bd98b Privacy Policy —
Your Data, Protected

bd98b collects personal data through several channels: directly from you when you register an account or interact with the Platform, automatically through your use of the Platform, and occasionally from trusted third-party sources where required for identity verification or fraud prevention purposes.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided during account creation.
• Identity verification documents: National Identity Card (NID), passport, or other government-issued photo identification submitted during KYC review.
• Payment information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details, or card details used for deposits and withdrawals. Full card numbers are never stored on bd98b servers — payment processing is handled by PCI-DSS compliant third-party payment processors.
• Communications: Records of messages exchanged with bd98b's customer support team via live chat or email, including the content of support requests, feedback, and complaints.
• Responsible Gaming submissions: Self-exclusion requests, deposit limit preferences, and cooling-off period instructions submitted through the Responsible Gaming tools.

Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and time zone.
• Usage data: Pages visited on the Platform, games played, wagers placed, session duration, clickstream data, and feature interactions.
• Transaction logs: A complete record of all deposits, withdrawals, bonus activations, and wagering activity associated with your account.
• Cookie and tracking data: Session identifiers, preference cookies, and anonymised analytics data. See Section 4 for full details on our cookie practices.

Every piece of personal data collected by bd98b is used for a defined, lawful purpose. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary data processing activities and the legal basis for each.

bd98b will never use your personal data for automated decision-making that produces significant legal effects without a human review process. If our fraud or compliance systems flag your account for investigation, a member of the bd98b compliance team will review the case manually before any account action is taken.

bd98b does not sell your personal data. We share data with carefully selected third parties only where necessary to deliver our services, meet legal obligations, or protect the integrity of the Platform. Every third party that processes data on behalf of bd98b is bound by a data processing agreement that requires them to handle your information securely and in accordance with the same principles that govern our own practices.

Categories of third parties with whom bd98b may share your data:

• Payment processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) receive the minimum payment data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC and AML screening services receive your name, date of birth, and document data solely for the purpose of verifying your identity and screening against sanctions lists.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to launch game sessions. They do not receive your name, payment details, or contact information.
• Platform infrastructure providers: Cloud hosting and content delivery network (CDN) providers that store and deliver Platform data operate under strict confidentiality and data security obligations.
• Analytics services: Anonymised, aggregated usage data may be shared with analytics platform providers to help bd98b understand Platform performance and player behaviour at a statistical level.
• Regulatory and law enforcement authorities: bd98b will disclose personal data to competent authorities where required by law, court order, or as part of cooperation with a legitimate regulatory inquiry. We will notify affected players of such disclosures where legally permitted to do so.

bd98b uses cookies and similar browser-based technologies to ensure the Platform functions correctly, maintain the security of your session, and gather anonymised performance data that helps us improve the experience for all players. A cookie is a small text file placed on your device by the bd98b web application when you visit the Platform.

Types of cookies used by bd98b:

bd98b does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging into your bd98b account and using core Platform features.

bd98b retains your personal data for as long as your account remains active and for a defined period thereafter, as required by our legal and regulatory obligations. We do not keep data beyond the period necessary for the purposes for which it was collected.

• Active account data: Retained for the full duration of your account's active life on the Platform.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the most recent interaction in a support thread.
• Marketing consent records: Retained for as long as you maintain your marketing opt-in, plus 1 year following any opt-out, as evidence of consent history.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form for Platform improvement purposes.

Your data is stored on secure servers. Access to personal data is restricted to bd98b employees and authorised contractors who have a legitimate business need to access it, and all such personnel are subject to confidentiality obligations.

bd98b recognises and respects your rights over your own personal data. The following rights are available to all registered players, and we are committed to responding to valid requests within a reasonable timeframe — typically within 30 days of receiving a verifiable request.

• Right of access: You may request a copy of all personal data bd98b holds about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected. You can update most account details directly through your account settings page.
• Right to erasure: Subject to our legal retention obligations, you may request the deletion of your personal data. Where deletion is not immediately possible due to a mandatory retention period, we will explain the reason and provide a timeframe.
• Right to restrict processing: You may request that bd98b limits its use of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that bd98b provide your personal data in a portable format for transfer to another service provider.
• Right to withdraw consent: Where bd98b processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to bd98b processing your personal data for direct marketing purposes at any time, and we will cease such processing immediately upon receiving your objection.

To exercise any of these rights, contact the bd98b privacy team via live chat (available 24/7) or by emailing [email protected] (plain text — not a clickable link). We may need to verify your identity before actioning your request to ensure we do not disclose or alter data belonging to another individual.

Protecting your personal data from unauthorised access, accidental loss, and malicious interference is a core operational priority at bd98b. We implement a layered security architecture that combines technical controls, procedural safeguards, and staff training to maintain the integrity and confidentiality of all player data.

• TLS/SSL encryption: All data in transit between your device and bd98b servers is encrypted using TLS 1.2 or higher. Our SSL certificates are monitored and renewed continuously to prevent lapses.
• Password hashing: Player passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with per-user salting, meaning that even bd98b staff cannot view your password.
• Access controls: Access to production systems and player databases is restricted to a small number of authorised personnel on a need-to-know basis. All administrative access is logged and audited.
• Infrastructure security: bd98b's hosting infrastructure incorporates firewalls, intrusion detection systems, and regular penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Payment data isolation: Full payment credentials are never stored on bd98b's own servers. Payment data is handled exclusively by PCI-DSS Level 1 compliant third-party processors, minimising the risk of payment data exposure in the event of any Platform-side incident.
• Staff training: All bd98b employees with access to personal data receive regular training on data protection responsibilities, phishing awareness, and secure data handling procedures.

bd98b reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, the services we offer, applicable legal requirements, or best-practice guidance from data protection authorities. When material changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

Your continued use of the bd98b Platform following the publication of any update to this Privacy Policy constitutes your acknowledgement of the revised document. We encourage you to revisit this page periodically to stay informed of how bd98b handles your data.

If you have questions, concerns, or a formal complaint about bd98b's data handling practices, or if you wish to exercise any of the rights described in Section 6, please reach out using the contact details below:

• Live Chat: Available 24/7 via the bd98b Platform — average response time 2–3 minutes.
• Email: [email protected] — displayed as plain text and not a clickable link. Please include "Privacy Request" in your subject line for fastest routing.