bd68 Privacy Policy — How We Protect Your Personal Data
At bd68, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains precisely what personal data we collect from players in Bangladesh, how it is used, how long it is retained, and what rights you hold over your own information. We encourage every bd68 player to read this document in full before registering an account.
Table of Contents
1. Introduction and Scope
This Privacy Policy ("Policy") describes how bd68 ("bd68", "we", "us", or "our") collects, processes, stores, and protects the personal information of users who visit, register on, or otherwise interact with the bd68 platform at https://bd68.io (the "Platform"). bd68 operates as an online betting and gaming service primarily serving players located in Bangladesh.
This Policy applies to all personal data collected through the Platform, including data gathered during account registration, identity verification, deposits, withdrawals, game play, customer support interactions, and marketing communications. It also covers data collected passively through cookies, log files, and analytics tools as described in Section 7 below.
By accessing the Platform, creating a player account, or submitting any personal data to bd68, you acknowledge that you have read, understood, and agreed to the data processing practices described in this Policy. If you do not agree with any part of this Policy, you must not register or continue to use the bd68 Platform.
Scope Note: This Policy covers only data processing activities conducted by bd68 in connection with the Platform. Third-party services linked from or integrated with the Platform — including game providers such as Evolution Gaming, Pragmatic Play, and Ezugi, and payment processors such as bKash, Nagad, and Rocket — operate under their own separate privacy policies for which bd68 accepts no responsibility.
2. Data We Collect
bd68 collects personal data from players in two ways: information you provide directly to us, and information we collect automatically when you use the Platform. The categories of data we collect are set out in the table below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, NID or passport number | Registration form; KYC document upload |
| Contact Data | Mobile number, email address, residential address (division, district, city) | Registration form; account settings updates |
| Financial Data | bKash/Nagad/Rocket mobile wallet number, bank account details, transaction amounts in BDT | Deposit and withdrawal forms; payment processor callbacks |
| Gaming Activity Data | Bets placed, game sessions, win/loss records, bonus claims, wagering history | Platform game engine logs; betting system records |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatic collection via server logs and analytics |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support system; email platform |
| Cookie and Usage Data | Pages visited, click paths, session duration, referral source, marketing attribution | Cookies and tracking pixels (see Section 7) |
bd68 does not knowingly collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request. Such information is handled with enhanced confidentiality and used solely for the purpose of implementing the requested responsible gaming measure.
You are not required by law to provide personal data to bd68. However, certain data — particularly identity and financial data — is required for the Platform to function correctly. Failure to provide mandatory data fields will prevent account registration, deposits, or withdrawals from being processed.
3. How We Use Your Data
bd68 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or as otherwise permitted by applicable law.
- Account creation and management: To register your player account, verify your identity, maintain your account settings, and provide you with access to the Platform's features.
- Transaction processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and other supported payment methods.
- KYC and fraud prevention: To verify your age (21+), confirm your identity, detect and prevent fraudulent activity, money laundering, and other prohibited activities as described in the bd68 Terms & Conditions.
- Game delivery and personalisation: To provide, maintain, and improve the bd68 gaming experience, including cricket betting, live casino games, slots, crash games, and other products available on the Platform.
- Responsible gaming: To monitor gaming behaviour for signs of problem gambling, implement deposit limits, session reminders, cooling-off periods, and self-exclusion measures where requested or where bd68 has a duty of care obligation.
- Customer support: To respond to your account queries, technical issues, payment disputes, and complaints through the [email protected] channel and any in-platform chat facility.
- Marketing and promotions: To send you information about bd68 bonuses, promotions, and new features by email or SMS, where you have consented to receive such communications or where bd68 has a legitimate interest in contacting existing players. You may opt out at any time as described in Section 8.
- Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce the bd68 Terms & Conditions.
- Analytics and platform improvement: To analyse usage patterns, diagnose technical issues, conduct A/B testing, and make data-driven improvements to the Platform's design and performance.
4. Legal Basis for Processing
bd68 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is required to perform the contract between you and bd68, including account registration, deposit and withdrawal processing, KYC verification, and game delivery.
- Legitimate interests: Processing that is necessary for bd68's legitimate business interests, including fraud prevention, platform security, analytics, and direct marketing to existing players, provided those interests are not overridden by your own rights and interests.
- Legal obligation: Processing that is required for bd68 to comply with applicable law, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful orders from competent authorities.
- Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent, particularly for non-essential cookies and certain marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Data Sharing and Disclosure
bd68 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the following circumstances and only to the extent necessary for the stated purpose:
- Payment processors: Your financial data is shared with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely for the purpose of processing your deposit and withdrawal transactions. Each provider operates under its own data protection policy.
- Identity verification providers: Where bd68 uses a third-party KYC or document verification service, your identity documents and related data are shared with that provider for the purpose of completing your account verification.
- Game providers: Certain technical data (such as player session tokens) is shared with third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, and NetEnt to enable the delivery of their games on the bd68 Platform.
- Analytics and technology providers: Anonymised or pseudonymised usage data may be shared with analytics and cloud infrastructure providers for the purpose of platform performance monitoring and improvement.
- Legal and regulatory authorities: bd68 may disclose your personal data to competent government authorities, law enforcement agencies, or courts in Bangladesh or other relevant jurisdictions where required by law, court order, or in connection with the investigation of fraud, money laundering, or other unlawful activity.
- Business transfers: In the event that bd68 undergoes a merger, acquisition, or sale of all or a material portion of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Policy that may result.
No Cross-Border Data Transfers Without Safeguards: Where your personal data is transferred outside of Bangladesh to a service provider or partner in another country, bd68 takes reasonable steps to ensure that appropriate contractual or technical safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh.
6. Data Retention
bd68 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, fraud prevention, or reporting requirements. The specific retention periods that apply to the main categories of personal data are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and KYC data | 5 years after account closure | AML compliance and fraud prevention obligations |
| Financial transaction records | 5 years after each transaction | Financial record-keeping and dispute resolution |
| Gaming activity logs | 3 years after account closure | Responsible gaming monitoring; dispute resolution |
| Customer support records | 3 years after last interaction | Quality assurance and complaint handling |
| Technical and log data | 12 months | Security monitoring and platform performance |
| Marketing preferences | Until opt-out or account closure | Consent management |
When personal data is no longer required for the purposes outlined above, bd68 will securely delete or anonymise it in accordance with industry-standard data disposal practices. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for analytical and business improvement purposes.
7. Cookies and Tracking
bd68 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website you visit. bd68 uses the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
- Functional cookies: These cookies remember your preferences, such as your language settings, display preferences, and recent game history, to provide a more personalised experience on return visits.
- Analytics cookies: These cookies collect anonymised data about how players use the Platform, including which pages are visited most frequently, how long sessions last, and where users drop off. This data is used solely to improve Platform performance and user experience.
- Marketing cookies: These cookies track your visits to the Platform and may be used, in combination with data from third-party advertising networks, to present bd68 promotional content that is relevant to your interests. These cookies are only placed with your consent.
You can control and manage cookies through your browser settings at any time. Note that disabling strictly necessary cookies may prevent some or all of the Platform's features from functioning correctly. For full details of the cookies in use on the bd68 Platform and instructions for managing your cookie preferences, please refer to the cookie management tool available in the Platform settings.
bd68 does not use cookies to collect sensitive personal data such as financial details, passwords, or government-issued identification numbers. All cookie data is stored securely and handled in accordance with this Privacy Policy.
8. Your Rights
As a player on the bd68 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". bd68 will acknowledge your request within 5 business days and will aim to fulfil it within 30 calendar days.
To opt out of marketing communications specifically, you may click the unsubscribe link included in any bd68 marketing email, or send an opt-out request to [email protected]. Marketing opt-outs are processed within one business day. Please note that transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not affected by a marketing opt-out and will continue to be sent as they are necessary for the operation of your account.
9. Children and Minors
The bd68 Platform is intended exclusively for adults aged 21 years and above. bd68 does not knowingly collect personal data from any person under the age of 21. Persons under 21 are strictly prohibited from registering an account, making a deposit, or participating in any game or betting activity on the Platform.
If bd68 becomes aware that personal data has been inadvertently collected from a person under 21 years of age, that data will be permanently deleted from our systems without delay. The associated account will be permanently closed and any deposits returned where technically possible. Any winnings generated on such an account will be forfeited in full.
If you are a parent or guardian and believe that a minor in your care has registered on the bd68 Platform, please contact us immediately at [email protected]. bd68 takes underage gambling extremely seriously and cooperates fully with responsible gaming organisations and competent authorities on all such matters.
21+ Only: bd68 applies a strict minimum age of 21 years to all player accounts without exception. This restriction is enforced through KYC age verification procedures. All players must be 21 years of age or older to use the bd68 Platform.
10. Security Measures
bd68 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The key security measures in place include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bd68 Platform, ensuring that login credentials, financial data, and personal information are protected in transit at all times.
- Encrypted data storage for sensitive personal data fields including passwords (hashed using industry-standard algorithms), financial identifiers, and identity document references, ensuring that data at rest is protected against unauthorised access.
- Role-based access controls (RBAC) that restrict internal access to personal data strictly to bd68 staff members whose job functions require that access, with all access events logged and audited.
- Two-factor authentication (2FA) available for all player accounts and enforced for all internal bd68 administrative access to production systems.
- Regular security assessments including vulnerability scanning, penetration testing, and code reviews conducted by qualified security professionals to identify and remediate potential weaknesses in the Platform's infrastructure.
- Incident response procedures that enable bd68 to detect, contain, and respond to data security incidents promptly, and to notify affected players and relevant authorities in accordance with applicable data breach notification requirements.
While bd68 takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. bd68 will never ask you to share your password via email, chat, or telephone.
11. Changes to This Policy
bd68 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, bd68 will:
- Post a prominent notice on the bd68 Platform informing players of the update;
- Update the "Last Updated" date and version number displayed at the top of this Policy and in the last-updated bar below the hero section;
- Where the changes are significant and affect how your personal data is used in a material way, send a direct notification to your registered email address at least 7 days before the changes take effect.
Your continued use of the bd68 Platform after the effective date of any revised Policy constitutes your acceptance of the updated data processing practices described therein. If you do not agree to any revised version of this Policy, you must stop using the Platform and may request account closure by contacting [email protected].
We recommend bookmarking this page and reviewing it periodically. The version number and effective date displayed at the top of this document will help you identify whether the Policy has been updated since your last visit.
12. Contact and Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd68 processes your personal data, please contact our data team at:
[email protected] | Subject: Privacy Policy Enquiry
Our support team operates 24 hours a day, 7 days a week, at Bangladesh Standard Time (UTC+6). All privacy-related enquiries are handled by trained staff and will receive a substantive response within 5 business days of receipt.
If you are not satisfied with bd68's response to your privacy concern, or if you believe that bd68 has processed your personal data in a manner that is inconsistent with applicable data protection principles, you have the right to escalate your complaint to the relevant data protection or consumer affairs authority in Bangladesh. bd68 cooperates fully with all competent supervisory authorities and will engage constructively with any investigation or inquiry.
For responsible gaming concerns specifically, please visit our dedicated Responsible Gaming page, which provides information on self-exclusion, deposit limits, and other tools available to bd68 players aged 21 and above.
Key Privacy Facts
- All data protected by 256-bit SSL encryption
- We never sell your personal data to third parties
- Platform is 21+ only — no minor data collected
- KYC data retained for 5 years after account closure
- You hold 8 data rights — access, erasure, portability & more
Have a privacy question or data request? Our team responds within 5 business days.
Our Privacy Commitments
Six core privacy principles that guide every decision bd68 makes about your personal information.
End-to-End Encryption
Every byte of data transmitted between your device and the bd68 Platform is protected by 256-bit SSL/TLS encryption — the same standard used by leading global banks. Your credentials and financial details are never sent in plain text.
Zero Data Selling
bd68 does not and will never sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate and improve the Platform and to fulfil our legal obligations — nothing more.
Strict KYC Standards
Our identity verification process confirms that every bd68 player is a real adult aged 21 or above. KYC data is stored with enhanced encryption and accessed only by authorised compliance personnel, never shared beyond operational necessity.
Full Transparency
This Privacy Policy is written in clear, plain English — not legal jargon designed to obscure. bd68 believes every player in Bangladesh deserves to understand exactly how their data is used before they share it with us.
Your Rights, Respected
From access requests to data erasure, bd68 honours all player data rights and aims to respond within 30 days. Withdrawing consent or opting out of marketing takes effect within one business day of your request reaching our team.
Regular Security Audits
The bd68 Platform undergoes scheduled vulnerability assessments and penetration tests conducted by independent security professionals. Any identified risks are prioritised and remediated before they can affect player data.
Ready to Play at bd68?
Now that you understand how bd68 protects your privacy, explore our full range of games and betting markets — all secured by the same commitment to data protection you just read about.