bddet Privacy Policy

bddet collects personal data from players in Bangladesh in order to operate its online casino and sports betting platform safely, legally, and to the highest standard of service. We collect only the data that is genuinely necessary for a defined purpose — a principle known as data minimisation. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a bddet account, we collect the information you provide during the registration process. This includes:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are aged 18 or above)
• Email address (used for account communications and verification)
• Mobile phone number (used for account security and transaction notifications)
• Residential address in Bangladesh (city, district, and postcode where applicable)
• Preferred username and an encrypted version of your chosen password

1.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering (AML) obligations, bddet may request that you submit one or more of the following documents:

• Bangladesh National Identity (NID) card — front and back scan or photograph
• Valid passport (biographical data page)
• Driver's licence (where recognised as a government-issued identity document)
• Recent utility bill, bank statement, or mobile banking statement (for proof of address, where required)

KYC documents are stored securely and are accessed only by authorised bddet compliance personnel and, where legally required, by regulatory or law enforcement authorities.

1.3 Financial Transaction Data

bddet records details of all financial transactions conducted through your account. This includes deposit amounts, withdrawal amounts, transaction timestamps, and identifiers associated with your payment method (such as your registered bKash or Nagad wallet number, or your bank account details used for bank transfers). For security purposes, we do not store full card numbers or mobile banking PINs — these are handled exclusively by the relevant payment processor.

1.4 Gaming and Betting Activity Data

We record your activity on the bddet platform, including the games you play, the bets you place, the amounts wagered, game session durations, and win/loss outcomes. This data is used for account management, responsible gaming monitoring, bonus eligibility assessment, and platform performance analysis.

1.5 Technical and Device Data

When you access bddet, our servers automatically collect certain technical information about your device and connection, including:

• IP address (used for geolocation, fraud prevention, and security)
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Pages visited, time spent on each page, and navigation path through the platform
• Referring URL (the page from which you arrived at bddet)
• Session timestamps and session duration

1.6 Communications Data

If you contact bddet's support team — whether by email to [email protected] or via the on-platform live chat — we retain records of that correspondence, including your contact details, the content of your messages, and any resolutions or actions taken in response. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.

1.7 Marketing Preferences Data

Where you have opted in to receive promotional communications from bddet, we record that consent alongside a timestamp. We also record any subsequent changes to your marketing preferences, including opt-outs. Opt-in status is never assumed — it must be given explicitly. You may withdraw consent for marketing communications at any time by emailing [email protected] or using the unsubscribe mechanism in any promotional email we send you.

bddet uses the personal data it collects for specific, defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without informing you first and, where required, obtaining your consent. The following describes how your data is used across each major function of the bddet platform.

Account Management and Service Delivery: Your registration data is used to create and maintain your bddet account, authenticate your identity at login, process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer methods, and communicate account-related information such as transaction confirmations, security alerts, and account status notifications.

Age and Identity Verification: Your KYC data — including your NID card or passport — is used to verify that you are aged 18 or above and that your identity matches the details you provided at registration. Verification is a legal requirement and cannot be waived. Without successful KYC verification, bddet is obligated to restrict your ability to withdraw funds from your account.

Fraud Prevention and Security: Technical and device data, including your IP address, device fingerprint, and session activity, is analysed in real time to detect signs of fraudulent activity, unauthorised account access, bot usage, multi-accounting, and other security threats. Where suspicious activity is detected, bddet may temporarily suspend account access pending investigation.

Anti-Money Laundering (AML) Compliance: bddet is obligated to monitor financial transactions for indicators of money laundering, terrorist financing, and other financial crimes. Where transactions trigger AML screening thresholds or present unusual patterns, bddet may request additional documentation and may be legally required to file a Suspicious Activity Report (SAR) with relevant authorities without notifying the account holder.

Responsible Gaming Monitoring: Gaming and betting activity data is used to power bddet's responsible gaming tools, including automated alerts when player activity patterns suggest potential problem gambling behaviour. This data also enables the administration of player-initiated limits — such as deposit limits, session time limits, and self-exclusion periods — as described in bddet's Responsible Gaming Policy.

Bonus and Promotion Administration: Your gaming activity, deposit history, and account status are used to determine your eligibility for bddet promotional offers and to track wagering requirement completion. Bonus administration data ensures that promotions are not misused and that eligible players receive the correct credits in a timely manner.

Customer Support: Communications data — including email correspondence and live chat records — is used to resolve your support queries, investigate complaints, and maintain a record of interactions for dispute resolution and quality assurance purposes.

Platform Improvement and Analytics: Aggregated and anonymised technical data is used to analyse platform performance, identify technical issues, understand how players navigate the platform, and inform product development decisions. Where analytics tools process non-anonymised session data, this is done on the basis of bddet's legitimate interest in maintaining a safe and well-functioning platform.

Marketing Communications: Where you have given explicit consent, bddet may use your email address and/or mobile number to send you promotional offers, bonus notifications, and news about new features or games on the platform. You can withdraw this consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before that withdrawal.

The following categories of third parties may receive limited personal data from bddet in the course of normal platform operations:

Payment Processors: To process your deposits and withdrawals, bddet shares the minimum necessary transaction and account identification data with your chosen payment provider. Supported providers include bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank. Each of these providers operates under their own privacy policy and is independently responsible for the data they hold. bddet's sharing of data with these providers is limited to what is technically required to execute the specific transaction you initiate.

Identity Verification Services: bddet may engage third-party KYC verification providers to assist in the automated or assisted review of identity documents submitted by players. These providers process your identity data solely for verification purposes under strict contractual terms and are not permitted to retain or use your data beyond that purpose.

Game Providers and Technology Partners: bddet's game library is powered by third-party game studios and platform technology providers. When you play a game on bddet, your game session data — including bets placed and game outcomes — is shared with the relevant game provider in order to render the game and record results. Game providers include but are not limited to Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios are contractually bound not to use player data for any purpose other than delivering their services to bddet.

Regulatory and Law Enforcement Authorities: bddet may be legally required to disclose personal data to government bodies, regulatory authorities, law enforcement agencies, or courts in Bangladesh or other applicable jurisdictions. Such disclosures are made only where required by law or valid legal process, and bddet will make reasonable efforts to notify the affected player where legally permitted to do so.

Professional Advisors: In the course of managing its legal, financial, and compliance obligations, bddet may share data with professional advisors such as lawyers, auditors, and accountants. These parties are bound by professional confidentiality obligations and are not permitted to use your data for any purpose beyond the specific engagement for which it was shared.

Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of bddet's business, personal data held by bddet may be transferred to the acquiring entity as part of that transaction. In such circumstances, bddet will notify registered players by email or via a prominent notice on the platform before their data is transferred and becomes subject to a different privacy policy.

bddet does not transfer personal data outside of Bangladesh or to international third-party processors without ensuring that appropriate safeguards are in place, consistent with applicable data protection principles.

bddet uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access files stored on your device beyond what the issuing website has placed there.

bddet uses the following categories of cookies:

Managing Cookies: You can manage cookie preferences through your browser settings. Most modern browsers — including Chrome, Firefox, Edge, Opera Mini, and the default browsers on Android and iOS — allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bddet account or completing financial transactions on the platform.

Local Storage and Session Storage: In addition to cookies, bddet may use browser local storage and session storage to retain temporary data required for platform functionality — such as your current game state or active session details. This data is stored locally on your device and is not transmitted to third parties independently of the standard session cookie mechanisms described above.

Third-Party Cookies: Some game providers integrated into the bddet platform may set their own cookies on your device as part of delivering their game software. These cookies are governed by the respective game provider's own privacy and cookie policies. bddet does not have direct control over third-party game provider cookies; however, we require all game partners to comply with applicable data protection standards as a condition of their integration with the platform.

bddet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The table below sets out the standard retention periods applied to each category of personal data.

Once a retention period has elapsed, personal data is securely deleted or anonymised in accordance with bddet's internal data disposal procedures. Anonymised data — from which it is not possible to identify any individual — may be retained indefinitely for statistical analysis, platform improvement, and regulatory reporting purposes.

Where a player submits a valid erasure request (see Section 7 — Your Privacy Rights), bddet will assess the request against applicable retention obligations. Data subject to a mandatory retention period under AML or financial regulation cannot be deleted in response to an erasure request until that retention period has expired. bddet will inform you of any such limitation within 30 days of receiving your request.

The following security measures are in place across the bddet platform:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or mobile device and bddet's servers is encrypted using TLS 1.2 or higher. This protects your login credentials, financial transaction data, and personal information from interception during transmission.
• AES-256 Encryption at Rest: Sensitive personal data stored on bddet's servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption, the same standard used by major financial institutions worldwide.
• Password Security: bddet does not store your account password in plain text. Passwords are processed using a strong one-way cryptographic hashing algorithm with per-user salting, making it computationally infeasible to reverse-engineer your password from the stored hash.
• Two-Factor Authentication (2FA): bddet offers optional two-factor authentication for all registered accounts. When 2FA is enabled, logging in requires both your password and a time-limited one-time code sent to your registered mobile number. Enabling 2FA significantly reduces the risk of unauthorised account access.
• Access Controls: Access to personal data within bddet's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit. Support staff who handle personal data undergo data protection training as part of their onboarding and annual review processes.
• Intrusion Detection and Monitoring: bddet operates continuous server and network monitoring systems that detect and alert on anomalous activity, including potential intrusion attempts, unusual data access patterns, and distributed denial-of-service (DDoS) attacks.
• Secure Development Practices: New features and updates to the bddet platform are developed under a secure software development lifecycle (SSDLC) that includes security code review, vulnerability scanning, and penetration testing before deployment.

Reporting a Security Concern: If you discover or suspect a security vulnerability in the bddet platform, or if you believe your account has been compromised, please contact us immediately at [email protected] with the subject line "Security Concern". bddet will acknowledge all security reports within 24 hours and will investigate and respond to confirmed vulnerabilities as a matter of priority.

bddet will notify affected players by email without undue delay in the event of a personal data breach that is likely to result in a high risk to their rights and freedoms. The notification will include a description of the nature of the breach, the categories of data affected, and the steps bddet is taking to mitigate the impact.

As a player on the bddet platform, you have the following rights in relation to the personal data we hold about you. These rights are subject to applicable legal limitations — particularly where data must be retained to comply with AML, financial, or other regulatory obligations — but bddet is committed to honouring them to the fullest extent permitted by law.

• Right of Access: You have the right to request a copy of the personal data bddet holds about you, along with information about how that data is used, who it is shared with, and how long it will be retained. Access requests will be fulfilled within 30 days of receipt.
• Right to Rectification: If any personal data bddet holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your bddet account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that bddet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other lawful basis for processing), or where you object to processing and there are no overriding legitimate grounds. Erasure requests cannot be fulfilled where retention is required by law (e.g., AML financial records).
• Right to Restrict Processing: You may request that bddet limit the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have contested the lawfulness of processing.
• Right to Object: You have the right to object to bddet processing your personal data where that processing is based on legitimate interest. You also have an absolute right to object to your data being used for direct marketing purposes, which bddet will honour without requiring justification.
• Right to Withdraw Consent: Where bddet processes your data on the basis of your consent (specifically, marketing communications), you may withdraw that consent at any time by emailing [email protected] or using the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Data Portability: Where bddet processes your data on the basis of consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

How to Exercise Your Rights: All privacy rights requests should be submitted in writing to [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a clear description of the right you wish to exercise and the data concerned. bddet will acknowledge your request within 5 business days and will provide a substantive response within 30 days. Where additional time is required due to the complexity or volume of a request, bddet will notify you and may extend the response period by up to a further 60 days, in accordance with applicable data protection principles.

bddet will not charge a fee for the exercise of privacy rights in standard circumstances. Where requests are manifestly unfounded or excessive — particularly where they are repetitive — bddet reserves the right to charge a reasonable administrative fee or to refuse the request, with written reasons provided to the requesting party.

bddet reviews and updates this Privacy Policy periodically to reflect changes in platform functionality, applicable law, regulatory guidance, or industry best practice. The effective date at the top of this page indicates when the current version was last published.

Where a material change is made to this Privacy Policy — for example, a change that introduces a new category of data collection, a new third-party sharing arrangement, or a change to your rights — bddet will notify registered players by email to their registered address and/or by displaying a prominent notice on the bddet platform homepage for a period of not less than 14 days following the change. Your continued use of the bddet platform following the expiry of that notice period constitutes acceptance of the revised Privacy Policy.

If you do not accept a change to this Privacy Policy, your sole remedy is to discontinue use of the platform and request account closure in accordance with Section 8 of the bddet Terms & Conditions. bddet will process any outstanding withdrawal balance before closing the account.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. bddet retains archived copies of all prior policy versions for a minimum of 5 years.

Contact Details for Privacy Enquiries:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support Hours: 00:00 – 24:00 BST (UTC+6), every day of the year
• Response Time: Privacy enquiries are acknowledged within 5 business days and resolved within 30 days

This Privacy Policy should be read alongside the bddet Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into this document. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.