Privacy Policy — bddb Casino Bangladesh

Section 01

Data We Collect

bddb collects personal data from players in Bangladesh through several channels: directly when you register an account, when you use our services, when you contact our support team, and automatically through your browser and device during platform use. We collect only the data that is genuinely necessary for the purposes described in this Privacy Policy.

The categories of personal data bddb may collect include, but are not limited to, the following:

Providing accurate personal data during registration is a condition of your bddb account. If you provide false, incomplete, or misleading information, bddb reserves the right to suspend your account and withhold any associated balances pending an investigation, in accordance with our Terms & Conditions.

Section 02

How We Use Your Data

bddb processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which bddb uses your personal data are as follows:

• Account creation and management: To register your bddb account, verify your identity, manage your profile settings, and provide you with access to our casino, slots, cricket betting, and live game services following each bddb Login.
• Transaction processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay, maintain accurate financial records, and reconcile your account balance in real time.
• Identity verification and KYC compliance: To verify that you are who you claim to be, that you are 18 years of age or older, and that your account is not being used for fraudulent or money-laundering purposes. This is a legal obligation we cannot waive.
• Customer support: To respond to your queries, investigate complaints, resolve disputes, and communicate account-related updates to you via your registered email or mobile number.
• Responsible gaming: To monitor your gaming behaviour for patterns that may indicate problem gambling, to administer deposit limits, cooling-off periods, and self-exclusion tools you have activated, and to provide proactive support where our systems flag a concern.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, multiple-account operation, and any other conduct that violates our Terms & Conditions.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering (AML) regulations, respond to lawful requests from competent authorities, and maintain records as required by our international gaming licence conditions.
• Platform improvement: To analyse aggregated, anonymised usage patterns — including which games are most popular among players in Dhaka, Rajshahi, and other Bangladeshi cities — and to improve the performance, design, and content of the bddb platform over time.
• Marketing communications: To send you promotional offers, bonus notifications, seasonal campaign emails (such as Eid or BPL cricket season promotions), and newsletters, but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

bddb relies on one or more of the following legal bases for each processing activity: performance of a contract with you (i.e., delivering the services you signed up for), compliance with a legal obligation, our legitimate interests as a gaming platform operator (where those interests are not overridden by your privacy rights), or your explicit consent where required.

Section 03

Data Sharing & Third Parties

bddb does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose identified:

• Payment service providers: We share the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to facilitate your BDT deposits and withdrawals. These providers process payment data under their own privacy policies and are responsible for their own compliance.
• Game providers: When you launch a game supplied by a third-party provider — such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe — your account session identifier and certain gameplay data are shared with that provider to enable the game. Game providers do not receive your full identity or payment data.
• Identity verification services: We may engage reputable third-party KYC (Know Your Customer) service providers to assist with age verification and identity document validation. These providers process your verification data under strict data processing agreements with bddb and may not use your data for any independent purpose.
• Technology and infrastructure partners: Providers of server hosting, content delivery networks, database management, cybersecurity monitoring, and analytics tools may have limited, role-based access to anonymised or pseudonymised platform data as part of delivering their contracted services to bddb.
• Legal and regulatory authorities: bddb will disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies when required to do so by a valid legal order, court judgment, or regulatory obligation. We will notify affected players of such disclosures where we are legally permitted to do so.
• Business transfers: In the event that bddb undergoes a merger, acquisition, or sale of all or a significant portion of its assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where practicable, and the acquiring entity will be bound by the terms of this Privacy Policy.

bddb does not share your personal data with advertisers, data brokers, social media platforms, or any entity whose primary purpose is to use your data for profiling or targeted advertising. The bddb platform does not embed third-party social media tracking pixels or advertising SDKs.

Section 04

Cookies & Tracking Technologies

bddb uses cookies and similar browser-based technologies to deliver a functional, personalised, and secure experience on the platform. A cookie is a small text file stored on your device by your browser when you visit bddb.app. Cookies do not contain executable code and cannot access other files on your device.

The cookies used on the bddb platform fall into the following categories:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your bddb Login session, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred game lobby view, responsible gaming limit settings, and notification preferences. These improve your experience but are not essential to core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the bddb platform — such as which pages are most visited and how long sessions last. This data helps bddb improve the platform over time. No personally identifiable information is included in analytics data sets.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential-stuffing attempts, and suspicious login patterns. These cookies are essential to platform integrity and player account protection.

bddb does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. The tracking technologies used on the platform are limited to those necessary for functional, analytical, and security purposes as described above.

Section 05

Data Retention & Storage

bddb retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal retention obligations, or to resolve any disputes that may arise. We do not keep personal data for longer than is justified by a legitimate purpose.

• Active account data: All personal data associated with an active bddb account is retained for the full duration of the account's active life, plus a minimum of five years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history denominated in BDT, are retained for a minimum of seven years in compliance with standard financial record-keeping obligations applicable to international gaming operators.
• KYC and identity verification data: Identity documents and verification records are retained for a minimum of five years following the last verified transaction on the associated account, or for such longer period as may be required by the laws of the jurisdiction in which bddb operates.
• Support communications: Customer support ticket records, live chat transcripts, and email correspondence are retained for up to three years following the closure of the support interaction, to enable quality review and dispute resolution.
• Marketing consent records: Where you have consented to receive marketing communications from bddb, a record of that consent is retained for the duration of your account and for two years following account closure, as evidence of lawful basis for prior communications.
• Self-exclusion records: If you have activated a self-exclusion through bddb's responsible gaming tools, a record sufficient to enforce that exclusion is retained for the duration of the exclusion period and for a minimum of two years thereafter, to prevent reactivation in violation of the exclusion terms.

Data that is no longer required for any active purpose is securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data — such as platform-wide game popularity statistics — may be retained indefinitely for analytical and business planning purposes, as it no longer constitutes personal data.

Section 06

Your Privacy Rights

As a player on the bddb platform, you hold the following rights in respect of the personal data we hold about you. You may exercise any of these rights at any time by submitting a written request to [email protected]. bddb will respond to all privacy rights requests within a reasonable period and will not charge a fee for standard requests.

• Right of access: You have the right to request a copy of the personal data bddb holds about you, along with information about how that data is being used. We will provide this in a clear, readable format.
• Right to rectification: If any personal data bddb holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many account details directly through your account dashboard after completing your bddb Login.
• Right to erasure: You may request that bddb delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations or to defend against legal claims. Where deletion is not possible in full, we will explain which data must be retained and why.
• Right to restrict processing: In certain circumstances — for example, where you have contested the accuracy of data and we are verifying it — you may request that we pause active processing of your personal data while the matter is being resolved.
• Right to data portability: Where technically feasible and where our processing is based on your consent or on a contract with you, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where bddb processes your data based on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
• Right to object: You have the right to object to bddb's processing of your personal data where that processing is based on our legitimate interests. We will consider your objection and cease processing if we cannot demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Section 07

Data Security Measures

bddb takes the security of player data seriously and maintains a layered, defence-in-depth approach to protecting personal and financial information across all platform systems. The following technical and organisational measures are in place at all times:

• Transport encryption: All data transmitted between your browser or mobile device and bddb's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption, ensuring that your bddb Login credentials, session data, and payment details cannot be intercepted in transit.
• At-rest encryption: Sensitive data fields stored in bddb's databases — including identity records, contact details, and verification documents — are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Logical access to production systems and player data is restricted to authorised personnel on a strict need-to-know basis. All staff access is governed by role-based access controls, with access events logged and subject to regular audit review.
• Password security: Player account passwords are never stored in plain text. bddb uses a strong one-way hashing algorithm with per-account salting for all password storage. Even in the event of an unauthorised database access, stored password hashes cannot be reversed to recover original passwords.
• Intrusion detection: bddb operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous traffic patterns, brute-force login attempts, and other security threats in real time.
• Security audits: The bddb platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bddb maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to player data, affected players will be notified promptly with clear information about the nature of the breach and the steps being taken to address it.

While bddb employs all reasonable and industry-standard security measures, no internet-based platform can guarantee absolute security against all possible threats. Players are encouraged to contribute to their own account security by using a strong, unique password for their bddb Login, enabling two-factor authentication where available, and immediately reporting any suspected unauthorised access to [email protected].

Section 08

Policy Updates & Contact

bddb reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable legal requirements, or platform services. When a material change is made to this policy, we will update the effective date displayed at the top of this page and, where the change is significant, notify registered players via their registered email address or through a prominent notice on the bddb.app platform.

Your continued use of the bddb platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed about how bddb protects your personal data. The most current version of this Privacy Policy is always available at bddb.app/privacy-policy.

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all personal data collected by bddb from that date forward, as well as to personal data collected prior to that date that bddb continues to hold and process.