Privacy Policy — How bcd44 Protects Your Personal Data

This Privacy Policy ("Policy") is published by bcd44 ("bcd44", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to users ("you", "Player") of the bcd44 website at https://bcd44.net and all associated services (collectively, the "Platform"). By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

bcd44 is committed to handling your personal data with transparency, integrity, and the highest standards of information security. We collect only the data that is necessary to operate the Platform, fulfil our legal obligations, and deliver the best possible experience to players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account, verify your identity, contact support, or otherwise interact with bcd44, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on your National Identity Card (NID) or passport.
• Contact data: Bangladesh mobile number, email address, and residential address (district and division, e.g., Dhaka, Chittagong, Sylhet).
• Account credentials: Username and hashed password. We never store passwords in plain text.
• Financial data: bKash wallet number, Nagad wallet number, Rocket or Upay account details, and bank account information (for bank transfer deposits/withdrawals). We do not store full card numbers.
• Verification documents: Copies of government-issued photo identification and proof of address submitted during KYC verification.
• Communications data: Records of your correspondence with our support team, including live chat transcripts and support ticket content.

1.2 Information Collected Automatically

When you access and use the bcd44 Platform, our servers and analytics tools automatically collect certain technical data:

• Device data: Device type, operating system version, browser type and version, screen resolution, and device language settings.
• Network data: IP address, internet service provider (ISP), and approximate geographic location derived from IP address (country and city level only).
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the Platform.
• Transaction logs: Timestamps, amounts, payment methods, and outcomes for all deposits and withdrawals processed through bcd44.
• Cookie and tracking data: Session tokens, preference cookies, and analytics identifiers as described in Section 5 of this Policy.

1.3 Information from Third Parties

We may receive supplementary data about you from third parties in the following circumstances:

• Payment processors: Confirmation of transaction status and wallet ownership from bKash, Nagad, Rocket, Upay, and partner banks.
• Identity verification services: Results from automated document and biometric verification tools used as part of the KYC process.
• Fraud prevention partners: Risk scores and flagged indicators from third-party fraud detection services to protect the integrity of the Platform.
• Game providers: Aggregated game session outcomes and round data from providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Spribe to resolve disputes and calculate winnings.

2. How We Use Your Data

bcd44 uses your personal data only for clearly defined, legitimate purposes. The table below summarises the primary purposes for which your data is processed and the category of data involved in each case.

2.1 Responsible Gaming Use

bcd44 uses behavioural and transaction data to identify players who may be experiencing gambling-related harm. This includes monitoring for patterns such as rapid consecutive deposits, unusually high wagering frequency, and requests for self-exclusion reversal. Where such patterns are detected, our Responsible Gaming team may contact you directly. This processing is conducted in your interest and forms part of our commitment to player welfare.

2.2 Marketing Communications

bcd44 may send you promotional communications — such as bonus offers, seasonal promotions for events like Eid, Pohela Boishakh, BPL season, and IPL season — only if you have explicitly opted in during registration or via your account settings. You may withdraw marketing consent at any time by contacting us at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to your withdrawal.

3. Legal Basis for Processing

bcd44 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and bcd44 — for example, to create your account, process your deposits and withdrawals, and provide access to games and betting markets.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification mandates, and responses to lawful requests from public authorities.
• Legitimate interests: Processing is necessary for bcd44's legitimate business interests, including fraud prevention, platform security, abuse detection, and improving our services — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing already carried out.

4. Data Sharing & Disclosure

4.1 Authorised Service Providers

bcd44 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These providers are permitted to use your data only as instructed by bcd44 and are bound by strict data-processing agreements. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners process financial transactions on our behalf.
• Game technology providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe provide the software and infrastructure that powers our casino and live dealer games.
• Identity verification providers: Third-party KYC and document verification services used to authenticate player identities in accordance with our compliance obligations.
• Cloud and hosting infrastructure: Secure server infrastructure providers who host the bcd44 Platform and its data under contractual confidentiality obligations.
• Customer support tools: Software platforms used to manage and respond to support tickets and live chat interactions.

4.2 Legal and Regulatory Disclosure

bcd44 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities when we are legally required or permitted to do so — for example, in response to a court order, investigation into financial crime or money laundering, or a mandatory reporting obligation. We will notify you of any such disclosure where we are legally permitted to do so.

4.3 Business Transfers

In the event that bcd44 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bcd44 will take reasonable steps to ensure that your data continues to be handled in accordance with this Privacy Policy and that you are notified of any material change in data controllership.

4.4 No Sale of Personal Data

bcd44 does not sell, lease, or rent your personal data to any third party for their own commercial or marketing purposes. This commitment is absolute and applies regardless of the value of the data or the identity of the requesting party.

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember certain information about your visit — such as whether you are logged in, your language preferences, and how you navigate the site. bcd44 uses cookies and similar technologies (such as local storage and session tokens) for the purposes described below.

5.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the Platform to function. They enable your session to be maintained after login, manage security tokens, and prevent cross-site request forgery (CSRF). You cannot opt out of these cookies without disrupting your use of the Platform.
• Performance and analytics cookies: We use privacy-preserving analytics tools to understand how players navigate the Platform — which pages are visited most, where users encounter errors, and how game categories perform. This data is aggregated and not linked to individual identities.
• Preference cookies: These remember your settings and preferences — for example, whether you have dismissed certain notices or your preferred game view layout.
• Fraud prevention cookies: Cookies used to detect and prevent fraudulent activity, including multiple-account detection and bot behaviour identification.

5.3 Managing Cookies

You may control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or receive a notification when a cookie is set. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bcd44 Platform. For guidance on managing cookies in your specific browser, consult the browser's official help documentation.

6. Data Retention

bcd44 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guideline:

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data derived from your records may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked to you as an individual.

7. Your Privacy Rights

As a player on the bcd44 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Right Type]". We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of the personal data bcd44 holds about you, along with information about how it is processed and on what legal basis.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request that bcd44 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing was unlawful. This right is subject to our legal obligations to retain certain data (e.g., AML records).
• Right to restrict processing: You may request that bcd44 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while an objection is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of bcd44's legitimate interests, including profiling for fraud detection. You also have an unconditional right to object to processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8. Data Security Measures

8.1 Technical Safeguards

bcd44 employs a comprehensive suite of technical security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• Transport Layer Security (TLS 1.3) encryption on all data in transit between your device and the bcd44 Platform;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Role-based access controls (RBAC) ensuring that only authorised bcd44 personnel can access specific categories of personal data, limited to what is necessary for their job function;
• Multi-factor authentication (MFA) required for all internal systems that process personal data;
• Continuous automated monitoring for suspicious activity, including intrusion detection and anomaly alerts;
• Regular third-party security audits and penetration testing of the Platform infrastructure.

8.2 Organisational Safeguards

In addition to technical measures, bcd44 maintains a range of organisational controls to protect your data:

• All staff with access to personal data receive mandatory data protection training upon onboarding and annually thereafter;
• Data processing agreements are in place with all third-party service providers who handle personal data on bcd44's behalf;
• A documented incident response plan is maintained and tested periodically to ensure rapid and effective action in the event of a data breach;
• Privacy impact assessments are conducted for all new features, systems, or processing activities that may involve personal data.

8.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bcd44 will notify affected players without undue delay. Notification will be delivered to your registered email address and will include a description of the nature of the breach, the categories of data affected, and the steps bcd44 is taking to mitigate any potential harm.

8.4 Your Role in Data Security

While bcd44 takes every reasonable precaution to protect your data, the security of your account also depends on the steps you take. We strongly encourage you to use a strong, unique password for your bcd44 account, enable OTP-based two-factor authentication, and never share your login credentials with any other person. If you suspect that your account has been compromised, please contact us immediately at [email protected].