bdy88 Privacy Policy

1. Who We Are

bdy88 operates the online betting and gaming platform accessible at bdy88.io (the "Platform"). For the purposes of this Privacy Policy, "bdy88", "we", "us", and "our" refer to the entity responsible for operating the Platform and acting as the data controller in respect of personal data collected from Users.

bdy88 is a safe and reliable platform committed to fair play, responsible gaming, and the protection of player data. The Platform is designed for and targeted at adult players located in Bangladesh. All services are delivered in English to ensure clear and unambiguous communication with our users.

If you have any questions about how bdy88 handles your personal data, or if you wish to exercise any of the rights described in this Privacy Policy, you may contact our dedicated privacy support team at [email protected] at any time.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by bdy88 through the following channels and touchpoints:

• The bdy88 website at bdy88.io and all associated subdomains and mobile browser interfaces.
• The bdy88 account registration, login, and verification processes.
• All financial transactions conducted through the bdy88 cashier, including deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer.
• All customer support interactions, whether conducted via live chat, email, or any other communication channel offered by bdy88.
• Participation in any bdy88 promotion, bonus scheme, tournament, or loyalty programme.
• Surveys, feedback forms, and any other voluntary data collection initiatives operated by bdy88.

This Policy does not apply to the data practices of third-party game providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, Spribe, or Ezugi) or payment processors (such as bKash or Nagad). Those third parties operate under their own privacy policies, which we encourage you to review independently.

3. Personal Data We Collect

bdy88 collects the following categories of personal data. The specific data collected in each category depends on how you interact with the Platform and which services you use:

Data Category	Examples	When Collected
Identity Data	Full name, date of birth, gender, nationality, National ID number, passport number	Account registration and KYC verification
Contact Data	Mobile phone number, email address, residential address (city, district)	Account registration and address verification
Financial Data	bKash/Nagad/Rocket/Upay account number linked to your registered mobile, bank account details, transaction history, deposit and withdrawal amounts in BDT	Cashier deposits, withdrawals, and KYC payment verification
Verification Documents	Scanned or photographed National ID card, passport, driving licence, utility bill, selfie with ID	KYC identity and age verification
Account Activity Data	Login timestamps, bet history, game sessions, wager amounts, win/loss records, bonus usage, session duration	Ongoing during platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6)	Automatically on every platform visit
Communication Data	Support chat transcripts, email correspondence, feedback form submissions	When you contact bdy88 support
Marketing Preferences	Opt-in/opt-out status for promotional emails and SMS, preferred communication channel	Account registration and preference updates

bdy88 does not collect or process special category data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless this is strictly required by law or with your explicit written consent.

4. How We Collect Your Data

bdy88 collects personal data through the following methods:

• Direct collection: Data you provide to us voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you navigate the Platform, including through cookies, server logs, and session tracking technologies described in Section 7 of this Policy.
• Third-party sources: Identity verification data received from KYC service providers that cross-reference information you have supplied against official identity databases. Financial verification data received from payment processors confirming ownership of payment instruments. Fraud screening data from security intelligence partners used to detect and prevent fraudulent account activity.

Where bdy88 receives data about you from a third-party source, we will only use that data for the purpose for which it was obtained and in accordance with the terms of our agreement with that third party.

5. Why We Use Your Personal Data

bdy88 uses your personal data for the following purposes. Each purpose is linked to a legitimate operational, legal, or contractual need:

• Account management: To create, maintain, and administer your bdy88 account, including authenticating your identity at login and managing your account preferences and settings.
• Age and identity verification: To verify that you meet the minimum age requirement of 21 years and that the identity information you have provided is accurate, as part of our KYC obligations.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to reconcile transaction records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, identity theft, bot activity, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor betting patterns and account activity for signs of problem gambling, to apply self-imposed limits set by you, and to enforce self-exclusion requests.
• Customer support: To respond to your enquiries, complaints, and support requests efficiently and accurately.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the bdy88 Platform.
• Marketing and promotions: To send you relevant promotional offers, bonus alerts, and event notifications — but only where you have opted in to receive such communications and subject to your right to withdraw consent at any time.
• Legal compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement authorities.

6. Legal Bases for Processing

bdy88 processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the bdy88 Terms and Conditions — for example, processing your bets, managing your account balance, and executing payment transactions.
• Legal obligation: Processing required to comply with applicable law — for example, age verification, KYC documentation, anti-money laundering checks, and responding to lawful requests from regulatory authorities.
• Legitimate interests: Processing necessary for bdy88's legitimate business interests where those interests are not overridden by your rights — for example, fraud prevention, platform security, and improving our services through usage analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending you marketing communications. You may withdraw this consent at any time by updating your account preferences or contacting [email protected].

7. Cookies and Tracking Technologies

bdy88 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the bdy88 website. Cookies allow bdy88 to recognise your browser, remember your preferences, maintain your login session, and analyse how the Platform is used.

bdy88 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential to operate the Platform and cannot be disabled. They enable core functions such as login session management, security token validation, and cashier transaction integrity. Without these cookies, the Platform cannot function correctly.
• Functional cookies: These cookies remember your preferences — such as your chosen language, display settings, and responsible gaming limit configurations — so you do not need to re-enter them on every visit.
• Analytical cookies: These cookies collect anonymised data about how visitors interact with the Platform — such as which pages are visited most frequently, session duration, and navigation paths. This data helps bdy88 identify areas for improvement. Analytics data is aggregated and does not identify individual users.
• Marketing cookies: These cookies track your activity on the Platform to help bdy88 deliver relevant promotional offers. Marketing cookies are only activated where you have provided consent. You may opt out at any time through your account settings.

You may control cookie settings through your browser's privacy settings. Disabling certain cookies may affect the functionality of the bdy88 Platform. Strictly necessary cookies cannot be blocked without preventing you from using core Platform features.

8. Sharing Your Personal Data

bdy88 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy and subject to appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank — to process your deposit and withdrawal transactions and verify payment instrument ownership.
• Identity verification providers: Third-party KYC service providers who cross-reference your identity documents against official databases to confirm your age and identity on our behalf.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, Spribe, Ezugi, and other licensed studios — who receive the minimum technical data required to operate their games within the bdy88 Platform environment (such as a session token or anonymised player identifier).
• Fraud prevention and security partners: Specialist third-party services that assist bdy88 in detecting and investigating fraudulent activity, money laundering, and unauthorised account access.
• IT and hosting providers: Cloud infrastructure and data hosting providers who store Platform data on secured servers under contractual data processing agreements with bdy88.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, and courts where bdy88 is legally required to disclose data in response to a lawful order, warrant, or statutory obligation.

All third parties with whom bdy88 shares personal data are required, by contract, to process that data only for the specified purpose, to maintain appropriate security standards, and to refrain from using it for their own independent commercial purposes.

9. Data Storage and Security

bdy88 is committed to protecting your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. The following technical and organisational security measures are in place across the bdy88 Platform:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bdy88 servers.
• Encrypted storage for sensitive data fields including passwords (hashed with a strong cryptographic algorithm), identity document copies, and financial account details.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their specific job function.
• Regular security assessments and penetration testing conducted by internal and external security specialists.
• Incident response procedures to detect, contain, and respond to data security breaches promptly and in accordance with applicable obligations.
• Two-factor authentication (2FA) options available to all registered bdy88 users to strengthen account login security.

While bdy88 applies industry-standard security measures, no online platform can guarantee absolute security against all possible threats. bdy88 encourages all users to use strong, unique passwords and to enable 2FA on their accounts as an additional layer of personal protection.

10. Data Retention

bdy88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account's active status plus five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Betting and gaming activity logs: Retained for three (3) years from the date of each recorded activity for operational, security, and dispute resolution purposes.
• Customer support correspondence: Retained for two (2) years from the date of the final communication in a support thread, unless the matter relates to an unresolved dispute or legal claim.
• Marketing preference data: Retained until you withdraw your consent to marketing communications, at which point your opt-out preference will be recorded and honoured immediately.

When personal data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

11. Your Rights Over Your Personal Data

bdy88 respects your rights as a data subject. Subject to applicable law and certain limited exceptions, you have the following rights in respect of the personal data bdy88 holds about you:

• Right of access: You have the right to request a copy of the personal data bdy88 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected or updated. You may update certain account details directly through your account settings page.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to bdy88's legal retention obligations described in Section 10.
• Right to restrict processing: You have the right to request that bdy88 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to withdraw consent: Where bdy88 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.
• Right to object: You have the right to object to processing based on bdy88's legitimate interests where you believe your rights and interests override those legitimate interests.

To exercise any of these rights, please submit a written request to [email protected], clearly stating which right you wish to exercise and providing enough information to allow bdy88 to identify your account. bdy88 will respond to all valid data rights requests within thirty (30) days of receipt.

12. Children's Privacy and the 21+ Rule

The bdy88 Platform is strictly intended for adults aged 21 and above. bdy88 does not knowingly collect personal data from any individual under the age of 21. Account registration requires users to confirm that they are at least 21 years of age, and bdy88 enforces this restriction through its KYC identity and age verification processes.

If bdy88 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or by any other means — the account will be immediately suspended, all associated data will be reviewed, and the account will be closed in accordance with bdy88's Terms and Conditions. Any data collected from an underage user will be deleted as soon as it is no longer needed for the account closure and investigation process.

If you are a parent or guardian and you believe that a person under the age of 21 has registered an account on bdy88, please contact us immediately at [email protected] and we will take prompt action to investigate and close the account.

13. Marketing Communications

bdy88 may send you promotional communications — including bonus offers, event previews, tournament alerts related to cricket (BPL, T20 World Cup, IPL), and seasonal promotions — by email or SMS, but only where you have given your explicit consent to receive such communications at the time of account registration or at any subsequent point.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in any bdy88 marketing email.
• Updating your communication preferences in the notification settings section of your bdy88 account.
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect your ability to receive transactional and account-essential communications, such as deposit confirmations, withdrawal notifications, KYC request emails, and account security alerts. These communications are sent on the basis of contractual necessity and will continue regardless of your marketing preferences.

14. Third-Party Links and Embedded Content

The bdy88 Platform may contain references to third-party game providers and payment processors whose services are integrated within the Platform environment. While bdy88 takes reasonable steps to ensure that its third-party partners maintain appropriate data protection standards, bdy88 is not responsible for the privacy practices of those third parties.

bdy88 does not include links to external websites that are outside the bdy88 Platform ecosystem. If you independently navigate to any external website — for example, by typing a URL in your browser — that website's privacy practices are entirely outside the scope of this Privacy Policy, and bdy88 accepts no responsibility for how that site handles your personal data.

15. Changes to This Privacy Policy

bdy88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent update is displayed at the top of this document and in the hero section of this page.

For material changes — those that affect the purposes for which your data is processed, the categories of third parties with whom it is shared, or your rights as a data subject — bdy88 will send a notification to your registered email address at least seven (7) days before the change takes effect, giving you the opportunity to review the updated Policy before it applies to you.

Continued use of the bdy88 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should stop using the Platform and contact [email protected] to close your account.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdy88 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Request – [Your Username]"
• Response time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries
• Support availability: 24 hours a day, 7 days a week, 365 days a year

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise. This information allows us to verify your identity and process your request as efficiently as possible.