Privacy Policy
How bdplay Protects Your Personal Data

1.1 Information You Provide Directly

When you create a bdplay account or interact with the platform, you provide us with personal data including but not limited to: your full legal name, date of birth, email address, residential address within Bangladesh, and a chosen username. During the mandatory KYC (Know Your Customer) verification process, you will also provide a copy of a government-issued photo identification document (such as your National ID card, passport, or driving licence) and proof of address (such as a utility bill or bank statement).

When you make deposits or withdrawals, transaction data is collected including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts in BDT, and timestamps. If you contact our support team via live chat or email, the content of those communications is retained as part of your account history.

1.2 Information Collected Automatically

When you access bdplay.app, our servers and analytics tools automatically collect certain technical data about your visit. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, pages visited, time spent on each page, and session duration. This data is collected via server logs, cookies, and similar tracking technologies.

For players who access bdplay via a mobile device, we may also collect device identifiers (such as a device ID or advertising ID) where these are provided by your device's operating system and you have not disabled this sharing. These identifiers are used solely for fraud prevention and platform security purposes.

1.3 Information From Third Parties

bdplay may receive limited personal data about you from third-party partners, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status and details of your transactions.
• Identity verification and KYC service providers who assist bdplay in confirming your identity and age.
• Fraud detection and anti-money-laundering (AML) screening services that cross-reference your details against sanctions lists and fraud databases.
• Analytics partners who provide aggregated, anonymised data about user behaviour on the platform (no individually identifiable data is received from these partners).

In all cases, bdplay uses data received from third parties only for the specific purpose for which it was shared and in accordance with the agreements in place with those partners.

1.4 Sensitive Personal Data

bdplay does not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, health information, or sexual orientation) from players. The KYC documents you submit may incidentally reveal some such information (for example, a passport photograph reveals your physical appearance). Such incidental data is used only for identity verification and is not processed for any other purpose. If you are a player who has contacted bdplay in connection with a problem gambling concern, that communication may be flagged in your account record for the sole purpose of ensuring appropriate responsible gaming support is provided to you.

2.1 Providing the bdplay Service

The primary purpose for which bdplay processes your personal data is to operate and deliver the platform's services to you. This includes creating and managing your account, processing deposits and withdrawals in BDT via your chosen payment method, settling your bets and game rounds, delivering bonus offers you are eligible for, and providing customer support when you contact us. Without processing your data for this purpose, bdplay cannot function as a platform.

2.2 Identity Verification and Legal Compliance

bdplay is required by its operational obligations to verify the identity and age of all registered players. Your personal data — including KYC documents — is processed to confirm that you are who you say you are, that you are at least 18 years of age, and that you are not subject to any sanctions or restrictions that would prevent you from using the platform. This processing is necessary for bdplay to meet its obligations in relation to anti-money-laundering (AML), responsible gaming, and fraud prevention requirements.

2.3 Fraud Prevention and Security

bdplay processes technical and transaction data to detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other forms of misconduct on the platform. This includes automated analysis of login patterns, device fingerprinting, transaction monitoring, and cross-referencing against known fraud databases. Where suspicious activity is detected, bdplay may suspend an account pending investigation and may be required to report findings to relevant financial intelligence authorities.

2.4 Service Improvement and Analytics

Aggregated and anonymised usage data is processed by bdplay to understand how players interact with the platform, identify technical issues, improve the user experience, and inform decisions about new features and game offerings. This analysis does not involve processing individually identifiable personal data beyond what is necessary to diagnose specific technical support issues.

2.5 Marketing Communications

With your explicit consent at the time of registration or thereafter, bdplay may send you promotional communications about bonuses, new games, seasonal offers (such as BPL cricket promotions or Eid specials), and platform updates via your registered email address. You may withdraw this consent and unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.6 Responsible Gaming

bdplay processes your gaming activity data — including betting frequency, session duration, deposit volumes, and loss patterns — to monitor for indicators of problem gambling and to apply account-level responsible gaming tools where appropriate. This processing is carried out in your interest and in fulfilment of bdplay's commitment to player welfare. Where a player has set self-imposed limits or entered a self-exclusion period, their account data is flagged to enforce those restrictions automatically.

4.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain information about your session and preferences. Cookies cannot execute programmes or deliver viruses to your device. They are widely used across the internet to make websites work efficiently and to provide useful information to site operators.

4.2 Cookies bdplay Uses

bdplay uses the following categories of cookies on bdplay.app:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core functionality such as account login sessions, page navigation, and access to secure areas of the site. The platform cannot function properly without these cookies, and they cannot be disabled without breaking core site features.
• Preference Cookies: These cookies remember your settings and choices on the platform — such as your preferred language, display preferences, and notification settings — so you do not have to re-enter them on each visit.
• Analytics Cookies: bdplay uses aggregated analytics cookies to understand which pages are visited most frequently, how long players spend on each section, and where users encounter technical difficulties. This data is processed in anonymised, aggregated form and does not identify individual players.
• Security and Fraud Prevention Cookies: These cookies help bdplay identify suspicious behaviour patterns, detect automated bot activity, and prevent unauthorised access to player accounts. They form part of our platform security infrastructure.

4.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Note that disabling strictly necessary cookies will prevent you from logging into your bdplay account and accessing key platform features. Instructions for managing cookies in popular browsers are available from the browser's official help documentation.

bdplay does not use advertising tracking cookies, retargeting pixels, or social media tracking scripts that monitor your activity across third-party websites.

4.4 Local Storage and Similar Technologies

In addition to cookies, bdplay may use browser local storage and session storage to temporarily retain data about your current session — such as your active game state or recently viewed pages. This data is stored locally on your device and is cleared when you close your browser session. It is not transmitted to bdplay servers except as part of normal platform functionality.

5.1 Technical Security Measures

All data transmitted between your device and bdplay's servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major international banking institutions. Sensitive data at rest, including KYC documents and payment information, is stored in encrypted form using AES-256 encryption. bdplay maintains strict access controls on its database infrastructure, ensuring that only authorised personnel with a legitimate operational need can access personal player data.

5.2 Organisational Security Measures

Access to player personal data within the bdplay organisation is granted on a strict need-to-know basis. All staff members with access to personal data are subject to confidentiality obligations and receive regular training on data protection best practices. bdplay conducts periodic internal security reviews and works with third-party security specialists to perform penetration testing and vulnerability assessments of the platform infrastructure.

5.3 Account Security — Your Responsibilities

While bdplay takes every reasonable precaution to secure your data on our side, account security also depends on the steps you take to protect your login credentials. You are responsible for keeping your bdplay username and password confidential and for not sharing them with any third party. bdplay recommends using a strong, unique password for your bdplay account and enabling two-factor authentication (2FA) where available. If you suspect your account has been compromised, contact our support team immediately via live chat or at [email protected].

5.4 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, bdplay will notify affected individuals promptly via their registered email address. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures bdplay has taken or proposes to take to address the breach. bdplay will also take immediate steps to contain the breach and prevent recurrence, including engaging specialist cybersecurity response teams where necessary.

6.1 Right of Access

You have the right to request a copy of all personal data that bdplay holds about you. This includes your registration data, KYC verification records, transaction history, gaming activity logs, and any communications with our support team. Access requests should be submitted by emailing [email protected] with the subject line "Data Access Request". bdplay will respond within 30 days and will provide the requested data in a structured, commonly used, and machine-readable format where technically feasible.

6.2 Right to Rectification

If any personal data bdplay holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account information such as your email address or postal address, corrections can be made directly through your account settings or by contacting support. Corrections to KYC documents require submission of updated documentation and may take up to 5 business days to process.

6.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that bdplay is subject to legal obligations that require retention of certain data (such as transaction records and KYC documentation) for defined minimum periods, which may prevent immediate erasure. Where erasure cannot be carried out in full, bdplay will explain which data must be retained and why.

6.4 Right to Restrict Processing

In certain circumstances — such as where you contest the accuracy of data bdplay holds about you, or where processing is unlawful but you do not wish the data deleted — you may request that bdplay restricts further processing of your data while the matter is under review. During a restriction period, bdplay will retain your data but will not carry out any further processing beyond storage, except with your consent or where required by law.

6.5 Right to Data Portability

Where processing is carried out by automated means and is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider of your choosing. Portability requests can be made via email to [email protected].

6.6 Right to Object

You have the right to object to bdplay's processing of your personal data where that processing is carried out on the basis of legitimate interests — including profiling for responsible gaming monitoring and platform security purposes. Where you raise an objection, bdplay will cease the relevant processing unless bdplay can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims. You may object to marketing communications at any time without restriction.

6.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact the bdplay privacy team by email at [email protected] with the subject line clearly identifying the right you wish to exercise (e.g., "Data Erasure Request", "Data Access Request", "Marketing Opt-Out"). bdplay will acknowledge your request within 5 business days and will complete the response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case bdplay will notify you of the extension and the reason for it. There is no charge for exercising your privacy rights.

7.1 Active Account Data

While your bdplay account remains open and active, bdplay retains all personal data associated with your account — including your registration details, KYC documents, transaction history, gaming activity records, and support communications. This data is necessary to provide you with ongoing access to the platform and to fulfil bdplay's legal and operational obligations.

7.2 Retention Following Account Closure

When you close your bdplay account, the following retention periods apply to different categories of your personal data:

• Transaction records and financial data: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements applicable to payment processing and anti-money-laundering obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of account closure, or longer if required by applicable law or ongoing regulatory investigations.
• Gaming activity logs: Retained for 3 years from the date of account closure, primarily to support responsible gaming monitoring and dispute resolution.
• Support communications: Retained for 2 years from the date of the last interaction, to support continuity of service and dispute resolution.
• Marketing consent records: Retained indefinitely as proof of consent, even if marketing preferences are subsequently withdrawn, to demonstrate lawful basis for any communications sent.

7.3 Anonymised Data

Following the expiry of the applicable retention periods above, bdplay may retain anonymised, aggregated versions of your data (from which no individual can be identified) indefinitely for statistical and platform improvement purposes. Anonymisation removes all personally identifiable elements and means the resulting data is no longer considered personal data under applicable privacy law.

7.4 Deletion Process

Upon expiry of the applicable retention period, personal data is securely deleted or destroyed in accordance with bdplay's internal data disposal procedures. Digital data is overwritten using industry-standard secure erasure methods. Physical copies of documents (if any) are shredded. bdplay maintains an internal data retention schedule to ensure deletions are carried out systematically and on time.

8.1 Policy Updates

bdplay reserves the right to update or amend this Privacy Policy at any time. When material changes are made — changes that affect how your personal data is collected, used, or shared in a significant way — bdplay will notify you by sending an email to your registered email address at least 14 days before the changes take effect. The updated policy will also be published on bdplay.app with the effective date clearly indicated at the top of the page.

For minor updates — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — bdplay may publish the revised policy on the site without advance email notification. The "Last Updated" date shown at the top of this policy will always reflect when the most recent revision was made. Your continued use of bdplay.app following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

8.2 Children and Minors

bdplay is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes a mandatory date-of-birth declaration and KYC age verification to prevent minors from accessing the platform. If bdplay becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, all funds will be handled in accordance with our Terms and Conditions, and the personal data of the minor will be deleted as promptly as is legally permissible. If you believe a minor has registered on bdplay, please contact us immediately at [email protected].

8.3 Links to Third-Party Websites

bdplay.app does not contain links to third-party external websites. However, if in the future any such links are added, please be aware that bdplay is not responsible for the privacy practices of any external website and that this Privacy Policy applies solely to data collected through bdplay.app. We encourage you to review the privacy policy of any third-party website before providing any personal information.

8.4 Contact the bdplay Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdplay handles your personal data, please contact us using the details below. Our privacy team is available 24/7 and we aim to respond to all enquiries within 2 business days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available directly on bdplay.app — average response time under 5 minutes
• Service Area: All of Bangladesh — BST (UTC+6)

bdplay is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.