Privacy Policy — How bd98b Collects, Uses, and Protects Your Personal Data

1 Introduction

This Privacy Policy sets out the data processing practices of bd98b ("the Platform", "we", "us", or "our") in relation to the personal data of individuals who access or use the bd98b website at bd98b.io and its associated services ("the Service"). bd98b is dedicated to protecting the privacy of all players registered on the platform, particularly those accessing the Service from Bangladesh.

By registering for a bd98b account, making a deposit, placing a bet, or otherwise using any feature of the bd98b platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read together with the bd98b Terms & Conditions, which are available separately at bd98b.io/terms-conditions.

This Privacy Policy applies to all data collected through the bd98b website, mobile-optimised site, any bd98b application, and through direct communications between bd98b and its players, including via live chat, email, and telephone support interactions.

2 Data Controller

For the purposes of this Privacy Policy, bd98b acts as the data controller in respect of all personal data collected from players using the platform. As data controller, bd98b determines the purposes for which, and the means by which, personal data is processed. bd98b accepts responsibility for ensuring that all personal data under its control is processed in accordance with applicable data protection principles.

Where bd98b engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, or game content providers — those providers act as data processors under contract with bd98b. bd98b remains responsible for ensuring that all such processors handle data in a manner consistent with the commitments made in this Privacy Policy.

3 Data We Collect

bd98b collects the following categories of personal data from players during the course of account registration, use of the platform, and compliance verification processes:

bd98b does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless this is required to fulfil a specific legal obligation and you have been informed in advance.

4 How Data Is Collected

bd98b collects personal data through the following channels and methods:

• Direct submission: Information you provide voluntarily when creating a bd98b account, completing KYC verification, making a deposit or withdrawal request, contacting support, or updating your account preferences.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the bd98b platform. See Section 10 for full details of our cookie practices.
• Third-party sources: Identity and fraud screening data from KYC verification partners; transaction confirmation data from payment processors such as bKash, Nagad, Rocket, and Upay; and device fingerprinting data from security service providers.
• Publicly available sources: In limited circumstances related to fraud prevention and AML compliance, bd98b may cross-reference publicly available information to verify player identity or assess risk.

5 Purposes of Processing

bd98b processes your personal data for the following specific and legitimate purposes:

• Account management: To create, maintain, and administer your bd98b player account, including authenticating your identity on each login and enabling account recovery.
• Service delivery: To provide access to casino games, sportsbook markets, live dealer tables, and all other features of the bd98b platform that form part of the agreed service.
• Payment processing: To process deposits and withdrawals via your chosen payment method, verify payment account ownership, and maintain accurate transaction records.
• KYC and AML compliance: To verify player identity and age, screen against sanctions and watchlists, and fulfil anti-money-laundering obligations applicable to the platform.
• Fraud prevention and security: To detect and prevent unauthorised account access, collusion, bonus abuse, and other forms of fraudulent or prohibited conduct described in the Terms & Conditions.
• Responsible gaming: To monitor player activity for indicators of problem gambling behaviour, enforce player-requested limits and self-exclusions, and comply with responsible gaming obligations.
• Customer support: To respond to enquiries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Marketing communications: Where you have provided explicit consent, to send promotional offers, bonus notifications, and platform updates to your registered contact details. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated usage patterns and technical performance data to improve the functionality, stability, and user experience of the bd98b platform.
• Legal obligations: To comply with any applicable legal, regulatory, or court-ordered requirement to disclose or retain personal data.

6 Legal Basis for Processing

Every processing activity carried out by bd98b is grounded in at least one of the following lawful bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering — including account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming requirements.
• Legitimate interests: Processing carried out to pursue bd98b's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Processing activities that go beyond contractual and legal necessity, such as sending direct marketing communications, where your prior explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

bd98b does not sell, rent, or trade your personal data. However, in order to deliver the bd98b service, it is necessary to share certain categories of personal data with the following types of third parties. In all cases, data sharing is limited to the minimum information required for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the financial and identity data necessary to process your deposits and withdrawals securely.
• KYC and identity verification partners: Third-party verification services receive identity document data and date-of-birth information to complete the mandatory KYC process. These providers are contractually bound to handle data solely for verification purposes.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and anonymised player reference for the purpose of delivering game content and recording game results. These providers do not receive personally identifiable player data beyond what is technically required.
• Fraud and security service providers: Device fingerprinting and risk scoring services receive technical data (IP address, device identifiers) to assist in fraud detection and account protection.
• Legal and regulatory authorities: bd98b will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or where necessary to defend legal claims.
• Professional advisers: Lawyers, auditors, and compliance consultants acting under confidentiality obligations may have access to limited personal data where required for professional advisory purposes.

8 Data Retention

bd98b retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with any applicable legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of the player's account remaining open on the bd98b platform.
• KYC and identity documents: Retained for a minimum of five years following account closure, in accordance with AML compliance requirements.
• Transaction records: Retained for a minimum of five years following the date of each transaction, for financial record-keeping and audit purposes.
• Support correspondence: Retained for a period of three years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for as long as the consent remains valid, plus a reasonable period following withdrawal to demonstrate that consent was properly obtained and properly revoked.
• Technical and usage logs: Retained for a period of twelve months from the date of collection, after which logs are deleted or fully anonymised.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data and is not subject to this Privacy Policy.

9 Data Security

bd98b implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to reflect evolving security standards and emerging threats.

Key security measures in place on the bd98b platform include:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and bd98b servers.
• AES-256 encryption for all personal data stored on bd98b servers and databases.
• Access controls that restrict access to personal data to authorised personnel only, on a need-to-know basis.
• Two-factor authentication options for player accounts to add an additional layer of login security.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Secure, audited third-party data centres with physical access controls and redundant infrastructure.
• Staff training on data protection obligations and secure data handling practices.

Notwithstanding these measures, no internet-based system can be guaranteed to be completely secure. In the event of a data security incident that affects your personal data and creates a risk to your rights, bd98b will notify affected individuals in a timely manner in accordance with applicable requirements.

10 Cookies and Tracking Technologies

bd98b uses cookies and similar tracking technologies on the platform to ensure functionality, improve user experience, and support security and analytics processes. A cookie is a small text file placed on your device when you visit a website. bd98b uses the following categories of cookies:

• Strictly necessary cookies: Required for the basic functioning of the bd98b platform, including session authentication, security token management, and load balancing. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options so that these do not need to be re-entered on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the bd98b platform — including which pages are visited most frequently and where players navigate from — to support ongoing platform improvement. Individual players are not identified through analytics cookies.
• Security cookies: Used to detect and prevent fraudulent activity, multiple account creation from the same device, and bot-driven access attempts.

bd98b does not use third-party advertising cookies or cross-site tracking technologies that follow your browsing activity beyond the bd98b platform. You may manage cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may impair the functionality of the bd98b platform.

11 Protection of Minors

The bd98b platform is strictly intended for adults aged 21 years and above. bd98b does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts, and bd98b reserves the right to request proof of age at any point during account use.

If bd98b becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, that account will be immediately suspended and the data in question will be deleted or quarantined pending investigation. If you are a parent or guardian and believe that your child has provided personal data to bd98b, please contact us immediately at [email protected] so that appropriate action can be taken.

12 Exercising Your Data Rights

bd98b respects and upholds the data rights outlined in Section 2 of this policy (Your Data Rights, summarised above). To exercise any of your rights — including the right of access, right to rectification, right to erasure, right to restriction, right to portability, right to object, or right to withdraw consent — please contact the bd98b data team using the contact details provided in Section 15.

When submitting a data rights request, please include your registered account username and a brief description of the right you wish to exercise. bd98b will acknowledge your request within a reasonable timeframe and respond substantively within 30 calendar days of receipt. Where a request is complex or bd98b receives a high volume of requests simultaneously, the response period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

bd98b will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. bd98b will verify your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised party.

13 Third-Party Links and Services

The bd98b platform may contain references to third-party payment services (such as bKash and Nagad) and game content providers (such as Pragmatic Play and Evolution Gaming). Where players interact directly with third-party services — for example, by initiating a mobile wallet transfer through bKash — those interactions are governed by the relevant third party's own privacy policy and terms of service, not by this Privacy Policy.

bd98b accepts no responsibility for the privacy practices, data security standards, or terms of service of any third-party service or website. Players are encouraged to review the privacy documentation of any third party before providing their personal data to that party.

14 Policy Updates

bd98b reserves the right to update or revise this Privacy Policy at any time to reflect changes in data processing practices, applicable laws, or the services offered on the platform. Where changes are material — meaning they significantly affect the way your data is collected, used, or shared — bd98b will notify registered players via account notification or email to the address associated with your account before the changes take effect.

Minor or administrative updates (such as clarifications of existing language, formatting changes, or updates to contact details) may be made without advance notice. The version date at the top of this document reflects the date of the most recent revision. Players are encouraged to review this Privacy Policy periodically. Continued use of the bd98b platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bd98b handles your personal data, please contact our support and data team using the following details. All privacy enquiries are handled in English and are responded to within the timeframes described in Section 12.

For standard account-related enquiries that do not relate specifically to data protection, please use the live chat feature accessible directly through the bd98b platform. The live chat team is the fastest route to resolving account queries and is staffed around the clock.