Privacy Policy — bd25 Online Casino

Data You Provide Directly

When you register an account, verify your identity, contact support, or participate in promotions on bd25, you provide us with personal data. The categories of data you provide directly include:

• Registration data: mobile phone number, chosen username, date of birth, and country of residence.
• Identity verification (KYC) data: full legal name, National Identity Card (NID) number, passport number, date of birth, and a photographic copy of the submitted document.
• Payment data: mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details for players using City Bank, BRAC Bank, Islami Bank, or Sonali Bank transfers, and transaction reference numbers.
• Communication data: messages, queries, and complaints submitted to bd25 via live chat or email, including any attachments you choose to send.
• Promotional data: responses to surveys, competition entries, and any information you provide when opting into bd25 bonus offers or seasonal promotions.

Data Collected Automatically

When you access the bd25 platform, certain technical data is collected automatically through your browser or device. This includes:

• Device and browser data: device type, operating system, browser type and version, screen resolution, and language settings.
• Network data: IP address, approximate geographic location derived from IP, internet service provider, and connection type.
• Session and behaviour data: pages visited, time spent on each page, game sessions initiated, bets placed, game results, deposit and withdrawal events, and navigation paths through the platform.
• Cookie and tracker data: identifiers stored by cookies, local storage, or similar technologies on your device. See Section 4 (Cookies & Tracking Technologies) for full details.

Data From Third Parties

bd25 may receive personal data about you from third-party sources in specific, limited circumstances. These include payment processors confirming the status of a deposit or withdrawal, identity verification service providers used to cross-check KYC documents, and fraud detection partners who flag suspicious account activity. Data received from third parties is handled with the same level of care as data you provide directly and is used only for the purposes described in this Policy.

The personal data collected by bd25 is used for the following purposes:

Account Management and Service Delivery

The primary use of your data is to create and manage your bd25 account, process deposits and withdrawals in Bangladeshi Taka (৳), settle bets and game results, and provide you with access to the full range of bd25 games and sports betting markets. Without this data, the core functions of the platform cannot be delivered.

Identity Verification and Fraud Prevention

bd25 uses KYC and payment data to verify player identities, confirm that players are aged 18 or above, and detect and prevent fraudulent activity, money laundering, and the misuse of bonuses. Where suspicious activity is identified, bd25 may share relevant data with law enforcement or financial intelligence authorities as required by applicable law.

Customer Support

Communication data collected through live chat and email correspondence is used to respond to player queries, investigate complaints, and improve the quality of bd25's support services. Support interactions may be recorded and retained for quality assurance and training purposes.

Platform Improvement and Analytics

Anonymised and aggregated behavioural and technical data is used to analyse platform performance, identify and resolve technical issues, optimise the user experience, and develop new features. bd25 does not use individually identifiable data for analytics beyond what is necessary for the stated purposes above.

Responsible Gaming Monitoring

bd25 uses player behaviour data — including session length, betting frequency, deposit patterns, and self-exclusion status — to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, bd25 may proactively contact the player with information about responsible gaming tools and support resources available on the Responsible Gaming page.

Promotional Communications

Where you have opted in to receive promotional communications from bd25, we may use your contact details to send information about new games, seasonal promotions such as Eid or Pohela Boishakh bonus offers, and platform updates. You may withdraw consent for promotional communications at any time by contacting our support team. Withdrawal of consent for marketing will not affect your ability to use the bd25 platform.

Legal and Regulatory Compliance

bd25 processes and retains certain categories of personal data to comply with its legal obligations, including anti-money laundering (AML) requirements, financial reporting obligations, and responses to lawful requests from courts or regulatory authorities.

Game Technology Providers

bd25 partners with certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver its game library. These providers may receive technical session data — such as player session identifiers, game round data, and stake amounts — to facilitate game play and settle outcomes. Game providers do not receive full personal profiles and are contractually prohibited from using this data for any purpose other than game delivery and result settlement.

Payment Processors

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, bd25 shares the minimum necessary payment and identity data with the relevant payment processor. This typically includes your registered mobile wallet number or bank account reference and the transaction amount in Bangladeshi Taka (৳). bd25 does not store full payment credentials on its own servers; sensitive payment data is handled by the payment provider's secure systems.

Identity Verification Services

bd25 may engage third-party identity verification services to assist with KYC checks. These services receive a copy of the identity document you submit and use it solely to confirm authenticity and cross-reference against relevant databases. Verified data is returned to bd25 and is not retained by the verification provider beyond what is required to complete the check.

Legal and Regulatory Disclosure

bd25 may disclose personal data to law enforcement agencies, courts, regulators, or other public authorities where required to do so by applicable law, court order, or lawful request. In such cases, bd25 will disclose only the minimum data necessary to satisfy the legal obligation and will, where permitted, notify the affected player that a disclosure has been made.

Business Transfers

In the event that bd25 undergoes a business restructuring, merger, acquisition, or sale of assets, player data may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified via the platform or by direct communication prior to any such transfer, and the successor entity will be required to honour the terms of this Privacy Policy with respect to all transferred data.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login session status, and site preferences — making your next visit easier and more relevant. bd25 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period or until deleted).

Categories of Cookies Used by bd25

Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and configure notifications when cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging in to your bd25 account and will disrupt core platform functionality. Disabling performance or functional cookies will not prevent you from using bd25 but may affect the quality of your experience.

Third-Party Tracking

bd25 does not permit third-party advertising networks to place tracking cookies on player devices through the bd25 platform. Any third-party scripts present on the platform (such as those used by game providers) are subject to the providers' own privacy and cookie policies. bd25 reviews all third-party integrations to ensure they meet the same data protection standards we apply across the platform.

Technical Safeguards

All data transmitted between player devices and bd25 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. Player account passwords are stored using industry-standard one-way hashing algorithms — bd25 never stores passwords in plain text and cannot retrieve a forgotten password on your behalf. Instead, a secure password reset process is initiated via your registered mobile number.

Access to bd25 production systems and databases is restricted to a small number of authorised engineers and is protected by multi-factor authentication, role-based access controls, and detailed access logging. All access activity is reviewed periodically as part of bd25's internal security audit programme.

Operational Safeguards

bd25 conducts regular internal security reviews and vulnerability assessments of the platform. Staff who have access to personal data receive data protection training and are bound by confidentiality obligations. Contractors and third-party service providers with access to bd25 data are subject to contractual data processing agreements that require them to maintain equivalent security standards.

Breach Response

In the event of a confirmed data breach that affects your personal data and creates a material risk to your rights, bd25 will notify affected players promptly. Notifications will be sent to the mobile number or email address registered on your bd25 account and will include a description of the breach, the categories of data affected, and the steps bd25 is taking to contain and remediate the incident. bd25 will also notify the relevant authorities as required by applicable data protection law.

Your Responsibilities

While bd25 takes significant steps to protect your data on the platform side, account security also depends on the actions you take as a player. You are responsible for keeping your bd25 login credentials confidential, using a strong and unique password, and notifying bd25 support immediately if you believe your account has been accessed without your authorisation. bd25 cannot be held liable for security incidents that arise directly from a player's failure to take reasonable precautions with their own credentials.

Active Accounts

For active bd25 accounts, personal data is retained for the duration of the account relationship and for a period of five (5) years following account closure. This retention period is required to satisfy anti-money laundering record-keeping obligations, to resolve any disputes that arise after account closure, and to comply with potential regulatory audit requirements.

KYC Documents

Identity verification documents submitted as part of the bd25 KYC process are retained for a minimum of five (5) years following account closure. Where a regulatory investigation is ongoing at the time the retention period would otherwise expire, documents are retained until the investigation is formally concluded.

Transaction Records

All deposit and withdrawal transaction records, including amounts, dates, payment methods, and reference numbers, are retained for a minimum of five (5) years following the date of the transaction. This is consistent with standard financial record-keeping requirements applicable to payment processing operations in the region.

Communication Records

Live chat transcripts and email correspondence with bd25 support are retained for a period of two (2) years from the date of the interaction, after which they are securely deleted. Where a communication relates to a formal complaint or dispute that remains unresolved at the end of the two-year period, records are retained until the matter is fully closed.

Anonymised Data

Anonymised, aggregated analytics data — from which no individual player can be identified — may be retained by bd25 indefinitely for platform performance analysis and business planning purposes. This data does not constitute personal data and is not subject to the same deletion obligations that apply to identifiable personal information.

Deletion Requests

Players who request deletion of their personal data should be aware that bd25 may be unable to delete all data immediately where a legal or regulatory retention obligation applies. In such cases, bd25 will delete or anonymise data as soon as the applicable retention period expires and will confirm in writing when deletion has been completed.

Right of Access

You have the right to request a copy of the personal data that bd25 holds about you. Requests for data access should be submitted in writing to our support team. bd25 will respond within 30 days of receiving a valid request and will provide the data in a clear, readable format. There is no charge for a standard access request. Where requests are manifestly excessive or repetitive, bd25 reserves the right to charge a reasonable administrative fee or decline the request.

Right to Rectification

If the personal data bd25 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections such as updating your registered mobile number can be made directly through your account settings. Corrections to KYC data require re-submission of updated documentation and are subject to re-verification.

Right to Erasure

You may request that bd25 delete your personal data. bd25 will honour erasure requests to the extent permitted by law. Where a legal retention obligation prevents immediate deletion — for example, the five-year AML record-keeping requirement — bd25 will inform you of the applicable retention period and delete the data as soon as that period expires.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing — you may request that bd25 restrict the processing of your data while the matter is under review. During a restriction period, bd25 will continue to store your data but will limit the ways in which it is actively used.

Right to Data Portability

You have the right to receive a copy of the personal data you provided to bd25 in a structured, commonly used, machine-readable format (such as CSV or JSON), for the purpose of transferring it to another service provider. Data portability requests are processed within 30 days of submission.

Right to Withdraw Consent

Where bd25 processes your data on the basis of your consent — for example, for promotional communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal date and will not affect your ability to continue using the bd25 platform.

Exercising Your Rights

To exercise any of the rights described in this section, please contact bd25 support via live chat or submit a written request to [email protected]. Please note that this address is for correspondence only and is not a clickable link. To protect against unauthorised access requests, bd25 may ask you to verify your identity before processing a data rights request.

Contacting bd25 About Privacy

For all privacy-related queries, data access requests, and concerns, please contact the bd25 support team directly. You can reach us 24 hours a day, 7 days a week via live chat on the bd25 platform. Alternatively, you may send a written query to [email protected]. Please note that email addresses on this page are displayed as plain text and are not clickable links. Our average first response time via live chat is under 3 minutes during peak hours.

Raising a Privacy Complaint

If you believe that bd25 has processed your personal data in a manner that is inconsistent with this Privacy Policy or applicable data protection law, you have the right to raise a formal complaint. To do so, please submit a written description of your concern to [email protected], including your account username, a description of the data processing activity in question, and the outcome you are seeking. bd25 will acknowledge your complaint within 5 business days and will aim to provide a substantive response within 30 days. Where the matter requires more time, bd25 will notify you of the expected timeframe.

Policy Updates

bd25 reviews this Privacy Policy periodically and may update it from time to time to reflect changes in our data processing activities, platform features, or applicable law. The effective date at the top of this page will be updated whenever a material change is made. Where changes are significant, bd25 will notify active players via the platform or by direct communication. We encourage all players to review this Policy regularly to stay informed of how bd25 protects their data.