Privacy Policy — How bd80 Protects Your Data

1. Who We Are

This Privacy Policy is issued by bd80, the operator of the online casino and sports betting platform accessible at https://bd80.io and all associated subdomains and services (collectively referred to as the "Platform"). When this policy uses the terms "bd80", "we", "us", or "our", it refers to the bd80 platform operator.

bd80 is designed and operated for adult players (21 years of age and above) located in Bangladesh. The Platform offers casino games, sports betting markets, live dealer experiences, and related entertainment services, all denominated in Bangladeshi Taka (BDT). Our primary customer support language is English, and all communications with players are conducted in English.

This Privacy Policy describes how bd80 collects, uses, stores, shares, and protects personal data relating to individuals who visit, register on, or otherwise interact with the Platform. By registering an account or using the bd80 Platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

2. Personal Data We Collect

2.1 Registration Data

When you create a bd80 account, we collect the following information that you provide directly:

• Full legal name (as it appears on your national identity document)
• Date of birth (to verify you are 21 years of age or older)
• Registered mobile phone number (used for account authentication and OTP verification)
• Valid email address
• Chosen username and encrypted account password
• Residential address (city and district level, e.g., Dhaka, Chittagong, Sylhet, Khulna)

2.2 Identity Verification Data

To comply with responsible gaming requirements and to prevent fraud and money laundering, bd80 may request documentary evidence to verify your identity. Documents accepted include:

• National Identity Card (NID)
• Valid Bangladeshi passport
• Birth certificate (for age verification purposes)

Copies of these documents are transmitted securely and stored in encrypted form. They are used exclusively for identity verification and are not shared with any third party except where required by law or by our identity verification service provider under strict contractual data processing terms.

2.3 Financial Transaction Data

bd80 records details of all financial transactions conducted through the Platform, including:

• Deposit amounts, dates, and timestamps
• Withdrawal requests and processing outcomes
• Payment method identifiers (e.g., the bKash, Nagad, Rocket, or Upay account number used for a transaction — we do not store full payment credentials)
• Transaction reference numbers issued by payment providers
• Running account balance history

2.4 Gameplay and Betting Activity Data

bd80 automatically records all gameplay and betting activity associated with your account. This includes:

• Games played, bet amounts, outcomes, and session durations
• Sports betting selections, odds accepted, and settlement results
• Bonus activations, wagering progress, and promotional participation
• Account balance movements resulting from gameplay

This data is used to operate the Platform accurately, to settle bets correctly, to detect irregular betting patterns, and to support responsible gaming monitoring.

2.5 Technical and Device Data

When you access the bd80 Platform, our servers automatically collect certain technical data, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end times
• Pages visited and features accessed within the Platform
• Referring URL (the page you visited immediately before arriving at bd80)

2.6 Communications Data

If you contact bd80 customer support via live chat or email ([email protected]), we retain records of those communications, including the content of your messages, the support agent's responses, and the date and time of each interaction. These records are used to resolve disputes, to improve support quality, and as part of our fraud prevention processes.

3. How We Use Your Personal Data

bd80 uses collected personal data for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, device data
Identity and age verification (21+ compliance)	Registration data, verification documents
Processing deposits and withdrawals	Financial transaction data, payment method identifiers
Bet settlement and game operation	Gameplay and betting activity data
Fraud detection and prevention	All categories, especially device and transaction data
Anti-money laundering (AML) compliance	Registration data, financial transaction data
Responsible gaming monitoring and intervention	Gameplay data, registration data, communications data
Customer support and dispute resolution	Communications data, account data, transaction data
Platform improvement and analytics	Technical data, gameplay data (aggregated and anonymised)
Promotional communications (where opted in)	Registration data (email, mobile number)

bd80 does not use personal data for purposes that are incompatible with those listed above. If we wish to use your data for a materially different purpose in the future, we will notify you and obtain fresh consent where required.

4. Legal Basis for Processing

bd80 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

4.1 Contractual Necessity

The majority of data processing by bd80 is necessary for the performance of the contract between you and bd80 — specifically, to provide you with access to the Platform, to operate your account, to process your deposits and withdrawals, and to settle your bets. Without this processing, bd80 cannot deliver the services you have registered for.

4.2 Legal Obligation

Certain processing activities are required in order for bd80 to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and the retention of financial transaction records for a minimum statutory period.

4.3 Legitimate Interests

bd80 processes some data on the basis of our legitimate interests as a platform operator, including fraud prevention, platform security, responsible gaming monitoring, and general business analytics. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your privacy rights.

4.4 Consent

Where bd80 sends you optional marketing communications (such as promotional offers, bonus alerts, or seasonal campaign updates related to events like BPL, Eid, or Pohela Boishakh), we do so only where you have given your explicit consent. You may withdraw this consent at any time by updating your communication preferences within the Account dashboard or by contacting [email protected].

5. Cookies and Tracking Technologies

5.1 What We Use

bd80 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform efficiently and to provide a personalised experience. Cookies are small text files placed on your device by your browser when you visit the Platform.

5.2 Types of Cookies

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Collect anonymised data about how players use the Platform — such as which game categories are most visited and how long sessions last. This data is used in aggregate form to improve Platform design and performance.
• Functional Cookies: Remember your preferences, such as your preferred payment method or language setting, to provide a more consistent experience across sessions.
• Responsible Gaming Cookies: Store session duration and activity data locally to support the session time alert and reality check features available within your bd80 account settings.

5.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Disabling performance or functional cookies will not affect your ability to place bets or process transactions, but may reduce the quality of your experience.

6. Sharing Your Data with Third Parties

bd80 does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited and controlled circumstances:

6.1 Payment Processors

To process your deposits and withdrawals, bd80 must share relevant transaction data with your chosen payment provider (bKash, Nagad, Rocket, or Upay). The data shared is limited to what is strictly necessary to initiate and confirm the transaction. Each payment provider operates under its own privacy policy and data processing terms.

6.2 Game Content Providers

When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, anonymised game session data (bet amounts, game results, session identifiers) is transmitted to the relevant provider's game servers to operate the game. Personal identifiers such as your name or payment details are not shared with game providers.

6.3 Identity Verification Services

bd80 may use a third-party identity verification service to assist with the document verification process. If so, the verification provider receives a copy of your identity document and relevant registration data solely for the purpose of confirming your identity and age. All such providers are contractually bound to process this data only for the stated verification purpose and to delete it upon completion.

6.4 Legal and Regulatory Disclosure

bd80 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious illegal activity.

6.5 Business Transfers

In the event that bd80 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held on the Platform may be transferred to the successor entity. In such an event, bd80 will notify registered players via the Platform prior to any transfer of their personal data to a new controller.

7. Data Retention

bd80 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure, to meet AML and compliance obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Identity verification documents: Retained for the duration of the active account relationship, plus 5 years following account closure.
• Gameplay and betting history: Retained for a minimum of 3 years from the date of the activity.
• Customer support communications: Retained for a minimum of 2 years from the date of the final message in the relevant support thread.
• Marketing consent records: Retained for the duration of the consent, plus 2 years following withdrawal of consent.

After the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

8. Data Security

bd80 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect data against unauthorised access, accidental loss, alteration, or disclosure, including:

• SSL/TLS Encryption: All data transmitted between your device and bd80's servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection to bd80 is encrypted.
• Encrypted Storage: Sensitive data including passwords (stored as salted hashes), identity document copies, and financial identifiers are encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within bd80's internal systems is restricted on a need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication: bd80 uses OTP-based two-factor authentication for all player login sessions, adding an additional layer of security beyond the password alone.
• Regular Security Reviews: bd80 conducts periodic internal security reviews of its data handling processes, systems, and infrastructure to identify and address potential vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, bd80 will notify affected players as promptly as practicable and will take immediate steps to contain and remediate the breach.

9. Your Privacy Rights

As a registered bd80 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact [email protected] with your account username and a clear description of your request.

9.1 Right of Access

You have the right to request a copy of all personal data that bd80 holds about you. We will provide this information within 30 days of receiving a valid request. The copy will be provided in a clear, readable format.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating a mobile number or email address) can be made directly within your Account settings. More substantive corrections (such as a name change following a legal name change) require documentary evidence and a support request.

9.3 Right to Erasure

You may request that bd80 delete your personal data. We will process erasure requests where no legal retention obligation requires us to retain the data. Where retention obligations do apply (for example, transaction records subject to AML requirements), we will inform you of the specific obligation and the date on which the data can be deleted.

9.4 Right to Restrict Processing

In certain circumstances — such as while a dispute about data accuracy is being resolved — you may request that bd80 restrict the processing of your personal data to storage only, pending resolution of the dispute.

9.5 Right to Object to Marketing

If you have previously consented to receive marketing communications from bd80 and wish to withdraw that consent, you may do so at any time by updating your notification preferences in the Account dashboard or by emailing [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect any other aspect of your account or the processing of data required to operate your account.

9.6 Right to Data Portability

You have the right to request that bd80 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider where technically feasible. This right applies to data you have actively provided to bd80 (such as registration data) and to data generated by your use of the Platform (such as betting history).

10. Children and Minors

The bd80 Platform is strictly intended for individuals who are 21 years of age or older. bd80 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete all related personal data, and reverse any financial transactions associated with that account.

If you believe that a minor has registered an account on the bd80 Platform, please contact us immediately at [email protected]. bd80 takes underage gambling extremely seriously and will act on all credible reports promptly.

11. Responsible Gaming and Data Processing

bd80's responsible gaming programme involves specific data processing activities that are designed to protect players from gambling-related harm. These activities include:

• Behavioural Monitoring: bd80's systems automatically analyse gameplay patterns, session duration, deposit frequency, and loss levels to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are identified, the relevant account may be flagged for a proactive outreach by the bd80 responsible gaming team.
• Limit Management: Personal data relating to your deposit limits, session time limits, and self-exclusion elections is stored and actively enforced by the Platform's account management systems.
• Self-Exclusion Records: Where a player elects to self-exclude, their account data is flagged to prevent re-registration during the exclusion window. This flagging process requires the retention of sufficient identification data to recognise and block any re-registration attempt for the duration of the exclusion period.

The data processing activities described in this section are carried out on the basis of our legitimate interests in protecting player welfare and our legal obligations as a responsible gaming operator. For more information on the responsible gaming tools available at bd80, please visit our Responsible Gaming page.

12. Changes to This Privacy Policy

bd80 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. The effective date shown at the top of this document is updated each time a material change is made.

Where changes are material — meaning they significantly alter how we collect, use, or share your personal data — bd80 will notify registered players via an on-platform notification or by email to the address registered on your account at least 14 days before the change takes effect. Non-material changes (such as clarifications of existing practices or corrections to typographical errors) may be made without advance notice.

Your continued use of the bd80 Platform after notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you must discontinue use of the Platform and may close your account by contacting [email protected].

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd80 holds about you, please contact our support team. All privacy-related enquiries are handled by English-speaking support staff who are available 24 hours a day, 7 days a week.

• Email: [email protected] (plain text — do not send sensitive financial information via email)
• Live Chat: Available within the bd80 Platform when logged into your account
• Response Time: Privacy requests acknowledged within 5 business days; full responses within 30 days