bd7000 Privacy Policy

Information We Collect

bd7000 collects personal data that you provide directly and data generated automatically through your use of the platform. We collect only the information that is reasonably necessary to deliver our services, comply with our legal and regulatory obligations, protect the integrity of the platform, and improve the player experience. The categories of personal data we collect include:

Data you provide directly at registration or during account management:

• Full legal name as it appears on official identity documents
• Date of birth (used for mandatory age verification)
• Residential address, including city and postal code
• Mobile phone number (used for SMS OTP two-factor authentication)
• Email address (used for account communications and password reset)
• National Identity Card (NID) number or passport number (submitted during KYC verification)
• Copies of identity documents, address verification documents, and payment method verification evidence submitted as part of the KYC process

Data collected automatically when you use the platform:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and duration of platform sessions
• Pages visited, games played, betting markets accessed, and navigation paths within the platform
• Game history, wager amounts, win/loss records, and bonus redemption activity
• Transaction records including deposit amounts, withdrawal requests, payment methods used, and transaction timestamps
• Customer support interaction logs including live chat transcripts and email correspondence

Data received from third-party service providers:

• Identity verification results returned by our KYC processing partners
• Payment transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors
• Fraud screening signals from our security and risk management partners

How We Use Your Data

bd7000 processes personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which your data is processed are:

Where bd7000 relies on your consent as the legal basis for processing — specifically for sending promotional emails and personalised bonus offers — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

bd7000 does not use automated decision-making or profiling that produces legal or similarly significant effects on individual players, except where required to fulfil responsible gaming obligations or to assess account security risk. Where automated assessments are used for these purposes, players have the right to request human review of any decision that materially affects their account.

Data Sharing and Third Parties

bd7000 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Service providers and operational partners: bd7000 engages third-party service providers to support specific operational functions, including identity verification, payment processing, fraud detection, cloud infrastructure hosting, and customer communication delivery. These providers are contractually bound to process your data only on bd7000's instructions and in accordance with applicable data protection standards. They are not permitted to use your data for their own purposes.

Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction data necessary to complete the payment is shared with the relevant payment processor. Each processor operates under its own privacy terms in addition to its contractual obligations to bd7000.

Game providers: Certain game outcome and session data may be processed by the game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to deliver game functionality and to maintain the integrity of game results. Game providers receive only the technical session data required to run the game and do not receive your full personal profile.

Legal and regulatory disclosure: bd7000 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, by a valid court order, or where such disclosure is necessary to investigate suspected fraud, money laundering, or other criminal activity.

Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bd7000's business assets, personal data held by bd7000 may be transferred to the successor entity. Players would be notified of any such transfer and of any material changes to the terms under which their data is processed.

Cookies and Tracking Technologies

bd7000 uses cookies and similar tracking technologies — including local storage and session storage — to operate the platform reliably and to understand how players use our services. Cookies are small text files stored on your device by your web browser. They allow the platform to remember your preferences, maintain your login session, and gather aggregate usage statistics.

The categories of cookies used on bd7000 are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as session management, login state, security tokens, and navigation between pages. The platform cannot operate without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as your chosen language settings, notification preferences, and account display options — so that you do not need to re-enter them on each visit. Disabling functional cookies may reduce your experience on the platform.
• Analytical cookies: These cookies collect aggregated, anonymised information about how players navigate and interact with the platform. bd7000 uses this data to identify areas of the platform that can be improved. Analytics data is not used to identify individual players.
• Security cookies: These cookies support our fraud detection and account protection systems by helping us identify unusual login patterns or suspicious activity across sessions.

You can control and delete cookies through your web browser settings. Most modern browsers allow you to block third-party cookies, clear stored cookies on browser close, or prompt you for consent before setting cookies. Please note that disabling strictly necessary cookies will prevent you from using core platform features including account login.

bd7000 does not use third-party advertising cookies or cross-site tracking technologies. We do not participate in retargeting networks that serve bd7000 advertisements on other websites based on your browsing behaviour.

Data Retention and Storage

bd7000 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active bd7000 account is retained for the lifetime of the account and for a minimum period of five years following permanent account closure. This retention is required for anti-money laundering (AML) compliance and to enable the resolution of any disputes or regulatory enquiries arising after closure.
• Transaction records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of seven years from the date of the transaction, in compliance with international financial record-keeping standards.
• KYC documents: Identity verification documents are retained for a minimum of five years following the closure of the associated account. Where a regulatory investigation is ongoing, documents may be retained for the duration of that investigation regardless of account status.
• Customer support communications: Live chat transcripts and email correspondence related to account queries are retained for three years from the date of the final communication in each case.
• Marketing consent records: Records of your opt-in or opt-out consent for promotional communications are retained for the duration of your account plus three years following closure, to demonstrate compliance with consent obligations.
• Anonymised analytical data: Aggregated, anonymised usage and gameplay statistics from which individuals cannot be identified may be retained indefinitely for platform improvement purposes.

All personal data held by bd7000 is stored on secure servers protected by industry-standard access controls. Data transfers between systems are encrypted. bd7000 maintains documented data retention schedules that are reviewed annually and updated to reflect changes in regulatory requirements.

When personal data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised in accordance with bd7000's internal data disposal procedures. Paper documents containing personal data, where applicable, are disposed of by certified secure shredding.

Your Privacy Rights

As a bd7000 player, you hold a number of rights with respect to your personal data. bd7000 is committed to honouring these rights promptly and without undue barrier. Your rights are summarised below:

To exercise any of the rights listed above, contact bd7000's compliance team by email at [email protected] with the subject line "Data Rights Request". Please include your registered account username and a brief description of your request. We will acknowledge receipt within 5 business days and provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

bd7000 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive in nature, in which case a reasonable administrative fee may apply or the request may be refused with written explanation.

Data Security Measures

bd7000 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes:

• Transport layer encryption: All data transmitted between your browser or device and the bd7000 platform is encrypted using TLS (Transport Layer Security) with a 256-bit key. Any attempt to intercept data in transit would yield only unintelligible ciphertext.
• At-rest encryption: Sensitive data — including KYC documents, payment details, and account credentials — is encrypted at rest in our database infrastructure using industry-standard encryption algorithms.
• Access controls: Access to production systems and personal data is restricted to authorised personnel only, based on the principle of least privilege. All internal access is logged and monitored. Administrative credentials require multi-factor authentication.
• Two-factor authentication (2FA): bd7000 offers SMS OTP two-factor authentication to all players. Enabling 2FA significantly reduces the risk of unauthorised account access even in the event of password compromise.
• Intrusion detection and monitoring: bd7000's infrastructure is monitored continuously for anomalous activity, attempted intrusions, and unusual data access patterns. Automated alerts are generated for defined security events.
• Penetration testing and security audits: bd7000 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of our platform and infrastructure.
• Incident response: bd7000 maintains a documented data breach response procedure. In the event of a confirmed breach that is likely to result in risk to affected individuals, we will notify impacted players promptly and take all reasonable steps to contain the breach and mitigate its effects.

Changes to This Privacy Policy

bd7000 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, and improvements to the platform. The date of the most recent revision is displayed at the top of this document.

Where a change to this Privacy Policy is material — meaning it alters the purposes for which we process your data, introduces a new category of data sharing, or reduces your rights in a significant way — bd7000 will notify registered players through an in-account notification prior to the change taking effect. For changes that are minor or administrative in nature (such as clarifications of existing language or corrections of typographical errors), notification may not be provided but the updated policy will be published on this page.

Your continued use of the bd7000 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revision to this Privacy Policy, you should stop using the platform and may request account closure by contacting [email protected]. All data retained following account closure will continue to be processed in accordance with the retention obligations described in Section 5 of this Policy.

For questions about this Privacy Policy, about bd7000's data practices, or to submit a formal data rights request, please contact our compliance team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.