Privacy Policy — How bgd8 Collects, Uses, and Protects Your Personal Data

Introduction

bgd8 is Bangladesh's trusted online casino and sports betting platform, accessible at bgd8.io. This Privacy Policy describes how bgd8 collects, processes, stores, and protects the personal data of players and visitors who access the bgd8 platform. It applies to all individuals who register an account, browse the website, or otherwise interact with bgd8 services.

bgd8 is committed to handling personal data responsibly and transparently. This Policy is written in plain English to ensure that every player understands what data bgd8 holds and why. By registering an account on bgd8, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside the bgd8 Terms & Conditions and the bgd8 Responsible Gaming Policy, both of which are incorporated by reference into this document.

Personal Data We Collect

bgd8 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarises the categories of data collected, the specific data points within each category, and the primary reason for collection.

bgd8 does not collect sensitive personal data categories such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming compliance (for example, recording a player-activated self-exclusion or deposit limit).

How bgd8 Uses Your Personal Data

bgd8 uses the personal data it collects for the following specific and limited purposes:

• Account registration and management: To create, maintain, verify, and administer your bgd8 player account, including enforcing the 21+ age requirement and single-account policy.
• Identity verification (KYC): To verify your identity and age before enabling real-money features, and to conduct enhanced due diligence where required by financial crime prevention obligations.
• Payment processing: To facilitate BDT deposits via bKash, Nagad, Rocket, Upay, and supported bank channels, and to process withdrawal requests to your verified payment method.
• Platform delivery: To deliver casino games, live tables, and sportsbook markets — including cricket BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures — in a stable and secure technical environment.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and unauthorised account access.
• Responsible gaming: To monitor betting patterns for indicators of problem gambling and to enforce player-activated responsible gaming tools including deposit limits, session limits, and self-exclusion.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance purposes.
• Legal compliance: To fulfil applicable legal and regulatory record-keeping obligations and to respond to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the bgd8 platform, fix technical errors, and enhance the player experience.
• Marketing communications (where consented): To send promotional offers, bonus announcements, and platform updates by email to players who have not opted out of marketing communications.

bgd8 does not use personal data to make solely automated decisions that produce legal or similarly significant effects on players, without human review being available upon request.

Legal Basis for Processing Personal Data

bgd8 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases relied upon are set out below:

• Contractual necessity: Processing of identity data, contact data, financial data, and account activity data is necessary to perform the contract represented by the bgd8 Terms & Conditions to which you are a party. Without this processing, bgd8 cannot create or operate your account.
• Legal obligation: Processing for KYC verification, anti-money-laundering checks, and financial record-keeping is required to comply with applicable legal obligations. bgd8 cannot waive these requirements at a player's request.
• Legitimate interests: Processing of technical data for fraud detection, security monitoring, and platform optimisation is carried out on the basis of bgd8's legitimate interest in maintaining a secure and well-functioning platform for all players. bgd8 has assessed that this interest is not outweighed by player privacy interests given the limited nature of the data involved.
• Consent: Processing for direct marketing communications is carried out on the basis of your consent. You may withdraw this consent at any time by contacting [email protected], without affecting the lawfulness of prior processing.

Data Sharing & Third-Party Processors

bgd8 does not sell your personal data to any third party. Personal data is shared only with the following categories of third-party service providers, and only to the minimum extent necessary to deliver the relevant service:

• Game Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Hacksaw Gaming receive session tokens and anonymised player identifiers necessary to deliver game content. These providers do not receive your full identity data or financial data.
• Payment processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners receive payment instructions and associated account identifiers necessary to process deposits and withdrawals. They do not receive your bgd8 game history or account balance beyond what is required for the specific transaction.
• KYC verification services: Where bgd8 uses a third-party identity verification provider to assist with document checking, that provider receives identity document images and related data solely for the purpose of verification. All such providers are bound by confidentiality obligations and data processing agreements.
• IT and security infrastructure providers: Cloud hosting and cybersecurity service providers may process technical data incidentally in the course of providing infrastructure services. All such providers operate under contractual data protection obligations.
• Legal and regulatory authorities: bgd8 may disclose personal data to competent authorities where required by law, court order, or lawful regulatory request. bgd8 will notify affected players of such disclosures where legally permitted to do so.

Cookies & Tracking Technologies

bgd8 uses cookies and similar tracking technologies to maintain session state, prevent fraud, and collect anonymised analytics data to improve platform performance. The categories of cookies used by bgd8 are as follows:

• Strictly necessary cookies: Required for the bgd8 platform to function. These include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your platform preferences such as language settings and responsible gaming reminder frequency. Disabling these cookies may reduce the personalisation of your experience.
• Analytics cookies: Used to collect anonymised and aggregated data about how players navigate the bgd8 platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the platform and is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and anomalous login pattern analysis. These cookies process your IP address and device fingerprint data.

bgd8 does not use third-party advertising cookies or behavioural profiling cookies. Your browsing activity on bgd8 is not shared with advertising networks or data brokers.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your bgd8 account.

Data Security

bgd8 implements a multi-layered security architecture to protect your personal data from unauthorised access, accidental loss, and misuse. The primary technical and organisational security measures in place are:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the bgd8 platform.
• One-way cryptographic hashing of account passwords. bgd8 staff cannot retrieve your password in plain text. Password reset is handled via a secure one-time link sent to your registered email address.
• Access controls: Personal data is accessible only to bgd8 staff roles with a legitimate operational need. All staff access is logged and subject to periodic access review.
• Data-at-rest encryption: Personal data stored in bgd8 databases is encrypted at the storage layer.
• Intrusion detection and monitoring: bgd8 infrastructure is monitored 24/7 for anomalous activity, with automated alerting for potential security incidents.
• Regular security testing: bgd8 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights, bgd8 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

Data Retention

bgd8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each major data category are set out below:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following permanent account closure, to comply with financial crime prevention record-keeping requirements.
• Financial transaction data: Retained for a minimum of five years from the date of each transaction, consistent with applicable financial record-keeping standards.
• KYC documents: Retained for the duration of your active account plus a minimum of five years following account closure.
• Support correspondence: Retained for a minimum of three years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Analytics and technical data: Retained in anonymised, aggregated form indefinitely. Identifiable technical data (e.g., IP address logs) is retained for a maximum of 12 months from collection.
• Marketing consent records: Retained until you withdraw consent and for a further period of two years as evidence of the consent previously given.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with your identity.

Your Data Rights

bgd8 recognises and respects your rights over the personal data it holds about you. You may exercise the following rights at any time by submitting a written request to [email protected]:

• Right of access: You may request a copy of the personal data bgd8 holds about you, together with information about how that data is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by bgd8. For account details, you can update most information directly within your account settings.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where bgd8 is required by law to retain data (for example, financial transaction records). bgd8 will explain any applicable limitations in response to your request.
• Right to restriction of processing: You may request that bgd8 restricts the processing of your personal data in specific circumstances, for example where you contest the accuracy of data held and bgd8 is verifying it.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bgd8 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. bgd8 will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests.

bgd8 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 days of receipt. Where a request is complex or numerous, bgd8 may extend this period by a further 30 days with prior notification.

Children & Minors

The bgd8 platform is strictly intended for adults aged 21 years and above. bgd8 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. Age verification is enforced through mandatory KYC document checks at the point of account registration.

If bgd8 discovers that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all funds will be returned to the verified source payment method, any winnings will be voided, and the relevant personal data will be deleted from bgd8's systems within a reasonable timeframe consistent with any legal obligations.

If you believe that a minor has registered an account on bgd8, please report this to [email protected] immediately. bgd8 treats reports of underage access as a highest-priority compliance matter.

Amendments to This Privacy Policy

bgd8 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, applicable legal requirements, or platform services. Material changes to this Policy will be communicated to registered players via a notice on the bgd8 platform and/or by email to the registered account address, at least 7 days before the updated Policy takes effect.

The current version of this Privacy Policy is always available on this page, identified by the "Last Updated" date displayed at the top of the document. Your continued use of the bgd8 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you do not accept the terms of a revised Privacy Policy, you must cease using the bgd8 platform and contact [email protected] to close your account before the effective date of the amendment.

Contact & Privacy Complaints

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy-related complaint, please contact the bgd8 support team using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 24 hours; substantive response within 5 business days for support enquiries, and within 30 days for formal data rights requests

bgd8 takes privacy complaints seriously. If you submit a privacy complaint, bgd8 will investigate the matter thoroughly and provide a written response explaining the outcome and any remedial steps taken. If you remain dissatisfied with bgd8's response to a privacy complaint, you may escalate the matter through applicable legal channels available to you.