bda88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data by bda88 ("bda88", "we", "us", "our") in connection with the operation of the online casino and sports betting platform available at bda88.io. This Policy applies to all registered players, visitors, and prospective users ("you", "your") who interact with the bda88 platform in any capacity.

bda88 is committed to protecting your privacy and ensuring that your personal data is processed lawfully, fairly, and transparently. We recognise that trust is the foundation of every relationship we have with our players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and throughout Bangladesh, and we take our obligations as a data handler seriously.

By registering an account on bda88, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or continue using the bda88 platform.

2. Data Controller

For the purposes of this Privacy Policy, bda88 acts as the data controller in respect of the personal data it collects and processes from players and visitors to the platform. As data controller, bda88 determines the purposes for which and the means by which personal data is processed.

All enquiries, requests, or concerns relating to the processing of your personal data under this Policy should be directed to the bda88 data protection contact using the details provided in Section 14 of this Policy.

3. Personal Data We Collect

bda88 collects personal data through several channels and at different stages of your interaction with the platform. The categories of personal data we may collect are set out below.

3.1 Registration Data

When you create a bda88 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number (used for account verification and support communications)
• Chosen username and encrypted password
• Residential address

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within three months)
• Selfie photographs holding the submitted identification document
• Proof of payment method ownership (screenshots of bKash, Nagad, or Rocket wallet)

3.3 Financial Transaction Data

When you make deposits or withdrawals, we record:

• Payment method type and associated account identifier (e.g., bKash mobile number, Nagad number)
• Transaction amounts in Bangladeshi Taka (BDT)
• Transaction timestamps and reference numbers
• Deposit and withdrawal history

3.4 Gaming Activity Data

We automatically record data relating to your activity on the platform, including:

• Games played, bets placed, and outcomes
• Session duration, login and logout timestamps
• Bonus credits used and wagering requirement progress
• Sports betting selections, odds accepted, and settlement results

3.5 Technical and Device Data

Our servers automatically collect certain technical information when you access the platform:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referring URL and navigation paths within the platform
• Cookie identifiers and session tokens (see Section 7)

3.6 Customer Support Data

When you contact our customer support team, we collect and retain records of the communication, including the content of your enquiry, any attachments you provide, and the resolution of your case. This data is used to manage and improve our support services.

4. How We Use Your Personal Data

bda88 uses the personal data we collect for the following defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your express consent.

• Account Management: To create, maintain, and administer your bda88 player account, including processing registrations, updating account details, and managing account closures.
• Identity Verification: To verify your age (minimum 21 years), identity, and address as required by our responsible gaming commitments and anti-money laundering obligations.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank, and to maintain accurate financial records.
• Service Delivery: To provide access to casino games, sports betting markets (including cricket, BPL, IPL, T20 World Cup), slots, live casino, crash games, and all other platform features.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, unauthorised account access, and other prohibited conduct.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve complaints, and manage any disputes arising from your use of the platform.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and any requests from competent authorities.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and continuously improve the performance, security, and user experience of the bda88 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided your consent to receive such communications. You may withdraw this consent at any time.

5. Legal Bases for Processing

bda88 processes your personal data only where a valid legal basis exists. The legal bases on which we rely for each category of processing are as follows:

• Contractual Necessity: Processing that is necessary for the performance of our contract with you (i.e., the Terms & Conditions you accepted on registration), including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in furtherance of bda88's legitimate business interests, including fraud detection, platform security, and internal analytics — provided that such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as the sending of direct marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without detriment.

6. Sharing Your Personal Data

bda88 does not sell or rent your personal data to any third party. We may, however, share your data with the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant financial data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank. These providers receive only the minimum data necessary to execute the requested transaction and are contractually bound to protect your information.

6.2 Game Providers

Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and gameplay data necessary to deliver their games and maintain game integrity. These providers operate under their own privacy policies and are subject to contractual data protection obligations.

6.3 Identity Verification Services

We may engage specialist third-party KYC and identity verification service providers to assist in verifying the accuracy of identity documents submitted by players. These providers are bound by strict confidentiality agreements.

6.4 Legal and Regulatory Authorities

bda88 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or in connection with the investigation of suspected criminal activity, including money laundering or fraud.

6.5 Professional Advisers

bda88 may share personal data with legal advisers, auditors, accountants, and other professional service providers on a confidential, need-to-know basis in connection with the operation of the business.

7. Cookies & Tracking Technologies

bda88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session state, and gather analytical data on how the platform is used. Cookies are small text files placed on your device by your browser when you visit the bda88 website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function correctly. They enable you to log in to your account, navigate between pages, and use core platform features. These cookies cannot be disabled without affecting platform functionality.
• Session Cookies: Temporary cookies that are deleted when you close your browser. They maintain your login session and preserve your preferences during a single visit.
• Analytics Cookies: These cookies help us understand how visitors interact with the bda88 platform by collecting anonymised information about pages visited, session duration, and navigation patterns. This data is used solely to improve the platform.
• Preference Cookies: These remember your settings and preferences (such as language or display preferences) so that you do not need to re-enter them on subsequent visits.

7.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the bda88 platform, including logging in to your account. Instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

bda88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The specific retention periods applicable to each category of personal data are set out in the table in Section 3 of this Policy.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical and analytical purposes.

Where bda88 is required to retain data for legal or regulatory compliance reasons beyond the standard retention period (for example, in connection with an ongoing investigation or legal proceeding), we will retain the relevant data for as long as necessary to resolve the matter and will notify you where required by law.

9. Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to the personal data that bda88 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Request".

bda88 will respond to all verified data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reasons for it. We may need to verify your identity before processing a data subject request.

10. Children's Privacy

The bda88 platform is strictly intended for adults aged 21 years and above. bda88 does not knowingly collect personal data from persons under the age of 21. Registration by minors is expressly prohibited under our Terms & Conditions.

If bda88 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data from our records and close the relevant account. Any deposits made and winnings generated by an underage user will be voided and returned to the payment source where feasible.

11. Security Measures

bda88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes, but is not limited to, the following measures:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or device and bda88 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on bda88 systems is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. Multi-factor authentication is required for administrative access.
• Penetration Testing: bda88 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the platform infrastructure.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems.
• Staff Training: All personnel with access to personal data receive regular training on data protection obligations and security best practices.
• Incident Response: bda88 maintains a documented incident response plan to ensure rapid and effective response to any security incidents affecting player data.

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you suspect that your bda88 account has been compromised, please contact us immediately at [email protected].

12. Third-Party Links

The bda88 platform may contain references to third-party game providers and payment services. These third-party services operate independently of bda88 and are governed by their own privacy policies. bda88 is not responsible for the privacy practices, content, or security of any third-party service.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the bda88 platform. The inclusion of any third-party service reference on the bda88 platform does not constitute an endorsement of that party's privacy or data protection practices.

13. Changes to This Privacy Policy

bda88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered players via the email address on file or through a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this Policy will be updated to reflect the date on which the revised Policy comes into force. Your continued use of the bda88 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically — at least once every three months — to stay informed of how bda88 is handling your personal data. If you have any questions about changes to this Policy, please contact us using the details in Section 14.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which bda88 processes your personal data, please contact our data protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and professionally.

When contacting us regarding a data subject request, please include your registered email address, a description of your request, and any relevant details that will help us locate your account and process your request efficiently. We may ask you to verify your identity before acting on any request.