bd85 Privacy Policy
At bd85, the privacy and security of your personal data is a fundamental commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you have over your own data as a player on our Bangladesh platform.
Table of Contents
- 1. Data Controller
- 2. Data We Collect
- 3. How We Collect Your Data
- 4. Purposes and Legal Basis for Processing
- 5. Data Sharing and Third Parties
- 6. Cookies and Tracking Technologies
- 7. Data Retention
- 8. Data Security
- 9. Your Rights Over Your Data
- 10. Children and Minors
- 11. International Data Transfers
- 12. Changes to This Policy
- 13. Contact and Data Enquiries
How bd85 Approaches Data Privacy
These six principles guide every data-related decision we make at bd85 — from how we design our registration form to how long we keep your account records.
Minimum Necessary Collection
bd85 collects only the personal data that is strictly necessary to provide our services, verify your identity, process payments in BDT, and comply with applicable legal obligations. We do not collect data speculatively or for purposes unrelated to the operation of the platform.
No Data Selling
bd85 does not sell, rent, or lease your personal data to third parties for marketing or advertising purposes. Your information is used solely to operate, secure, and improve the bd85 platform and to meet our legal and regulatory obligations. This is a firm policy with no exceptions.
Bank-Grade Security
All personal data stored and transmitted by bd85 is protected by 256-bit SSL encryption. Account passwords are stored using bcrypt hashing and are never accessible in plain text — not even by bd85 administrators. Security infrastructure is reviewed and penetration-tested regularly.
Your Data, Your Control
bd85 respects your right to access, correct, and delete the personal data we hold about you. You can submit a data subject request at any time by contacting [email protected]. We will acknowledge your request within 72 hours and aim to resolve it within 30 calendar days of receipt.
Full Transparency
This Policy is written in plain, accessible English so that every bd85 player in Bangladesh can understand exactly what data we hold and why. We do not hide data practices in legal jargon. If anything in this Policy is unclear, our support team at [email protected] is available 24/7 to clarify.
Defined Retention Periods
bd85 does not retain personal data indefinitely. Each category of data has a defined retention period based on operational necessity and legal obligation. Once the retention period expires, data is securely deleted or anonymised. Full retention periods are set out in Section 7 of this Policy.
1 Data Controller
The data controller responsible for the personal data of bd85 players and website visitors is bd85, operating the online betting and casino platform accessible at bd85.io. For the purposes of this Policy, "data controller" means the entity that determines the purposes and means of processing personal data.
All data-related enquiries, subject access requests, deletion requests, and complaints should be directed to our dedicated data protection contact at [email protected]. Please include "Privacy Request" in the subject line of your email so that it is routed to the appropriate team promptly. bd85 aims to respond to all data-related correspondence within 72 hours during standard business days (Bangladesh Standard Time, UTC+6).
2 Data We Collect
bd85 collects and processes the following categories of personal data, depending on how you interact with our platform:
2.1 Registration and Identity Data
- Full legal name as it appears on your official identity document.
- Date of birth (used to verify that you are aged 21 or above).
- Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
- Email address used for account communications.
- Mobile phone number registered to your account.
- Username and hashed account password.
2.2 Identity Verification (KYC) Data
- Copies of government-issued identity documents: National Identity Card (NID), passport, or driving licence.
- Proof of address documents: utility bills, bank statements, or official government correspondence.
- Proof of payment method ownership: screenshots or statements confirming that your bKash, Nagad, Rocket, Upay, or bank account is registered in your name.
- Verification status and audit logs recording when verification was requested, submitted, and completed.
2.3 Financial and Transaction Data
- Deposit and withdrawal transaction records, including amounts in BDT, timestamps, and payment method used.
- Bonus credit and wagering history associated with your account.
- Partial payment method identifiers (e.g., the last four digits of a bKash or Nagad number) used to match transactions to your account.
- Records of declined or reversed transactions.
2.4 Gameplay and Activity Data
- Game session records: games played, bet amounts, win/loss outcomes, session duration.
- Sports betting records: markets accessed, odds at the time of placement, stake, and settlement outcome.
- Responsible gaming tool usage: deposit limits set, cooling-off periods activated, self-exclusion requests.
- Customer support interactions: transcripts of live chat, email correspondence, and call records where applicable.
2.5 Technical and Device Data
- IP address at the time of login, registration, and each transaction.
- Device type, operating system, and browser version.
- Geolocation data derived from IP address (country and city level only — bd85 does not access GPS-level location).
- Session identifiers and authentication tokens.
- Cookie data as described in Section 6 of this Policy.
3 How We Collect Your Data
bd85 collects personal data through the following channels:
3.1 Directly From You
The majority of personal data we hold is provided directly by you during the account registration process, when completing KYC verification, when making a deposit or withdrawal, when contacting our customer support team, or when updating your account profile settings.
3.2 Automatically Through Platform Use
When you access and use the bd85 platform, certain technical and device data is collected automatically by our servers and analytics infrastructure. This includes your IP address, device identifiers, browser fingerprint data, and session behaviour data. This collection is necessary for the security, fraud prevention, and performance monitoring of the platform.
3.3 From Trusted Third-Party Service Providers
In some cases, bd85 receives personal data from trusted third-party service providers who assist with the operation of our platform. This includes:
- Identity verification providers: who may return confirmation results or risk scores based on the documents you submit.
- Payment processors: including bKash, Nagad, Rocket, and Upay, who share transaction confirmation data with bd85 to reconcile deposits and withdrawals.
- Fraud detection services: who may flag device or behavioural patterns associated with known fraudulent activity.
bd85 does not purchase personal data from data brokers or third-party marketing databases.
4 Purposes and Legal Basis for Processing
The table below summarises the purposes for which bd85 processes your personal data and the legal basis on which each processing activity relies:
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, login credentials | Contractual necessity |
| Age and identity verification (KYC) | Identity, KYC documents, payment proof | Legal obligation / contractual necessity |
| Processing deposits and withdrawals | Financial, transaction, identity | Contractual necessity |
| Fraud prevention and security monitoring | Technical, financial, activity, identity | Legitimate interest / legal obligation |
| Responsible gaming monitoring | Activity, financial, responsible gaming tools | Legal obligation / legitimate interest |
| Customer support | Identity, contact, support interaction records | Contractual necessity |
| Platform performance and analytics | Technical, device, session data (anonymised) | Legitimate interest |
| Compliance with legal and regulatory obligations | Identity, financial, KYC, activity | Legal obligation |
| Sending account-related service emails | Contact, account status | Contractual necessity |
| Sending promotional communications (where consented) | Contact, activity preferences | Consent (withdrawable at any time) |
5 Data Sharing and Third Parties
5.1 Categories of Recipients
bd85 shares personal data only with third parties where it is strictly necessary to operate the platform and deliver services to you. The categories of third-party recipients are as follows:
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive transaction data necessary to process your deposits and withdrawals in BDT.
- Identity verification services: Specialist KYC providers receive copies of your identity documents solely to perform verification checks on bd85's behalf, under strict data processing agreements.
- Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary to deliver game content, but do not receive your full name, address, or financial data.
- Fraud detection and cybersecurity services: Technical security partners receive device and session data to identify and mitigate fraudulent activity targeting the bd85 platform.
- Cloud infrastructure providers: bd85 uses industry-standard cloud hosting services to store and process data. These providers act as data processors under binding contractual agreements and do not use your data for their own purposes.
- Legal and regulatory authorities: bd85 may be required by applicable law, court order, or regulatory instruction to disclose specific personal data to law enforcement, financial intelligence units, or licensing authorities. bd85 will only make such disclosures where legally compelled to do so.
5.2 No Sale of Personal Data
bd85 does not sell, rent, trade, or license personal data to any third party for commercial or marketing purposes. This prohibition applies without exception. None of the third parties listed in Section 5.1 are authorised to use your personal data for their own marketing activities.
5.3 Business Transfers
In the event that bd85 undergoes a merger, acquisition, or sale of all or part of its assets, personal data held by bd85 may be transferred to the acquiring entity as part of that transaction. In such circumstances, bd85 will notify affected players by email prior to the transfer and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.
6 Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. bd85 uses cookies and similar tracking technologies (including local storage objects and session tokens) to enable core platform functionality, maintain your login session, prevent fraud, and understand how players use the platform so that we can improve it.
6.2 Categories of Cookies Used by bd85
- Strictly Necessary Cookies: These cookies are essential for the bd85 platform to function. They maintain your login session, protect against cross-site request forgery (CSRF), and enable secure payment flows. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
- Functional Cookies: These cookies remember your preferences, such as your preferred language, currency display, and game settings, so that you do not need to re-enter them each time you visit.
- Analytics Cookies: bd85 uses privacy-respecting analytics tools to collect aggregated, anonymised data about how visitors navigate the platform. This data is used to identify technical issues and improve user experience. No personally identifiable information is contained in analytics cookies.
- Security and Fraud Prevention Cookies: These cookies store device fingerprint fragments and session identifiers that help bd85 detect suspicious login attempts, account takeover attempts, and automated bot activity.
6.3 Managing Your Cookie Preferences
You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that blocking functional or analytics cookies may affect certain non-essential features of the bd85 platform. Blocking strictly necessary cookies will prevent you from logging in and using the platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
7 Data Retention
bd85 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention periods apply:
- Account and identity data: Retained for the full duration of your account's active life plus a minimum of five years following permanent account closure, to satisfy anti-money laundering (AML) and record-keeping obligations.
- KYC documents: Retained for a minimum of five years following the completion of the verification process or the closure of the account, whichever is later.
- Financial and transaction records: Retained for a minimum of seven years following each transaction, in accordance with standard financial record-keeping requirements.
- Gameplay and session activity logs: Retained for three years from the date of each session, then securely deleted or anonymised.
- Customer support communications: Retained for two years from the date of the last correspondence in each support ticket, then archived for a further one year before deletion.
- Marketing consent records: Retained for the duration of your active marketing consent plus two years following withdrawal, to demonstrate compliance with consent obligations.
- Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, even after account closure.
Upon expiry of the applicable retention period, personal data is securely deleted from bd85's live systems. Anonymised, aggregate data that can no longer be linked to any individual may be retained indefinitely for statistical and analytical purposes.
8 Data Security
bd85 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bd85 servers, ensuring that your login credentials, payment details, and personal data cannot be intercepted in transit.
- Bcrypt password hashing with per-user salt values, ensuring that your account password is never stored or accessible in plain text — even in the event of a database breach.
- Role-based access controls (RBAC) limiting access to personal data to only those bd85 employees and contractors who require it to perform their specific job functions.
- Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities in the bd85 infrastructure.
- Two-factor authentication (2FA) available to all players and mandatory for all bd85 administrative accounts.
- Automated threat detection monitoring for suspicious login patterns, unusual transaction activity, and known attack signatures around the clock.
In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, bd85 will notify those players without undue delay and will take all reasonable steps to contain and remediate the breach.
9 Your Rights Over Your Data
As a bd85 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and include your registered account username or email address for verification purposes.
Right of Access
Request a copy of all personal data bd85 holds about you, along with information on how it is being used. We will provide this within 30 days of receiving a verified request.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your bd85 account. Some corrections may require submission of supporting documentation.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bd85's legal and regulatory retention obligations.
Right to Restrict Processing
Request that bd85 temporarily restrict the processing of your personal data — for example, while the accuracy of certain data is being contested or a complaint is being investigated.
Right to Data Portability
Request a copy of your personal data in a structured, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider of your choosing.
Right to Object
Object to bd85 processing your personal data on the basis of legitimate interest, including the use of your data for platform analytics or service improvement activities.
Right to Withdraw Consent
Withdraw any consent you have previously given to bd85 — for example, consent to receive promotional emails. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
If you believe bd85 has mishandled your personal data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
bd85 will respond to all data rights requests within 30 calendar days of receiving a verified request. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.
10 Children and Minors
bd85 is strictly an adult-only platform. Our services are not directed at, and are not intended for use by, any person under the age of 21. bd85 does not knowingly collect personal data from individuals under the age of 21. Any account found to have been registered by a person under 21 will be closed immediately upon detection, and any associated personal data will be deleted in accordance with our data retention procedures, subject to any legal obligation to retain records of the underage access incident.
If you are a parent or legal guardian and believe that a minor in your care has registered an account with bd85, please contact [email protected] immediately with the relevant account details. We will investigate the report and take prompt action to close the account and remove the minor's personal data. We also encourage parents and guardians to install parental control software on shared devices to prevent minors from accessing online gambling platforms.
11 International Data Transfers
bd85 is an internationally operating platform and some of the third-party service providers we use — including cloud infrastructure providers, game content studios, and identity verification services — may process personal data in countries outside of Bangladesh. When personal data is transferred internationally, bd85 ensures that appropriate safeguards are in place to protect that data, including:
- Contractual data processing agreements that require the recipient to apply data protection standards equivalent to those described in this Policy.
- Use of third-party providers who operate data centres located in jurisdictions with recognised data protection frameworks.
- Technical security measures, including encryption in transit and at rest, applied to all internationally transferred data.
By using the bd85 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh in accordance with the safeguards described above. If you have concerns about international data transfers relating to your specific personal data, please contact [email protected].
12 Changes to This Policy
bd85 reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, bd85 will notify registered players by email to the address associated with their account and will display a prominent notice on the bd85 platform at least 7 days before the revised Policy takes effect.
The "Last Updated" date at the top of this page reflects the date on which the most recent revision was made. Your continued use of the bd85 platform following the effective date of a revised Policy constitutes your acceptance of the revised terms. If you do not agree with a revised Policy, you must stop using the platform and request account closure in accordance with the Terms & Conditions.
We encourage all bd85 players to review this Policy periodically, and especially whenever they receive a notification of an update from us.
13 Contact and Data Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or the personal data bd85 holds about you, please contact our team using the details below. All communications must be in English to ensure accurate and timely handling.
Data Enquiries Email: [email protected]
Subject Line for Data Requests: "Privacy Request" or "Data Rights Request"
Support Availability: 24 hours a day, 7 days a week, including public holidays in Bangladesh (Bangladesh Standard Time, UTC+6).
Response Time: bd85 acknowledges all data-related enquiries within 72 hours and aims to resolve them fully within 30 calendar days.
Have Questions About Your Privacy?
Our support team is available around the clock at [email protected] to answer any questions about how bd85 handles your personal data. You can also review our full Terms & Conditions, explore the bd85 Casino, or check out our FAQ for quick answers to common questions. 21+ only. Please gamble responsibly.