256bd Privacy Policy
We respect your privacy and are committed to protecting the personal data you share with us. This policy explains exactly what we collect, why we collect it, and how you can control it.
1. Introduction
This Privacy Policy ("Policy") describes how 256bd ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects personal data relating to users of the 256bd platform, including the website accessible at 256bd.bio and all associated services (collectively, "the Services"). This Policy applies to all players who register or use a 256bd account, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh.
By registering an account or using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the 256bd Services. Where this Policy uses the term "personal data", it means any information that can be used to identify you directly or indirectly as an individual.
256bd takes data protection seriously. We do not sell your personal data to third parties. We collect only what we need to provide you with a safe, fair, and compliant gaming experience. We store data securely using industry-standard encryption and access controls. We give you clear choices over how your data is used for marketing. We answer data-related requests promptly and transparently.
Our Privacy Commitments
These six principles guide every decision we make about how player data is handled on the 256bd platform.
2. Information We Collect
256bd collects personal data through three main channels: information you provide directly when creating or managing your account, information generated automatically as you use the Services, and — in limited circumstances — information received from third-party partners such as payment processors and game providers. We describe each category below.
When you register, verify your account, make a transaction, or contact support, you may provide the following types of personal data:
- Identity information: full name, date of birth, and national ID number (provided during KYC verification).
- Contact information: mobile number and email address registered to your account.
- Financial information: payment method details provided for deposit and withdrawal processing (transaction references, not full credentials).
- KYC documentation: identity documents and photographs submitted for age and identity verification purposes.
- Communications: content of messages you send to our customer support team, including support ticket histories.
When you use the 256bd platform, certain data is collected automatically to enable the Services to function correctly and to help us detect fraud and maintain security:
- Device and browser information: device type, operating system, browser type and version, screen resolution, and device identifiers.
- Network information: IP address, approximate location derived from IP (city or region level — not precise GPS), and connection type.
- Usage data: pages visited, features used, games played, bets placed, session duration, and navigation paths through the platform.
- Transaction logs: records of all deposits, withdrawals, bonus claims, wagers, and account balance changes with timestamps.
We may receive limited personal data about you from our payment processing partners (such as transaction confirmation and status updates from bKash, Nagad, Rocket, and Upay) and from our game providers (such as game session identifiers needed for dispute resolution). We do not purchase marketing data lists or receive personal data from social media platforms. Any third-party data we receive is used solely to fulfil the specific operational purpose for which it was shared and is not combined with other data for profiling purposes.
3. How We Use Your Information
The personal data we collect is used for specific, defined purposes. The table below summarises each purpose and the type of data used for it.
4. Legal Basis for Processing
256bd processes personal data only where there is a legitimate basis to do so. The legal bases on which we rely are set out below. Where processing is based on consent, you have the right to withdraw that consent at any time, though withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
- Contractual necessity: processing required to create and operate your 256bd account and to deliver the Services you have requested, including payment processing and game delivery.
- Legal obligation: processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and fraud reporting duties.
- Legitimate interests: processing for fraud detection, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
- Consent: processing for optional marketing communications and any other processing that is not covered by the above bases. You may withdraw consent at any time by contacting support.
5. Sharing Your Information
256bd does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described in this section, and only to the minimum extent necessary for the stated purpose.
We may share your personal data with the following categories of third party, strictly for the purposes stated:
- Payment processors: bKash, Nagad, Rocket, Upay, and other payment partners receive only the transaction data required to process your payment. They do not receive your account history or gaming data.
- Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other providers receive a session identifier and bet/win data necessary to run games and settle results. They do not receive your identity documents or payment credentials.
- Fraud prevention and compliance services: specialist third parties who assist us in verifying identities, screening transactions for money laundering risk, and detecting fraudulent activity. These providers are bound by strict confidentiality obligations.
- Law enforcement and regulatory authorities: where we are required by applicable law to disclose personal data to government agencies, courts, or law enforcement bodies, we will do so to the minimum extent legally required.
6. Payment Data and Financial Privacy
256bd supports a range of local payment methods popular with Bangladeshi players, including bKash, Nagad, Rocket, and Upay. When you make a deposit or request a withdrawal using any of these services, the payment transaction is processed directly between you and the payment provider. 256bd receives a transaction confirmation reference and the transaction amount. We do not receive, store, or have access to your mobile banking PIN, one-time passwords (OTP), or the full credentials associated with your mobile financial services account.
All transaction records retained by 256bd are stored in encrypted form and are accessible only by authorised personnel for the specific purposes of account management, dispute resolution, and anti-money laundering compliance. Transaction records are retained for a minimum period required by applicable law and are then securely deleted in accordance with our data retention schedule. Players who wish to review their own transaction history may do so via the account dashboard at any time.
7. Cookies and Tracking Technologies
256bd uses cookies and similar tracking technologies to make the platform function correctly, remember your session preferences, and analyse how players use the site. We do not use tracking technologies to serve you advertising from third-party advertising networks. All tracking on the 256bd platform is first-party and serves operational or analytical purposes only.
- Essential cookies: required for the platform to function. These include session cookies that keep you logged in during a browsing session and security cookies that help protect your account from unauthorised access. These cannot be disabled.
- Preference cookies: used to remember your language preference and display settings so you do not need to re-select them each time you visit. These are optional but improve your experience.
- Analytics cookies: aggregate, anonymised data about how the platform is used — which pages are visited most, how long sessions last, and where players navigate. No individual player is identifiable in this data. We use this to improve the platform.
Most mobile browsers allow you to control cookie settings through your browser or device settings. Disabling essential cookies will prevent you from logging in to your 256bd account. Disabling preference or analytics cookies will not affect your ability to use the core Services but may result in a less personalised experience.
8. Data Retention
256bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data and transaction records are retained for a minimum of five years following account closure to satisfy anti-money laundering and financial record-keeping obligations that apply to online payment platforms operating in or serving customers in Bangladesh. KYC documentation is retained for the same minimum period.
Data that is no longer needed and is not subject to a legal retention obligation is securely deleted or anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for platform analytics purposes. Marketing preference data is deleted promptly upon receipt of a valid opt-out request. If you close your account and wish to request early deletion of your personal data subject to legal retention limits, you may do so by contacting our support team.
9. Data Security
256bd implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers; encryption of sensitive data at rest in our databases; strict access controls ensuring that only authorised personnel can access player data, and only to the extent required for their specific role; regular security reviews and vulnerability assessments of our platform infrastructure; and two-factor authentication for player account access.
Despite our best efforts, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you believe your account has been compromised, you should contact our support team immediately. You also have a responsibility to keep your own login credentials secure — choose a strong password, do not share it with anyone, and log out after each session, particularly on shared devices. 256bd will never ask you for your full password via any channel.
10. Your Rights
As a 256bd player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the email address at the bottom of this page. We will respond to all valid requests within 30 days.
- Right of access: you may request a copy of the personal data we hold about you. We will provide this in a commonly used electronic format within 30 days.
- Right to rectification: if you believe any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
- Right to erasure: you may request deletion of your personal data after your account is closed, subject to our legal retention obligations described in Section 8 above.
- Right to restrict processing: in certain circumstances you may request that we limit how we use your data while a dispute about its accuracy or our right to process it is resolved.
- Right to withdraw consent: where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
We will not charge a fee for responding to a rights request unless the request is manifestly unfounded or excessive. Where we are unable to comply with a request, we will explain why in writing within the 30-day response period.
11. Children and Minors
The 256bd platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that a minor in your care has registered a 256bd account or provided us with personal data, please contact our support team immediately using the email address on this page so we can take prompt action.
12. Third-Party Links and Services
The 256bd platform may reference or link to third-party services such as payment providers. Once you leave the 256bd platform and interact with a third-party service, that service's own privacy policy governs how your data is handled. 256bd is not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policy of any third-party service before providing your personal data to it.
13. Changes to This Privacy Policy
256bd may update this Privacy Policy from time to time to reflect changes in how we handle personal data, changes in applicable law, or changes in the Services we provide. Where any update materially affects your rights as a data subject, we will notify you via the contact details registered to your account prior to the change taking effect. For minor updates — such as clarifications of existing practices or corrections of typographical errors — the updated Policy will be published on this page and will take effect immediately upon publication.
The date at the top of this page always shows when this Policy was last updated. We encourage you to review this page periodically. Continued use of the 256bd Services after any update to this Policy constitutes your acceptance of the updated Policy.
14. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 256bd has handled your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 30 days of receipt, in accordance with applicable data protection principles.
Email: [email protected]
Now that you understand how 256bd handles your data, explore our casino or check our FAQ for more information. 21+ only.