bdbad Privacy Policy

1. Information We Collect

bdbad collects personal data from you in several ways: directly through the account registration process, through your ongoing use of the platform, through your interactions with our payment channels, and — in limited circumstances — from third-party sources such as identity verification service providers and payment processors. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a bdbad account, we collect the following personal data: your full legal name, date of birth, mobile telephone number, email address, and the account password you choose (stored in hashed form only — see Section 6). This data is collected because it is necessary to establish and maintain your account, verify your age and identity, and communicate with you about your account activity.

1.2 Identity Verification Data

Before processing a withdrawal, bdbad may request a copy of a government-issued identity document such as your Bangladesh National ID (NID), passport, or birth certificate. Where provided, this data is used solely for identity and age verification purposes and is stored securely in accordance with Section 6 of this Privacy Policy. bdbad does not retain copies of identity documents beyond the period required to complete the verification process and satisfy applicable record-keeping obligations.

1.3 Financial and Payment Data

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank account, bdbad receives confirmation data from the relevant payment provider — including transaction reference numbers, the last four digits of the payment account, and transaction timestamps. bdbad does not store complete payment account credentials such as full mobile wallet PINs or full bank account numbers. Full payment credential handling is managed by the respective payment service providers under their own security and privacy frameworks.

1.4 Technical and Usage Data

bdbad automatically collects certain technical and usage data when you access the platform. This includes your IP address, device type, browser type and version, operating system, referring URL, session duration, pages visited, games played, wagers placed, and timestamps of all platform interactions. This data is used to operate the platform, detect fraud and prohibited activity, improve the user experience, and fulfil legal obligations.

1.5 Responsible Gaming Data

Where you use bdbad's responsible gaming tools — including deposit limit settings, loss limits, session time limits, cooling-off periods, or self-exclusion — bdbad records your instructions and the dates on which they were applied and (where applicable) expire. This data is used exclusively to give effect to your responsible gaming preferences and is not used for any other purpose including marketing.

1.6 Communications Data

When you contact bdbad support via email or live chat, we retain records of the content of those communications and associated metadata (timestamps, contact channel, agent identification) for the purpose of resolving your enquiry, maintaining a service history, training quality assurance, and complying with any applicable legal obligation to retain records of player interactions.

2. How We Use Your Data

bdbad uses the personal data it collects only for legitimate, defined purposes. The table below summarises the primary purposes for which personal data is processed and the legal basis for that processing.

2.1 Marketing Communications

bdbad will only send you promotional or marketing communications where you have explicitly opted in to receiving them. You may withdraw your consent to marketing communications at any time by updating your notification preferences in the account settings panel after bdbad Login, or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the bdbad platform or receive service-essential communications such as transaction confirmations and account security alerts.

2.2 Automated Decision-Making

bdbad uses automated systems to detect certain patterns of activity that may indicate fraud, bonus abuse, or money laundering. Where an automated system flags an account for review, a qualified member of the bdbad compliance team will conduct a human review before any account action is taken. bdbad does not make fully automated decisions that have a legally significant effect on you without human oversight.

3. Data Sharing & Disclosure

bdbad does not sell, rent, or trade your personal data to third parties. We share your personal data only where doing so is necessary to operate the platform, comply with a legal obligation, or protect the security of the platform and its users. The categories of third parties with whom we may share personal data are set out below.

3.1 Payment Service Providers

In order to process your deposits and withdrawals, bdbad shares the minimum necessary personal data with the relevant payment service provider — for example bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or a card processing network such as Visa or Mastercard. Each payment service provider operates under its own privacy policy and is responsible for its own data handling practices once the relevant data has been transmitted.

3.2 Game Software Providers

Third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the games available on the bdbad platform. These providers may receive technical session data (such as a pseudonymous session token and stake/result data) that is necessary to deliver game functionality. Game providers do not receive your full name, NID details, or payment credentials.

3.3 Identity Verification Providers

Where bdbad uses a third-party identity verification service to assist with age and identity checks, relevant identity document data may be shared with that provider under a data processing agreement that prohibits the provider from using your data for any purpose other than the verification service requested by bdbad.

3.4 Legal and Regulatory Disclosure

bdbad may disclose personal data where required to do so by applicable law, court order, or a legitimate request from a law enforcement or regulatory authority. In such cases, bdbad will disclose only the minimum data required to satisfy the obligation and will, where legally permissible, endeavour to notify the relevant account holder of the disclosure.

4. Cookies & Tracking

bdbad uses cookies and similar tracking technologies to deliver and improve the platform experience. A cookie is a small text file placed on your device when you visit a website. Cookies help bdbad keep you logged in, remember your preferences, detect fraud, and understand how the platform is used.

4.1 Types of Cookies Used

• Strictly necessary cookies — Required for the platform to function. These include session authentication cookies that keep you logged in during a browser session. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies — Used to remember your preferences such as language settings, display preferences, and responsible gaming notification acknowledgements. These improve your experience but are not essential to platform operation.
• Analytics cookies — Used to collect anonymised data about how players interact with the bdbad platform, including pages visited, session duration, and navigation patterns. This data is used to identify areas for improvement. Analytics data is aggregated and does not identify you personally.
• Security cookies — Used to detect and prevent fraudulent activity, unauthorised account access, and abuse of platform systems. These cookies are strictly necessary for platform security.

4.2 Third-Party Cookies

Some third-party game providers embedded within the bdbad platform may set their own cookies as part of delivering the game experience. bdbad does not control the cookie practices of third-party game providers. Please refer to the privacy policy of the relevant game provider for information about cookies set by their software.

4.3 Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Blocking strictly necessary cookies will prevent you from using core bdbad platform features including account login. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser's developer.

5. Data Retention

bdbad retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods described below reflect bdbad's standard data management practice.

5.1 Active Account Data

Personal data associated with an active bdbad account — including registration data, transaction history, and responsible gaming records — is retained for the full duration that the account remains open and active. Players may request account closure at any time by contacting [email protected].

5.2 Post-Closure Retention

Following the closure of a bdbad account, we retain the following categories of data for the periods specified: account registration data and transaction history for a minimum of five years from the date of account closure, to satisfy anti-money laundering record-keeping requirements; identity verification documents for a minimum of five years from the date of verification; and responsible gaming records (including self-exclusion instructions) for a minimum of five years from the date of the instruction, to enable enforcement of any self-exclusion period and to defend against any associated legal claim.

5.3 Anonymisation

Where personal data is retained beyond the periods specified above for the purpose of platform analytics, statistical research, or fraud pattern analysis, bdbad will anonymise that data such that it can no longer be linked to an identifiable individual. Anonymised data is not subject to the same retention limits as personal data.

5.4 Deletion Requests

You may request deletion of your personal data at any time by contacting [email protected]. bdbad will process deletion requests promptly and, where deletion is not possible due to a legal or regulatory retention obligation, will explain which data categories must be retained and for how long. Data that is subject to a mandatory retention obligation will not be deleted until that obligation expires.

6. Data Security

bdbad implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in response to evolving security threats.

6.1 Encryption in Transit

All data transmitted between your device and bdbad's servers is encrypted using Transport Layer Security (TLS) with 256-bit encryption. The bdbad website operates exclusively over HTTPS. Connections using older, insecure protocols are not accepted.

6.2 Password Security

Account passwords are never stored in plain text. bdbad uses a strong one-way cryptographic hashing algorithm with individual salting to store password credentials. Even in the event of an unauthorised database access, stored password hashes cannot be practically reversed to recover the original password.

6.3 Access Controls

Access to systems and databases that contain personal data is restricted to bdbad personnel who require access to perform their job functions. Access rights are managed on a least-privilege basis and are reviewed periodically. All internal access to personal data is logged and auditable.

6.4 Security Incident Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bdbad will notify affected account holders without undue delay. Notification will be made via the email address held on the affected account and will include a description of the nature of the breach, the categories of data affected, and the steps bdbad is taking to address the breach and mitigate its effects.

7. Your Privacy Rights

As a bdbad account holder, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise.

• Right of access — You have the right to request a copy of the personal data bdbad holds about you. bdbad will respond to access requests within 30 days of receipt and will provide data in a structured, commonly used, machine-readable format where technically feasible.
• Right to rectification — You have the right to request correction of personal data held by bdbad that is inaccurate or incomplete. You can update many personal details directly in the account settings panel after bdbad Login. Where correction requires internal amendment by bdbad staff, we will process your request within 14 days.
• Right to erasure — You have the right to request deletion of your personal data, subject to any legal or regulatory retention obligations described in Section 5 of this Privacy Policy. Where erasure is not possible for all data categories, bdbad will explain which categories must be retained and why.
• Right to restriction of processing — You have the right to request that bdbad restricts its processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to object — You have the right to object to bdbad's processing of your personal data where that processing is based on legitimate interest. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to withdraw consent — Where bdbad processes your personal data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7.1 Response Timeframes

bdbad will acknowledge all privacy rights requests within five business days of receipt and will provide a substantive response or request any necessary additional information within 30 calendar days. Where a request is complex or involves a large volume of data, bdbad may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how bdbad handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, seven days a week, in Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]
Subject line for privacy matters: Privacy Rights Request

8.1 Complaints

If you are not satisfied with bdbad's response to a privacy rights request or have concerns about our data handling practices that have not been resolved to your satisfaction through our internal process, you have the right to escalate your complaint through appropriate channels available to you under the laws applicable in your jurisdiction.

8.2 Changes to This Privacy Policy

bdbad may update this Privacy Policy from time to time to reflect changes in our data handling practices, legal obligations, or the services we offer. Material changes will be communicated to registered account holders via the email address held on their account. The date of the most recent revision is displayed at the top of this document. Continued use of the bdbad platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms.