Privacy Policy — bd189 Data Protection
This Privacy Policy explains exactly what personal data bd189 collects from players in Bangladesh, why we collect it, how we use and protect it, and the rights you hold over your own information. We are committed to handling your data with full transparency.
1Introduction
bd189 operates an online sports betting and casino platform at bd189.io, serving registered players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. In the course of operating this platform, bd189 collects and processes personal data relating to players, prospective players, and website visitors.
This Privacy Policy ("Policy") describes the personal data bd189 collects, the purposes for which it is processed, the parties with whom it may be shared, how long it is retained, and the rights you hold as a data subject. This Policy applies to all information collected through the bd189 website, mobile platform, customer support channels, and any other services provided by bd189.
By registering an account, logging in, making a deposit, or continuing to browse the bd189 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the bd189 platform immediately and contact [email protected] to request account closure.
This Policy should be read alongside the bd189 Terms & Conditions and Responsible Gaming page, both of which form part of the overall agreement between bd189 and registered players.
2Data We Collect
bd189 collects the following categories of personal data from players and website visitors:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID / passport number | KYC verification, age verification, account management |
| Contact Data | Email address, mobile phone number, residential address | Account communication, support, notifications |
| Financial Data | bKash/Nagad/Rocket account numbers, Visa/Mastercard last 4 digits, transaction history | Deposit processing, withdrawal verification, AML compliance |
| Technical Data | IP address, device type, browser type, operating system, session logs | Security, fraud prevention, platform optimisation |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Responsible gaming monitoring, personalisation, analytics |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support, quality assurance, dispute resolution |
| Verification Documents | Scans/photos of National ID, passport, utility bills, selfies for liveness checks | KYC compliance, age and identity verification |
bd189 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data for identification, health data, or data relating to criminal convictions beyond what is strictly required for fraud prevention and anti-money laundering purposes.
3How We Collect Data
bd189 collects personal data through the following channels and mechanisms:
- Direct Registration: When you create a bd189 account, you provide your name, date of birth, email address, phone number, and address directly through the registration form.
- KYC Verification: When you submit identity and address verification documents as required for withdrawal processing or enhanced account security.
- Deposits and Withdrawals: Financial data is collected at the point of deposit or withdrawal, including the payment method used and transaction reference numbers.
- Platform Usage: Usage data and technical data are collected automatically as you browse the bd189 website, use the mobile platform, and interact with games and sportsbook markets. This collection uses cookies, session logs, and server-side tracking.
- Customer Support: When you contact the bd189 support team via live chat or email, the content of those communications is recorded and stored.
- Third-Party Partners: bd189 may receive data about you from third-party KYC verification providers, payment processors, and fraud detection services to the extent necessary for platform operations and compliance.
4How We Use Your Data
bd189 processes your personal data only for specific, legitimate purposes. The following table summarises those purposes and the legal basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contractual necessity |
| Age and identity verification (KYC) | Identity, Verification Documents | Legal obligation / Contractual necessity |
| Deposit and withdrawal processing | Financial, Identity | Contractual necessity |
| Fraud prevention and AML compliance | Financial, Technical, Identity | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | Usage, Financial | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Communications, Identity | Contractual necessity / Legitimate interest |
| Platform security and abuse prevention | Technical, Usage | Legitimate interest |
| Marketing communications (opt-in only) | Contact, Usage | Consent |
| Platform analytics and improvement | Technical, Usage | Legitimate interest |
bd189 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without human review. Where personalisation algorithms are used to suggest games or offers, you may opt out of such recommendations by contacting [email protected].
Marketing communications are only sent to players who have explicitly opted in during registration or via account settings. You may withdraw your marketing consent at any time by updating your account preferences or by writing to [email protected].
5Sharing Your Data
bd189 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:
- Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive the financial data strictly required to process your deposit or withdrawal transactions. These partners are bound by their own data protection obligations.
- KYC and Identity Verification Providers: bd189 uses regulated third-party KYC service providers to verify identity documents and conduct liveness checks. These providers receive your identity and verification document data solely for verification purposes and are contractually prohibited from using it for any other purpose.
- Game Studios and Content Providers: Game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and limited technical data to deliver game content. They do not receive your full identity or financial details.
- Fraud and Risk Management Services: bd189 uses specialist third-party fraud detection platforms that process technical and usage data to identify unusual patterns and protect the integrity of the platform.
- Legal and Regulatory Authorities: bd189 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or regulatory guidance. bd189 will notify affected players of such disclosure where legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of the bd189 business, player data may be transferred to the successor entity, subject to the same level of protection as described in this Policy.
6Cookies and Tracking
bd189 uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. Cookies are small data files stored in your browser that help the platform recognise your session, remember your preferences, and collect usage analytics.
The following categories of cookies are used on the bd189 platform:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to personalise your experience on return visits.
- Analytics Cookies: Collect aggregated, anonymised data about how visitors navigate the platform — pages visited, time on page, entry and exit points — to help bd189 improve the platform. No personally identifiable information is transmitted via analytics cookies.
- Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and session hijacking. These process technical data such as IP address and device fingerprint.
bd189 does not use third-party advertising cookies or tracking pixels that transmit player data to advertising networks or social media platforms. You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.
7Data Retention
bd189 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML / fraud investigation obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| KYC verification documents | Duration of account + 5 years after closure | Regulatory compliance, dispute evidence |
| Customer support communications | 3 years from last interaction | Dispute resolution, quality review |
| Usage and technical logs | 13 months from collection | Security monitoring, analytics |
| Marketing consent records | Until consent withdrawn + 3 years | Consent audit trail |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytics purposes.
8Data Security
bd189 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational measures are in place:
- SSL/TLS Encryption: All data transmitted between your device and the bd189 platform is encrypted using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms an active secure connection at all times.
- Encryption at Rest: Sensitive personal data including identity documents, financial records, and password hashes is stored in encrypted form in bd189's databases. Plain-text storage of passwords is strictly prohibited.
- Access Controls: Access to personal data within bd189's systems is restricted on a need-to-know basis. Staff members can only access the data necessary for their specific job function. All internal access is logged and audited.
- Two-Factor Authentication: Player accounts support OTP-based two-factor authentication for login and withdrawal confirmation. bd189 strongly recommends enabling this feature on all accounts.
- DDoS and Intrusion Protection: The bd189 platform is protected by enterprise-grade distributed denial-of-service mitigation and real-time intrusion detection systems.
- Incident Response: bd189 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, bd189 will notify affected players promptly via their registered contact details and take immediate remediation action.
9Your Rights
As a data subject, you hold the following rights with respect to your personal data held by bd189. You may exercise any of these rights by contacting the bd189 support team at [email protected]:
- Right of Access: You have the right to request a copy of all personal data that bd189 holds about you. bd189 will respond to verified access requests within 30 days.
- Right to Rectification: If any personal data bd189 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. This right is subject to overriding legal retention obligations — bd189 may be required to retain certain data for AML compliance even after an erasure request.
- Right to Restriction: You may request that bd189 restrict processing of your personal data where you contest its accuracy, where processing is unlawful, or where you have objected to processing and bd189 is assessing that objection.
- Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bd189 in a structured, commonly used, machine-readable format where technically feasible.
- Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, bd189 will cease marketing communications immediately.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
bd189 will respond to all data rights requests within 30 calendar days of receiving a verified request. In complex cases, this period may be extended by a further 60 days, in which case bd189 will notify you of the extension within the initial 30-day window. bd189 will not charge a fee for handling data rights requests unless requests are manifestly unfounded or excessive.
10Minors and Age Restriction
bd189 applies mandatory age verification checks as part of the account registration and KYC process. Any account found to belong to a person under the age of 21 will be immediately suspended and all funds, bonuses, and winnings held in the account may be voided and returned pending investigation.
If you believe that bd189 has inadvertently collected personal data from a minor, please contact us immediately at [email protected]. Upon confirmation, bd189 will delete all data associated with that account without delay and will take steps to prevent recurrence.
bd189 also encourages parents and guardians to use parental control software to prevent minors from accessing online betting and gaming platforms. Resources on responsible gambling for families are available on the Responsible Gaming page.
11Changes to This Policy
bd189 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made to this Policy, bd189 will notify registered players via their registered email address and will update the "Last Updated" date at the top of this page.
Minor clarifications and non-material amendments may be made without direct notification. It is your responsibility to review this Privacy Policy periodically. The most current version of this Policy will always be available at bd189.io/privacy-policy. Your continued use of the bd189 platform following any update constitutes your acceptance of the revised Policy.
If an amendment reduces your privacy rights or materially changes how bd189 uses your personal data, bd189 will provide at least 14 days' advance notice before the change takes effect, giving you the opportunity to review the updated Policy and close your account if you do not wish to continue under the new terms.
12Contact and Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to bd189's handling of your personal data, please contact the bd189 Data Support team using the details below. bd189 will respond to all privacy-related enquiries within 5 business days.
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the bd189 platform
- Response Time: Average 2–5 minutes via live chat; up to 5 business days via email for data rights matters
bd189 takes all privacy complaints seriously. If you submit a formal complaint, bd189 will acknowledge receipt within 48 hours and provide a substantive response within 14 business days. If you are not satisfied with bd189's response to your complaint, you may escalate your concern to the relevant data protection authority in your jurisdiction.
How bd189 Protects Your Data
Six core commitments that define how bd189 approaches data privacy for every player on the platform.
All data transmitted between your device and bd189 is protected with TLS 1.2+ encryption. Sensitive stored data — including identity documents and financial records — is encrypted at rest using industry-standard ciphers.
bd189 has a strict no-sale policy. Your personal data is never sold, rented, or traded to advertisers, data brokers, or any commercial third party. Data sharing is limited strictly to operational partners under binding confidentiality agreements.
Promotional emails and SMS messages are sent only to players who have explicitly opted in. You can withdraw your marketing consent at any time through your account settings or by contacting support, with effect from the moment of withdrawal.
You have the right to access, correct, restrict, or request deletion of your personal data at any time. bd189 responds to all verified data rights requests within 30 days — with no charge for standard requests.
bd189 does not knowingly collect or retain personal data from persons under the age of 21. Mandatory KYC age verification is applied to all accounts, and any account found to belong to a minor is immediately suspended.
bd189 retains data only for as long as legally necessary. Account data is held for up to 5 years post-closure for AML compliance; usage logs roll off after 13 months. No data is kept beyond its defined retention period without a legitimate legal basis.
Questions About Your Privacy?
The bd189 support team is available around the clock to answer any questions about this Privacy Policy or how your personal data is handled. You can also explore our FAQ or review our Terms & Conditions for the full picture.