bd95 Privacy Policy

This Privacy Policy ("Policy") describes how bd95 ("bd95", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "your", "Player") who visit or use the bd95 website at bd95.io and the associated online casino and sports betting platform (collectively, the "Platform").

bd95 is committed to handling your personal data with care, transparency, and integrity. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about using the Platform. Please read this Policy carefully before registering an Account or submitting any personal information to bd95.

By accessing or using the bd95 Platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy. This Policy forms part of bd95's Terms & Conditions, which are available at /terms-conditions.

This Policy applies to all personal data collected through the Platform, including data collected during Account registration, identity verification, payment transactions, customer support interactions, and general Platform use. It applies to players located in Bangladesh and any other jurisdiction in which bd95 operates.

For the purposes of this Privacy Policy, bd95 acts as the data controller in respect of personal data collected from Players using the Platform. As data controller, bd95 determines the purposes and means by which personal data is processed.

If you have any questions about this Policy, or wish to exercise any of your data rights described in Section 11, please contact the bd95 Data Privacy team using the contact details provided in Section 14 of this Policy.

bd95 collects the following categories of personal data from Players. We collect only the data that is necessary for the purposes described in this Policy. We do not collect data that is excessive or irrelevant to the operation of the Platform.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs required for age and identity verification), or health data, except where a Player voluntarily discloses health-related information in the context of a responsible gaming enquiry.

bd95 collects personal data through the following channels and methods:

• Direct Submission: Data you provide when registering an Account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Technical and gaming activity data collected automatically as you use the Platform, including through cookies, server logs, and session tracking technologies. See Section 10 for full details on our cookie practices.
• Payment Processors: Confirmation and transaction reference data received from bKash, Nagad, Rocket, Upay, and bank partners when you complete a deposit or withdrawal.
• Identity Verification Partners: Where bd95 uses a third-party identity verification service to authenticate your NID, passport, or other documents, that service may share verification outcomes and document metadata with bd95.
• Game Studios: Aggregate session and outcome data provided by our licensed game studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) relating to your activity within their games on our Platform.
• Responsible Gaming Tools: Data you provide when setting deposit limits, requesting self-exclusion, or reaching out to our responsible gaming support team.

bd95 uses the personal data it collects solely for the purposes listed below. We do not use your personal data for any purpose that is incompatible with these stated purposes without first obtaining your consent or establishing a separate legitimate legal basis.

• Account Registration and Management: To create, maintain, and administer your bd95 Account, authenticate your identity at login, and manage your Account settings and preferences.
• Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our Know Your Customer (KYC) obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers; to maintain accurate financial records; and to investigate and resolve payment disputes.
• Platform Operation and Improvement: To deliver the games, sports betting markets, and other features available on the Platform; to monitor Platform performance; to troubleshoot technical issues; and to develop and improve our services based on aggregated usage data.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised Account access, and other forms of abuse or misuse of the Platform.
• Responsible Gaming Compliance: To enforce deposit limits, loss limits, session limits, cool-off periods, and self-exclusion requests set by Players; to monitor gaming activity for signs of problem gambling; and to proactively offer responsible gaming tools where appropriate.
• Customer Support: To respond to your support enquiries, complaints, and feedback; to maintain records of support interactions for quality assurance and dispute resolution.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including record-keeping requirements, and to respond to lawful requests from competent authorities.
• Marketing Communications: With your consent, to send you information about bd95 promotions, bonuses, seasonal offers, and new Platform features. You may withdraw your consent to marketing communications at any time by contacting support.

bd95 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and bd95 — including Account creation, payment processing, and Platform access — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable legal obligations, including identity verification, age verification, anti-money laundering checks, and record-keeping, is carried out on the basis that it is required by law.
• Legitimate Interests: Processing undertaken to detect and prevent fraud, ensure Platform security, improve our services, and maintain the integrity of our gaming operations is carried out on the basis of bd95's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bd95 shares personal data with third parties only where strictly necessary and only with parties who are contractually obligated to handle your data securely and in accordance with this Policy. The categories of third-party recipients are as follows:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process your deposits and withdrawals and to verify payment method ownership.
• Identity Verification Services: Third-party KYC and document verification providers engaged by bd95 to authenticate identity documents and confirm age eligibility.
• Licensed Game Studios: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to provide their games on our Platform and to resolve game-related disputes.
• IT and Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on bd95's behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Competent governmental, law enforcement, or regulatory bodies where bd95 is required or permitted by law to disclose personal data.
• Professional Advisers: Lawyers, accountants, and auditors engaged by bd95, subject to professional confidentiality obligations.

bd95 does not transfer personal data to any third party for that party's own marketing or commercial purposes. Any third party that processes personal data on bd95's behalf does so as a data processor, under a written agreement that requires them to process data only on bd95's documented instructions and to implement appropriate technical and organisational security measures.

bd95 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained for analytical purposes without restriction.

bd95 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bd95 Platform is encrypted using 256-bit SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted Password Storage: Account passwords are never stored in plaintext. bd95 uses industry-standard cryptographic hashing algorithms to store password credentials securely.
• Access Controls: Access to personal data within bd95's internal systems is strictly limited to authorised personnel who require access to perform their job functions. All internal access is logged and audited.
• Network Security: bd95's infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments to identify and remediate security risks.
• Fraud Monitoring: bd95 employs automated and manual fraud monitoring systems to detect unusual Account activity, suspicious login attempts, and patterns indicative of fraudulent use.
• Staff Training: All bd95 personnel who handle personal data receive regular training on data protection obligations and security best practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, bd95 will notify affected individuals without undue delay and will take prompt remedial action to contain and investigate the breach.

bd95 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser. They allow the Platform to recognise your device, maintain your session, and remember your preferences. bd95 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as Account login, session management, and security. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences (such as language settings and preferred deposit method) to personalise your experience on the Platform. They are not strictly necessary but improve usability.
• Analytics Cookies: These cookies collect aggregated, anonymised information about how Players use the Platform — such as pages visited, features used, and session duration. This data helps bd95 understand Platform usage patterns and improve the user experience.
• Security Cookies: These cookies are used as part of bd95's fraud detection and prevention systems to identify unusual or suspicious patterns of Platform access.

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of the bd95 Platform.

bd95 does not use third-party advertising cookies or allow third-party advertisers to place cookies on the Platform.

As a Player on the bd95 Platform, you have the following rights in relation to the personal data that bd95 holds about you. To exercise any of these rights, please contact bd95 using the details in Section 14. bd95 will respond to all valid requests within a reasonable timeframe and without charge in most circumstances.

• Right of Access: You have the right to request a copy of the personal data that bd95 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by bd95 be corrected or updated. You may also update certain Account details directly through the Account settings section of the Platform.
• Right to Erasure: You have the right to request that bd95 delete personal data that is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. Note that this right is subject to bd95's legal retention obligations — we may not be able to delete all data immediately if we are required to retain it by law.
• Right to Restriction: You have the right to request that bd95 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you have provided to bd95 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The bd95 Platform is strictly intended for adults aged 21 years and above. bd95 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the Account registration process, and bd95 applies active verification procedures to confirm that all registered Players meet this age requirement.

If bd95 becomes aware that personal data has been collected from an individual under 21 years of age — whether through the registration process, a complaint, or any other means — that Account will be immediately suspended, all associated personal data will be deleted as soon as practicable, and any funds held in that Account will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has registered an Account with bd95, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

bd95 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — bd95 will provide reasonable advance notice to registered Players by displaying a prominent notice on the Platform.

The effective date at the top of this Policy reflects the date on which the current version came into force. Your continued use of the bd95 Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you should cease using the Platform and request Account closure.

bd95 recommends that all Players review this Privacy Policy periodically to stay informed of how their personal data is being handled. The most current version of this Policy is always accessible at bd95.io/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact the bd95 Privacy team using the details below. All privacy-related communications are handled in English and receive a response within 4 hours during Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

Email:

When contacting bd95 about a privacy matter, please include your registered Account username and a clear description of your enquiry or request. For data rights requests, please also include "Data Rights Request" or "Privacy Request" in the subject line to ensure your message is routed to the correct team promptly.