Privacy Policy — bdgams

§ 01 Information We Collect

When you register for and use the bdgams platform, we collect certain categories of personal data. This section explains precisely what information is collected, the source from which it originates, and the lawful basis on which bdgams processes it. We collect only the data that is genuinely necessary to deliver a safe, compliant, and high-quality online casino and sports betting experience to players in Bangladesh.

Registration & Identity Data

At the time of account registration, bdgams collects: your full legal name (as it appears on official government-issued identification), date of birth, email address, and a mobile number registered to your personal bKash, Nagad, Rocket, or Upay wallet. This information is required to create your account, verify your identity, and ensure that you meet the minimum age requirement of 18 years.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance obligations, we may request copies of government-issued identification documents — such as your National Identity Card (NID), passport, or driving licence — along with a recent proof of address. These documents are collected for the purpose of verifying your identity, confirming your age, and preventing fraud and money laundering. KYC documents are stored securely and are accessible only to authorised compliance personnel.

Financial & Transaction Data

When you make deposits or withdrawal requests, bdgams records transaction amounts, timestamps, the mobile financial service (MFS) provider used (bKash, Nagad, Rocket, or Upay), and the partial wallet identifier associated with the transaction. bdgams does not store full MFS wallet PINs or any sensitive authentication credentials belonging to your mobile financial account.

Usage & Behavioural Data

We automatically collect data about how you interact with the bdgams platform. This includes: pages viewed, games played, wager amounts and outcomes (for responsible gaming monitoring), session duration, login timestamps, device type, operating system, browser type and version, and IP address. This data is used to operate the platform, detect fraudulent activity, fulfil our responsible gaming obligations, and improve the player experience.

Communication Data

Any communications you initiate with bdgams's support team — via live chat, email to [email protected], or any other support channel — are retained for quality assurance, dispute resolution, and regulatory compliance purposes. This includes the content of messages, timestamps, and the support agent's responses.

§ 02 How We Use Your Data

bdgams uses the personal data we collect for specific, clearly defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The following is a comprehensive overview of how your data is used across the bdgams platform.

Account Operation & Service Delivery

The primary use of your personal data is to create and maintain your bdgams account, authenticate your identity at login, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and provide access to the full range of games and sports betting markets available on the platform. Without collecting and processing this data, bdgams cannot deliver its services to you.

Identity Verification & KYC Compliance

bdgams is required to verify the identity and age of all registered players. Your identity documents and registration data are processed to confirm that you are who you say you are, that you are at least 18 years of age, and that your account is not being used for fraudulent or money-laundering purposes. This processing is a legal obligation and cannot be waived.

Fraud Prevention & Security

Your technical and usage data — including IP addresses, device fingerprints, login patterns, and transaction histories — is analysed by bdgams's automated systems and security team to detect and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and any other behaviour that violates our Terms & Conditions or applicable law.

Responsible Gaming Monitoring

bdgams is committed to player welfare. Your wagering history, deposit frequency, session duration, and account activity patterns are monitored for signs of problem gambling behaviour. Where our systems or support team identify concerning patterns, we may reach out to offer support resources or apply account-level responsible gaming tools such as deposit limits or cooling-off periods. This processing is conducted in your interest and is a core part of our responsible gaming obligations.

Customer Support

When you contact bdgams support, your communication data is used to understand and resolve your query, to maintain a record of the interaction for quality assurance and dispute resolution, and to improve our support processes. Support records may also be reviewed by compliance personnel in the context of a formal investigation.

Marketing Communications (Consent-Based Only)

With your explicit consent, bdgams may send you promotional communications about bonus offers, new game releases, seasonal promotions (such as Eid offers, Pohela Boishakh specials, or BPL cricket season bonuses), and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting support.

Legal & Regulatory Compliance

bdgams processes certain categories of your data because we are legally required to do so. This includes retaining transaction records, KYC documentation, and responsible gaming logs for the minimum periods required by applicable anti-money laundering (AML) regulations and data retention obligations. This processing takes place regardless of your consent and cannot be limited by opting out of marketing communications.

§ 03 Data Sharing & Third Parties

bdgams does not sell, rent, or share your personal data with third parties for their own independent marketing or commercial purposes. We share your data only in the specific, limited circumstances described below, and only to the extent necessary to fulfil the purpose for which the sharing takes place.

Payment Service Providers

To process deposits and withdrawals, bdgams shares the minimum necessary transaction data with Bangladesh's mobile financial service providers: bKash, Nagad, Rocket, and Upay. The data shared is limited to what is required to initiate, authenticate, and confirm the specific financial transaction. Each of these providers operates under their own privacy policies and regulatory frameworks governed by Bangladesh Bank.

Game Technology Providers

bdgams integrates games and live casino products from third-party software providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you launch a game from one of these providers, limited technical data (such as a session token and your account's currency) is passed to the provider's system to initialise the game. These providers do not receive your full name, NID details, or financial account information.

Identity Verification Partners

For KYC verification processes, bdgams may use trusted third-party identity verification services. Where your documents are passed to such a partner for verification processing, that partner is bound by strict data processing agreements that prohibit them from using your data for any purpose other than the specific verification task assigned.

Legal & Regulatory Disclosure

bdgams may be required by law, court order, or lawful request from a competent authority to disclose certain player data to regulatory bodies, law enforcement agencies, or courts. In such cases, bdgams will disclose only the minimum data required to comply with the lawful request and will notify the affected player where permitted to do so by applicable law.

Business Transfers

In the event that bdgams undergoes a merger, acquisition, restructuring, or sale of all or part of its business, player data held by bdgams at the time of the transaction may be transferred to the acquiring or successor entity as part of the transaction. In such circumstances, bdgams will notify affected players prior to their data being subject to a new privacy policy.

§ 04 Cookies & Tracking Technologies

bdgams uses cookies and similar tracking technologies on the bdgams.app website to enable core platform functionality, analyse usage patterns, and deliver a personalised experience. This section explains what cookies are, which types bdgams uses, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) by a website when you visit it. They are widely used across the internet to make websites function efficiently, to remember your preferences, and to provide website operators with analytical information about how their sites are used.

Types of Cookies Used by bdgams

Strictly Necessary Cookies are essential for the bdgams platform to function. They enable core features such as login session management, account authentication, language preferences, and security token verification. These cookies cannot be disabled, as doing so would prevent you from using the platform.

Functional Cookies remember your account preferences — such as your preferred game category, notification settings, and display configurations — so that these do not need to be re-entered every time you visit bdgams.

Analytics Cookies help bdgams understand how players navigate the platform — which pages are visited most frequently, where players spend the most time, and which features generate the highest engagement. This data is aggregated and anonymised where possible. bdgams uses this information solely to improve the platform experience.

Security Cookies support bdgams's fraud detection and account security systems. They help identify suspicious login patterns, multi-device access anomalies, and potential bot activity. These cookies are a necessary component of the platform's security infrastructure.

Managing Your Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that blocking certain cookies may affect the functionality of the bdgams platform — for example, blocking strictly necessary cookies may prevent you from logging in. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

§ 05 Data Security & Storage

bdgams applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. No online platform can guarantee absolute security, but bdgams has implemented the following layered protections as standard practice across the entire platform.

Technical Security Measures

• SSL/TLS Encryption in Transit: All data transmitted between your browser or mobile device and bdgams's servers is encrypted using current-generation SSL/TLS protocols. This prevents interception of your login credentials, personal details, and financial information during transmission.
• Encryption at Rest: Sensitive data stored in bdgams's databases — including identity documents, KYC records, and financial transaction histories — is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Hashing: Account passwords are never stored in plain text. bdgams uses strong cryptographic hashing algorithms (bcrypt or equivalent) so that even in the unlikely event of a database breach, your actual password cannot be recovered.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their bdgams accounts. 2FA adds a second verification step at login, significantly reducing the risk of account compromise even if your password is stolen.
• Intrusion Detection & Rate Limiting: bdgams's infrastructure includes automated intrusion detection systems, rate limiting on login attempts, and anomaly-detection monitoring that flags and blocks suspicious access patterns in real time.
• Regular Security Audits: The bdgams platform and its data infrastructure undergo periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.

Organisational Security Measures

• Access to player data within bdgams's internal systems is strictly role-based. Staff can only access the data necessary for their specific job function.
• All staff with access to player data are trained in data protection best practices and are bound by confidentiality obligations.
• Internal access to sensitive records is logged and subject to periodic audit review.
• Data processors and third-party partners are contractually required to maintain data security standards equivalent to those applied by bdgams itself.

Data Breach Response

In the event that bdgams becomes aware of a data security incident that poses a risk to your personal data, we will take immediate steps to contain the breach, assess its scope, and notify affected players as promptly as possible. Notifications will be sent to your registered email address and will include a clear description of the incident, the data affected, the steps bdgams has taken, and guidance on protective actions you can take.

§ 06 Your Rights & Data Choices

bdgams respects your rights over your own personal data. The following rights are available to all bdgams account holders with respect to the personal data we hold about them. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all data subject requests within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that bdgams holds about you. Upon a verified request, we will provide a structured summary of your data including registration details, transaction history, KYC records, support communications, and responsible gaming logs associated with your account.

Right to Rectification

If any personal data bdgams holds about you is inaccurate or incomplete — for example, a misspelled name or an outdated mobile number — you have the right to request that we correct it. You can update basic profile information directly via your account settings, or contact support for corrections to identity and KYC data.

Right to Erasure

You may request that bdgams delete your personal data. Where this request can be fulfilled — for example, where we no longer need the data for the purpose for which it was collected — we will do so promptly. However, certain categories of data must be retained by bdgams to comply with legal obligations (such as AML record-keeping requirements) and cannot be erased on request. In such cases, we will explain which data must be retained and why.

Right to Withdraw Consent (Marketing)

If you have previously given consent to receive marketing communications from bdgams, you may withdraw that consent at any time without affecting the lawfulness of the processing carried out prior to withdrawal. To opt out of marketing emails and SMS notifications, visit your account's notification settings or request opt-out via [email protected]. Marketing opt-out does not affect the delivery of essential transactional communications such as deposit confirmations and security alerts.

§ 07 Data Retention

bdgams retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required to comply with applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: All personal data associated with an active bdgams account is retained for the duration of the account's existence plus a minimum of 5 years following account closure, to satisfy anti-money laundering (AML) record-keeping requirements.
• KYC & Identity Documents: Copies of identity verification documents are retained for a minimum of 5 years from the date of verification, or from the date of account closure (whichever is later), in line with standard AML compliance obligations.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Customer support interaction logs are retained for 3 years from the date of the interaction, unless the log is relevant to an ongoing investigation or dispute, in which case it is retained until the matter is resolved.
• Marketing Data: Marketing preferences and consent records are retained for the duration of your account, plus 2 years following account closure.
• Analytics & Technical Logs: Aggregated usage and technical log data is retained for up to 24 months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data under applicable data protection principles.

§ 08 Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdgams processes your personal data, we encourage you to contact us. Our support team handles all privacy-related enquiries with care and will respond within the timeframes set out in this policy.

You can reach bdgams's support team in the following ways:

• Live Chat: Available 24/7 via your bdgams account dashboard. Live chat is the fastest way to receive a response to urgent account or privacy queries.
• Email: Send your privacy queries in writing to [email protected]. Please include your registered account email address and a clear description of your query or request so we can respond efficiently.

For data subject access requests, rectification requests, erasure requests, or any other exercise of your rights as described in Section 06 of this policy, please use the email channel and include "Privacy Request" in the subject line of your message. We aim to acknowledge all privacy-related emails within 2 business days and to provide a full response within 30 calendar days.

bdgams takes all privacy concerns seriously. If you are not satisfied with the response you receive, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.

Policy Updates

bdgams reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or updates to the bdgams platform. When material changes are made, we will notify registered players via their registered email address and will update the "Last updated" date at the top of this page. Continued use of the bdgams platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we are protecting your data.