Your Privacy Matters at bd89rz —
Transparent Data Practices

1 Data We Collect

bd89rz collects personal data from you in several ways: directly when you register and use the platform, automatically through your device and browser as you navigate the site, and occasionally from trusted third-party sources as part of our identity verification and fraud prevention processes. The categories of personal data we collect are described in detail below.

1.1 Registration and Identity Data

When you create a bd89rz account, we collect the information you provide during the registration process. This includes:

• Your full legal name as it appears on your government-issued identification document
• Your date of birth (used to confirm you are aged 18 or above)
• Your residential address in Bangladesh (district, city, and full postal address)
• Your email address (used for account communications and recovery)
• Your Bangladeshi mobile phone number (used for account verification and payment method linking)
• A username and password of your own choosing

1.2 Identity Verification (KYC) Documents

As part of our mandatory Know Your Customer (KYC) process — which is required before withdrawals can be processed — we collect copies of the following documents when submitted by you:

• National Identity Card (NID) — front and back
• Passport photo page (if NID is unavailable)
• Driving licence (as an alternative identification document)
• Utility bill or bank statement confirming residential address (dated within 90 days of submission)
• Selfie photograph or live identity confirmation image (where required by our compliance team)

KYC document images are stored securely and accessed only by authorised compliance staff. They are never used for any purpose other than identity verification and fraud prevention.

1.3 Financial and Payment Data

When you make a deposit or request a withdrawal on bd89rz, we collect transaction-level financial data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction reference number assigned by the payment provider, the transaction amount in BDT (৳), the date and time of the transaction, and the current account balance before and after the transaction. bd89rz does not store full card numbers, bKash PINs, Nagad PINs, or any other payment credential. All sensitive payment data is handled directly by the respective payment service providers under their own security and compliance frameworks.

1.4 Gameplay and Betting Data

bd89rz records a complete log of your activity on the platform for operational, analytical, and responsible gaming purposes. This includes all games played (title, provider, bet amount, outcome, timestamp), all sports betting markets accessed and wagers placed, session start and end times, bonus offers claimed and wagering progress, and any responsible gaming tool activations (deposit limits, session timers, self-exclusion requests).

1.5 Technical and Device Data

When you access bd89rz via a web browser or mobile browser, our servers automatically record certain technical information about your visit. This includes your IP address, browser type and version, operating system and device type, screen resolution, referring URL, pages visited and time spent on each page, and session identifier. This data is used for security monitoring, fraud detection, technical performance optimisation, and aggregate analytics.

1.6 Customer Support Data

When you contact the bd89rz support team via live chat, email, or any other supported channel, we record the content of the communication, the date and time of the interaction, the issue category, and the resolution outcome. These records are maintained for quality assurance, staff training, and dispute resolution purposes.

2 How We Use Your Data

bd89rz uses the personal data it collects for a defined set of lawful purposes. We do not use your data for any purpose that is incompatible with the purposes listed below, and we do not sell your personal data to third parties for their own commercial use under any circumstances.

Purpose	Data Used	Legal Basis
Account registration and management	Registration data, contact details	Contract performance
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial data, payment method details	Contract performance
Fraud prevention and security monitoring	Technical data, transaction data, gameplay data	Legitimate interest
Responsible gaming monitoring	Gameplay data, session data, support interactions	Legal obligation / legitimate interest
Customer support and dispute resolution	Support communications, account data	Contract performance / legitimate interest
Platform improvement and analytics	Technical data, gameplay data (aggregated)	Legitimate interest
Marketing communications (where consented)	Contact details, gameplay preferences	Consent
Legal and regulatory compliance	All data categories as required	Legal obligation

2.1 Marketing Communications

bd89rz may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions (such as Eid special offers, BPL cricket season promotions, or Pohela Boishakh rewards), and platform updates — but only where you have given your explicit prior consent to receive such communications during the registration process or via your account preferences settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team via live chat. Withdrawal of marketing consent does not affect our ability to send you service-essential communications (e.g., withdrawal confirmation, account security alerts, KYC request notices).

3 Data Sharing & Third Parties

bd89rz does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, bd89rz shares the minimum necessary transaction data with the relevant payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each of these providers operates under their own privacy policies and data protection practices. bd89rz shares only the data required to complete the transaction — typically your mobile number (for mobile financial services) or partial card details (for card payments) — and does not share your full account profile or gameplay history with any payment provider.

3.2 Game Software Providers

The games accessible through bd89rz are developed and operated by third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming. When you launch a game, a session token is shared with the relevant game provider to authenticate your session and maintain your account balance in real time. These providers may collect technical gameplay data within their own game environments. bd89rz does not share your full personal identity data (name, NID, address) with game providers.

3.3 Identity Verification Partners

bd89rz may use a third-party KYC and identity verification service to assist with processing identity documents submitted during the account verification process. Any such partner is contractually bound to process your KYC data solely for the purpose of identity verification on behalf of bd89rz, and is prohibited from using it for any other purpose.

3.4 Legal and Regulatory Disclosures

bd89rz will disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies without prior notice to you in any of the following circumstances: where we are legally compelled to do so by a valid legal order or judicial process; where we reasonably believe disclosure is necessary to prevent or investigate suspected criminal activity including money laundering or fraud; or where disclosure is required to protect the safety of any individual. In all such cases, bd89rz will disclose only the minimum data necessary to satisfy the legal requirement.

4 Cookies & Tracking

The bd89rz platform uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by the bd89rz web server when you visit the site. Cookies do not contain executable code and cannot directly access other files on your device.

4.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your logged-in session, remember your preferred language setting, and prevent cross-site request forgery attacks. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional Cookies: These remember your preferences such as your last-used game category, your preferred deposit method, and your responsible gaming tool settings. They are not strictly necessary but significantly improve your experience.
• Analytics Cookies: bd89rz uses aggregated, anonymised analytics to understand how players navigate the platform — which pages are most visited, where users drop off, and which features generate the most engagement. This data never identifies you personally and is used solely to improve the platform.
• Security Cookies: These help our fraud detection systems identify unusual login patterns, suspicious betting behaviour, or account access from unrecognised devices or IP addresses.

4.2 Managing Cookies

You can control or delete cookies through your web browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or clear existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in or using the full functionality of the bd89rz platform. Disabling analytics or functional cookies will not prevent you from accessing the platform but may result in a less personalised experience. Detailed instructions for managing cookies in the most commonly used browsers (Chrome, Firefox, Safari, Edge, Samsung Internet) are available in each browser's help documentation.

5 Data Security Measures

bd89rz employs a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The key security measures we have in place include the following.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the bd89rz servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, personal information, and financial transaction data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data fields — including identity document images, payment method identifiers, and account passwords (stored as salted cryptographic hashes, never in plain text) — are encrypted at rest in our secure database infrastructure.
• Access Controls: Access to systems that store personal data is restricted to authorised bd89rz personnel whose job functions genuinely require it. All staff access is authenticated, logged, and subject to regular access review. Departing employees have access credentials immediately revoked.
• Intrusion Detection and Monitoring: bd89rz operates continuous automated monitoring for anomalous server access patterns, failed authentication attempts, and unusual data access events. Suspected security incidents trigger immediate escalation to the security team.
• Regular Security Reviews: bd89rz conducts regular internal security reviews and periodically engages independent security specialists to assess the platform's defences and identify any vulnerabilities before they can be exploited.

6 Data Retention

bd89rz retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with our legal and regulatory obligations. The retention periods applied to the main categories of personal data are set out below.

• Account and registration data: Retained for the full lifetime of your active account, plus a minimum of 5 years after account closure, to meet anti-money-laundering record-keeping requirements and to enable dispute resolution in respect of historical transactions.
• KYC identity documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, in compliance with applicable financial regulations.
• Transaction and financial records: Retained for a minimum of 7 years from the date of each transaction for accounting, tax, and anti-money-laundering compliance purposes.
• Gameplay and betting logs: Retained for a minimum of 3 years from the date of each session for responsible gaming monitoring, dispute resolution, and platform analytics.
• Customer support communications: Retained for a minimum of 3 years from the date of each interaction for quality assurance and dispute resolution.
• Marketing consent records: Retained for as long as the consent is active, plus 2 years after withdrawal of consent, to demonstrate compliance with marketing communication regulations.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregated data (e.g., aggregate player activity statistics) may be retained indefinitely for platform analytics and business planning purposes.

7 Your Privacy Rights

bd89rz respects your rights in relation to your personal data. The following rights are available to you as a bd89rz player, subject to the limitations and exceptions described below.

7.1 Right of Access

You have the right to request a copy of the personal data that bd89rz holds about you. Upon a verified written request submitted via the support team, bd89rz will provide a structured summary of your personal data within a reasonable timeframe, free of charge for the first request in any 12-month period.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details (such as your email address or phone number), you can update these directly in your account settings. For identity-level corrections (such as a name change following a legal name change), please contact the support team with supporting documentation.

7.3 Right to Erasure

You may request that bd89rz delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent for marketing data. However, this right is subject to important exceptions: bd89rz is legally required to retain certain categories of data (particularly KYC documents, transaction records, and responsible gaming records) for defined periods regardless of an erasure request. Where erasure is not possible due to a legal retention obligation, bd89rz will inform you of this and restrict the use of the retained data to the minimum necessary.

7.4 Right to Restrict Processing

In certain circumstances (for example, while the accuracy of data you have contested is being verified), you have the right to request that bd89rz restrict the processing of your personal data. During a restriction period, bd89rz may still store your data but will not actively process it beyond what is strictly necessary.

7.5 Right to Withdraw Marketing Consent

Where your data is processed on the basis of your consent (specifically, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent is effective immediately upon notification and does not affect the lawfulness of any processing that occurred prior to withdrawal. To withdraw marketing consent, update your preferences in your account settings or contact the 24/7 support team.

7.6 Exercising Your Rights

To exercise any of the rights described above, please contact the bd89rz privacy team via the 24/7 live chat or by writing to [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. For complex requests, a 30-day extension may be applied, in which case you will be notified before the initial 30-day period expires. bd89rz will need to verify your identity before acting on any privacy rights request to ensure we are disclosing or modifying data only at the direction of the correct account holder.

8 Changes to This Policy

bd89rz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable laws and regulations, or changes in the services and features offered through the platform. The current version of the Privacy Policy will always be published on this page with a clearly visible "Last Updated" date at the top.

Where a proposed change to this Privacy Policy is material — meaning it significantly alters the way we collect, use, or share your personal data — bd89rz will provide advance notice of the change via email to your registered address and/or via an in-platform notification at least 14 days before the change takes effect. Your continued use of the bd89rz platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with a material change to this Privacy Policy, you have the right to close your account before the change takes effect by contacting the 24/7 support team. Any data already collected under the prior version of the policy will continue to be handled in accordance with the retention and security practices described in this document.