Privacy Policy for bd188com

1 Data We Collect

bd188com collects personal data that is necessary to provide a safe, compliant, and high-quality gaming experience. We collect data in three primary ways: information you provide directly, information generated automatically during your use of the Platform, and information received from verified third-party sources.

1.1 Information You Provide Directly

• Registration data: Your full legal name, date of birth, gender, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and mobile number when you create an account.
• Identity verification (KYC) documents: National ID card, passport, driving licence, or other government-issued identity documents submitted during account verification.
• Payment information: Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, etc.), and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored on our servers.
• Communications: Records of your correspondence with our customer support team, including live chat transcripts, emails, and submitted support tickets.
• Responsible gaming preferences: Deposit limit settings, session time limits, and self-exclusion requests you submit through the Platform.

1.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, games played, session duration, bet history, wager amounts in BDT (৳), win/loss records, bonus activity, and navigation paths within the Platform.
• Log data: Server logs capturing access timestamps, error logs, and security event records.
• Location data: Approximate geographic location derived from your IP address for compliance screening and fraud prevention purposes.

1.3 Information from Third Parties

• Identity verification data from KYC service providers used to confirm the authenticity of documents you submit.
• Fraud and AML (Anti-Money Laundering) screening data from risk assessment partners.
• Payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to validate transaction completion.

2 How We Use Your Data

bd188com processes your personal data for the following specific purposes. Each purpose is supported by a legitimate legal basis, which we have set out in the table below.

Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time by contacting our support team or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3 Cookies & Tracking

bd188com uses cookies and similar tracking technologies (including pixels, web beacons, and local storage objects) to ensure the Platform functions correctly, to remember your preferences, and to understand how players interact with our services.

Types of cookies we use:

• Strictly necessary cookies: Required for core Platform functionality — session authentication, login state management, security tokens, and load balancing. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limit configurations. Retained for the duration of your session or up to 30 days.
• Analytics cookies: Collect anonymised data about how visitors use the Platform — which pages are most visited, session durations, and navigation flows. This data helps us improve the Platform experience for all players.
• Security and fraud prevention cookies: Used to detect suspicious login attempts, abnormal betting patterns, and potential account takeover activity. These are essential for player protection.

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling functional or analytics cookies may impair certain Platform features. bd188com does not use cookies to serve third-party advertising or to track your activity on external websites.

4 Data Sharing & Disclosure

bd188com does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with selected third parties only where it is necessary to operate the Platform, comply with legal obligations, or protect the interests of players and the Company.

Categories of recipients with whom data may be shared:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive transaction-specific data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are independently responsible for data they receive.
• KYC and identity verification partners: Third-party verification services receive your submitted identity documents solely for the purpose of confirming your identity and age. Data is not retained by these partners beyond the period required for verification.
• Fraud prevention and AML screening services: Anonymised or pseudonymised risk indicators may be shared with AML compliance platforms to detect suspicious financial activity.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and game session data to facilitate gameplay. They do not receive your name, address, or payment details.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful directive from a competent authority, bd188com will disclose personal data as legally mandated.
• Professional advisors: Our legal counsel, auditors, and compliance advisors may access data on a confidential, need-to-know basis to provide professional services to bd188com.

All third parties with whom bd188com shares personal data are contractually required to maintain the confidentiality of that data and to process it only for the purposes for which it was shared. bd188com does not authorise third parties to use your personal data for their own commercial purposes.

5 Data Security

bd188com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bd188com Platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms an active secure connection.
• Encrypted data storage: Sensitive personal data — including KYC documents and payment references — is stored in encrypted form on secured servers with restricted access controls.
• Access controls: Internal access to player personal data is restricted to authorised bd188com personnel on a strict need-to-know basis. Access is logged and regularly audited.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts as an additional layer of security. Internal staff accounts with access to player data require 2FA by policy.
• Penetration testing and vulnerability assessments: The Platform undergoes regular independent security audits to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in a risk to players, bd188com will notify affected players as promptly as possible, consistent with applicable notification obligations.

6 Data Retention

bd188com retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our legal, regulatory, and operational obligations.

• Active account data: Retained for the full duration of your account's existence on the Platform, including all transaction records, game history, and communication logs.
• Post-closure retention: Following account closure — whether voluntary or by the Company — core account and transaction records are retained for a minimum of five (5) years to meet AML compliance, fraud investigation, and dispute resolution requirements.
• KYC documents: Identity verification documents are retained for the period required by applicable AML regulations, typically five (5) years from the date of the last transaction.
• Marketing preferences: If you withdraw consent for marketing communications, your opt-out preference is retained indefinitely to ensure we do not inadvertently contact you again.
• Analytics data: Anonymised and aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual player.

When personal data is no longer required for any of the above purposes, bd188com securely deletes or anonymises it using industry-standard data destruction methods. You may request early deletion of your data subject to the limitations described in the Your Privacy Rights section below.

7 Your Privacy Rights

As a player on bd188com, you have a number of rights in relation to your personal data. bd188com is committed to facilitating the exercise of these rights promptly and transparently.

• Right of access: You may request a copy of the personal data bd188com holds about you at any time. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that mandatory AML and fraud-prevention records cannot be deleted during their legally required retention period.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to bd188com, which you may transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. This does not affect processing that took place before withdrawal.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for marketing purposes.

To exercise any of the above rights, please submit a written request to support@bd188com with the subject line "Privacy Rights Request". Include your full name, registered email address, and a clear description of your request. We will acknowledge receipt within 2 business days and provide a substantive response within 30 days. Identity verification may be required before we process your request.

8 Contact & DPO

bd188com takes data protection seriously. If you have any questions, concerns, or complaints about this Privacy Policy or the way in which we handle your personal data, please contact our dedicated privacy team using the details below.

• Privacy enquiries: support@bd188com — include "Privacy Enquiry" in the subject line.
• Data rights requests: support@bd188com — include "Privacy Rights Request" in the subject line.
• Data breach reports: If you believe your bd188com account has been compromised, contact us immediately with subject line "Security Incident".
• Response time: We aim to acknowledge all privacy-related communications within 2 business days (Bangladesh Standard Time, UTC+6) and resolve substantive matters within 30 days.

bd188com reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players by email or via a prominent notice on the Platform. The effective date at the top of this Policy will always reflect when it was last reviewed. Continued use of the Platform following notification of a policy update constitutes your acceptance of the revised terms.