bd98 Privacy Policy
At bd98 we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect when you use our online casino and sports betting platform, how we use it, who we share it with, and the rights you have over your own information. We encourage every bd98 account holder to read this document in full.
Your Privacy at bd98 — At a Glance
The cards below summarise the six most important commitments in the bd98 Privacy Policy. The complete legal text follows in the document sections below.
What Data We Collect
bd98 collects personal data that you provide directly at registration — including your name, date of birth, address, and mobile number — plus technical data generated automatically when you use the platform, such as device type, IP address, and session activity.
How We Use Your Data
We use your personal data to operate your bd98 account, process deposits and withdrawals via bKash, Nagad, Rocket, and local banks, verify your identity under KYC requirements, detect fraud, and send you relevant service communications. We do not use your data for unrelated commercial purposes.
Who We Share Data With
bd98 shares your personal data only with carefully selected third-party processors — identity verification providers, payment processors, and fraud detection services — who are contractually bound to handle your data securely and solely for the purpose of delivering services to bd98.
How We Protect Your Data
All data transmitted between your device and bd98 servers is protected by 256-bit SSL/TLS encryption. We apply strict access controls, regular security audits, and internal data-handling policies to minimise the risk of unauthorised access, disclosure, or misuse of your personal information.
Your Rights Over Your Data
You have the right to access, correct, and request deletion of your personal data held by bd98. You may also object to certain types of processing and withdraw consent for marketing communications at any time by contacting our support team at [email protected].
Data Retention
bd98 retains your personal data for as long as your account remains active and for a minimum of five years following account closure, in accordance with our internal compliance and record-keeping obligations. Data that is no longer required is securely destroyed.
1. Introduction
This Privacy Policy ("Policy") explains how bd98 ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of users ("you", "your", "the Player") who access or use the bd98 online casino and sports betting platform at bd98.io and any associated mobile interfaces.
bd98 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data that is necessary to operate the platform, verify your identity, process your transactions, and keep your account secure. We do not sell your personal data to third parties for their own marketing use.
By registering a bd98 account, depositing funds, placing bets, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bd98 platform.
This Privacy Policy should be read alongside the bd98 Terms & Conditions, which are available at bd98.io/terms-conditions. Both documents together govern your relationship with the bd98 platform.
2. Data We Collect
bd98 collects two broad categories of personal data: information you provide directly to us, and information generated automatically when you use the platform.
2.1 Data You Provide Directly
- Registration data: Legal full name, date of birth, residential address (city, district, Bangladesh postal code), email address, and mobile phone number.
- Identity verification (KYC) documents: National Identity Card (NID), passport scan or photograph, proof of address (utility bill or bank statement), and proof of payment method ownership (e.g., screenshot of your bKash, Nagad, or Rocket account).
- Financial data: Mobile banking account references (bKash, Nagad, Rocket, Upay), bank account identifiers (for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank transfers), and transaction history within the bd98 platform.
- Communications data: Content of messages you send to our support team via email or live chat, including any attachments or screenshots you provide.
- Responsible gaming preferences: Deposit limits, loss limits, session time preferences, and self-exclusion status where you have voluntarily set these.
2.2 Data Collected Automatically
- Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and language settings.
- Usage and behavioural data: Pages visited on bd98.io, games played, bets placed (stake amount, odds, outcome), session start and end times, clickstream data, and feature usage patterns.
- Cookie and tracking data: Information stored in cookies and similar technologies as described in Section 7 of this Policy.
- Geolocation data: Approximate geographic location derived from your IP address, used to confirm platform accessibility from your region.
bd98 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where age-related health disclosures are made voluntarily in the context of responsible gaming support requests.
3. How We Collect Your Data
bd98 collects your personal data through the following channels:
- Account registration: When you complete the bd98 sign-up process and submit your personal details.
- KYC submission: When you upload identity documents in response to a verification request from our compliance team.
- Deposits and withdrawals: When you initiate a transaction via bKash, Nagad, Rocket, or any other supported payment method, relevant financial reference data is captured automatically.
- Platform usage: Automatically, via server logs, session tracking, and cookie technology, as you browse and interact with the bd98 platform.
- Customer support interactions: When you contact bd98 support by email at [email protected] or through the live chat interface.
- Third-party verification partners: Identity verification data may be cross-referenced with third-party identity databases to confirm the authenticity of documents you submit.
4. How We Use Your Personal Data
bd98 uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Creating and managing your bd98 account | Registration data, contact details |
| Verifying your identity and age (KYC / 21+ check) | NID / passport, date of birth, proof of address |
| Processing deposits and withdrawals | Financial data, payment method references |
| Detecting and preventing fraud, money laundering, and account abuse | Device data, IP address, transaction history, behavioural data |
| Providing customer support and resolving disputes | Communications data, account history |
| Personalising your gaming experience | Usage and behavioural data, game history |
| Sending service notifications (account alerts, security notices) | Contact details, account activity data |
| Sending promotional communications (where consent is given) | Contact details, game preferences |
| Improving platform performance and user experience | Usage data, technical data, cookie data |
| Complying with internal compliance and record-keeping obligations | All categories of collected data |
bd98 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without a human review step. Our fraud detection systems flag accounts for manual review rather than taking automated action.
5. Legal Basis for Processing
bd98 processes your personal data under the following legal bases:
- Contractual necessity: Processing your registration data, KYC documents, and financial data is necessary to fulfil our contract with you — i.e., to operate your bd98 account and deliver the services you have signed up for.
- Legitimate interests: Processing device data, IP address, and behavioural data for fraud prevention, security monitoring, and platform improvement serves the legitimate interests of bd98 and its player community without overriding your fundamental privacy rights.
- Consent: Processing your contact details for the purpose of sending promotional communications (bonus offers, tournament announcements, seasonal promotions) is based on your consent, which you may withdraw at any time by contacting [email protected].
- Compliance with legal obligations: Retaining transaction records and identity verification documents for the minimum required period is necessary to meet bd98's internal compliance and anti-money laundering obligations.
6. Sharing Your Personal Data
bd98 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances:
6.1 Service Providers and Data Processors
bd98 engages carefully selected third-party service providers to perform specific functions on our behalf. These providers act as data processors under contractual agreements that restrict them from using your data for any purpose other than delivering the contracted service to bd98. Categories of processors include:
- Identity and age verification providers
- Payment processing partners (bKash, Nagad, Rocket, Upay, and local bank interfaces)
- Fraud detection and anti-money laundering screening services
- Cloud hosting and infrastructure providers
- Customer support platform providers
- Email and notification delivery services
6.2 Game Software Providers
Game session data (stake, outcome, RNG seed references) may be shared with bd98's licensed game software partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely for the purpose of game delivery, result verification, and RTP auditing. These providers do not receive your name, contact details, or payment data.
6.3 Legal and Regulatory Disclosure
bd98 may disclose your personal data to law enforcement authorities, financial intelligence units, or other competent bodies in Bangladesh and internationally where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, match-fixing, or other criminal activity.
In the event of a business transfer, merger, acquisition, or asset sale involving bd98, your personal data may form part of the transferred assets. If such a change occurs, we will notify active account holders via the email address registered to their account before their data is transferred or becomes subject to a different privacy policy.
7. Cookies & Tracking Technologies
7.1 What Are Cookies
Cookies are small text files placed on your device by a website to store information about your session and preferences. bd98 uses cookies and similar tracking technologies (such as local storage and session storage) to ensure the platform functions correctly and to understand how players interact with our services.
7.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing | Session |
| Functional | Remembering your language preference, game lobby layout, and responsible gaming settings | Up to 12 months |
| Analytics | Understanding page usage patterns, identifying errors, and improving platform performance | Up to 24 months |
| Marketing | Tracking which promotions you have viewed to avoid showing you the same offer repeatedly | Up to 30 days |
7.3 Managing Cookies
You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the bd98 platform — for example, you will be unable to stay logged in to your account during a session. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions.
8. Data Security
bd98 applies a layered security approach to protect your personal data from unauthorised access, alteration, disclosure, and destruction. Our security measures include:
- Transport encryption: All data transmitted between your browser or app and bd98 servers is encrypted using 256-bit SSL/TLS technology. Look for the padlock icon and "https://" in your browser address bar when using bd98.io.
- Data-at-rest encryption: Sensitive personal data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
- Access controls: Access to player data is restricted to bd98 personnel who require it to perform their specific job function. All staff with data access undergo background checks and operate under strict confidentiality obligations.
- Security monitoring: bd98 operates continuous security monitoring systems to detect and respond to anomalous activity, potential intrusions, and data access attempts in real time.
- Regular audits: Our platform infrastructure undergoes periodic security reviews and penetration testing to identify and remediate vulnerabilities.
No system is completely immune to security risks. While bd98 applies industry-standard security measures, we cannot guarantee absolute security of data transmitted over the internet. You are responsible for keeping your own account credentials confidential. If you suspect your account has been compromised, contact [email protected] immediately.
9. Data Retention
bd98 retains your personal data for as long as your account is active. Following account closure — whether initiated by you or by bd98 — we retain your personal data for a minimum period of five (5) years. This retention period reflects our internal compliance and record-keeping obligations related to transaction history, KYC verification records, and dispute resolution documentation.
Certain categories of data may be retained for shorter or longer periods depending on the purpose for which they were collected:
- Session and behavioural logs: Retained for up to 24 months from the date of generation, then aggregated or anonymised.
- Customer support communications: Retained for up to 36 months from the date of last contact in a support thread.
- Marketing consent records: Retained for the duration of your account and for 12 months following account closure or consent withdrawal.
- KYC and identity documents: Retained for five (5) years following account closure in accordance with anti-money laundering best practices.
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.
10. Your Rights Over Your Personal Data
As a bd98 account holder, you have the following rights in relation to your personal data:
- Right of access: You may request a copy of the personal data bd98 holds about you at any time. We will provide this information in a structured, commonly used format within a reasonable timeframe.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account details directly through your bd98 profile settings.
- Right to erasure: You may request that bd98 delete your personal data. This right is subject to certain limitations — for example, we may be required to retain certain data to comply with our legal obligations or to defend against pending claims.
- Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, and where your specific situation justifies such an objection.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to data portability: You may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider where technically feasible.
- Right to restrict processing: In certain circumstances, you may request that we temporarily restrict the processing of your personal data while a rectification or objection request is being assessed.
To exercise any of these rights, please contact our support team at [email protected]. Requests are handled within 30 days of receipt. Where requests are complex or numerous, this period may be extended by a further 30 days, and we will inform you of the extension in writing.
bd98 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive in scope. In such cases, we may charge a reasonable administrative fee or decline to act on the request, and we will explain our reasoning in writing.
11. Children's Privacy
The bd98 platform is strictly intended for adults aged 21 and above. bd98 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process, and bd98 may request documentary proof of age at any point.
If bd98 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered a bd98 account, please contact us at [email protected] so that we can investigate and act promptly.
12. Third-Party Links
The bd98 platform may contain references to third-party game providers and payment services. While bd98 takes care in selecting its partners, we do not control the privacy practices of third-party organisations and are not responsible for their privacy policies or data handling procedures.
We encourage you to review the privacy policy of any third-party service you interact with in connection with your bd98 activity — particularly your chosen payment provider (such as bKash, Nagad, or Rocket) — to understand how they handle your data independently of bd98.
13. Updates to This Privacy Policy
bd98 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will update the "Effective Date" at the top of this document and, where practicable, notify active account holders via the email address registered to their account.
Your continued use of the bd98 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your account by contacting [email protected] and requesting that your data be handled in accordance with the deletion provisions in Section 10 of this Policy.
The most current version of this Privacy Policy is always available at bd98.io/privacy-policy.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd98 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English and responded to within 30 days.
bd98 Privacy & Data Support
Email: [email protected] (plain text — not a clickable link)
Subject line for privacy requests: "Privacy Request — [Your Account Username]"
Response time: within 30 days for standard data rights requests; within 72 hours for urgent security concerns
Support hours: 24/7, 365 days a year
Language: English
When submitting a data rights request, please include your registered username and the mobile number associated with your bd98 account so that we can locate your records efficiently and verify your identity before processing the request.
Questions About Your Data? We're Here
Our support team is available around the clock to handle privacy enquiries, data access requests, and account security concerns. You can also explore our FAQ for quick answers, or head straight to the casino floor. 21+ only. Please gamble responsibly.