bdg89 Privacy Policy

1 Who We Are

bdg89 is an online sports betting and casino platform accessible at bdg89.io, operated as an offshore gaming service targeting the Bangladesh market. The platform provides cricket betting, live casino, slots, card games, and other interactive gaming products exclusively in Bangladeshi Taka (BDT) to eligible adult users aged 21 and above.

For all privacy-related enquiries, data subject requests, or complaints regarding the handling of your personal data, please contact our dedicated data team at [email protected]. We will acknowledge your communication within 5 working days and provide a substantive response within 30 days.

2 Data We Collect

bdg89 collects personal data through multiple touchpoints across the platform. The categories of data we collect are described below:

2.1 Registration Data

When you create a bdg89 account, we collect your full legal name, date of birth, residential address in Bangladesh (including district, city, and postcode), email address (if provided), and a mobile number linked to your preferred payment method (bKash, Nagad, Rocket, or Upay).

2.2 KYC & Identity Verification Data

To enable real-money features, we collect copies of government-issued identity documents such as your National Identity Card (NID) issued by the Bangladesh Election Commission, a valid Bangladeshi passport, or a birth registration certificate. We may also collect a proof of residential address such as a recent utility bill or bank statement. These documents are used exclusively for identity verification and fraud prevention purposes.

2.3 Financial & Transaction Data

We collect records of all deposit and withdrawal transactions including transaction reference numbers, amounts in BDT, timestamps, payment channel used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank), and transaction outcome. We do not store full card numbers or mobile banking PINs — these are handled directly by the respective payment providers through their own secure infrastructure.

2.4 Usage & Behavioural Data

We automatically collect data about how you interact with the bdg89 platform, including pages visited, games played, bet amounts, session duration, login timestamps, device type, operating system, browser type and version, and IP address. This data is used for platform improvement, fraud detection, and responsible gaming monitoring.

2.5 Communication Data

If you contact our support team via live chat, email, or any other channel, we retain records of those communications including the content of your messages and any attachments you provide, for the purposes of resolving your enquiry and improving our service quality.

3 How We Use Your Data

bdg89 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your bdg89 account, including processing deposits and withdrawals, updating your profile, and communicating account-related notices.
• Identity Verification (KYC): To verify your identity and age in accordance with our obligations as a responsible gaming platform, and to comply with anti-money laundering (AML) requirements.
• Service Delivery: To provide you with access to all bdg89 products including cricket betting, live casino, slots, bingo, and promotional features.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor your gaming patterns and, where our systems identify indicators of problem gambling, to provide appropriate interventions such as voluntary deposit limit prompts or self-exclusion notifications.
• Legal & Regulatory Compliance: To meet our obligations under applicable law, including responding to lawful requests from law enforcement or regulatory authorities where required.
• Platform Improvement: To analyse usage data in aggregate form to improve the performance, reliability, and features of the bdg89 platform.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and seasonal promotions (such as BPL, IPL, T20 World Cup specials, Eid offers, or Pohela Boishakh promotions) where you have provided explicit marketing consent during registration or subsequently via your account settings.

4 Legal Basis for Processing

bdg89 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal requirements, including AML obligations, age verification duties, and lawful information requests from authorities.
• Legitimate Interests: Processing carried out in pursuit of bdg89's legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — in particular, the sending of marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Data

bdg89 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following limited circumstances:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank). Each provider processes your data under their own privacy policy and security infrastructure. bdg89 does not receive or store your full payment credentials.

5.2 Identity Verification Partners

To conduct KYC verification, we may engage specialist identity verification service providers who process your submitted documents on our behalf under strict data processing agreements. These providers are contractually bound to process your data only as directed by bdg89 and are prohibited from using it for any other purpose.

5.3 Legal & Regulatory Disclosure

bdg89 may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally obliged to do so, or where disclosure is necessary to protect the safety of our users or the integrity of the platform. We will notify you of any such disclosure where permitted by law.

5.4 Business Continuity

In the event of a corporate restructuring, acquisition, or transfer of platform operations, your personal data may be transferred to a successor entity as part of that transaction. You will be notified in advance of any such transfer and your rights over your data will be preserved throughout.

6 Cookies & Tracking Technologies

bdg89 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively and provide you with a consistent, secure experience. The categories of cookies we use are as follows:

bdg89 does not use third-party advertising cookies or cross-site tracking technologies. Disabling non-essential cookies through your browser settings will not prevent you from using the platform, though some preference-based features may not function as expected.

7 Data Retention

bdg89 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, in accordance with standard financial record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Communication Records: Retained for a maximum of 3 years from the date of the last communication, unless the communication is relevant to an ongoing dispute or legal proceeding.
• Usage & Session Logs: Retained for a maximum of 24 months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

8 Security Measures

bdg89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for all administrative access to systems holding personal data.
• Automated anomaly detection systems that flag unusual access patterns or data exfiltration attempts in real time.
• Secure data centre infrastructure with physical access controls, CCTV monitoring, and environmental protections.

While we take every reasonable precaution to protect your data, no security system is entirely infallible. In the event of a data security incident that poses a risk to your rights, bdg89 will notify affected users promptly and take all necessary remediation steps without delay.

9 Your Rights Over Your Data

As a user of the bdg89 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 days.

• Right of Access: You may request a copy of all personal data that bdg89 holds about you, along with information about how it is processed and on what legal basis.
• Right to Rectification: You may request correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds. Note that this right may be limited where retention is required by law (e.g., financial records).
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being verified.
• Right to Portability: You may request a copy of personal data you have provided to bdg89 in a structured, commonly used, machine-readable format, for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing of your personal data where it is carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10 Children & Minors

The bdg89 platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that personal data has been submitted by a person below the minimum age threshold, we will immediately suspend the relevant account, delete the submitted data, and void any associated transactions.

bdg89 strongly encourages all account holders to take responsibility for preventing underage access to their devices and accounts. We recommend enabling device-level parental controls and ensuring that your bdg89 login credentials are kept strictly private.

11 International Data Transfers

bdg89 operates as an offshore platform. This means that personal data collected from users in Bangladesh may be processed on servers located outside of Bangladesh. Where such international transfers occur, bdg89 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy. These safeguards may include standard contractual clauses, binding corporate rules, or other recognised transfer mechanisms.

By using the bdg89 platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside of Bangladesh for the purposes described in this Policy. If you have concerns about international data transfers, please contact our support team for further information about the specific safeguards applicable to your data.

12 Updates to This Policy

bdg89 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The effective date of the current version is displayed at the top of this page. Where changes are material — meaning they affect your rights or significantly alter how we use your data — bdg89 will endeavour to provide advance notice via the platform or by direct communication to your registered contact.

Your continued use of the bdg89 platform after the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how your data is being handled.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bdg89, please reach out to our team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the platform chat widget
• Response Time: All privacy-related enquiries are acknowledged within 5 working days and responded to in full within 30 days (Bangladesh Standard Time, UTC+6)

For requests involving data erasure, account closure, or self-exclusion, please indicate the nature of your request clearly in your message so that our team can prioritise and route it to the appropriate specialist without delay. All data subject requests are handled with strict confidentiality.