bd245 Privacy Policy — How We Handle Your Personal Data

1 About This Policy

This Privacy Policy ("Policy") describes how bd245 ("bd245", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to users ("you", "your") of the bd245 website at https://bd245.io and all associated services, products, and features (collectively, the "Platform").

By registering an account, accessing the Platform, or otherwise using our services, you acknowledge that you have read and understood this Policy. This Policy forms part of our overall Terms & Conditions and should be read alongside our Responsible Gaming Policy.

If you have any questions about this Policy or about how we handle your personal data, please contact our support team. Contact details are provided in Section 13 of this document.

2 Information We Collect

bd245 collects personal information through several means: directly from you during registration and account use, automatically as you interact with the Platform, and from trusted third parties where permitted by law. The categories of information we collect include the following:

2.1 Information You Provide Directly

• Identity Information: Full name, date of birth, nationality, and gender, collected during account registration and identity verification.
• Contact Information: Email address, mobile phone number, and residential address in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other divisions).
• Account Credentials: Username and hashed password. We never store your password in plain text.
• Payment Information: Mobile banking numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.), and card details (Visa, Mastercard). Full card numbers are processed by our payment partners and are not stored on our servers.
• Identity Documents: Copies of government-issued photo identification (National ID, passport, or driving licence) and proof-of-address documents submitted during Know Your Customer ("KYC") verification.
• Communications: Records of your correspondence with our support team via email or live chat.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and referring URL.
• Usage Data: Pages visited, features used, games played, bets placed, session duration, click patterns, and navigation paths within the Platform.
• Location Data: Approximate geographic location derived from your IP address, used to enforce regional access controls.
• Cookies & Tracking Technologies: Session cookies, persistent cookies, and similar technologies as described in Section 6.

2.3 Information From Third Parties

• Identity verification agencies and KYC service providers used to confirm your identity and age.
• Payment processors and mobile banking platforms (bKash, Nagad, Rocket, Upay) who confirm transaction status.
• Fraud detection and anti-money laundering ("AML") screening services.
• Analytics and traffic attribution partners (data is received in aggregated or pseudonymised form).

3 How We Use Your Information

bd245 uses the personal information we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those stated below without first obtaining your consent.

4 Legal Basis for Processing

bd245 processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you — for example, creating your account, processing your bets, and handling deposits and withdrawals.
• Legal Obligation: We are required to process certain data to comply with applicable laws, including anti-money laundering regulations, age-verification requirements, and lawful requests from authorities.
• Legitimate Interests: We process data where we have a legitimate business interest, such as preventing fraud, improving Platform security, and analysing aggregated usage data to improve our services — provided those interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, to send marketing communications — you may withdraw that consent at any time by contacting us or using the opt-out mechanism in any marketing email.

5 Sharing Your Information

bd245 does not sell or rent your personal information to third parties. We may, however, share your data with the following categories of recipients where it is necessary and proportionate to do so:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and other financial institutions, solely to process your transactions.
• Identity Verification Partners: KYC and age-verification agencies that confirm your identity documents on our behalf.
• Fraud & AML Screening Services: Third-party services that help us detect suspicious financial activity and maintain platform integrity.
• Technology & Infrastructure Providers: Cloud hosting, server management, and cybersecurity vendors who process data on our behalf under strict contractual data-processing agreements.
• Analytics Providers: Services that help us understand Platform performance; data shared with these providers is aggregated or pseudonymised wherever possible.
• Law Enforcement & Regulatory Authorities: Where we are required by law, court order, or lawful regulatory instruction to disclose your information.

6 Cookies & Tracking Technologies

bd245 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens. You cannot opt out of essential cookies without disabling the Platform entirely.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously viewed games to provide a personalised experience.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform, which pages are most visited, and where errors occur. This data helps us improve performance and usability.
• Marketing & Attribution Cookies: Used only where you have consented, to measure the effectiveness of our promotional campaigns and to avoid showing you the same message repeatedly.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect the quality of your experience on the Platform but will not prevent you from using core services.

7 Data Retention

bd245 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum period of five (5) years after account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC & Identity Documents: Retained for the duration of the account relationship plus five (5) years, unless a longer period is required by law.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless relevant to an ongoing dispute.
• Marketing Consent Records: Retained until you withdraw consent, at which point marketing communications will cease within a commercially reasonable time.
• Analytics Data: Aggregated analytics data may be retained indefinitely as it does not identify individual users.

After the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be attributed to you.

8 Your Rights

As a player on the bd245 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your data while a rectification or objection request is being assessed.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, and machine-readable format.

9 Children's Privacy

The bd245 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal information from individuals under the age of 21. If you are under 21, you are not permitted to use the Platform or provide any personal information to us.

If bd245 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that information and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

10 Security Measures

bd245 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised bd245 personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all internal systems.
• Penetration Testing: Our infrastructure undergoes regular security audits and penetration testing by qualified cybersecurity professionals.
• Intrusion Detection: Automated intrusion detection and monitoring systems are in place to identify and respond to suspicious activity in real time.
• Incident Response: bd245 maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected users promptly.

While we take all reasonable precautions, no system is entirely immune from security risks. You also play a role in keeping your account secure — please ensure your password is strong and unique, and that you do not share your login credentials with anyone.

11 Third-Party Links

The bd245 Platform may contain references to third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own privacy practices and this Policy does not extend to any data processing carried out directly by game providers on their own infrastructure.

bd245 is not responsible for the privacy practices or content of any third party. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

12 Updates to This Policy

bd245 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When material changes are made, we will notify registered players via email or a prominent in-Platform notification prior to the changes taking effect.

The updated Policy will carry a revised effective date at the top of this page. We encourage you to review this page periodically to stay informed about how bd245 protects your information. Your continued use of the Platform after the revised effective date constitutes acceptance of the updated Policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd245 handles your personal data, please reach out to our dedicated support team. We are available 24 hours a day, 7 days a week.

Email: [email protected]

The email address above is displayed as plain text and is not a clickable link. Please copy and paste it into your email client. We aim to respond to all privacy-related enquiries within 48 hours. For urgent matters involving potential data breaches or account compromise, please mark your subject line as URGENT — PRIVACY.