bd768a Privacy Policy

1 Data We Collect

bd768a collects personal data through several points of interaction across the platform. The categories of data we collect, and the context in which each is gathered, are set out below.

Registration data: When you create a bd768a account, we collect your full legal name, date of birth, residential address in Bangladesh (district and division), mobile number, and a self-selected username and password. This data is required to open your account and is used for identity verification, age verification, and responsible gaming purposes.

Identity verification (KYC) data: To comply with our obligations to prevent underage gambling and financial crime, bd768a may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request a screenshot confirming ownership of your registered mobile financial service account (bKash, Nagad, Rocket, or Upay).

Financial transaction data: bd768a records all deposit and withdrawal transactions on your account, including the amount, date, time, payment method used, and the mobile number associated with the payment. This data is retained for fraud prevention, dispute resolution, and regulatory compliance purposes.

Gameplay and betting activity data: We record your game sessions, wager amounts, game outcomes, bonus usage, and session duration. This data is used for game integrity monitoring, responsible gaming analysis, and platform improvement.

Technical and device data: bd768a automatically collects certain technical data when you access the platform, including your IP address, device type, operating system, browser type and version, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

Communication data: When you contact bd768a's support team via live chat or email, we retain records of those communications, including the content of messages and the date and time of contact. This data is used for quality assurance, dispute resolution, and service improvement.

2 How We Use Your Data

bd768a uses the personal data collected from registered players for the following specific purposes. We process your data only where we have a legitimate basis to do so — either because processing is necessary to deliver the service you have requested, because we have a legal obligation, or because we have obtained your explicit consent.

bd768a does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review. Where automated systems flag an account for review (for example, due to suspected bonus abuse or unusual transaction patterns), a member of the bd768a compliance team conducts a manual review before any account action is taken.

3 Data Sharing & Third Parties

bd768a does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in order to operate the platform effectively and meet our legal obligations, we do share certain data with carefully selected partners and service providers in the following limited circumstances:

• Game studios and platform providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive technical session identifiers in order to deliver their games within the bd768a platform. These providers do not receive your full personal profile or payment details.
• Mobile financial service providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, the relevant provider receives your registered mobile number and transaction amount as required to process the payment. These providers operate under their own privacy policies.
• Identity verification services: bd768a may use third-party KYC verification tools to validate identity documents submitted during account verification. These services process your document data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.
• Analytics and platform optimisation services: bd768a uses aggregated, anonymised technical data with analytics providers to understand platform performance and player behaviour at an aggregate level. No personally identifiable data is shared with analytics providers.
• Law enforcement and regulatory authorities: bd768a will disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to prevent or investigate suspected criminal activity including fraud, money laundering, or terrorist financing.

All third-party service providers engaged by bd768a are contractually required to process personal data only for the specific purposes for which it was shared, to maintain appropriate technical and organisational security measures, and to delete or return data once the relevant service has been completed.

4 Cookies & Tracking

bd768a uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse usage patterns. A cookie is a small text file stored on your device by your browser when you visit the bd768a website. Cookies do not contain executable code and cannot access other files on your device.

The following categories of cookies are used on the bd768a platform:

• Strictly necessary cookies: These cookies are required for the platform to function. They maintain your login session, remember your account preferences, and support security features. You cannot opt out of strictly necessary cookies without impairing the functionality of the platform.
• Functional cookies: These cookies remember choices you make on the platform — such as your preferred game category, display settings, and language preference — so that you do not need to re-enter them on each visit.
• Analytics cookies: bd768a uses anonymised analytics cookies to understand how players navigate the platform, which game categories are most popular, and where technical issues may be occurring. This data is aggregated and does not identify individual players.
• Security cookies: These cookies support bd768a's fraud detection and account security systems by identifying unusual login patterns, device changes, and suspicious session behaviour.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bd768a account and using the platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Samsung Internet.

bd768a does not use third-party advertising cookies or cross-site tracking technologies to serve targeted advertisements on external websites. Cookies placed by bd768a are used exclusively for the operational and analytical purposes described above.

5 Data Retention

bd768a retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following retention periods apply to the principal categories of data held by bd768a:

• Account registration data: Retained for the duration of your active account and for a minimum of five years following account closure, in order to meet anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification or the date of account closure, whichever is later. This retention period is required to support regulatory compliance and audit obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction, in compliance with standard financial record-keeping requirements.
• Gameplay and betting activity records: Retained for three years from the date of each session for responsible gaming monitoring purposes, and for five years where the records relate to a dispute or investigation.
• Customer support communications: Retained for two years from the date of the last communication, unless the communication relates to an ongoing dispute or investigation, in which case it is retained until the matter is fully resolved.
• Technical and device data (logs): Retained for 12 months from the date of collection for security monitoring purposes, after which they are deleted or fully anonymised.
• Marketing consent records: Retained until you withdraw your marketing consent, plus one year following withdrawal to demonstrate compliance with your opt-out request.

When personal data is no longer required and the relevant retention period has elapsed, bd768a securely deletes or anonymises that data. Where anonymisation is applied, the resulting anonymised data set is no longer considered personal data and may be retained indefinitely for aggregate analytical purposes.

6 Your Privacy Rights

As a registered bd768a player, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from your registered email address, including your registered mobile number and a description of the right you wish to exercise. bd768a will respond to all valid data rights requests within five business days.

• Right of access: You have the right to request a copy of all personal data bd768a holds about you, along with information about how it is used, who it has been shared with, and how long it will be retained.
• Right to rectification: If any personal data held by bd768a about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that certain data fields — such as your registered name — may require documentary verification before a correction can be applied.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. Please note that this right is subject to legal retention obligations — bd768a cannot delete financial transaction records that are required for regulatory compliance purposes.
• Right to restriction of processing: You may request that bd768a restrict processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being considered.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation.
• Right to withdraw consent: Where bd768a processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

7 Data Security

bd768a implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption on all data in transit between your device and the bd768a platform, ensuring that your login credentials, personal data, and transaction details cannot be intercepted in transit.
• Encrypted data storage for all sensitive personal data fields, including identity documents and payment method details, held within bd768a's secure infrastructure.
• Access controls and role-based permissions ensuring that only authorised bd768a personnel with a documented business need can access personal player data. Access is logged and periodically audited.
• Intrusion detection and monitoring systems that continuously monitor the bd768a platform for signs of unauthorised access, unusual account activity, and potential security incidents.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals to identify and remediate security weaknesses before they can be exploited.
• Incident response procedures that enable bd768a to detect, contain, and recover from a data security incident promptly, and to notify affected players where required.

While bd768a takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You also play an important role in protecting your account: use a strong, unique password for your bd768a account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.