bgd35 Privacy
Policy

1 Data We Collect

bgd35 collects personal data in three distinct ways: information you provide directly when registering or using the platform, information generated automatically as you interact with bgd35, and information obtained from third-party service providers during identity verification or payment processing. The categories of data we collect are outlined below.

1.1 Information You Provide Directly

• Account registration data: Full legal name, date of birth, email address, mobile number, and a username and password of your choosing.
• Identity verification (KYC) documents: Copies of your National ID card, passport, driving licence, or other government-issued photo identification confirming your name, date of birth, and photograph.
• Proof of address documents: Utility bills, bank statements, or official government correspondence issued within the last 90 days confirming your residential address.
• Payment information: Mobile financial service account details (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used for deposits and withdrawals. bgd35 does not store full card numbers — card data is tokenised by our payment processing partners.
• Support communications: Any messages, emails, or chat transcripts you submit to the bgd35 support team at [email protected].

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Session and activity data: Pages visited, games played, bets placed, session duration, login timestamps, and navigation patterns within the bgd35 platform.
• Geolocation data: General location inferred from your IP address to assist with fraud prevention and regulatory compliance. bgd35 does not collect precise GPS coordinates.
• Cookie and tracking data: Identifiers set by cookies and similar technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

• Identity verification providers: Confirmation of document authenticity and identity match results returned by our KYC partners.
• Payment processors: Transaction status, reference numbers, and payment method validation results returned by bKash, Nagad, Rocket, Upay, and card networks.
• Fraud prevention services: Risk scores and flagged pattern data from third-party fraud detection tools used to protect players and the platform.

2 How We Use Your Data

bgd35 uses your personal data for the following purposes. Each purpose is tied to a specific lawful basis as described alongside it.

bgd35 does not use automated decision-making that produces legal or similarly significant effects on players without human oversight. Where automated systems flag an account for review (for example, suspected fraud or underage access), a member of the bgd35 compliance team reviews the case before any action is taken.

If bgd35 wishes to use your data for a purpose not listed in this section, we will notify you and, where required, seek your consent before doing so.

3 Data Sharing & Third Parties

bgd35 does not sell, rent, trade, or otherwise transfer your personal data to external parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

3.1 Service Providers (Data Processors)

bgd35 engages third-party service providers who process personal data strictly on our instructions and under binding data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors receive the minimum data required to authorise and settle transactions.
• KYC and identity verification providers: Receive copies of identity documents to confirm authenticity and perform age and identity checks.
• Fraud detection and cyber-security providers: Receive device fingerprint data, IP addresses, and behavioural signals to identify suspicious activity.
• Cloud hosting and infrastructure providers: Store encrypted player data on servers with industry-standard physical and logical security controls.
• Game studios and content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and bet data to deliver their games and settle outcomes. They do not receive your full personal profile.

3.2 Legal and Regulatory Disclosure

bgd35 may disclose your personal data to law enforcement agencies, courts, regulators, or other governmental authorities where required to do so by applicable law or valid legal process. In such cases bgd35 will, where legally permitted, notify you of the disclosure request before complying.

3.3 Business Transfers

In the event that bgd35 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, player data may be transferred to the successor entity as part of that transaction. bgd35 will notify affected players via their registered email addresses prior to any such transfer, and the successor entity will be required to honour the commitments made in this Privacy Policy.

4 Cookies & Tracking Technologies

bgd35 uses cookies and similar technologies (collectively "cookies") to operate the platform, remember your preferences, maintain your login session, and analyse how players use the site. This section explains the types of cookies bgd35 uses and how you can manage them.

4.1 Types of Cookies Used by bgd35

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during a game session and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how players navigate bgd35 — which pages are visited most, how long sessions last, and where technical errors occur. This data helps bgd35 improve platform stability and user experience.
• Functional Cookies: Remember your preferences such as your chosen language (English), your last-visited game category, and display settings. Disabling these cookies may mean your preferences are not saved between sessions.
• Targeting and Personalisation Cookies: Used to tailor game recommendations and promotional content within the bgd35 platform based on your activity history. These are only set with your consent.

4.2 Cookie Lifespan

Session cookies expire when you close your browser. Persistent cookies set by bgd35 have a maximum lifespan of 12 months, after which they expire and are automatically cleared. You may clear cookies at any time using your browser's built-in tools without affecting your bgd35 account data, though you may need to log in again after doing so.

4.3 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Note that disabling strictly necessary cookies will prevent you from using bgd35. Instructions for managing cookies in popular browsers are available through your browser's help documentation. bgd35 does not respond to browser "Do Not Track" signals at this time, as there is no universally accepted standard for such signals.

5 Data Retention & Deletion

bgd35 retains your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by applicable legal obligations. The retention periods below apply as standard:

When the applicable retention period expires, bgd35 securely destroys or anonymises the relevant data so that it can no longer be linked back to you as an individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product improvement purposes.

If you request deletion of your account and personal data (see Section 7), bgd35 will action your request within 30 days, subject to the legally mandated minimum retention periods listed above. Data that bgd35 is legally required to retain will be held in a restricted archive and will not be used for any other purpose during the retention period.

6 Data Security Measures

bgd35 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

• Transport encryption: All data transmitted between your browser or device and bgd35 servers is encrypted using 256-bit TLS (Transport Layer Security). The bgd35 website enforces HTTPS on all pages; unencrypted HTTP connections are automatically redirected.
• Data encryption at rest: Sensitive personal data stored in bgd35 databases — including identity document copies and payment method details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to bgd35 staff and contractor personnel who require it to perform their duties. Access is controlled via role-based permissions, and all access to sensitive data is logged and auditable.
• Two-factor authentication (2FA): bgd35 supports OTP-based two-factor authentication for player accounts via the registered mobile number. Players are strongly encouraged to enable 2FA to protect their accounts from unauthorised access.
• Penetration testing and vulnerability management: bgd35's infrastructure undergoes regular third-party security assessments. Identified vulnerabilities are tracked and remediated within defined timelines based on severity.
• Incident response: bgd35 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights, bgd35 will notify affected players via their registered email addresses within 72 hours of becoming aware of the incident, describing the nature of the breach, the data affected, and the steps taken in response.

7 Your Privacy Rights

As a bgd35 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the bgd35 privacy team at [email protected] with your full name, registered email address, and a description of your request. bgd35 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data that bgd35 holds about you, along with information about how it is used and with whom it is shared. bgd35 will provide this in a structured, machine-readable format (CSV or JSON) upon request.
• Right to Rectification: If any personal data bgd35 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as your registered email address or mobile number, you may be able to update these directly through your bgd35 account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that bgd35 delete your personal data. bgd35 will honour this request except where retention is required by law (see Section 5). Deleting your data will result in permanent closure of your bgd35 account.
• Right to Restriction of Processing: In certain circumstances — for example, while you contest the accuracy of data bgd35 holds, or where you have objected to processing — you may request that bgd35 restrict how your data is used while the matter is resolved.
• Right to Data Portability: You have the right to receive the personal data you have provided to bgd35 in a structured, commonly used, machine-readable format, and to request that bgd35 transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interest, including profiling. bgd35 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bgd35 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

bgd35 will not charge a fee for handling privacy rights requests submitted in good faith. If a request is manifestly unfounded, repetitive, or excessive, bgd35 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for doing so.

8 Policy Updates & Contact

bgd35 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, changes in applicable law, or improvements to the bgd35 platform. The effective date at the top of this page is updated each time a new version is published.

For material changes — those that significantly affect your rights or how bgd35 uses your data — bgd35 will notify registered players via the email address held on their account at least 14 days before the change takes effect. Your continued use of bgd35 after the effective date of any update constitutes acceptance of the revised policy. If you do not agree with the revised policy, you must stop using bgd35 and may request account closure as described in Section 7.

For any questions, concerns, or requests relating to this Privacy Policy or bgd35's data practices, contact the bgd35 privacy team:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Response time: Under 2 hours for urgent privacy concerns (BST, UTC+6)
• Language: All privacy communications are handled in English