bd123 Privacy Policy — How We Protect Your Personal Data

bd123 ("we", "us", "our") operates the online gaming platform accessible at https://bd123.io (the "Platform"). This Privacy Policy sets out in detail how bd123 collects, processes, stores, shares, and protects personal data provided by or collected from individuals who visit, register on, or interact with the Platform ("you", "your", "the player").

We are committed to handling your personal data in a transparent, secure, and responsible manner. We process personal data only for the specific, legitimate purposes described in this policy and retain it no longer than is necessary to fulfil those purposes or to comply with our legal obligations.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, all of which form part of your agreement with bd123. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

The categories of personal data that bd123 collects and processes in connection with your use of the Platform are set out in the table below. We collect only the minimum data necessary for each stated purpose and do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance.

bd123 collects personal data through the following channels and mechanisms:

• Direct provision: Data you provide when completing the registration form, submitting KYC documents, contacting support, participating in promotions, or completing surveys.
• Automated collection: Data collected automatically as you interact with the Platform, including IP address, session timestamps, page views, click paths, device fingerprint, and cookie identifiers. See Section 07 for full cookie details.
• Payment processors: Transaction confirmation data (amount, timestamp, reference number, payment method identifier) shared by authorised payment partners including bKash, Nagad, Rocket, Upay, and partner banks. We do not receive or store full bank account credentials via this channel.
• Third-party game providers: Aggregated session and outcome data shared by game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi, for the purpose of reconciling player accounts and resolving disputes.
• Identity verification services: Confirmation results (pass/fail/pending) from third-party KYC service providers used to verify the authenticity of identity documents submitted during account verification.
• Fraud detection partners: Risk scores and flagging data shared by fraud prevention services to protect the integrity of player accounts and the Platform.

We do not purchase personal data from data brokers or marketing list providers. All data we hold originates from direct player interaction with the Platform or from the authorised third-party service providers described above.

bd123 uses the personal data we collect strictly for the following purposes. We do not use your personal data in any manner that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

• Account management: Creating, maintaining, verifying, and securing your bd123 player account, including processing login credentials and account preference settings.
• Service delivery: Processing deposits and withdrawals in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, Upay, and partner banks; crediting winnings; applying bonuses; and resolving disputed transactions.
• Identity and age verification: Confirming that you are a real person aged 21 or above, in compliance with our platform policy and applicable age-restriction obligations.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) obligations, responding to lawful requests from regulatory authorities, law enforcement agencies, and financial intelligence units, and maintaining legally required transaction records.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other conduct that violates our Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify players who may be at risk of problem gambling, enforcing self-exclusion requests and deposit limits, and sending welfare check communications where appropriate.
• Customer support: Responding to queries, complaints, and disputes submitted via live chat, email, or WhatsApp, and maintaining records of support interactions for quality assurance and dispute resolution.
• Marketing communications (with consent): Sending you promotional offers, bonus notifications, event invitations, and platform updates by email or SMS where you have opted in to receive such communications. You may withdraw this consent at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, user interface design, loading performance, and the overall player experience on the bd123 Platform.

Every instance of personal data processing carried out by bd123 rests on one of the following legal bases:

• Contractual necessity: Processing that is required to fulfil our obligations under the agreement between you and bd123, including account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, tax reporting obligations, and responses to lawful orders from courts, regulators, or law enforcement.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing of data for optional marketing communications, non-essential cookies, and any other processing activity for which we have sought and received your explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bd123 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following circumstances and only with parties who are contractually bound to process it securely and solely for the purposes specified:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, for the sole purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC service providers who verify the authenticity of identity documents you submit. These providers receive only the data required to perform the verification and are prohibited from using it for any other purpose.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other licensed game studios, who receive session identifiers and stake/outcome data necessary to deliver game content and resolve disputes.
• Fraud prevention and security services: Specialist providers who analyse technical and behavioural data to detect and prevent fraudulent activity and protect the security of the Platform and its players.
• Legal and regulatory authorities: Government agencies, regulatory bodies, financial intelligence units, courts, and law enforcement where we are legally required to disclose data, for example in connection with AML investigations, tax obligations, or court orders.
• Professional advisers: Lawyers, auditors, and accountants who require access to certain account or transaction data on a confidential basis in connection with the provision of professional services to bd123.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of bd123 or its assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

bd123 uses cookies and similar tracking technologies (including local storage objects and session tokens) to deliver and improve the Platform. Cookies are small text files stored on your device that allow us to recognise you across sessions, maintain your login state, and analyse how the Platform is used.

The categories of cookies used on the bd123 Platform are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Store your preferences such as language settings, preferred deposit method, and responsible gaming limit configurations so that you do not need to re-enter them on each visit.
• Performance and analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and which features are used — to help us improve the user experience.
• Security cookies: Used to detect and investigate suspicious activity, bot traffic, and fraudulent login attempts, protecting both individual player accounts and the Platform as a whole.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect the quality of your experience.

bd123 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected or to comply with our legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active relationship with bd123, including the period in which your account remains open.
• Transaction and financial records: Retained for a minimum of 5 years following the date of the transaction to comply with AML record-keeping obligations. This includes deposit and withdrawal history, KYC verification records, and payment method documentation.
• Closed account data: Upon account closure, we retain your identity and transaction data for a period of 5 years to fulfil our legal obligations. Non-essential data (such as marketing preferences and analytics data) is deleted within 90 days of account closure.
• Support communications: Retained for 2 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Self-exclusion records: Retained indefinitely or for the duration of the exclusion period plus 5 years, to prevent a self-excluded player from inadvertently reopening an account.
• Analytics and performance data: Anonymised and aggregated within 12 months of collection and retained indefinitely in anonymised form for statistical purposes only.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

bd123 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bd123 Platform, ensuring that your credentials, financial data, and personal information are protected in transit.
• Encrypted data storage for all sensitive personal and financial data held on bd123 servers, using AES-256 encryption at rest.
• Access controls and role-based permissions that restrict access to personal data to authorised bd123 personnel on a strict need-to-know basis. All staff with access to player data are bound by confidentiality obligations.
• Two-factor authentication (2FA) available to all players and mandatory for all bd123 staff accessing internal systems that contain personal data.
• Regular security assessments including vulnerability scanning, penetration testing, and security audits of the Platform and its infrastructure.
• Incident response procedures enabling rapid detection, containment, and notification in the event of a personal data breach. Where a breach is likely to result in a risk to your rights or freedoms, we will notify you without undue delay.

You have the following rights with respect to the personal data that bd123 holds about you. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account ID]". We will acknowledge your request within 48 hours and respond substantively within 30 days on Bangladesh Standard Time (BST, UTC+6).

• Right of access: You may request a copy of the personal data we hold about you, along with information about the purposes for which it is processed, the categories of data involved, and the recipients with whom it has been shared.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held about you. Some corrections can be made directly through your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where it has been processed unlawfully. This right is subject to our legal retention obligations, including AML record-keeping requirements.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while we investigate a disputed accuracy claim or consider an objection you have raised.
• Right to data portability: For data processed on the basis of consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data where bd123 relies on legitimate interests as the legal basis, and to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Please note that certain rights are subject to legal limitations. For example, we may be unable to delete transaction records that we are legally required to retain under AML obligations. Where we are unable to fulfil a request in full, we will explain the reason in our written response.

The bd123 Platform may display references to or information about third-party game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. While game content is delivered through these providers, the bd123 Platform itself does not contain links to third-party websites outside our own domain.

For clarity, game content embedded within the bd123 Platform from licensed game providers is subject to those providers' own privacy practices in respect of session data. bd123 takes reasonable steps to ensure that all game providers operating on our Platform maintain data handling standards consistent with our own. However, we accept no responsibility for the privacy practices of third-party game providers in respect of data they independently collect and retain.

If you have concerns about how a specific game provider handles your data, we recommend reviewing that provider's published privacy documentation or directing your query to our support team, who will liaise with the provider on your behalf where possible.

The bd123 Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Our registration process requires all applicants to confirm their date of birth, and accounts are subject to age verification through KYC documentation.

If bd123 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification having taken place, we will take immediate steps to permanently close the account, delete the associated personal data, return any deposits made, and forfeit any winnings accumulated during the period of use, as required by our Terms & Conditions.

bd123 reserves the right to update, amend, or replace this Privacy Policy at any time. The most current version will always be published on this page with a revised "Last Updated" date at the top. Where a change to this Privacy Policy materially affects the way in which we process your personal data, we will provide reasonable advance notice by email to the address registered on your account or via an in-platform notification prior to the change taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of the bd123 Platform following the publication of a revised Privacy Policy constitutes your acknowledgment that you have read the updated version and accept any changes described therein. If you do not accept a material change to this Privacy Policy, you must cease using the Platform and contact support to request account closure and any applicable withdrawal of funds.

Minor updates — such as grammatical corrections, formatting changes, or clarifications that do not alter the substantive content of our data processing practices — will be published without individual notification.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bd123 handles your personal data, you can contact our Data Protection team through the channels listed below. All contact details are provided as plain text only — they are not clickable links.

• Email: [email protected] — use the subject line "Privacy Enquiry — [Your Account ID]" for data rights requests and privacy-related matters. We respond within 24 hours on Bangladesh Standard Time (BST, UTC+6).
• Live Chat: Available 24/7 inside your bd123 account dashboard. Live chat is the fastest channel for general account and payment support.
• WhatsApp: +880 1700 000000 — available during extended business hours on BST for general enquiries.