bd69 Privacy Policy —
Your Data, Your Rights
bd69 is committed to protecting the privacy and personal data of every player across Bangladesh. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data at every stage of your bd69 journey.
Information We Collect
A transparent account of every category of personal and technical data that bd69 may collect from you during registration, gameplay, and ongoing account management.
1.1 Information You Provide Directly
When you register a bd69 account, make a deposit, contact customer support, or interact with any feature of the Platform, you provide us with personal information. The categories of data you supply directly include:
- Identity data: Full legal name, date of birth, gender, and a copy of your National ID Card (NID), passport, or other government-issued identity document submitted during KYC verification.
- Contact data: Bangladesh mobile phone number, email address, and residential address (district, city, or upazila).
- Account credentials: Your chosen username and an encrypted hash of your password. bd69 never stores passwords in plain text.
- Financial data: Your bKash, Nagad, Rocket, or Upay account number, Visa or Mastercard details (card number, expiry, billing address) submitted at the point of deposit or withdrawal. Payment card data is processed by PCI-DSS-compliant payment processors and is not stored in full on bd69 servers.
- Communications data: The content of any messages, emails, live-chat transcripts, or support tickets you submit to the bd69 customer support team.
- Responsible gaming preferences: Deposit limits, time-out durations, self-exclusion periods, and any other responsible gaming settings you configure within your account dashboard.
1.2 Information Collected Automatically
In addition to the data you supply directly, bd69's systems automatically collect technical and behavioural data when you access or use the Platform:
- Device and browser data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and time zone setting.
- Usage and navigation data: Pages visited, game sessions initiated, bet amounts, game outcomes, session start and end times, features interacted with, and in-page scroll depth.
- Transaction data: A complete log of all deposits, withdrawals, bonus credits, wager amounts, and account balance changes associated with your bd69 account.
- Location data: Approximate geolocation derived from your IP address, used to confirm that you are accessing the Platform from a permitted region (Bangladesh) and to detect anomalous login activity.
- Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 5 of this Policy.
1.3 Data Collected from Third Parties
bd69 may receive personal data about you from trusted third-party sources including:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction confirmation and fraud-screening signals.
- Identity verification service providers — document authenticity checks and age verification results.
- Fraud prevention and anti-money-laundering screening databases — risk scores and watchlist match alerts.
- Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — game-round results, round IDs, and session data required for dispute resolution and game history display.
Identity & KYC Data
Collected once at registration and verified during KYC review. Used exclusively for age verification, fraud prevention, and regulatory compliance — never sold or used for marketing profiling.
Financial Transaction Data
All deposit, withdrawal, and bonus transaction records are retained for compliance and dispute resolution. Payment card details are handled by PCI-DSS-certified processors — bd69 does not store full card numbers.
Gameplay & Behavioural Data
Session logs, bet history, and game interaction data help bd69 detect problem gambling patterns, personalise your experience, and resolve any disputes relating to game outcomes or account transactions.
How We Use Your Data
The specific purposes for which bd69 processes your personal information — and the safeguards in place to ensure data is never used beyond these stated purposes.
2.1 Core Platform Operations
The primary reason bd69 collects and processes your personal data is to provide you with a fully functioning, secure, and compliant gaming platform. Specific operational purposes include:
- Creating and managing your bd69 player account, including authentication and account security.
- Processing deposits, withdrawals, and bonus credits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
- Enabling access to casino games, cricket betting markets, slots, fish games, and all other Platform features.
- Enforcing our one-account-per-player policy and detecting duplicate or fraudulent registrations.
- Providing 24/7 English-language customer support and maintaining a record of your support interactions.
- Administering the bd69 VIP programme, calculating tier status, and issuing tier-appropriate bonuses and cashback awards.
2.2 Legal and Compliance Obligations
- Verifying your age (18+) to ensure compliance with our responsible gaming obligations.
- Conducting anti-money-laundering (AML) and know-your-customer (KYC) checks as required by applicable financial crime prevention standards.
- Maintaining full transaction audit trails for a minimum of five years for compliance and law-enforcement cooperation purposes.
- Responding to lawful requests from courts, regulators, or law-enforcement authorities.
- Detecting, investigating, and preventing fraud, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
2.3 Platform Improvement and Personalisation
- Analysing aggregate gameplay and navigation data to identify bugs, improve platform performance, and develop new features.
- Personalising your Platform experience — for example, surfacing cricket betting markets relevant to BPL or T20 World Cup matches, or recommending slot games consistent with your play history.
- Detecting responsible gaming risk indicators (e.g., unusually high deposit frequency, extended session lengths) and triggering proactive outreach from the bd69 responsible gaming team.
2.4 Marketing Communications
With your explicit consent, bd69 may send you promotional communications about bonuses, VIP tier upgrades, seasonal promotions (Eid, Pohela Boishakh, BPL season), and new game releases via email or SMS. You may withdraw your marketing consent at any time by updating your communication preferences in your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
Responsible Gaming Monitoring
bd69 uses your gameplay and deposit data to monitor for signs of problem gambling behaviour. If patterns consistent with at-risk play are detected, our responsible gaming team may reach out proactively to offer support tools. This processing is in your direct interest and forms part of our duty of care to every player.
Analytics & Service Development
Aggregated, anonymised usage data helps bd69 understand how players navigate the Platform, which game categories are most popular among Bangladeshi players, and where the user experience can be improved. Individual player identities are never exposed in analytics reports.
Legal Basis for Processing
The lawful grounds under which bd69 processes your personal data, mapped to each category of processing activity described in this Policy.
3.1 Processing Grounds Summary
bd69 processes your personal data only where a valid legal basis exists. The table below maps each major processing activity to its legal ground.
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (your bd69 account agreement) |
| Payment processing (deposits and withdrawals) | Performance of contract |
| Age verification and KYC checks | Legal obligation (compliance with AML and age-verification requirements) |
| Fraud detection and prevention | Legitimate interests (protecting players and the Platform from financial crime) |
| Responsible gaming monitoring | Legitimate interests (player welfare) and legal obligation |
| Transaction audit trail retention | Legal obligation (financial record-keeping) |
| Platform analytics and improvement | Legitimate interests (service development) |
| Marketing communications | Consent (opt-in; withdrawable at any time) |
| Customer support interactions | Performance of contract and legitimate interests |
| Law-enforcement cooperation | Legal obligation |
3.2 Legitimate Interests Assessment
Where bd69 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. The key legitimate interests we rely on are: preventing fraud and financial crime, ensuring platform security, detecting responsible gaming risk, and continuously improving the Platform for all Bangladeshi players. You have the right to object to processing carried out on legitimate-interests grounds — see Section 7 for details on exercising this right.
Data Sharing & Disclosure
The limited and controlled circumstances in which bd69 shares your personal data with third parties — and the safeguards applied in each case.
4.1 Categories of Third-Party Recipients
bd69 does not share your personal data with third parties except in the following tightly controlled circumstances:
- Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulation.
- Identity verification providers: Third-party KYC service providers receive your name, date of birth, and identity document images solely for the purpose of completing age and identity verification checks. Data shared with these providers is subject to strict contractual data-processing agreements.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive a pseudonymous player identifier and session data necessary to run their games within the bd69 Platform. These providers do not receive your full name, contact details, or payment information.
- Fraud and AML screening services: Your name, date of birth, and transaction data may be checked against industry fraud-prevention and watchlist databases. Results are used solely for risk-management purposes.
- IT infrastructure and cloud service providers: bd69 uses third-party hosting, database, and cloud infrastructure providers who process data on our behalf under binding data-processing agreements and are required to implement appropriate technical and organisational security measures.
- Legal and regulatory authorities: bd69 will disclose personal data to courts, law-enforcement agencies, or regulatory bodies where required to do so by applicable law or a valid legal order.
4.2 No Third-Party Marketing Sharing
bd69 does not share your personal data with any third party for the purpose of allowing that third party to market their own products or services to you. We do not participate in data-broker arrangements, audience-sharing networks, or any form of commercial data exchange involving player personal information.
4.3 International Data Transfers
Some of bd69's technology partners and game providers operate infrastructure outside Bangladesh. Where personal data is transferred internationally, bd69 ensures that appropriate safeguards are in place — including contractual data-processing clauses that require the recipient to protect your data to a standard equivalent to that applied within Bangladesh. If you wish to obtain details of the specific safeguards applicable to an international transfer, contact [email protected].
Data Retention
How long bd69 keeps each category of personal data, and the criteria used to determine retention periods.
6.1 Retention Periods by Data Category
bd69 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention schedule below applies to all active and closed bd69 accounts:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account registration data (name, DOB, contact) | Duration of account + 5 years after closure | Legal obligation / AML compliance |
| KYC identity documents | Duration of account + 5 years after closure | Legal obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Game session and bet history | Duration of account + 2 years after closure | Dispute resolution / legitimate interests |
| Customer support communications | 3 years from date of interaction | Legitimate interests / service quality |
| Marketing consent records | Duration of consent + 3 years | Demonstrating compliance with consent requirements |
| Self-exclusion records | Permanently retained | Responsible gaming / legal obligation |
| IP and device access logs | 12 months from access date | Security / fraud prevention |
6.2 Deletion and Anonymisation
Once a retention period expires, bd69 will securely delete or permanently anonymise the relevant personal data so that it can no longer be attributed to you as an individual. Anonymised data (from which all identifying characteristics have been irreversibly removed) may be retained indefinitely for aggregate analytics and platform-improvement purposes. Deletion requests made prior to the end of a mandatory legal retention period will be accommodated to the extent possible — data subject to a live legal obligation cannot be deleted until that obligation lapses.
Your Privacy Rights
The rights you hold over your personal data held by bd69, and how to exercise each of them easily and free of charge.
7.1 Overview of Your Rights
As a bd69 player whose personal data we process, you hold the following rights in relation to that data. These rights apply regardless of whether your account is currently active or has been closed. To exercise any of the rights listed below, submit a written request to [email protected] with the subject line "Privacy Rights Request". bd69 will acknowledge your request within 3 business days and provide a full response within 30 days.
Right of Access
Request a copy of all personal data bd69 holds about you, along with information about how it is used, where it came from, and who it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held by bd69. You can update most contact details directly within your account dashboard without needing to contact support.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. Erasure requests are subject to mandatory legal retention obligations.
Right to Restrict Processing
Request that bd69 temporarily suspends processing of your data while an accuracy dispute is resolved, or while an objection to legitimate-interests processing is being assessed.
Right to Data Portability
Request a structured, machine-readable copy of the personal data you provided to bd69 so that you may transfer it to another service provider. Applies to data processed on the basis of consent or contract.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling for personalisation purposes. bd69 will cease such processing unless compelling legitimate grounds are demonstrated that override your interests.
Right to Withdraw Consent
Withdraw marketing consent at any time via your account dashboard or by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
If you believe bd69 has not handled your personal data in accordance with this Privacy Policy, you have the right to lodge a complaint with the relevant data protection authority in Bangladesh or to seek judicial remedy.
Data Security Measures
The technical and organisational security measures bd69 has implemented to protect your personal data against unauthorised access, loss, or disclosure.
8.1 Technical Safeguards
bd69 applies a multi-layered technical security architecture to protect player data at every point of its lifecycle — in transit, at rest, and during processing. Core technical measures include:
- SSL/TLS encryption: All data transmitted between your browser or mobile device and bd69's servers is encrypted using industry-standard TLS 1.2 or higher, preventing interception by third parties.
- Data-at-rest encryption: Personal data stored in bd69's databases is encrypted at rest using AES-256 encryption, ensuring that even in the event of unauthorised database access, data cannot be read without the correct decryption key.
- Password hashing: Passwords are never stored in plain text. bd69 uses a strong adaptive hashing algorithm (bcrypt) to store a one-way hash of your password — meaning even bd69 employees cannot view your original password.
- Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their bd69 accounts. When enabled, a one-time verification code sent to your registered mobile number is required at each login, significantly reducing the risk of unauthorised account access.
- Firewalls and intrusion detection: bd69's server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for and automatically respond to suspicious access patterns.
- PCI-DSS compliance for payment data: Payment card processing is handled exclusively by PCI-DSS-certified payment processors. bd69 does not store full payment card numbers, CVVs, or card expiry dates on its own servers.
8.2 Organisational Safeguards
- Access to personal data is restricted to bd69 personnel who genuinely require it to perform their job functions, on a strict need-to-know basis.
- All bd69 staff with access to personal data receive mandatory data protection and information security training.
- Third-party service providers are required to maintain equivalent security standards under contractual data-processing agreements.
- bd69 conducts regular internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in its systems.
8.3 Data Breach Response
In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of players, bd69 will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. Where notification to a data protection authority is required under applicable law, bd69 will comply within the prescribed timeframe. bd69 maintains a documented incident response plan specifically for data breach scenarios.
TLS Encryption
All data in transit between your device and bd69's servers is protected by TLS 1.2+ encryption, rendering it unreadable to any party that might intercept the connection.
AES-256 Storage Encryption
Personal data stored in bd69's databases is encrypted at rest with AES-256, the gold standard for data-at-rest protection used by financial institutions worldwide.
Two-Factor Authentication
Enable 2FA on your bd69 account for an extra layer of login protection. A one-time code is sent to your Bangladesh mobile number each time you sign in from a new device.
Third-Party Services
How bd69 interacts with third-party game providers, payment partners, and technology services — and what this means for your personal data.
9.1 Game Providers
bd69 integrates games from leading international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game powered by one of these providers, a pseudonymous session token and game-round data are exchanged between bd69 and the game provider to enable gameplay, record results, and facilitate any dispute resolution. Game providers do not receive your real name, mobile number, email address, or payment information. Each game provider operates under their own privacy policy, and bd69 recommends reviewing those policies if you wish to understand how they handle session data.
9.2 Payment Partners
Deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard involve data being transmitted to those payment providers to authorise and settle the transaction. The data shared is limited to the minimum required for the transaction — typically your account identifier, transaction amount, and a reference number. bd69 does not control the privacy practices of these payment providers, and each operates under their own terms and privacy policies, which are governed by Bangladesh Bank regulations and the card network rules of Visa and Mastercard respectively.
9.3 Analytics and Infrastructure Providers
bd69 uses third-party cloud infrastructure providers to host its Platform and databases. These providers act as data processors on bd69's behalf and are contractually prohibited from using player data for any purpose other than providing the infrastructure services bd69 has engaged them for. Any analytics tools used by bd69 are configured to anonymise or pseudonymise player data before it is processed, so individual players are not identifiable in analytics reports.
9.4 Links to Third-Party Websites
The bd69 Platform does not contain links to external third-party websites. This Privacy Policy applies exclusively to data processed by bd69 in connection with the Platform at bd69.bio and its associated subdomains. bd69 is not responsible for the privacy practices of any external website.
Policy Updates & Contact
How bd69 communicates changes to this Privacy Policy and how to contact the bd69 data protection team with any privacy-related query or concern.
10.1 Changes to This Privacy Policy
bd69 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in Platform features, applicable law, or data-processing practices. The "Updated" date at the top of this page indicates when the most recent revision was made. Material changes — those that significantly affect your rights or the way your data is used — will be communicated to you directly via email to your registered bd69 address at least 14 days before the change takes effect. Continued use of the Platform after the effective date of a material change constitutes your acknowledgement of the updated Policy.
Non-material changes (such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to reflect new game provider integrations that do not change the data-sharing framework) will be published on this page without direct individual notification.
10.2 Contacting bd69 About Privacy
If you have any questions about this Privacy Policy, wish to exercise a data subject right, have a concern about how your personal data has been handled, or wish to report a potential data breach affecting your account, please contact the bd69 data protection team using the details below:
- Email: [email protected] (subject line: "Privacy Query" or "Privacy Rights Request")
- Response time: bd69 aims to acknowledge all privacy-related correspondence within 3 business days and to provide a substantive response within 30 days of receipt.
- Language: All privacy correspondence is handled in English by bd69's customer support team, available 24 hours a day, 7 days a week.
Privacy Enquiries
For any question relating to this Privacy Policy or the way bd69 handles your personal data, reach out to the team at [email protected]. All privacy queries are handled in strict confidence by trained support staff.
Responsible Data Stewardship
bd69 treats the personal data of every Bangladeshi player as a trust placed in us — not a resource to be exploited. Our data practices are designed around the principle of collecting the minimum data necessary to deliver the best possible gaming experience, securely and responsibly.
Questions About Your bd69 Privacy Rights?
Our support team is on hand 24/7 to answer any questions about this Privacy Policy, help you exercise your data rights, or assist with any account privacy settings.