Privacy Policy — How bd978 Collects, Uses, and Protects Your Personal Data

Introduction and Scope

bd978 ("the Company", "we", "us", "our") operates an online casino and sports betting platform accessible at https://bd978.app, primarily serving players located in Bangladesh. In the course of providing our services, bd978 necessarily collects and processes certain categories of personal data relating to the individuals who use our platform.

This Privacy Policy ("Policy") is intended to give you a clear and transparent account of exactly what personal data bd978 collects, the legal basis on which we process that data, the purposes for which it is used, who it may be shared with, how long it is retained, and what rights you hold as the data subject. This Policy should be read alongside bd978's Terms & Conditions and Responsible Gaming Policy, both of which are accessible via the footer links on this site.

By registering an account on bd978 or continuing to use the platform after this Policy has been published, you acknowledge that you have read and understood its contents. If you do not accept the terms of this Policy, you should not create an account or use the bd978 platform.

bd978 reserves the right to amend this Policy at any time. When material changes are made to how we handle your personal data, we will notify you via an in-platform notification or via the email address associated with your account prior to the changes taking effect. The effective date at the top of this Policy indicates when the current version became operative. Your continued use of bd978 following notification of any update constitutes acceptance of the revised Policy.

This Policy does not cover the privacy practices of third-party websites that may be linked to from the bd978 platform, nor does it cover the data-handling practices of the game studios whose products appear on bd978 (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi). We encourage you to review the privacy policies of any third-party service you interact with independently of bd978.

Data We Collect

bd978 collects personal data through several distinct channels: directly from you when you register an account or use our services, automatically when you interact with the platform, and from third-party verification and payment providers as part of our legal compliance obligations. The categories of data we collect are described below.

Data You Provide Directly

When you register an account or use bd978's services, you will be asked to provide the following categories of information:

Data Collected Automatically

When you access bd978, our platform automatically records certain technical and behavioural data. This data is collected to ensure platform security, improve service performance, and comply with our anti-fraud and anti-money-laundering obligations:

• Device and Technical Data: IP address, device type, operating system and version, browser type and version, screen resolution, time zone setting (Bangladesh Standard Time where applicable).
• Usage and Behavioural Data: Pages visited, games played, bet amounts and frequencies, session duration, login and logout timestamps, navigation paths through the platform.
• Location Data: General geographic location inferred from your IP address. bd978 does not collect precise GPS-level location data.
• Cookie and Tracking Data: Session identifiers, persistent preference cookies, and analytics identifiers. See the Cookies section of this Policy for full details.

Data Received from Third Parties

In certain circumstances, bd978 may receive personal data about you from third-party sources in order to fulfil its legal obligations or to protect the integrity of the platform:

• Identity Verification Providers: Third-party KYC service providers may share verification results (confirmed identity status, document authenticity outcomes) with bd978 as part of our age and identity verification procedures.
• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners may share transaction confirmation data, account holder name matching results, and fraud signals with bd978.
• Fraud and Risk Intelligence Services: bd978 may receive risk scores or fraud alerts from third-party anti-fraud services that process technical signals (such as IP reputation data) on our behalf.

How We Use Your Data

The personal data bd978 collects is processed for the following clearly defined purposes, each of which rests on a specific legal basis:

Account Registration and Service Delivery

We process your identity, contact, and credentials data in order to create and maintain your bd978 account, authenticate your identity when you log in, and deliver the full range of platform services including casino games, sports betting, deposits, and withdrawals. This processing is necessary for the performance of the contract between you and bd978 and cannot be opted out of while your account remains active.

Identity Verification and Legal Compliance

bd978 is obligated to verify the age and identity of all players in order to comply with its anti-money-laundering (AML) obligations, prevent underage gambling, and maintain the integrity of the platform. We process your identity and document data on the legal basis of compliance with a legal obligation. Failure to complete required verification will result in restrictions on account functionality, including the suspension of withdrawal access.

Payment Processing

Your financial data is processed exclusively for the purpose of facilitating deposits from and withdrawals to your registered payment accounts (bKash, Nagad, Rocket, Upay, or linked bank accounts). bd978 does not store full payment account credentials on its own servers; payment data is handled by our certified payment processing partners who maintain their own security standards. Processing is necessary for the performance of the contract between you and bd978.

Fraud Prevention and Platform Security

bd978 processes technical data, behavioural data, and usage data in order to detect and prevent fraudulent activity, money laundering, bonus abuse, the use of prohibited automated betting software, and other forms of misuse that would harm the platform or other players. This processing is carried out on the legal basis of our legitimate interest in maintaining a secure, fair, and trustworthy gambling environment.

Customer Support

Communications data from your interactions with our support team is processed for the purpose of resolving your queries, investigating complaints, and improving the quality of our support service. This processing rests on our legitimate interest in providing effective customer service and on the performance of our contractual obligations to you.

Marketing Communications

Where you have explicitly opted in to receiving promotional communications from bd978, we may use your contact data (email address and/or mobile number) to send you information about new games, bonuses, and promotions tailored to players based in Bangladesh, including cricket betting opportunities during the BPL, T20 World Cup, IPL, and other major sporting events. You may withdraw your consent to marketing communications at any time by contacting our support team or using the unsubscribe mechanism included in every marketing message. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew consent.

Platform Improvement and Analytics

Aggregated and anonymised usage data is processed to understand how players navigate and interact with the bd978 platform, identify technical issues, optimise game performance, and improve the overall user experience. Where analytics data is genuinely anonymised and cannot be linked back to any individual, it falls outside the scope of this Privacy Policy. Where analytics data involves identifiable information (such as an account ID linked to browsing behaviour), it is processed on the basis of our legitimate interests in improving the platform.

Data Sharing and Third Parties

bd978 does not sell your personal data to any third party. We do not share your information with external organisations except in the specific, limited circumstances described below. In every case where data is shared with a third party, bd978 ensures that appropriate contractual safeguards are in place to protect your data.

Service Providers and Data Processors

bd978 engages a limited number of third-party service providers who process personal data on our behalf and strictly in accordance with our instructions. These service providers include:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum necessary financial and identity data required to process your transactions. Each partner is bound by their own data protection obligations and regulatory requirements.
• Identity Verification Providers: Third-party KYC and age-verification services receive copies of identity documents for the purpose of confirming your age and identity. These providers are contractually prohibited from using your data for any purpose other than completing the verification task assigned to them by bd978.
• Cloud Infrastructure and Hosting Providers: bd978's platform data is hosted on secured cloud infrastructure. Hosting providers have access to encrypted data solely for the purpose of providing storage and compute services.
• Fraud Detection and Anti-Money-Laundering Services: Technical and transactional data may be shared with specialist fraud prevention services to enable real-time risk scoring. These providers are engaged as data processors and are bound by strict data-use limitations.
• Game Studios: When you play a game on bd978 provided by a studio such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi, a session token and certain anonymised game-play parameters may be transmitted to that studio's game servers. No directly identifiable personal data (such as your name or payment details) is transmitted to game studios in the normal course of play.

Legal Disclosure Requirements

bd978 may be required to disclose personal data to governmental, regulatory, or law enforcement authorities when compelled to do so by a valid legal process, court order, or applicable law. In such cases, bd978 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player of the disclosure.

Business Transfers

In the event that bd978 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may form part of the transferred assets. You will be notified in advance of any such transfer and of any resulting change to this Privacy Policy via an in-platform notification. Any successor entity will be required to honour the commitments made in this Privacy Policy or provide you with a reasonable opportunity to delete your account before different terms take effect.

Cookies and Tracking Technologies

bd978 uses cookies and similar tracking technologies on its platform for purposes of session management, security, performance analytics, and personalisation. A cookie is a small text file placed on your device by a website server when you visit that site. Cookies are widely used across the internet and do not contain executable code or viruses.

Types of Cookies Used by bd978

You can control or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types of cookies, or delete cookies that have already been set. Please note that disabling cookies may impair the functionality of the bd978 platform, including the ability to stay logged in during a session.

bd978 does not use third-party advertising cookies or cookies that track your behaviour across websites other than bd978.app itself. We do not participate in cross-site advertising networks or retargeting programmes that would place third-party tracking cookies on your device.

Data Retention and Storage

bd978 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The retention periods applicable to the main categories of data we hold are set out below.

• Account and Identity Data: Retained for the duration of your account's active period, plus a minimum of five (5) years following permanent account closure. This extended retention period reflects anti-money-laundering record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of five (5) years following the completion of the KYC verification process, or following account closure, whichever is later.
• Customer Support Communications: Retained for a period of three (3) years from the date of the last communication in a support thread, to enable resolution of any follow-up queries or disputes.
• Marketing Consent Records: Retained for the period during which you have consented to receive marketing communications, plus one (1) year following withdrawal of consent, as evidence of the consent history.
• Technical and Usage Data (Logs): Server logs and session data are retained for up to twelve (12) months and are then securely deleted or irreversibly anonymised.

When the applicable retention period for a category of data expires, bd978 will securely delete or irreversibly anonymise that data using industry-standard data destruction methods. Where data is anonymised rather than deleted, the resulting anonymised dataset is no longer considered personal data and falls outside the scope of this Privacy Policy.

All personal data held by bd978 is stored on secured servers protected by encryption at rest and in transit. Access to personal data is restricted on a strict need-to-know basis within the bd978 organisation, with access permissions reviewed periodically by our security team.

Your Privacy Rights

As a data subject whose personal information is processed by bd978, you hold the following rights in relation to your personal data. bd978 is committed to honouring these rights promptly and without undue burden to you. To exercise any of the rights described below, please contact our support team via 24/7 live chat or by emailing [email protected].

bd978 will respond to all verified privacy rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day window. bd978 will not charge a fee for processing privacy rights requests unless they are manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee or refuse to act on the request entirely, with written justification provided to you.

For the protection of all players, bd978 may need to verify your identity before processing a privacy rights request. This is to ensure that we do not disclose or delete personal data in response to a fraudulent request made by someone impersonating you. The verification step typically requires you to confirm information only you would know about your bd978 account.

Data Security Measures

The technical and organisational security measures implemented by bd978 include, but are not limited to, the following:

• Encryption in Transit: All data exchanged between your browser or app and bd978's servers is encrypted using TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Personal data stored in bd978's databases is encrypted at rest using AES-256 encryption. Payment-related data is handled exclusively by our payment partners and is not stored in bd978's primary database.
• Access Controls: Access to systems that process personal data is restricted to authorised personnel only, governed by role-based access control (RBAC) policies. All access is logged and reviewed.
• Password Security: Player passwords are hashed using a strong one-way hashing algorithm before storage. bd978 does not hold or have access to your password in plain text. If you suspect your password has been compromised, you should reset it immediately via the account settings.
• Intrusion Detection and Monitoring: bd978's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and other potential security incidents.
• Vulnerability Management: bd978 conducts regular security assessments and engages in ongoing vulnerability monitoring to identify and remediate potential weaknesses in the platform's security posture.
• Data Breach Response: bd978 maintains an internal data breach response procedure. In the event of a breach that is likely to result in a risk to the rights and freedoms of affected players, we will notify affected individuals without undue delay and take immediate remedial action.

Your Responsibilities

While bd978 invests substantially in platform-side security, the security of your personal account also depends on actions you take on your own device and in your day-to-day use of the platform. bd978 recommends that you:

• Use a strong, unique password for your bd978 account that is not reused on other websites or applications.
• Never share your bd978 login credentials with any other person, including family members.
• Ensure the device you use to access bd978 is protected by up-to-date antivirus and anti-malware software.
• Log out of your bd978 account when using shared or public devices.
• Contact bd978 support immediately via live chat if you notice any suspicious activity on your account that you did not initiate.

Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about how bd978 has handled your personal data, please contact our support team via 24/7 live chat on the platform or by writing to us at [email protected]. We will acknowledge your message within two (2) business days and work to resolve your concern as promptly as possible.

bd978 takes all privacy complaints seriously. If you have submitted a complaint and are not satisfied with our response after allowing us a reasonable period to investigate, you may have the right to escalate the matter to a relevant supervisory authority in your jurisdiction. bd978 will always cooperate fully with any such process.