bdbk Privacy Policy

1. Introduction & Scope

bdbk ("bdbk", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the bdbk online casino and sports betting platform available at bdbk.io (the "Platform"). This Privacy Policy sets out the basis on which we collect, use, store, transfer, and otherwise process personal data relating to registered players, prospective players, and visitors to the Platform.

This Privacy Policy applies to:

• All individuals who register or attempt to register a bdbk account.
• All registered players who access, deposit, play, or withdraw on the Platform.
• All visitors to bdbk.io, including those who browse the Platform without registering.
• All individuals who contact bdbk through live chat, email, or any other support channel.

This Privacy Policy should be read alongside the bdbk Terms & Conditions (available at /terms-conditions) and the bdbk Responsible Gaming Policy (available at /responsible-gaming), both of which are incorporated by reference.

We are focused on the Bangladesh market and all platform communications are conducted in English. This Privacy Policy is written in English and, in the event of any translation or ambiguity, the English version shall prevail.

2. Data Controller

For the purposes of applicable data protection legislation, bdbk acts as the data controller in respect of the personal data of its players and platform visitors. As data controller, bdbk determines the purposes for which and the means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, you may contact bdbk's data team at:

Where bdbk engages third-party service providers (such as payment processors or game studios) to process personal data on its behalf, those providers act as data processors and are bound by data processing agreements that require them to process your data only in accordance with bdbk's documented instructions.

3. Data We Collect

bdbk collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration & Identity Data

When you open a bdbk account, we collect: full legal name, date of birth, gender (optional), residential address in Bangladesh (city, district, postal code), email address, mobile phone number, and preferred username.

3.2 KYC & Verification Data

To comply with our identity verification obligations, we collect copies of government-issued identity documents including: Bangladesh National Identity Card (NID), passport, or driving licence. We also collect proof-of-address documents such as utility bills or bank statements dated within the last three months. Where deposits are made via bKash, Nagad, or Rocket, we may collect confirmation of the registered mobile wallet number.

3.3 Financial & Transaction Data

We collect data relating to all financial transactions on the Platform, including: deposit amounts and timestamps, withdrawal amounts and timestamps, payment method details (mobile wallet number for bKash/Nagad/Rocket, masked card number for Visa/Mastercard, bank reference for Dutch-Bangla Bank and BRAC Bank), account balance history, bonus amounts received and wagered, and any chargebacks or disputed transactions.

3.4 Gameplay & Betting Data

We record all gaming activity on the Platform including: games played, bet amounts and outcomes, session start and end times, cricket and sports markets accessed, bonus rounds triggered, and jackpot contributions and wins. This data is used for fair-play monitoring, dispute resolution, responsible gaming analysis, and the personalisation of game recommendations.

3.5 Technical & Usage Data

When you access the Platform, we automatically collect: IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited and time spent on each page, error logs, and session identifiers. This data is collected via server logs and first-party cookies (see Section 7 for full cookie details).

3.6 Communications Data

We retain records of all communications between you and bdbk including live chat transcripts, email correspondence, complaint and dispute records, and responsible gaming requests such as self-exclusion instructions and deposit limit changes.

3.7 Responsible Gaming Data

Where you use any of bdbk's responsible gaming tools, we collect and retain: deposit limit settings and change history, session time reminders, cooling-off period records, and self-exclusion status and dates. This data is treated as sensitive and is subject to heightened access controls within bdbk's systems.

4. How We Use Your Data

bdbk processes your personal data for the following specific purposes:

bdbk will not use your personal data for any purpose that is incompatible with the purposes listed above without providing prior notice and, where required, obtaining your consent.

5. Legal Basis for Processing

bdbk processes your personal data on the following legal bases:

• Performance of a Contract: Processing your registration data, identity verification data, financial transaction data, and gameplay data is necessary for bdbk to fulfil its contractual obligations to you as a registered player — providing access to games, processing deposits and withdrawals, and maintaining your account.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, transaction record-keeping, and reporting of suspected financial crime — are required by applicable law. bdbk cannot waive these obligations regardless of a player's consent preferences.
• Legitimate Interests: bdbk processes technical and usage data for fraud prevention, platform security, and service improvement on the basis of legitimate interests. These interests have been assessed against player rights and are not overridden by those rights given the necessity of fraud prevention in the online gambling context.
• Consent: Marketing communications and non-essential analytics cookies are processed on the basis of your freely given, specific, and informed consent. You may withdraw marketing consent at any time by contacting support at [email protected] or by updating your account communication preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

bdbk does not sell your personal data. We share your data only in the circumstances described below:

6.1 Payment Processors

To process your deposits and withdrawals, bdbk shares the minimum necessary financial and identity data with the relevant payment service providers. For mobile wallet transactions, this includes sharing with bKash, Nagad, Rocket, and Upay. For card transactions, data is shared with Visa and Mastercard processing networks. For bank transfers, data is shared with Dutch-Bangla Bank and BRAC Bank. All payment partners are bound by their own security and privacy standards consistent with their respective regulatory frameworks.

6.2 Game Studios & Software Providers

Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — require a session token and a pseudonymous player identifier to launch their games within the bdbk platform. No directly identifying information (such as your full name, NID, or mobile number) is transmitted to game providers. Game session data (bet amounts, game outcomes) is shared with providers solely for game operation and dispute resolution purposes.

6.3 Fraud Prevention & Security Partners

bdbk engages specialist fraud detection and identity verification services. These partners process technical data (IP addresses, device fingerprints) and identity data to assist bdbk in identifying suspicious activity, verifying age, and preventing multi-accounting. All fraud prevention partners are bound by strict data processing agreements.

6.4 Legal & Regulatory Disclosure

bdbk may disclose your personal data to competent law enforcement, regulatory, or judicial authorities where required to do so by applicable law, court order, or lawful request. bdbk will notify you of any such disclosure where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of the bdbk business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bdbk will notify affected players and ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this Privacy Policy.

7. Cookies & Tracking Technologies

bdbk uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how Bangladesh players interact with the site. The following categories of cookies are used:

bdbk does not use third-party advertising cookies that track your browsing activity outside of the bdbk.io domain. All analytics data is processed using bdbk's own first-party analytics infrastructure. To withdraw consent for non-essential cookies, email [email protected] with the subject line "Cookie Preferences".

8. Data Retention

bdbk retains your personal data for the following periods, after which it is securely deleted or anonymised:

• Active Account Data: Retained for the lifetime of your active bdbk account plus 5 years following account closure, to satisfy legal record-keeping obligations applicable to gambling operators.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction. This applies to all deposits, withdrawals, and bonus transactions, regardless of account status.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later. Original document images are stored in encrypted form with access restricted to the compliance team.
• Support Communications: Live chat transcripts and email records are retained for 3 years from the date of the conversation. Records relating to formal complaints or dispute proceedings are retained for 5 years.
• Responsible Gaming Records: Self-exclusion records are retained for a minimum of 6 years from the date the self-exclusion was applied, to prevent a previously self-excluded player from inadvertently re-registering during the exclusion period.
• Marketing Preference Records: Records of your marketing consent or withdrawal of consent are retained for 5 years as evidence of lawful processing.
• Technical Logs: Server access logs and fraud detection logs are retained for 12 months and then automatically deleted or anonymised.

Where applicable law requires a longer retention period than specified above, bdbk will retain data for the legally required period. Where applicable law permits a shorter retention period, bdbk may elect to retain data for the longer period specified above for legitimate operational and security reasons.

9. Data Security

bdbk implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the bdbk platform is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to login sessions, payment flows (bKash, Nagad, Visa, Mastercard), KYC uploads, and all API communications with game providers.
• Encryption at Rest: Sensitive data fields — including KYC document images, payment method details, and responsible gaming records — are encrypted at the database level using industry-standard AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to player personal data within bdbk's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo data protection training. Administrative access requires multi-factor authentication.
• Intrusion Detection: bdbk operates continuous intrusion detection and monitoring systems that alert the security team to anomalous access patterns, brute-force attempts, and other indicators of compromise.
• Penetration Testing: The bdbk platform undergoes regular independent security assessments including penetration testing and vulnerability scanning. Critical findings are remediated within defined SLA timeframes.
• Data Breach Response: In the event of a personal data breach that presents a risk to player rights, bdbk will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

While bdbk takes all reasonable steps to protect your personal data, no internet-based system is entirely immune to security risks. You are responsible for keeping your bdbk account credentials — including your password and any two-factor authentication codes — confidential. Do not share your login details with any third party.

10. International Data Transfers

bdbk's Platform is directed at players in Bangladesh. Some of the third-party service providers that we engage — including certain game studios and fraud prevention platforms — may process data in locations outside Bangladesh. Where personal data is transferred to a third country, bdbk ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to applicable data protection requirements.

Applicable safeguards for international transfers include:

• Contractual data processing agreements incorporating standard data protection clauses that require the recipient to protect personal data to a defined minimum standard.
• Transfers to recipients in countries that provide an adequate level of data protection as recognised by relevant authorities.
• Transfer impact assessments conducted prior to establishing any new international data flow involving player personal data.

If you would like further information about the specific safeguards applicable to any particular international transfer of your personal data, please contact [email protected] with the subject line "Data Transfer Query".

11. Your Privacy Rights

As a bdbk player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Request" and include your registered email address and account username for identity verification purposes.

• Right of Access: You have the right to request a copy of the personal data that bdbk holds about you. We will provide this in a structured, commonly used, machine-readable format within 15 business days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields, such as your registered name or date of birth, correction requires re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Note that this right is subject to legal retention obligations — transaction records and KYC documents must be retained for the periods described in Section 8 regardless of an erasure request.
• Right to Restriction of Processing: You may request that bdbk restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller, where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. If you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications and analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Children's Privacy

The bdbk Platform is strictly for adults aged 21 and above. bdbk does not knowingly collect, process, or retain personal data from individuals under the age of 21. Registration by persons under 21 is prohibited under bdbk's Terms & Conditions and constitutes a serious breach that will result in immediate account closure and forfeiture of all balances.

If bdbk discovers or has reason to believe that a registered account belongs to a person under the age of 21, the account will be suspended immediately, all pending transactions will be frozen, and the account will be referred to the compliance team for investigation. Any net deposits will be returned to the deposit source after verification, but no winnings will be paid.

Parents and guardians are strongly encouraged to use parental control software to prevent underage individuals from accessing online gambling platforms. If you believe that a person under the age of 21 has registered a bdbk account, please notify us immediately at [email protected].

13. Third-Party Links

The bdbk Platform does not contain links to external third-party websites. However, game studios (such as Pragmatic Play, Evolution Gaming, and Spribe) whose games are hosted within the Platform may operate their own privacy practices in relation to game session data. bdbk has no control over the privacy practices of game studio software operating within the Platform and recommends that you review the privacy policies of any third-party game providers whose software you use.

bdbk is not responsible for the privacy practices or content of any third-party platform, and nothing in this Privacy Policy constitutes any representation or warranty regarding the data practices of any third party, including payment providers such as bKash, Nagad, and Rocket.

14. Updates to This Privacy Policy

bdbk reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection, a new type of third-party disclosure, or a change to the legal basis for processing — bdbk will provide at least 7 days' advance notice via a prominent notification on the Platform and, where feasible, via email to your registered address.

Minor updates — such as clarifications of existing provisions, corrections of typographical errors, or updates to contact information — may be made without advance notice. The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision.

Your continued use of the bdbk Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Privacy Policy, you must cease using the Platform and contact support to request account closure.

All prior versions of this Privacy Policy are archived and available upon request by contacting [email protected] with the subject line "Privacy Policy Archive Request".

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdbk handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related enquiries fairly, transparently, and promptly.

bdbk takes all privacy enquiries seriously. Whether you are exercising a data subject right, raising a concern about how your data has been used, or simply seeking clarification on a provision of this Privacy Policy, our team is here to help and will respond in English.