Privacy Policy — Your Data at bd78

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by bd78 ("we", "us", "our") and applies to all personal data processed in connection with your use of the bd78 website located at bd78.io and any associated services, mobile experiences, and features offered through the platform (collectively, the "Platform").

bd78 is committed to protecting the privacy and security of every individual who interacts with the Platform, including registered players, prospective players browsing the website, and individuals who contact our support team. This Policy explains in plain English exactly what personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights available to you in relation to your personal information.

This Policy should be read alongside the bd78 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the processing activities described herein.

2 Data Controller

For the purposes of this Privacy Policy, bd78 acts as the data controller in respect of personal data collected from users of the bd78.io platform. As data controller, bd78 determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities are conducted lawfully, fairly, and transparently.

If you have any questions regarding the processing of your personal data, or wish to exercise any of the rights described in Section 11 of this Policy, you may contact the bd78 data team using the contact details provided in Section 14.

3 Information We Collect

bd78 collects and processes several categories of personal data depending on the nature of your interaction with the Platform. The categories of data we may hold about you include:

bd78 applies the principle of data minimisation: we only collect the personal data that is strictly necessary for the stated purpose. We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where documentary identity verification incidentally involves a photograph of the individual.

4 How We Collect Your Data

bd78 collects personal data through the following channels:

• Direct submission: Information you actively provide when completing the registration form, submitting a KYC verification request, making a deposit or withdrawal, or corresponding with the support team.
• Automated collection: Technical and usage data collected automatically by our servers and analytics systems when you visit, browse, or interact with the Platform. This includes IP address logging, session tracking, and cookie-based data collection (see Section 10).
• Payment processors: Transaction confirmation data and payment method identifiers shared with bd78 by your mobile money provider (bKash, Nagad, Rocket, Upay) or bank at the time of a deposit or withdrawal.
• Identity verification partners: In some cases, bd78 may use a third-party KYC service provider to assist with document verification. That provider shares a verification result (pass/fail) and the submitted document data with bd78 for compliance purposes.
• Fraud and risk detection systems: Data derived from automated fraud screening tools that analyse transaction patterns, device fingerprinting, and behavioural signals to identify suspicious activity.

5 How We Use Your Data

bd78 uses the personal data it collects for the following specific and legitimate purposes:

• Account creation and management: To create, verify, and maintain your bd78 player account, including processing your registration details and keeping your profile up to date.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, and to maintain an accurate transaction history in your wallet.
• Identity and age verification: To verify that you are who you claim to be and that you meet the 21+ minimum age requirement before allowing access to real-money gaming.
• Anti-money laundering (AML) compliance: To screen transactions and account activity for indicators of money laundering, fraud, or other financial crime in accordance with applicable compliance obligations.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling and, where appropriate, to intervene with responsible gaming tools such as deposit limit suggestions or account cooling-off notifications.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: To analyse aggregated usage data, improve the bd78 user experience, fix bugs, and develop new features and products.
• Marketing and promotions (with consent): To send you promotional offers, bonus notifications, seasonal promotions (such as Eid or Pohela Boishakh specials), and platform news where you have consented to receive such communications.
• Security and fraud prevention: To detect and prevent unauthorised access, cheating, bonus abuse, multi-accounting, and other security threats to the Platform.
• Legal compliance: To comply with legal obligations, respond to lawful requests from regulatory bodies or law enforcement agencies, and enforce our Terms & Conditions.

6 Legal Basis for Processing

bd78 processes your personal data only where a lawful basis for doing so exists. The following legal bases apply to the processing activities described in this Policy:

• Contractual necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered player — including account management, bet settlement, deposits, and withdrawals.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML screening, age verification, and responding to requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of bd78's legitimate business interests, where those interests are not overridden by your own privacy rights. This includes fraud prevention, security monitoring, responsible gaming oversight, and platform analytics.
• Consent: Processing activities for which you have given specific, informed consent — in particular, the sending of direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Data

bd78 does not sell your personal data. We may share your data with the following categories of third parties where strictly necessary and subject to appropriate data protection agreements:

• Payment service providers: Mobile money operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the minimum data required to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers receive copies of verification documents solely for the purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game software providers: Platform operators such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi receive session identifiers and gameplay data necessary to deliver the gaming experience. These providers do not receive your full identity profile.
• Fraud and security services: Specialist fraud detection providers may process technical data (IP addresses, device fingerprints, behavioural signals) to help bd78 identify and prevent fraudulent activity.
• Legal and regulatory authorities: bd78 will disclose personal data to police, regulatory bodies, or courts where required to do so by a lawful request, court order, or legal obligation. We will notify affected users where we are legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access limited personal data where strictly necessary to provide their professional services to bd78, subject to confidentiality obligations.

All third-party data processors engaged by bd78 are required to enter into a data processing agreement that obligates them to process personal data only in accordance with bd78's documented instructions and to implement appropriate technical and organisational security measures.

8 Data Retention

bd78 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

When personal data is no longer required, bd78 securely deletes or anonymises it so that it can no longer be associated with an identifiable individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for analytical and business planning purposes.

9 Security Measures

bd78 takes the security of your personal data seriously and has implemented the following technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform.
• Encrypted data storage for sensitive fields including passwords, NID numbers, and financial account identifiers stored in our databases.
• Role-based access controls ensuring that only authorised personnel with a specific operational need can access personal data, with all access events logged and retained for audit purposes.
• Two-factor authentication options for player accounts to add an additional layer of login security beyond your password.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities.
• Intrusion detection systems monitoring the Platform infrastructure in real time for anomalous activity indicative of a security breach.
• Staff training on data protection principles and secure data handling practices, with mandatory completion for all personnel with access to personal data.

While bd78 employs industry-standard security measures, no online platform can guarantee absolute security. You are also responsible for keeping your own login credentials secure. Never share your bd78 password with anyone, and contact support immediately if you suspect your account has been compromised.

10 Cookies & Tracking

bd78 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. A cookie is a small text file stored on your device when you visit a website. The types of cookies used on bd78.io are described below:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, display options, and remembered login state to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how users navigate the Platform — including pages visited, session duration, and feature usage — to help bd78 understand user behaviour and improve the product.
• Marketing cookies: Used only where you have consented to receive targeted promotions. These cookies track which promotional pages you have visited so that bd78 can present relevant bonus offers. You may opt out at any time via account settings.

You may control cookie behaviour through your browser settings, though disabling strictly necessary cookies will affect your ability to log in and use the Platform. For detailed cookie management instructions, please refer to your browser's help documentation.

11 Your Rights

As an individual whose personal data is processed by bd78, you have the following rights in relation to that data. To exercise any of these rights, please contact the bd78 support team using the details in Section 14. bd78 will respond to all valid requests within 30 calendar days.

• Right of access: You may request a copy of all personal data that bd78 holds about you, along with information about how it is being processed.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request that bd78 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data (see Section 8).
• Right to restriction: You may request that bd78 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you do not want the data deleted.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bd78 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, bd78 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12 Protection of Minors

bd78 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above. Age verification is a mandatory step in the account registration and KYC process.

If bd78 discovers that personal data has been inadvertently collected from a person under 21, we will immediately suspend the associated account, delete all personal data relating to that individual as promptly as technically possible, and — where applicable — report the matter to the relevant authorities.

13 Changes to This Policy

bd78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, legal obligations, or business operations. When material changes are made, bd78 will endeavour to notify registered players via email or an in-platform notification prior to the revised Policy taking effect.

The most current version of this Privacy Policy will always be accessible at bd78.io/privacy-policy. The effective date displayed at the top of this document indicates when the current version entered into force. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not agree with the revised Privacy Policy, you should cease using the Platform and may request the closure of your account by contacting the support team. bd78 will process any such request in accordance with the data retention obligations described in Section 8.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd78 processes your personal data, please contact our data protection team using the details below. We are committed to addressing all enquiries promptly and transparently.

• Email: [email protected] — Please include "Privacy Request" in your subject line for fastest routing.
• Platform: bd78.io — Use the live chat or support ticket system available within your logged-in account area.
• Response time: bd78 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days.
• Operating hours: Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).