bd89cm Privacy Policy

1. Introduction

bd89cm ("we", "us", "our", or "the Platform") operates the online casino and sports betting service accessible at bd89cm.app and all associated subdomains and mobile interfaces. We are committed to protecting the personal data of every player who registers, deposits, wagers, or otherwise interacts with the platform.

This Privacy Policy ("Policy") has been prepared in accordance with applicable data protection principles and describes in plain English how bd89cm handles personal information. It applies to all users of bd89cm.app regardless of their location within Bangladesh — whether accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and bd89cm.

2. Data Controller

For the purposes of this Policy, bd89cm is the data controller — the entity that determines the purposes and means by which your personal data is processed. All data collected through bd89cm.app is held and managed by bd89cm on its own infrastructure and with carefully selected third-party service providers as described in Section 7 of this Policy.

If you have any questions about how bd89cm processes your personal data, or if you wish to exercise any of your rights described in Section 11, the appropriate point of contact is the bd89cm Data Protection team, reachable at [email protected].

3. Personal Data We Collect

bd89cm collects personal data that is necessary to operate the platform, comply with regulatory obligations, and provide a high-quality gaming experience. The categories of data collected are described in the table below.

bd89cm applies the principle of data minimisation — we collect only the information that is genuinely necessary for the stated purpose. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required for identity verification purposes and with your explicit consent.

4. How We Collect Your Data

bd89cm collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing the KYC process, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Technical Collection: Technical and usage data collected automatically when you access and interact with bd89cm.app, including through cookies, session tracking, and server log files. See Section 10 for details on cookie usage.
• Payment Providers: Transaction confirmation data received from mobile wallet operators (bKash, Nagad, Rocket, Upay, SureCash) and card networks (Visa, Mastercard) when you initiate a financial transaction on the platform.
• Identity Verification Services: Where bd89cm uses a third-party KYC provider to cross-reference submitted documents against official records, that provider may return a verification status and a confidence score to bd89cm.
• Fraud Prevention Partners: Risk scoring data received from fraud detection services that analyse transaction patterns and device fingerprints to identify potentially suspicious activity.

5. How We Use Your Personal Data

bd89cm uses the personal data it holds for the following specific purposes. Each purpose is matched to a legal basis described in Section 6.

• Account Management: Creating and maintaining your player account, processing login requests, issuing OTP codes, and managing account security settings.
• Payment Processing: Executing deposit and withdrawal transactions via your chosen payment method, reconciling transaction records, and investigating payment disputes.
• Identity Verification and KYC: Verifying that you are who you say you are, confirming that you are aged 18 or above, and satisfying our obligations under applicable anti-money-laundering frameworks.
• Fraud Prevention and Platform Security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and any other activity that constitutes a breach of our Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour and, where appropriate, proactively offering responsible gaming tools or contacting the player directly.
• Customer Support: Responding to your queries, resolving disputes, processing responsible gaming requests (such as self-exclusion), and maintaining records of communications for quality assurance.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the platform, identify technical issues, and inform product development decisions.
• Promotional Communications: Sending you information about bonuses, promotions, and platform updates — only where you have provided consent to receive such communications and only via the contact channels you have approved.
• Legal and Regulatory Compliance: Maintaining records required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and defending or pursuing legal claims.

bd89cm does not use your personal data for automated decision-making that produces significant legal effects without a human review stage. Where automated processes flag an account for investigation (e.g., a fraud alert), a member of the bd89cm compliance team reviews the flagged case before any action is taken.

6. Legal Basis for Processing

bd89cm processes personal data only where a valid legal basis exists. The legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing that is required to fulfil our contractual obligations to you under the Terms & Conditions — including account creation, payment processing, and gameplay facilitation.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing that serves bd89cm's legitimate business interests — such as fraud prevention, platform security, and aggregated analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for purposes that require your explicit agreement, principally direct marketing communications. You may withdraw your consent at any time by contacting [email protected] or updating your communication preferences within your account settings.

7. Data Sharing and Third Parties

bd89cm does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. However, bd89cm does share personal data with a limited set of trusted third parties where necessary to operate the platform and fulfil our obligations to you.

• Payment Service Providers: Mobile wallet operators (bKash, Nagad, Rocket, Upay, SureCash) and card networks (Visa, Mastercard) receive the minimum data required to process your financial transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Game Content Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a session token and anonymised player identifier to facilitate gameplay. These providers do not receive your name, contact details, or financial information.
• Identity Verification Partners: KYC and document verification providers receive copies of identity documents solely for the purpose of verifying authenticity. They are contractually prohibited from using this data for any other purpose.
• Fraud Detection and Cybersecurity Services: Technical data (IP addresses, device identifiers, session tokens) may be shared with fraud prevention platforms to protect both the player and the platform from malicious activity.
• Cloud Infrastructure and Hosting Providers: bd89cm stores data on servers operated by reputable cloud infrastructure providers. These providers act as data processors under contractual obligations that reflect the same standards described in this Policy.
• Legal and Regulatory Authorities: bd89cm will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or a valid legal order. Where legally permissible, bd89cm will notify the affected player of such a disclosure.

8. Data Retention

bd89cm retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Accounts: Personal data associated with an active player account is retained for the full duration of the account's active status and for a minimum period of 5 years following account closure, to satisfy financial record-keeping and AML compliance obligations.
• Transaction Records: All deposit, withdrawal, and gameplay transaction records are retained for a minimum of 5 years from the date of the transaction.
• Identity Verification Documents: KYC documents (NID copies, passport scans) are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support Communications: Customer support transcripts and email correspondence are retained for 3 years from the date of the last interaction in the relevant case.
• Technical and Usage Data: Log files and session data are retained for a maximum of 12 months, after which they are deleted or anonymised for aggregate analytics purposes.
• Marketing Consent Records: Records of marketing consent (or its withdrawal) are retained for the duration of the account plus 3 years, to demonstrate compliance in the event of a regulatory enquiry.

When data is no longer required under any applicable retention obligation, bd89cm securely destroys or permanently anonymises it. Anonymised datasets that cannot be linked back to any individual may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

bd89cm takes the security of your personal data seriously and implements a layered set of technical and organisational safeguards to protect against unauthorised access, accidental loss, destruction, or disclosure.

• 256-Bit SSL Encryption: All data transmitted between your device and bd89cm.app is encrypted in transit using 256-bit SSL/TLS technology. This applies to every page of the platform, including account login, payment pages, and support chat.
• Password Hashing: Account passwords are never stored in readable form. bd89cm stores passwords as one-way cryptographic hashes using an industry-standard algorithm, so that even if our database were ever compromised, plaintext passwords could not be recovered.
• OTP Authentication: Sensitive account actions — including login from unrecognised devices and withdrawal requests — are protected by one-time password (OTP) verification sent to your registered mobile number.
• Access Controls: Internal access to personal data is strictly role-based. Only bd89cm team members with a legitimate operational need are granted access to player data, and all such access is logged and regularly audited.
• Intrusion Detection: bd89cm operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular Security Reviews: bd89cm conducts periodic security assessments of its infrastructure, including vulnerability scanning and code-level security reviews, to proactively identify and remediate weaknesses.

Despite these measures, no internet-connected system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, bd89cm will notify impacted individuals without undue delay and take all reasonable steps to contain and remediate the incident.

10. Cookies and Tracking Technologies

bd89cm uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: These cookies collect anonymised data about how players interact with the platform — which games are most popular, how long sessions last, and which pages are visited most frequently. This data is used in aggregate to improve the platform and is never linked back to individual players.
• Functionality Cookies: These cookies remember choices you have made — such as game preferences or table stakes settings — to provide a more personalised experience on return visits.
• Security Cookies: These cookies support our fraud detection systems by assigning a session identifier that helps distinguish legitimate users from automated bots or suspicious actors attempting to access the platform fraudulently.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform. bd89cm does not use third-party advertising or behavioural targeting cookies.

11. Your Data Rights

As a user of bd89cm, you hold the following rights in relation to your personal data. To exercise any of these rights, contact bd89cm at [email protected] with the subject line "Data Rights Request". bd89cm will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data that bd89cm holds about you, along with information about how it is processed and who it has been shared with.
• Right to Rectification: If any personal data held by bd89cm is inaccurate or incomplete, you may request that it be corrected. For basic account details (e.g., mobile number, email), corrections can often be made directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer required for the purpose for which it was collected and where no overriding legal obligation requires its retention. Note that financial transaction records must be retained for regulatory purposes and cannot be erased on request.
• Right to Restriction: You may request that bd89cm restricts the processing of your data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (e.g., CSV) for personal records or transfer to another service.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests. You may also withdraw marketing consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

12. Minors and Age Restrictions

bd89cm is an adults-only platform. No person under the age of 18 is permitted to create an account, make a deposit, or participate in any real-money game or bet on bd89cm.app. bd89cm does not knowingly collect personal data from individuals under 18 years of age.

If bd89cm discovers — through age verification procedures or any other means — that personal data has been collected from a person under 18, that account will be suspended immediately, the data will be reviewed, and all deposits will be returned to the originating payment method before the account and associated data are permanently deleted in line with our data retention policy.

If you are a parent or guardian and believe that your child has created an account on bd89cm, please contact us immediately at [email protected]. We will treat such reports as a priority and act on them within 24 hours of receipt.

13. International Data Transfers

bd89cm's primary infrastructure is operated to serve the Bangladesh market. However, some of the third-party service providers described in Section 7 — including cloud hosting providers and game content studios — may process data on servers located outside Bangladesh. Where such transfers occur, bd89cm ensures that appropriate contractual safeguards are in place with the relevant third party to ensure that your data receives a level of protection consistent with the standards described in this Policy.

bd89cm does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards. If you would like more information about the specific safeguards in place for any particular data transfer, please contact us at [email protected].

14. Changes to This Privacy Policy

bd89cm reserves the right to update this Privacy Policy at any time to reflect changes in the platform's data practices, changes in applicable law, or feedback from users. When material changes are made, bd89cm will display a prominent notification on the platform and, where practicable, send a summary of the key changes to your registered contact details at least 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy will be revised whenever a new version is published. Continued use of bd89cm.app after the effective date of any update constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree with the updated Policy, you should cease using the platform and request account closure in accordance with the Terms & Conditions.

Previous versions of this Privacy Policy are available on request from [email protected]. bd89cm maintains a dated archive of all prior Policy versions.

15. Contact and Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd89cm handles your personal data, please reach out using the details below. Our support and data protection team is available 24 hours a day, 7 days a week, and typically responds to data-related enquiries within 48 hours.