bt21 Privacy Policy
This Privacy Policy explains how bt21 collects, stores, uses, and protects the personal data of registered players and visitors in Bangladesh. We are committed to handling your information with care, transparency, and in accordance with data protection best practices. Please read this document in full before using the bt21 platform.
Six Principles That Guide How We Handle Your Data
The cards below summarise the core commitments bt21 makes to every player regarding their personal information. They are provided for quick reference only — the full legal text follows in the numbered sections below.
Minimal Data Collection
bt21 collects only the personal data that is strictly necessary to operate your account, process your transactions, verify your identity, and comply with anti-money laundering obligations. We do not collect or retain data beyond what is required for these purposes.
SSL Encryption at All Times
All data transmitted between your device and the bt21 platform is protected by industry-standard SSL (Secure Sockets Layer) encryption. This applies to account login sessions, deposit and withdrawal requests, and any communication submitted to bt21 support via live chat or email.
No Sale of Personal Data
bt21 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information may be shared with regulated service providers (such as payment processors and KYC partners) only where necessary to deliver the bt21 service.
Player Control Over Data
Registered players on bt21 have the right to request access to their personal data, request corrections, object to certain processing activities, and in some circumstances request deletion of their data. These rights can be exercised by contacting bt21 support at [email protected].
Transparent Cookie Use
bt21 uses cookies and similar tracking technologies to maintain session security, remember your preferences, and analyse site performance. We do not use cookies to track your browsing activity across unrelated third-party websites. Our cookie categories and opt-out options are explained fully in the Cookies section below.
Defined Retention Periods
bt21 retains your personal data only for as long as it is required for the purposes for which it was collected, or for as long as is required to meet our legal and regulatory obligations. Retention periods vary by data type and are detailed in the Data Retention section of this Policy.
Information We Collect
bt21 collects personal data from you in the following circumstances: when you register an account on bt21.biz; when you complete identity verification (KYC); when you make a deposit or withdrawal; when you contact bt21 support via live chat or email; and passively, when you browse and interact with the bt21 platform.
Registration & Identity Data
When you open a bt21 account, we collect your full legal name, date of birth, residential address (including district and division within Bangladesh, e.g. Dhaka, Chittagong, Sylhet, Khulna), email address, and the mobile number associated with your bKash, Nagad, or Rocket account. This data is used to create and maintain your player account and to verify that you meet the 18+ age requirement.
Financial & Transaction Data
To process deposits and withdrawals in Bangladeshi Taka (BDT), bt21 collects your payment method identifiers — such as your bKash wallet number, Nagad account reference, Rocket mobile number, or bank account details where applicable. We also maintain a full record of all deposit and withdrawal transactions, including amounts in BDT, timestamps in Bangladesh Standard Time (BST, UTC+6), and transaction status. bt21 does not store full card numbers or banking PINs.
Identity Verification (KYC) Documents
For identity verification purposes, bt21 may request copies of your government-issued National ID card, passport, or driving licence, and a recent proof of address (such as a utility bill or bank statement). These documents are processed securely and retained only for as long as required under our data retention obligations.
Technical & Usage Data
When you visit bt21.biz, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and click-path data. This information is used to maintain platform security, detect suspicious activity, and improve the player experience on bt21.
Communications Data
If you contact bt21 support by email at [email protected] or via the live chat function on bt21.biz, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments you provide. This data is used to resolve your query and to maintain a service quality record.
| Data Category | Examples | Collected When |
|---|---|---|
| Identity | Name, DOB, address, NID | Registration / KYC |
| Financial | bKash no., Nagad ref, BDT amounts | Deposit / Withdrawal |
| Technical | IP address, browser, device | Site visits |
| Behavioural | Game history, bet records | Platform use |
| Communications | Support emails, chat logs | Contact with support |
| Cookies | Session ID, preferences | Browser interaction |
How We Use Your Data
bt21 processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The primary purposes for which bt21 processes personal data are set out below, together with the legal basis for each processing activity.
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and securing your bt21 player account; processing login sessions; enforcing the one-account-per-player rule. | Contractual necessity |
| Payment Processing | Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; reconciling transaction records. | Contractual necessity |
| Identity Verification | Verifying that you are aged 18 or older; confirming the accuracy of registration information; conducting KYC checks as required by AML best practices. | Legal obligation |
| Fraud & AML Prevention | Monitoring transactions for suspicious patterns; detecting and preventing money laundering, bonus abuse, and multi-accounting. | Legitimate interest / Legal obligation |
| Customer Support | Responding to your support requests; maintaining a record of correspondence for quality assurance and dispute resolution. | Contractual necessity |
| Platform Analytics | Analysing aggregated usage data to identify technical issues, improve game performance, and optimise the bt21 user interface. | Legitimate interest |
| Responsible Gaming | Monitoring betting patterns that may indicate problem gambling behaviour; enforcing self-exclusion requests and deposit limit settings. | Legitimate interest / Legal obligation |
| Marketing Communications | Sending promotional emails or in-platform notifications about bt21 bonuses, tournaments, and new games — only where you have given explicit consent. | Consent |
Marketing Opt-Out: If you have consented to receiving marketing communications from bt21 and subsequently wish to withdraw that consent, you may do so at any time by updating your communication preferences in your account settings, or by contacting bt21 support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn. Please allow up to 5 business days for opt-out requests to take effect across all communication channels.
Automated Decision-Making: bt21 may use automated systems to flag accounts for further review — for example, where unusual transaction volumes or betting patterns are detected. In all such cases, a member of the bt21 compliance team will conduct a manual review before any account action is taken. bt21 does not make fully automated decisions that have a significant legal or financial effect on players without human oversight.
Data Sharing & Third Parties
bt21 may share your personal data with the following categories of third parties in the circumstances described below. All third-party recipients of bt21 player data are required to process that data only for the specified purpose and to maintain appropriate technical and organisational safeguards consistent with this Privacy Policy.
Payment Processors
To process your BDT deposits and withdrawals, bt21 shares relevant transaction data — including your payment method identifier (e.g. bKash wallet number or Nagad account reference) and transaction amount — with the applicable payment processor. This data is used solely to execute the financial transaction and is governed by the privacy policies of the respective payment providers, including bKash, Nagad, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank.
Identity Verification Partners
Where bt21 engages a third-party KYC (Know Your Customer) service provider to assist with identity verification, your submitted documents and personal identifiers may be shared with that provider for the purpose of document authentication and age verification. KYC partners are contractually bound to process your data only for verification purposes and to delete it thereafter.
Game Content Providers
bt21's casino games are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive anonymised or pseudonymised session data (such as game round IDs and bet outcomes) to facilitate game settlement and RNG certification audits. They do not receive your name, payment details, or contact information in connection with this data exchange.
Legal & Regulatory Disclosure
bt21 may disclose your personal data to a competent court, law enforcement authority, financial intelligence unit, or regulatory body where we are legally required to do so, or where such disclosure is reasonably necessary to protect the rights, property, or safety of bt21, its players, or the public. In such circumstances, bt21 will disclose only the minimum data necessary to fulfil the legal obligation.
Business Transfers
In the event that bt21 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address if such a transfer results in a material change to how your data is processed under this Privacy Policy.
Third-Party Categories We Work With
- Mobile money processors (bKash, Nagad, Rocket, Upay)
- Bank payment gateways (BRAC Bank, City Bank, DBBL)
- KYC and identity verification providers
- Game studios (Pragmatic Play, Evolution Gaming, Spribe)
- Platform analytics and performance monitoring tools
- Hosting and cloud infrastructure providers
- Fraud detection and AML screening services
- Legal, audit, and compliance advisors
Data Security & Storage
bt21 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, bt21 continuously reviews and updates its security practices to reflect current best-practice standards in the online gaming industry.
Encryption in Transit: All data transmitted between your browser or device and the bt21 platform is encrypted using SSL (Secure Sockets Layer) / TLS (Transport Layer Security) protocols. This includes your login credentials, payment transaction data, and any documents submitted for identity verification. You can verify the presence of an active SSL certificate by looking for the padlock icon in your browser's address bar when visiting bt21.biz.
Encryption at Rest: Sensitive personal data stored on bt21's servers — including identity verification documents, payment method references, and account credentials — is encrypted at rest using industry-standard symmetric encryption algorithms. Passwords are stored using cryptographic hashing functions with salt; they are never stored in plain text and cannot be recovered by bt21 staff.
Access Controls: Access to player personal data within bt21's internal systems is restricted on a strict need-to-know basis. Only authorised members of the bt21 operations, compliance, payments, and support teams have access to player data, and only to the extent necessary to perform their role. All internal access to player data is logged and subject to periodic audit review.
Infrastructure Security: bt21's platform infrastructure is hosted on servers that implement firewall protections, intrusion detection systems, DDoS mitigation, and regular security patch management. Server environments are monitored continuously for anomalous activity, and security incidents are subject to an internal escalation and response protocol.
Your Responsibilities: The security of your bt21 account is also dependent on your own practices. You are responsible for keeping your account password confidential and for not sharing your login credentials with any third party. bt21 will never ask you for your password via email or live chat. If you believe your account credentials have been compromised, contact bt21 support at [email protected] immediately and change your password from within the account settings.
Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bt21 will take prompt action to contain the breach and will notify affected players via their registered email address within a reasonable timeframe, including information about the nature of the breach and the steps bt21 has taken in response.
Security Measures at a Glance
- SSL/TLS encryption in transit
- Encrypted storage at rest
- Hashed and salted passwords
- Role-based internal access controls
- Continuous server monitoring
- DDoS mitigation and firewall
- Regular security audits
- Incident response protocol
Your Data Rights
As a bt21 player, you have a number of rights with respect to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact bt21's support team at or via live chat on bt21.biz. bt21 will respond to all valid data rights requests within 30 calendar days of receipt.
Right of Access
You have the right to request a copy of the personal data bt21 holds about you, along with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR). bt21 will provide this information in a clear, structured format within 30 days.
Right to Rectification
If any personal data bt21 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details (such as your email address or contact number) directly from within your bt21 account settings.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data. Please note that bt21 may be required to retain certain data (such as transaction records) for legal, regulatory, or fraud prevention purposes even after an account closure request, and erasure requests may be partially declined on these grounds.
Right to Restrict Processing
You have the right to request that bt21 restrict the processing of your personal data in certain situations — for example, while the accuracy of data you have contested is being verified, or while a legitimate interest objection is being assessed. During a processing restriction, bt21 will continue to store your data but will not actively process it beyond what is necessary for storage.
Right to Object
Where bt21 processes your personal data on the basis of legitimate interest (such as for platform analytics or fraud prevention), you have the right to object to that processing. bt21 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Data Portability
For data you have provided to bt21 directly and which is processed on the basis of your consent or contractual necessity, you have the right to receive that data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider if you choose.
Data Retention
bt21 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulation. The table below sets out our standard retention periods by data category. Following the expiry of the applicable retention period, data is securely deleted or anonymised in accordance with bt21's internal data disposal procedures.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML obligations, dispute resolution |
| Transaction records (BDT deposits & withdrawals) | 7 years from transaction date | Financial record-keeping, AML compliance |
| KYC / identity documents | 5 years post-account closure | Regulatory obligation, fraud prevention |
| Bet and game history | 3 years from date of activity | Dispute resolution, responsible gaming monitoring |
| Customer support correspondence | 3 years from last interaction | Service quality, dispute resolution |
| Marketing preferences | Until consent is withdrawn + 1 year | Evidence of consent and opt-out compliance |
| Technical / analytics data | 13 months | Platform performance analysis |
| Security and fraud logs | 2 years | Fraud investigation and platform security |
Following the closure of a bt21 account — whether voluntary or involuntary — bt21 will retain the data categories listed above for the applicable retention periods. Thereafter, data will be securely deleted from active systems and purged from backup archives within a reasonable timeframe consistent with bt21's technical infrastructure. Anonymised or aggregated data derived from your account history (from which you cannot be individually identified) may be retained indefinitely for statistical and analytical purposes.
Policy Updates & Contact
Policy Updates: bt21 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, bt21 will notify registered players via their registered email address and will display a prominent notice on bt21.biz for a minimum of 14 days following the update. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment. Your continued use of bt21.biz following notification of a policy change constitutes your acceptance of the updated Privacy Policy.
Minor Amendments: For minor amendments that do not materially affect your rights or the way in which bt21 processes your personal data — such as corrections of typographical errors or clarifications of existing language — bt21 may update this Policy without issuing a separate notification. We encourage you to review this Privacy Policy periodically to remain informed of how bt21 handles your data.
Previous Versions: If you would like to review a previous version of this Privacy Policy, you may request it by contacting bt21 support. bt21 maintains a version history of this document for a period of three years from the date of each revision.
Governing Language: This Privacy Policy is written in English. In the event of any conflict or inconsistency arising from translations or interpretations of this Policy in any other language, the English-language version shall take precedence.
How to Contact bt21 About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which bt21 processes your personal data, please contact the bt21 support team using any of the following channels. All privacy-related enquiries will be acknowledged within 48 hours and fully responded to within 30 calendar days of receipt.
- Email: — please include "Privacy Enquiry" in the subject line
- Live Chat: Available 24/7 on bt21.biz — select "Privacy & Data" from the support topic menu
- Response Time: Under 4 hours for urgent security-related privacy matters; up to 30 days for formal data rights requests
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
Ready to Explore bt21?
Now that you understand how bt21 protects your personal data, explore our full range of cricket betting markets, live casino tables, and slot games — all in a secure, SSL-encrypted environment built for Bangladeshi players.