bdc8 Privacy Policy — Your Data, Your Rights

bdc8 ("we", "us", "the Platform") is committed to protecting the privacy of all players who access and use the services available at bdc8.org. This Privacy Policy applies to all personal data collected, processed and stored by bdc8 in connection with the operation of the platform and the delivery of its betting, casino and promotional services to players in Bangladesh. This policy should be read alongside our Terms and Conditions, which are incorporated by reference.

By registering an account with bdc8, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you should not create a bdc8 account or use the platform's services. We may update this policy from time to time; continued use of the platform following notification of an update constitutes your acceptance of the revised policy.

bdc8 acts as the data controller in respect of personal data provided by players who access the platform from Bangladesh. All data processing activities described in this policy are carried out for the purposes of operating a safe, secure and compliant online gaming service. We apply SSL encryption to all data transmitted through the platform and maintain internal security controls to prevent unauthorised access, disclosure, alteration or destruction of personal data.

bdc8 collects personal data in two ways: information you provide directly when registering and using the platform, and information collected automatically through your use of the platform. The categories of personal data we collect include the following:

• Identity data: your full name, date of birth, and government-issued identification details (such as your National Identity Card number or passport number) where required for KYC verification.
• Contact data: your registered mobile phone number and, where provided, your email address.
• Financial data: records of deposits, withdrawals and transaction histories associated with your bdc8 account, including the mobile wallet or bank account used.
• Usage data: information about how you use the platform, including pages visited, games played, bet amounts, session duration, device type and operating system, IP address and approximate location.
• Communication data: records of your interactions with the bdc8 support team, including live chat transcripts and email correspondence, retained for quality assurance and dispute resolution purposes.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where this is incidentally disclosed in the context of a responsible gaming interaction (for example, a player indicating a gambling-related health concern). In such cases, the information is handled with the highest level of confidentiality and used solely for the purpose of providing appropriate support.

bdc8 uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis for processing, which is described in Section 3:

• Account management: to create, maintain and administer your bdc8 player account, including processing your login credentials, verifying your identity and managing your account settings and preferences.
• Service delivery: to provide you with access to betting markets, casino games, slots, crash games and all other features of the platform, and to process deposits, withdrawals and bonus claims.
• Identity and payment verification (KYC): to verify your identity, age and payment method ownership as required by our internal compliance procedures and responsible gaming obligations.
• Security and fraud prevention: to monitor platform activity for suspicious behaviour, detect and prevent fraud, money laundering, bonus abuse and other prohibited conduct, and to protect the integrity of the platform and all players on it.
• Responsible gaming: to identify players who may be experiencing gambling-related difficulties and to make available appropriate tools (deposit limits, self-exclusion) and support resources in a timely manner.
• Customer support: to respond to enquiries, complaints and support requests, and to maintain records of those interactions for quality assurance, dispute resolution and regulatory compliance purposes.

bdc8 processes personal data only where there is a clear and lawful basis for doing so. The following legal bases apply to the data processing activities described in this Privacy Policy:

bdc8 processes transaction data including deposit amounts, withdrawal requests, payment method identifiers and transaction timestamps in order to operate the platform's cashier function, reconcile accounts, detect unusual financial activity and comply with anti-money laundering obligations. All transactions are denominated in Bangladeshi Taka (BDT). bdc8 accepts payments via bKash, Nagad, Rocket, Upay and bank transfer. Payment data is stored in a secure environment and access is restricted to authorised personnel only.

bdc8 does not store full mobile wallet PIN numbers, bank account passwords or complete card numbers on its servers. Where payment verification screenshots are submitted for KYC purposes, these are stored securely and accessed only by the compliance team for identity verification. Once verification is complete, such documents are retained only for as long as required by our data retention schedule.

bdc8 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session state and analyse usage patterns. The following types of cookies are used:

• Essential cookies: required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: used to remember your language preference, display settings and other customisations so that you do not need to reconfigure them on each visit.
• Analytical cookies: used to collect aggregated, anonymised data about how players use the platform — such as which pages are visited most frequently and how long sessions last. This data is used to improve the platform experience.

You may control cookie settings through your device's browser settings. Please note that disabling essential cookies will impair the functionality of the bdc8 platform and may prevent you from accessing certain features such as logging in to your account.

bdc8 does not sell, rent or trade personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: we share transaction data with the payment providers you use (such as bKash, Nagad or Rocket) strictly to the extent necessary to process your deposit or withdrawal. These providers are bound by their own privacy and data security obligations.
• Identity verification providers: where we engage third-party KYC service providers to assist with identity verification, we may share the minimum necessary personal data required to complete the verification process. All such providers are subject to data processing agreements.
• Legal and regulatory authorities: we may disclose personal data to law enforcement agencies, regulatory bodies or other government authorities where required by applicable law, court order or where bdc8 has a good-faith belief that disclosure is necessary to protect the rights, property or safety of bdc8, its players or others.
• Business successors: in the event of a merger, acquisition or sale of all or part of bdc8's business assets, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

In all cases where personal data is shared with a third party, bdc8 requires that the receiving party maintains appropriate technical and organisational security measures to protect that data and uses it only for the stated purpose.

bdc8 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include SSL/TLS encryption for all data in transit, access controls restricting personal data access to authorised staff only, regular internal security reviews, and secure server infrastructure. All staff with access to personal data are subject to confidentiality obligations.

While bdc8 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. bdc8 cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdc8 will take appropriate steps to contain the breach and will notify affected players where required and practicable.

bdc8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting and reporting obligations. In general, active player account data is retained for the duration of the account relationship. Following account closure, core account data (including identity verification records and transaction histories) is retained for a minimum period of five years to comply with anti-money laundering and financial record-keeping obligations.

After the applicable retention period has expired, personal data will be securely deleted or anonymised. Data that has been anonymised (i.e., from which all identifying information has been removed such that you can no longer be identified from it) may be retained indefinitely for analytical and platform improvement purposes.

As a player using the bdc8 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the bdc8 support team via live chat or at [email protected]:

• Right of access: you may request a copy of the personal data bdc8 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to rectification: if you believe that any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: subject to legal retention obligations, you may request that bdc8 delete your personal data. We will review and process deletion requests within 30 days.
• Right to restrict processing: in certain circumstances, you may request that bdc8 restrict the processing of your personal data — for example, while a query about its accuracy is being resolved.
• Right to object: where processing is based on legitimate interests, you have the right to object. bdc8 will consider your objection and cease processing unless there are compelling legitimate grounds that override your interests.

To exercise any of the above rights, contact the bdc8 support team via live chat on the platform. We may need to verify your identity before processing your request. We aim to respond to all privacy rights requests within 30 days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for the delay.

bdc8 is strictly an adult platform. Access to and use of the platform is restricted to individuals aged 21 and above. bdc8 does not knowingly collect personal data from any person under the age of 21. If we become aware that a person under 21 has provided personal data to us, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered with bdc8, please contact us immediately at [email protected].

The bdc8 platform may reference or integrate with third-party services such as game providers (including Pragmatic Play, Evolution Gaming, Spribe and others) to deliver game content. While these providers are vetted partners, bdc8 is not responsible for the privacy practices of third-party game studios or their own data collection activities within their game interfaces. Players are encouraged to review the privacy policies of any third-party service they interact with. bdc8 does not share your personal account data with game providers beyond what is technically necessary to load and run the games within the platform environment.

bdc8 may send you promotional communications about bonuses, new games, seasonal offers and platform updates where you have consented to receive such communications. Consent is obtained at the time of registration or subsequently through your account preferences. You may withdraw your consent to receive marketing communications at any time by contacting the support team or using the unsubscribe link included in any marketing message.

Please note that withdrawing consent for marketing communications does not affect your ability to use bdc8 services, nor does it affect any other processing of your personal data described in this Privacy Policy. You will continue to receive service-related communications that are necessary for the operation of your account, such as transaction confirmations, security alerts and important account notices.

bdc8 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide reasonable advance notice to players via the platform or by email before the changes take effect. The updated Privacy Policy will be published at bdc8.org/privacy-policy with a revised "Last Updated" date. Minor updates (such as typographical corrections or clarifications that do not change the substance of the policy) may be made without specific notice.

Your continued use of the bdc8 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using the platform and request account closure by contacting the bdc8 support team.

If you have any questions, concerns or requests relating to this Privacy Policy or the way bdc8 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week via live chat on the platform. For formal written privacy queries, you may also write to us at [email protected] with the subject line "Privacy Query". We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 14 business days.

bdc8 treats all privacy enquiries with strict confidentiality. Our support team will never ask you to share your full password, full PIN number or complete payment credentials over any communication channel. If you receive any communication purporting to be from bdc8 that requests such information, please disregard it and report it to us immediately.