 5 years from date of activity | Dispute resolution; responsible gaming audit |
| Support communications | 3 years from last interaction | Quality assurance; complaint audit trail |
| Marketing preferences | Until opt-out + 1 year | Proof of consent management |
| Technical / device logs | 90 days (rolling) | Security monitoring; fraud detection |
Data Storage Location
All personal data collected by 16bd is stored on secure servers. Access to personal data is restricted to authorised personnel on a strict need-to-know basis. Servers are protected by firewalls, intrusion detection systems, and regular security audits. Data at rest is encrypted using AES-256 standard encryption where technically applicable.
Data Deletion
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is not technically feasible (for example, in archived backup systems), data is flagged for deletion at the next scheduled backup rotation cycle.
Your Privacy Rights
As a 16bd player, you hold a number of rights in relation to your personal data. These rights may be exercised at any time by contacting the 16bd support team via live chat or by emailing [email protected] with the subject line "Privacy Rights Request". We will acknowledge all requests within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by an additional 30 days, in which case we will notify you of the extension.
Right of Access
You may request a copy of all personal data 16bd holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
Right to Rectification
If any personal data held about you is inaccurate or incomplete, you may request that it be corrected. Identity data corrections are subject to re-verification via the KYC process.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to our legal obligation to retain certain records as described in Section 6.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested or while a complaint is being investigated.
Right to Portability
Where technically feasible, you may request that your personal data be provided to you in a structured, machine-readable format so that you can transfer it to another service provider.
Right to Object
You may object to the processing of your personal data where 16bd relies on legitimate interest as its legal basis. You may also object to direct marketing at any time and without providing a reason.
Identity Verification for Rights Requests
To protect the security of your account, all privacy rights requests must be accompanied by sufficient identity verification. We will ask you to confirm your registered mobile number and, where the request relates to sensitive data categories, complete a KYC verification step before we action the request. This requirement exists solely to prevent unauthorised access to your data by third parties.
Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 16bd handles your personal data, we encourage you to contact us in the first instance so that we have the opportunity to address your concern directly.
How to Contact 16bd About Privacy
You may contact the 16bd privacy team through any of the following channels:
- Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing to our data team.
- Live Chat: Available 24 hours a day, 7 days a week through the Platform. Our support agents can handle most privacy queries directly or escalate to the data team where necessary.
- Support Hours: Bangladesh Standard Time (BST, UTC+6), 24/7.
Response Timeframes
We will acknowledge all privacy-related contact within 2 business days. For formal rights requests, we will provide a substantive response within 30 days. Where a request is complex or involves a high volume of data, we may extend this period by up to a further 30 days, and we will inform you promptly if an extension is necessary.
Changes to This Policy
16bd reserves the right to update this Privacy Policy at any time. When material changes are made to the way we process personal data, we will post a notice on the Platform and update the "Last Updated" date at the top of this document. We encourage all players to review this Policy periodically. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.
Privacy questions? Our support team is available 24/7 via live chat. For written privacy enquiries, email [email protected] with "Privacy Enquiry" in the subject line and we will route your message directly to our data team for a prompt response.
Your Privacy Is in Good Hands — Ready to Play?
Now that you have reviewed how 16bd protects your personal data, explore our games, check your account, or read the FAQ for any remaining questions.
18+ · Play Responsibly · SSL Secured · Available in Bangladesh