bd bage Privacy Policy

bd bage collects personal data through several channels: directly from you during account registration and subsequent platform use, automatically through your device and browser as you interact with our platform, and in some cases from third-party identity verification partners where required by our know-your-customer (KYC) obligations.

1.1 Information you provide directly

When you register a bd bage account or update your profile, we collect the following categories of personal information:

1.2 Information collected automatically

When you access or use the bd bage platform, our systems automatically record certain technical and behavioural data. This data is collected to maintain platform security, improve performance, and personalise your experience. It includes:

• IP address, device type, operating system, and browser type and version.
• Pages visited, features used, time spent on each page, and clickstream data within the platform.
• Session timestamps, login history, and logout records.
• Betting and gaming activity logs, including markets selected, wager amounts, and outcomes.
• Deposit and withdrawal transaction records, including timestamps and payment method references.

1.3 Information from third parties

bd bage may receive supplementary identity and fraud-risk data from accredited third-party KYC and identity verification service providers. This data is used solely to fulfil our verification obligations and is not used for marketing profiling. We may also receive updated contact details or address information from our payment processing partners where a transaction flag requires clarification.

bd bage processes your personal data only for the purposes described in this Privacy Policy and only where we have a lawful basis for doing so. The following table outlines our primary processing activities and the legal basis we rely on for each:

Where we rely on your consent as the legal basis — for example, to send you promotional emails or SMS messages about bd bage bonuses and upcoming events — you may withdraw that consent at any time by contacting us at [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bd bage does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated tools are used to flag accounts for review (for example, responsible gaming monitoring systems or fraud detection), a member of our compliance team will review any flagged case before a consequential action is taken.

bd bage does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations.

3.1 Service providers and processors

We engage carefully selected third-party service providers who process data on our behalf to help us operate the platform. These providers act solely on our documented instructions and are contractually prohibited from using your data for their own purposes. They include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction-specific data necessary to execute your deposit or withdrawal instruction. Card processors receive the data required to authorise Visa and Mastercard transactions.
• KYC and identity verification providers: Accredited verification services receive the identity documents you submit in order to complete age and identity checks.
• IT infrastructure and hosting providers: Cloud hosting and database management providers who maintain the technical infrastructure on which bd bage operates.
• Customer support platforms: Helpdesk software used to manage support tickets and live chat interactions.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics partners to help us improve platform performance. No personally identifiable data is shared with analytics providers in a form that identifies individual users.

3.2 Legal and regulatory disclosure

bd bage may disclose your personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or a court judgment. We will notify you of such a request where we are legally permitted to do so.

3.3 Business transfers

In the event of a merger, acquisition, or sale of all or part of bd bage's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

bd bage uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies help us recognise returning users, maintain session state, and understand how the platform is being used.

We use the following categories of cookies on the bd bage platform:

You can manage or delete cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will prevent core platform features — including the bd bage Login — from functioning correctly.

bd bage does not use third-party advertising cookies or behavioural tracking cookies that follow you across external websites.

bd bage retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The specific retention periods we apply to different categories of data are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in order to meet anti-money-laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction in compliance with financial record-keeping obligations.
• Betting and gaming activity logs: Retained for 2 years from the date of activity, or longer where required in connection with an ongoing dispute or investigation.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Customer support correspondence: Retained for 2 years from the date of resolution of the relevant support case.
• Marketing consent records: Retained for as long as the consent is active, plus 1 year after withdrawal to evidence the consent history.
• Anonymised analytics data: May be retained indefinitely as it no longer constitutes personal data once fully anonymised.

When personal data is no longer required and retention obligations have been satisfied, bd bage will securely delete or anonymise the data in accordance with our internal data destruction procedures. If you request early deletion of your data, we will honour that request to the extent permitted by our legal retention obligations — see Section 7 for details of your right to erasure.

bd bage employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, we continually review and update our security practices in line with industry standards.

Our key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the bd bage platform is encrypted in transit using industry-standard TLS (Transport Layer Security) protocols. The padlock symbol visible in your browser confirms this encryption is active.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm so that even bd bage staff cannot read your password.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff accounts are subject to role-based permissions, multi-factor authentication, and regular access reviews.
• Intrusion detection: Our infrastructure is monitored continuously for unusual access patterns, suspicious login attempts, and potential security incidents.
• Data minimisation at rest: Where technically feasible, sensitive fields within our databases (such as NID numbers and financial reference data) are encrypted at rest in addition to in transit.
• Incident response: bd bage maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights or freedoms, we will notify affected users promptly via the contact details registered on their account.

You play an important role in keeping your bd bage account secure. Please use a strong, unique password, enable any available account security features, and notify us immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

bd bage respects your right to control your personal data. Depending on your circumstances and applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within a reasonable timeframe and in any event within 30 days of receipt of a valid request.

We may need to verify your identity before fulfilling any privacy rights request, to ensure we do not disclose or modify data belonging to a different individual. We will not charge a fee for handling legitimate requests unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

bd bage reviews this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will update the "Last updated" date shown at the top of this page and, where the changes are significant, we will notify registered account holders via email or an in-platform notification.

Your continued use of the bd bage platform after any revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you should cease using the platform and contact us to close your account and request deletion of your data where applicable.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bd bage handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Subject line: Please use "Privacy Policy Enquiry" or "Privacy Rights Request" so your message is routed to the correct team.

This Privacy Policy is written in English and is the authoritative version for all bd bage users. In the event of any discrepancy between this policy and any other communication, this document prevails.