Privacy Policy
— bbddkk Platform

bbddkk collects personal information through several channels: directly from you when you register an account or update your profile, automatically as you interact with the platform, and from third-party service providers involved in identity verification and payment processing. The categories of information we collect are described below.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address, mobile phone number, and email address provided when creating your bbddkk account.
• Identity verification documents: Government-issued photo ID (National ID card, passport, or birth certificate), proof of address (utility bill or bank statement), and any supplementary documents requested during Know Your Customer (KYC) review.
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, or Upay account numbers), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), or card details (Visa, Mastercard) used for deposits and withdrawals. Note: full card numbers are never stored on bbddkk servers — card processing is handled by PCI-DSS compliant payment processors.
• Support communications: Any messages, chat transcripts, emails, or other correspondence you submit to the bbddkk customer support team.
• Preference settings: Responsible gaming limits, notification preferences, account language settings, and any other configuration choices you make within the platform.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Session and interaction data: Pages visited, features used, time spent on specific game lobbies, bet history, deposit and withdrawal transaction records, login timestamps, and session duration.
• Geolocation data: Approximate geographic location derived from your IP address. This is used for regulatory compliance purposes, including verifying that you are not accessing the platform from a jurisdiction where online gambling is prohibited.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage data. Full details are provided in Section 4 of this policy.

1.3 Information from Third Parties

• Payment service providers: Transaction status confirmations, refund notifications, and fraud signals from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners.
• Identity verification services: Results of automated document checks and database screening performed by our KYC compliance partners.
• Game providers: Game session outcomes, RTP data, and disconnection event records from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios integrated into the bbddkk platform.

bbddkk uses the personal data we collect for the following purposes. Where a specific legal basis applies to each purpose, that basis is cross-referenced in Section 3 of this policy.

Promotional Communications

bbddkk may send you promotional emails or platform notifications about new games, seasonal bonus offers (for example, during BPL, IPL, Eid, or Pohela Boishakh campaigns), and platform updates where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting customer support via live chat. Withdrawal of consent for marketing communications does not affect the lawfulness of processing carried out prior to that withdrawal, nor does it affect processing carried out on other legal bases.

bbddkk processes personal data only where a valid legal basis exists. The four primary legal bases on which bbddkk relies are described below.

Contract Performance

The majority of bbddkk's core data processing activities are necessary to perform the contract between bbddkk and you as a registered player. This includes processing your registration information to create your account, handling your deposits and withdrawals, settling your bets, and managing your account lifecycle. Without this processing, bbddkk cannot deliver the services you have contracted for.

Legal Obligation

Certain processing activities are mandatory under applicable law regardless of your or bbddkk's preferences. These include age and identity verification under KYC requirements, transaction monitoring and reporting under anti-money laundering obligations, and responsible gaming interventions required by platform operational standards. bbddkk cannot waive or reduce this processing at a player's request.

Legitimate Interest

bbddkk processes certain data where it has a legitimate business interest that is not overridden by your privacy rights. This includes fraud detection, platform security monitoring, internal analytics used to improve product features, and maintaining records of customer support interactions for quality assurance. Where bbddkk relies on legitimate interests, a balancing assessment is carried out to ensure your rights and freedoms are appropriately protected.

Consent

For processing activities that are neither contractually necessary nor legally mandated — principally direct marketing communications — bbddkk relies on your explicit, freely given consent. This consent is collected during the registration process and can be withdrawn at any time through the mechanisms described in Section 2 above.

bbddkk uses cookies and similar browser-based storage technologies to operate key platform features and to understand how players use the site. The following categories of cookies are in use on the bbddkk platform.

Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They are set in response to your direct actions — such as logging in, setting responsible gaming limits, or entering a game session — and do not collect information for marketing purposes. Examples include your authenticated session token, your account currency preference, and anti-CSRF security tokens.

Analytics and Performance Cookies

bbddkk uses first-party analytics to measure the performance of the platform, identify technical errors, and understand aggregate usage patterns. This includes tracking which game categories are most visited, average session length by device type, and deposit funnel completion rates. Analytics data is processed in aggregated or pseudonymised form and is not used to identify individual players for marketing targeting.

Functional Cookies

Functional cookies remember choices you make on the platform to enhance your experience. These include your preferred sports betting market view, your game lobby filter settings, your live chat history, and your notification preferences. These cookies persist across sessions so you do not have to reconfigure your preferences each time you log in.

What bbddkk Does NOT Use

• Third-party advertising cookies or cross-site tracking pixels.
• Social media tracking pixels that report your activity on bbddkk to social platforms.
• Fingerprinting scripts that identify you without a cookie through browser characteristics.

bbddkk does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to maintain appropriate data security standards.

Payment Service Providers

To process your deposits and withdrawal requests, bbddkk shares the minimum necessary transaction and identity data with our approved payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and the bank partners listed in the Terms & Conditions. These providers act as independent data controllers for their own systems and are governed by their respective privacy policies.

Identity Verification Partners

KYC and AML compliance requires bbddkk to share identity documents and personal data with licensed identity verification service providers. These partners screen your information against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources as required by our compliance obligations. Data shared for these purposes is processed under strict contractual controls.

Game Technology Providers

When you play a game supplied by a third-party studio — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a player session token and your account identifier are transmitted to the relevant game server to enable real-time gameplay and bet settlement. These providers do not receive your full personal profile and are contractually prohibited from using session data for any purpose other than game delivery and outcome recording.

Legal and Regulatory Disclosure

bbddkk may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where compelled to do so by a valid legal order, court direction, or regulatory requirement. In such cases, bbddkk will disclose only the data specifically requested and will notify affected players where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bbddkk's business, registered player data may be transferred as part of the transaction to the acquiring entity. In such circumstances, bbddkk will provide affected players with advance notice via their registered email address and ensure that the receiving entity is bound by privacy obligations at least as protective as those described in this policy.

bbddkk retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfaction of legal, regulatory, accounting, and reporting requirements. The retention periods below reflect our standard practices for the main categories of data we hold.

Where you request deletion of your personal data and no overriding legal obligation requires us to retain it, bbddkk will securely delete or irreversibly anonymise the relevant data within 30 days of receiving a valid deletion request. Data subject to mandatory retention periods will be held in a restricted archive with access controls and will not be used for any active processing purpose during that time.

As a registered player on bbddkk, you hold the following rights with respect to your personal data. These rights are not absolute — certain exceptions apply where legal obligations or legitimate interests override them — but bbddkk is committed to honouring all valid requests promptly and transparently.

• Right of Access: You may request a copy of the personal data bbddkk holds about you. We will provide a summary of your account data, transaction history, KYC status, and any other data categories you specify within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For most account data, you can make corrections directly through the account settings panel. For KYC documents, updates must be submitted via customer support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. This right is subject to mandatory retention obligations.
• Right to Restriction of Processing: Where you contest the accuracy of your data or object to processing, you may request that we restrict our use of that data while the relevant dispute or objection is under review.
• Right to Data Portability: For data you have provided to us directly and which is processed on the basis of contract or consent, you may request that we provide it to you in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. If you object, bbddkk will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights

To submit any privacy rights request, contact the bbddkk data protection team via the support email listed in the footer of this page. Include your registered account username, the specific right you wish to exercise, and a brief description of the data concerned. bbddkk will verify your identity before processing any data access, rectification, or deletion request to prevent unauthorised disclosure.

We will respond to all valid privacy rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

bbddkk employs a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme covers technical, organisational, and procedural controls across all systems that process player data.

Technical Controls

• Encryption at rest and in transit: All personal data stored in our databases is encrypted at rest using AES-256 or equivalent. All data in transit between your device and our servers is protected by TLS 1.2 or higher.
• Access controls: Access to player data is restricted to authorised bbddkk personnel whose roles require it. Role-based access controls (RBAC) and multi-factor authentication (MFA) are enforced for all internal system access.
• Intrusion detection and monitoring: bbddkk operates continuous network and application monitoring to detect and respond to security incidents in real time.
• Secure password storage: Account passwords are never stored in plain text. They are hashed using bcrypt or an equivalent adaptive hashing algorithm with a unique per-user salt.

Organisational Controls

• All bbddkk employees and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers with access to player data are subject to data processing agreements that mandate security standards equivalent to or exceeding those described in this policy.
• bbddkk conducts periodic internal reviews of data processing activities and security controls to identify and remediate vulnerabilities.

Incident Response

In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, bbddkk will notify affected players via their registered email address without undue delay and within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures bbddkk has taken or proposes to take to address it.

Changes to This Privacy Policy

bbddkk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. Registered players will be notified of material changes via their registered email address or through a prominent notice displayed on the platform at the time of login. Your continued use of the bbddkk platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

The "Last Updated" date displayed at the top of this section indicates when the most recent revision was published. We encourage you to review this policy periodically to stay informed of how bbddkk protects your data.

If you have any questions about this Privacy Policy or about the way bbddkk handles your personal data, please contact us using the support email address displayed in the footer of this page. All privacy-related correspondence should reference "Privacy Policy Query" in the subject line to ensure prompt routing to the data protection team.