bd188 Privacy Policy
Your privacy matters to bd188. This Privacy Policy explains in plain, formal English what personal data we collect from players across Bangladesh, how we use it, who we share it with, and what rights you hold over your own information. We are committed to handling your data with the highest standards of security and transparency.
This Privacy Policy ("Policy") applies to all users of the bd188 platform, accessible at bd188.bio, and covers all services offered by bd188 including online casino games, sports betting, live casino, crash games, and any related customer support or promotional communications. By registering an account with bd188 or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
bd188 acts as the data controller for all personal information collected directly from users via the platform. Where bd188 engages third-party processors to handle data on its behalf — for example, payment service providers or game technology suppliers — those processors are bound by data processing agreements that require them to handle your information only as instructed by bd188 and in accordance with applicable data protection standards.
Section 1
Information We Collect
bd188 collects personal information through several channels: directly from you when you register and interact with the platform, automatically as you browse and play, and occasionally from third-party partners who assist with payment processing and identity verification. The categories of data we collect are set out below.
Registration and Account Data
When you create a bd188 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, gender, residential address, email address, mobile phone number, and the username you choose. We also record the date and time of account creation and the device used for initial registration.
Identity Verification (KYC) Data
To comply with our anti-money laundering (AML) obligations and to verify that all players are aged 18 or above, bd188 requires identity documentation before processing withdrawals. Accepted documents include a National Identity Card (NID), passport, or birth certificate. We may also request a utility bill, bank statement, or mobile wallet screenshot to confirm your registered address. Copies of these documents are stored securely and used solely for verification and regulatory compliance purposes.
Financial and Transaction Data
When you deposit or withdraw funds, bd188 records the transaction amount, currency, payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction reference numbers, timestamps, and the outcome of each transaction. We do not store full card numbers or mobile banking PINs — sensitive payment credentials are handled exclusively by our certified payment processors.
Gameplay and Betting Activity
bd188 records all game sessions, bet placements, wager amounts, game outcomes, bonus activity, and any in-platform communications associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.
Technical and Device Data
Our platform automatically collects technical information each time you access bd188. This includes your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited within the platform, and session duration. This data is used to maintain platform performance, improve user experience, and detect suspicious access patterns.
Section 2
How We Use Your Information
bd188 processes your personal data only for legitimate, defined purposes. The table below maps each processing activity to the lawful basis under which it is carried out.
| Processing Activity | Data Used | Lawful Basis |
|---|---|---|
| Account creation and authentication | Registration data, device data | Performance of contract |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Financial and transaction data | Performance of contract |
| Fraud detection and AML screening | Transaction data, IP address, device data | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | Gameplay data, betting history | Legal obligation / Legitimate interest |
| Customer support communications | Account data, correspondence history | Performance of contract |
| Sending promotional offers and bonuses | Email, mobile number, betting preferences | Consent (opt-in) |
| Platform analytics and improvement | Technical data, session data | Legitimate interest |
Where bd188 processes your personal data on the basis of consent — for example, to send you promotional communications about new bonuses, BPL betting markets, or seasonal offers — you may withdraw that consent at any time by contacting support at [email protected] or by updating your communication preferences in the account settings panel. Withdrawal of consent for marketing communications does not affect the lawfulness of any processing carried out prior to withdrawal, and it does not prevent bd188 from sending you transactional or regulatory communications that are necessary for the performance of your account agreement.
Section 3
Disclosure and Third-Party Sharing
bd188 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your information only in the circumstances described below, and only to the minimum extent necessary for each purpose.
- Payment Service Providers: To process your deposits and withdrawals, bd188 shares necessary transaction details with certified payment processors supporting bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process payment data under their own privacy frameworks and are contractually prohibited from using your data for any purpose other than completing the transaction.
- Game and Technology Providers: bd188 uses games and platform infrastructure supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive limited gameplay session data (such as a session token and game outcome log) to deliver their services. They do not receive your full identity data.
- Identity Verification Services: For KYC compliance, bd188 may share document images and registration data with specialist identity verification services. These services process data solely to verify the accuracy of the documents submitted and return a verification result to bd188.
- Regulatory and Law Enforcement Authorities: bd188 may disclose personal data to governmental, regulatory, or law enforcement bodies where required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.
- Fraud Prevention and AML Partners: bd188 may share transaction and device data with specialist fraud prevention and anti-money laundering screening services to detect and prevent financial crime. These partners process data only as instructed by bd188 under strict data processing agreements.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of bd188's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.
Section 4
Cookies and Tracking Technologies
The bd188 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow bd188 to recognise your browser across sessions, remember your preferences, maintain your logged-in state, and gather aggregate analytics about how the platform is used.
bd188 uses the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the bd188 platform to function. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without breaking core platform functionality.
- Performance and Analytics Cookies: These cookies collect anonymised or aggregated data about how users interact with the platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. This information helps bd188 improve the platform experience for all players.
- Functional Cookies: These cookies remember user preferences such as language settings, preferred payment method display, and regional settings. Disabling these cookies may result in a reduced personalised experience.
- Targeting and Preference Cookies: Where you have consented to receive marketing communications, bd188 may use cookies to record your content preferences and tailor promotional content shown to you on the platform. You may opt out of these cookies at any time via your account settings.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. However, please note that disabling strictly necessary cookies will prevent you from logging into your bd188 account and accessing core platform features. bd188 does not use cookies to collect personally identifiable information beyond what is described in this Policy.
Section 5
Data Retention
bd188 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for as long as is required or permitted by applicable law. The retention periods applicable to the main categories of data we hold are summarised below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account plus 5 years after closure | AML compliance, dispute resolution |
| KYC identity documents | 5 years from date of verification | Regulatory obligation |
| Financial transaction records | 7 years from date of transaction | AML and financial record-keeping obligations |
| Gameplay and betting history | 5 years from date of session | Dispute resolution, responsible gaming review |
| Customer support correspondence | 3 years from date of correspondence | Quality assurance, dispute resolution |
| Marketing preference data | Until consent is withdrawn, then deleted within 30 days | Consent-based processing |
| Technical / device / IP logs | 90 days rolling | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, bd188 will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, the resulting anonymised dataset no longer constitutes personal data and is retained indefinitely for aggregate analytical purposes only.
If you request account closure, bd188 will cease processing your data for all active purposes immediately. Your data will then be retained in a restricted archive for the mandatory regulatory retention periods set out above before being permanently deleted. You will not be able to reactivate your account once the deletion process has been completed.
Section 6
Security Measures
Protecting your personal data is a core operational commitment at bd188. We employ a layered security architecture designed to safeguard your information against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our key security measures include the following:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the bd188 platform is protected by industry-standard 256-bit SSL/TLS encryption. The padlock symbol displayed in your browser's address bar confirms that your connection is encrypted.
- Encrypted Data Storage: Sensitive data fields stored in bd188's databases — including KYC document references, financial identifiers, and authentication credentials — are encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within bd188's systems is restricted to personnel who require it for their specific job function. All internal access is logged, and access privileges are reviewed regularly.
- Two-Factor Authentication (2FA): bd188 offers optional 2FA for player accounts, and requires mandatory 2FA for all internal staff accounts that have access to personal data.
- Penetration Testing and Vulnerability Scanning: bd188's platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities before they can be exploited.
- Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, bd188 will notify affected users promptly. Our security team operates around the clock to detect and respond to anomalous activity.
Section 7
Your Rights and Choices
As a player on the bd188 platform, you hold a number of rights in relation to the personal data we hold about you. bd188 is committed to honouring these rights promptly and transparently. Your rights are summarised below:
- Right of Access: You may request a copy of the personal data that bd188 holds about you. We will provide this within a reasonable timeframe following identity verification, at no charge for standard requests.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your account settings panel. For KYC-related corrections, please contact support.
- Right to Erasure: Subject to our legal retention obligations (see Section 5), you may request that bd188 delete your personal data. We will honour erasure requests to the maximum extent permitted by applicable law. Where data must be retained for regulatory reasons, we will restrict its use to compliance purposes only.
- Right to Restriction of Processing: You may request that bd188 restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while you await the outcome of an objection you have raised.
- Right to Data Portability: Where bd188 processes your data on the basis of consent or contract performance, you may request that we provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
- Right to Object: You may object at any time to the processing of your personal data where bd188 relies on legitimate interest as the lawful basis. You may also object to receiving direct marketing communications at any time, regardless of the lawful basis used.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
To exercise any of the rights listed above, please contact the bd188 data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and aim to resolve it within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Section 8
Contact and Data Queries
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which bd188 processes your personal data, please contact us using the details below. bd188 takes all privacy-related enquiries seriously and will respond promptly.
Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing to the relevant team.
WhatsApp: +880 1700-000188 (available 24/7, Bangladesh Standard Time, UTC+6).
Response Time: Standard enquiries are typically acknowledged within 3 business hours. Formal data rights requests (erasure, access, portability) are acknowledged within 3 business days and resolved within 30 calendar days.
bd188 reserves the right to update this Privacy Policy from time to time. Where changes are material — for example, a new category of data being collected or a new third-party processor being engaged — bd188 will notify active account holders by email or via an in-platform notification prior to the change taking effect. Continued use of the bd188 platform following notification of a material change constitutes acceptance of the revised Policy. The effective date at the top of this document will always reflect the most recent revision.
Privacy at a Glance
How bd188 Protects Your Data
Every byte of data exchanged between your device and the bd188 platform is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks serving Bangladesh.
bd188's mandatory Know Your Customer process protects the platform and all its players from fraud and identity theft, while ensuring only verified adults aged 18 and above can access real-money play.
Sensitive data fields in bd188's database are encrypted at rest with AES-256. Access is restricted to authorised personnel only, with every internal access event logged and regularly audited.
bd188 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. Data sharing is limited strictly to service delivery, legal compliance, and fraud prevention.
Through your bd188 account settings and by contacting our support team, you can access, correct, export, or request deletion of your personal data at any time, in line with the rights described in Section 7.
Our Bangladesh-based support team is available around the clock to answer privacy questions, process data rights requests, and address any concerns about how your bd188 account data is handled.
Ready to Play on a Platform You Can Trust?
Your data is protected. Your account is secure. Explore cricket betting, live casino, slots, and more — or visit our FAQ if you have further questions about your bd188 account.