Privacy Policy — How bd80 Collects, Uses, and Protects Your Data

When you interact with the bd80 platform, we collect personal data in the following categories. We collect only what is necessary for the specific purpose described and do not retain data beyond those purposes.

Registration Data: When you create a bd80 account, you provide us with your full name, date of birth, email address, mobile phone number, and a username of your choosing. This information is necessary to establish your identity, verify your age (18+ requirement), and maintain your account in good standing.

Identity Verification Data: To comply with our Know Your Customer (KYC) obligations and to confirm that you meet the minimum age requirement of 18 years, bd80 may request copies of government-issued identification documents. Acceptable documents include a National Identity Card (NID), passport, or driving licence. For address verification, a utility bill, bank statement, or similar document issued within the past three months may be requested.

Financial Data: bd80 records all deposit and withdrawal transactions made through your account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction amounts in Bangladeshi Taka, timestamps, and transaction reference numbers. bd80 does not store full mobile banking credentials or banking passwords.

Gameplay and Betting Data: bd80 logs all gaming activity associated with your account, including game titles played, wager amounts, bet outcomes, session durations, and sports betting markets accessed. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

Device and Technical Data: When you access bd80, our servers automatically collect your IP address, browser type and version, operating system, device type, screen resolution, and the referring URL. This technical data is used for security monitoring, fraud detection, and service optimisation.

Communications Data: If you contact bd80 support via live chat or email, the content of those communications is retained for quality assurance, dispute resolution, and training purposes. Support interactions are logged with timestamps and agent identifiers.

bd80 processes your personal data on the following lawful bases and for the following specific purposes:

• Account Management: To create, maintain, and administer your bd80 account, including processing login requests, managing account settings, and enforcing account security measures.
• Transaction Processing: To facilitate deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and supported bank partners, and to maintain accurate financial records associated with your account.
• Identity and Age Verification: To confirm that you meet the minimum age requirement of 18 years and that the identity associated with your account is genuine. This is a legal and operational requirement and cannot be waived.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, collusion, bonus abuse, and other security threats to the platform and to other players.
• Responsible Gaming Monitoring: To monitor gameplay patterns that may indicate problem gambling behaviour and, where appropriate, to contact you with information about responsible gaming tools available on the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through the bd80 24/7 English support service.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the quality, performance, and feature set of the bd80 platform over time.
• Legal Compliance: To comply with any applicable laws, regulations, court orders, or lawful requests from competent authorities in connection with bd80's operations.
• Promotional Communications: Where you have provided consent, to send you information about bd80 promotions, seasonal offers (such as those tied to BPL season, Eid, or Pohela Boishakh), and new game launches. You may withdraw consent for marketing communications at any time through your account settings or by contacting support.

bd80 does not sell, rent, or trade your personal data to any third party. Data is shared externally only in the following strictly defined circumstances:

• Payment Processors: Transaction data is shared with the payment providers you use — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — solely for the purpose of executing the deposit or withdrawal you have initiated. Each of these providers operates under their own privacy terms and security frameworks.
• Game Studios: When you access games provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a session token and minimal technical data are passed to the game provider's systems to launch and operate the game. No financial or identity data beyond what is required to establish the game session is transmitted.
• Identity Verification Partners: Where bd80 uses a third-party KYC service to verify identity documents, the document data you submit is processed by that service in accordance with its own certified security and privacy standards. bd80 selects verification partners who meet recognised international data protection standards.
• Legal and Regulatory Authorities: bd80 may disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, court order, or lawful official request. In such cases, bd80 will disclose only the minimum data required to comply with the specific obligation.
• Professional Advisers: bd80's legal, accounting, and auditing advisers may access account data in the course of providing professional services to bd80. These parties are bound by confidentiality obligations.

All third parties who receive personal data from bd80 are required to process that data solely for the purpose for which it was shared, to maintain appropriate technical and organisational security measures, and to delete or return the data once the purpose has been fulfilled.

bd80 uses cookies and similar local storage technologies to operate the platform, maintain session security, and understand how the platform is used at an aggregate level. The following categories of cookies are in use on bd80:

bd80 does not use third-party advertising cookies, retargeting pixels, or any tracking technology that follows your activity on other websites outside of bd80.ws. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your bd80 account.

bd80 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or legitimate business necessity.

• Active Account Data: All registration, financial, and gameplay data associated with your account is retained for the full duration that your account remains active on bd80.
• Post-Closure Retention: Following account closure — whether voluntary or initiated by bd80 — core account and transaction records are retained for a period of five (5) years to satisfy potential legal, regulatory, or dispute resolution requirements. After this period, data is permanently deleted or irreversibly anonymised.
• Identity Verification Documents: Copies of identity and address verification documents are retained for a period of five (5) years from the date of submission. After this period, document images are securely deleted from bd80's systems.
• Support Communication Logs: Live chat and email support transcripts are retained for a period of two (2) years from the date of the interaction, after which they are permanently deleted.
• Analytics Data: Anonymised, aggregated analytics data that cannot be linked back to any individual user may be retained indefinitely for platform improvement purposes.
• Inactive Accounts: If your account has been inactive for 12 consecutive months (no login, deposit, or wager), bd80 may contact you with notice of impending account closure. If no activity is recorded within a further 30 days of that notice, the account may be closed and data retained under the post-closure schedule above.

If you request deletion of your personal data before the end of a mandatory retention period, bd80 will restrict active processing of your data to the minimum necessary for legal compliance and will complete deletion at the earliest point permitted by law.

bd80 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your browser or app and bd80's servers is protected by 256-bit TLS/SSL encryption, the same standard used by major international banking institutions.
• Data Encryption at Rest: Sensitive data fields stored in bd80's databases — including identity document data, payment method identifiers, and account credentials — are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bd80's internal systems is restricted on a strict need-to-know basis. Staff members who handle personal data undergo training and are bound by confidentiality obligations.
• Intrusion Detection: bd80's infrastructure is monitored continuously for signs of unauthorised access, anomalous traffic patterns, and attempted breaches. Automated alerting systems are in place to escalate potential incidents to the security team immediately.
• Password Security: Account passwords are stored as salted cryptographic hashes — bd80 does not store passwords in plain text and cannot retrieve your original password. If you forget your password, a reset process is provided.
• Fraud Detection Systems: Automated systems monitor transaction patterns and login behaviour for indicators of account compromise or fraudulent activity, flagging anomalies for review by the security team in real time.

In the event of a data security incident that poses a material risk to your personal data, bd80 will notify affected users as promptly as practicable, with information about the nature of the incident, the data potentially affected, and the steps bd80 is taking in response.

As a bd80 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the bd80 support team via live chat — our team operates in English, 24 hours a day, seven days a week.

• Right of Access: You have the right to request a copy of all personal data that bd80 holds about you. We will provide this in a readable English-language format within a reasonable timeframe from the date of your verified request.
• Right to Rectification: If any personal data bd80 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor details such as your registered phone number or email address can be updated directly through your account settings panel.
• Right to Erasure: You may request deletion of your personal data. Where bd80 has no legal or legitimate operational basis to continue holding the data, we will delete or irreversibly anonymise it. Note that mandatory retention periods — as described in Section 5 — may mean that full deletion cannot be completed immediately.
• Right to Restrict Processing: In circumstances where the accuracy of your data is in dispute, or where you have objected to its processing, you may request that bd80 temporarily restrict active use of your data while the matter is resolved.
• Right to Data Portability: Where technically feasible, you may request that bd80 provide your personal data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Following such an objection, bd80 will immediately cease sending you marketing communications.
• Right to Withdraw Consent: Where processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bd80 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, the effective date at the top of this document will be updated and, where reasonably practicable, registered account holders will be notified via their registered email address or through an in-platform notification.

Minor amendments — such as clarifications of existing provisions that do not alter their substantive effect, or corrections of typographical errors — may be made without specific notification to account holders. bd80 recommends reviewing this Privacy Policy periodically, particularly before making any new deposit, to ensure you remain comfortable with our current data practices.

Your continued use of the bd80 platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change to this Privacy Policy, you should stop using the platform and may request account closure through the bd80 support team.

If you have any questions about this Privacy Policy, how your data is handled, or wish to exercise any of your data rights, please reach out to the bd80 support team at any time. All privacy-related enquiries are handled in English and treated with strict confidentiality.