bdi88 Privacy Policy — How We Protect Your Personal Data

1 Who We Are

bdi88 is an online casino and sports betting platform accessible at https://bdi88.io, serving players primarily located in Bangladesh. In the context of this Privacy Policy, "bdi88", "we", "us", and "our" refer to the platform operator responsible for determining the purposes and means of processing your personal data.

bdi88 is committed to handling all personal data in a manner that is fair, transparent, and consistent with applicable data protection principles. If you have any questions about how bdi88 processes your personal data, the contact details provided in Section 15 of this policy should be your first point of reference.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by bdi88 in connection with the operation of the bdi88 platform, including data collected through the bdi88 website at https://bdi88.io, any mobile-optimised interface, customer support channels (live chat, email, and WhatsApp), and promotional communications.

This policy applies to all registered players, individuals who browse the bdi88 website without registering, and individuals who contact bdi88 for support or information purposes. It applies regardless of where you are physically located at the time you access the platform, provided that you are accessing the platform from Bangladesh or have otherwise provided a Bangladeshi address during registration.

3 Data We Collect

bdi88 collects the following categories of personal data from players and platform visitors:

bdi88 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is incidentally present in identity documents submitted for KYC purposes.

4 How We Collect Data

bdi88 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automated technologies: Technical and usage data collected automatically when you visit the bdi88 website, including through cookies, server logs, and similar tracking technologies as described in Section 10.
• Third-party payment processors: Confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners confirming the status and details of deposit and withdrawal transactions.
• Identity verification services: Where bdi88 uses a third-party KYC verification service, data returned by that service confirming the validity or status of submitted identity documents.
• Fraud prevention services: Data shared with or received from fraud detection partners to identify suspicious account activity, duplicate registrations, or potential money laundering patterns.

5 Purpose & Legal Basis for Processing

bdi88 processes your personal data only where a legitimate legal basis exists for that processing. The following table summarises the primary purposes for which bdi88 processes personal data and the legal basis on which each processing activity rests:

6 Sharing Your Data

bdi88 does not sell, rent, or disclose your personal data to unaffiliated third parties for their own marketing purposes. bdi88 shares personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with the relevant payment service provider (e.g., bKash, Nagad, Rocket, Upay, or the relevant bank) solely to the extent necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Your identity documentation and relevant personal data may be shared with a contracted third-party KYC verification service for the purpose of confirming your identity and age.
• Fraud prevention and risk management partners: Technical and usage data may be shared with fraud detection services to protect the integrity of the bdi88 platform and to identify suspicious account activity.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive limited technical session data necessary to deliver their games within the bdi88 platform environment. These providers act as data processors under contract with bdi88 and are not permitted to use your data for their own purposes.
• Legal and regulatory authorities: Where required by applicable law, court order, or a formal request from a competent regulatory or law enforcement authority, bdi88 will disclose personal data to the relevant body. bdi88 will notify you of any such disclosure where it is legally permitted to do so.
• Professional advisers: bdi88 may share personal data with its lawyers, accountants, or auditors where necessary and subject to strict professional confidentiality obligations.

7 Payment Data & Mobile Wallets

Given that bdi88 primarily serves players in Bangladesh, mobile wallet numbers — including those registered with bKash, Nagad, Rocket, and Upay — are treated as financial data and are afforded the same level of protection as traditional bank account details.

bdi88 stores your mobile wallet number in encrypted form solely for the purpose of processing your withdrawal requests back to your registered payment method. bdi88 does not store full card numbers for Visa or Mastercard transactions; card payment data is tokenised by the payment gateway and bdi88 retains only a non-reversible transaction reference.

• Your mobile wallet number is never shared with any party other than the relevant payment processor for the purpose of completing your transaction.
• bdi88 applies a return-to-source policy, meaning withdrawals are processed back to the same payment method from which your most recent qualifying deposit was made. This is a fraud prevention measure as well as a data minimisation measure — bdi88 does not maintain a database of alternative payout accounts for each player.
• Transaction records, including deposit and withdrawal amounts in BDT and timestamps, are retained as part of your account history for a minimum period of five years in compliance with financial record-keeping obligations.

8 Data Retention

bdi88 retains your personal data for as long as your account remains active and for such additional period as is required by law or is otherwise necessary for bdi88's legitimate business purposes. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with bdi88, plus a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction data: Retained for a minimum of five years from the date of each transaction.
• KYC documentation: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Customer support communications: Retained for a minimum of two years from the date of the interaction.
• Marketing preference data: Retained until you withdraw your consent or close your account, plus a further 12 months for audit purposes.
• Technical and usage data (server logs): Retained for a rolling period of 12 months, after which log data is anonymised or deleted.

At the end of the applicable retention period, bdi88 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

9 Security Measures

bdi88 implements a layered approach to data security, combining technical and organisational safeguards designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key measures in place include:

• 256-bit SSL/TLS encryption on all pages of the bdi88 platform, ensuring that data transmitted between your device and bdi88 servers cannot be intercepted in transit.
• Encryption at rest for all sensitive data stored on bdi88 servers, including identity documents, financial data, and KYC documentation.
• Access controls: Personal data is accessible only to bdi88 staff and contractors who have a legitimate operational need to process it. Access is granted on a role-based, least-privilege basis and is subject to formal access management procedures.
• Two-factor authentication for internal system access used by bdi88 staff handling player data.
• Regular security assessments and vulnerability testing of the bdi88 platform infrastructure.
• Incident response procedures: bdi88 maintains documented data breach response procedures. In the event of a data breach affecting your personal data, bdi88 will notify affected players within a reasonable timeframe and take immediate remediation steps.

10 Cookies & Tracking Technologies

bdi88 uses cookies and similar tracking technologies to operate the platform, analyse usage patterns, remember your session state, and — where you have consented — deliver relevant promotional content. The categories of cookies used by bdi88 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bdi88 platform to function. They enable core functions such as secure login session management, shopping cart functionality, and fraud prevention checks. These cookies cannot be disabled without impairing your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymous information about how visitors use the bdi88 website — such as which pages are visited most frequently and how long sessions last. This data is used solely to improve platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences — such as your preferred language, display settings, and account configurations — so that you do not need to re-enter them on each visit.
• Marketing and Targeting Cookies: Where you have provided explicit consent, these cookies track your interaction with bdi88 promotional content and are used to display offers that may be relevant to your gaming history and preferences. You may withdraw consent for marketing cookies at any time via your account settings.

You may control cookie preferences through your web browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bdi88 platform. Disabling other cookie categories will not prevent you from using the platform but may affect your experience.

11 Your Rights Over Your Personal Data

You hold the following rights in respect of the personal data that bdi88 holds about you. To exercise any of these rights, please contact the bdi88 support team using the contact details in Section 15. bdi88 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that bdi88 holds about you, along with information about how it is being processed.
• Right of Rectification: You have the right to request that bdi88 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right of Erasure: You have the right to request that bdi88 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to bdi88's legal retention obligations under financial and anti-money laundering regulations.
• Right to Restriction of Processing: You have the right to request that bdi88 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of bdi88's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to bdi88 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bdi88's legitimate interests. bdi88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — such as the receipt of promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

12 Protection of Minors

bdi88 strictly prohibits the use of its platform by individuals under the age of 21. bdi88 does not knowingly collect personal data from any person under the age of 21, and the registration process includes an explicit age declaration that must be confirmed by the registering individual.

If bdi88 discovers or has reasonable grounds to believe that personal data has been collected from an individual who is under 21 years of age, it will immediately suspend the relevant account, delete the data associated with that account, and reverse any transactions completed during the period of underage use to the extent that this is technically and operationally possible.

If you are a parent or guardian and believe that your child may have registered on the bdi88 platform, please contact bdi88 support immediately via live chat or at the email address in Section 15. bdi88 will investigate and act on all such reports as a matter of priority.

13 International Data Transfers

Some of the third-party service providers used by bdi88 — including game software providers such as Pragmatic Play, Evolution Gaming, and Ezugi — may process data on servers located outside Bangladesh. Where such international transfers occur, bdi88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Bangladesh.

These safeguards may include contractual data processing agreements that impose data protection obligations on the receiving party, standard contractual clauses, or transfers to jurisdictions recognised as providing an adequate level of data protection.

bdi88 does not transfer personal data internationally for marketing purposes. All international transfers are strictly limited to operational necessities — primarily the delivery of third-party game content within the bdi88 platform environment.

14 Changes to This Privacy Policy

bdi88 reserves the right to update or amend this Privacy Policy at any time. Material changes to this policy — that is, changes that materially affect the way in which bdi88 processes your personal data or the rights you hold — will be communicated to registered players via the mobile number or email address associated with their account at least seven days before the updated policy takes effect.

The date of the most recent version of this policy is displayed at the top of this document. Continued use of the bdi88 platform after the effective date of any updated policy constitutes your acknowledgment of and agreement to the revised terms. If you do not accept the updated policy, you should close your account before the effective date by contacting bdi88 support.

Minor, non-material changes — such as typographical corrections, clarifications of existing practices, or updates to contact details — may be made without prior notice. The effective date will be updated to reflect any such changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bdi88 processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 through the bdi88 platform — the fastest way to reach our support team.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line.
• WhatsApp: +880 1700-000000 (plain text — not a clickable link).

bdi88 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response or resolution within 30 days of receipt. Where a request is complex or where bdi88 receives a high volume of requests, this period may be extended by a further 30 days, in which case bdi88 will notify you of the extension and the reason for it.