Privacy Policy — bdbuj

1. Data We Collect

The categories of personal information bdbuj gathers — and the circumstances under which each category is collected

bdbuj collects personal data only to the extent necessary to operate a safe, fair, and compliant online gaming platform for players across Bangladesh. We do not collect data speculatively or for purposes unrelated to providing you with a high-quality gaming experience. The following table summarises the categories of data we collect and their sources.

Data we do not collect: bdbuj does not collect full card numbers, CVV codes, or bank account credentials directly. All payment processing for card-based transactions is handled by PCI-DSS compliant third-party processors; bdbuj only receives a transaction reference and status confirmation.

2. How We Use Your Data

The specific purposes for which bdbuj processes your personal information — and the legal basis for each purpose

bdbuj processes personal data strictly for the purposes described in this section. We do not sell your personal data to third parties, and we do not use your data for advertising on third-party platforms without your explicit consent.

• Account administration: To create, maintain, and manage your bdbuj account — including authentication, password resets, session management, and account closure procedures.
• Identity verification (KYC): To verify your age and identity in accordance with anti-fraud and responsible gaming obligations. This includes reviewing identity documents submitted during account verification.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods; to maintain accurate transaction records in Bangladeshi Taka (৳); and to investigate and resolve disputed transactions.
• Service delivery: To provide access to casino games, cricket betting, slots, live dealer tables, and all other features of the bdbuj platform — and to personalise your experience based on your preferences and play history.
• Customer support: To respond to your support queries, complaints, and feedback in a timely manner; to maintain records of prior communications for continuity of service; and to improve support quality over time.
• Security and fraud prevention: To detect, investigate, and prevent suspicious activity, unauthorised access, multi-accounting, bonus abuse, money laundering, and other fraudulent behaviour on the platform.
• Responsible gaming compliance: To monitor betting patterns for indicators of problem gambling; to apply deposit limits, session reminders, and self-exclusion measures requested by members; and to fulfil our duty of care to vulnerable users.
• Legal and regulatory obligations: To retain records as required by applicable laws; to cooperate with lawful requests from law enforcement or relevant authorities; and to enforce these Terms & Conditions.
• Platform improvement: To analyse aggregated usage data and identify ways to improve the bdbuj platform, fix bugs, optimise performance, and develop new features that better serve Bangladeshi players.
• Promotional communications: Where you have opted in, to send you relevant promotions, bonus offers, and platform news by SMS or email — for example, offers tied to BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh events. You may withdraw consent to marketing communications at any time by updating your notification preferences or contacting [email protected].

bdbuj will not use your personal data for any purpose materially different from those listed above without first notifying you and, where required by law, obtaining your explicit consent.

3. Data Sharing & Third Parties

Who bdbuj may share your data with — and the safeguards that apply in each case

bdbuj does not sell, rent, or trade your personal data. We share data only with carefully selected third parties whose services are essential to operating bdbuj, and only to the minimum extent necessary for each purpose.

• Payment service providers: bKash, Nagad, Rocket, Upay, and other payment processors receive only the transaction data required to process your deposit or withdrawal. They do not receive your full gaming history or any data beyond what is necessary for payment execution.
• Identity verification providers: Third-party KYC service providers may process identity documents on bdbuj's behalf to confirm age and identity. These providers are bound by strict data processing agreements and may not use your data for their own purposes.
• Game software providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver and maintain the games you play. These providers do not receive your name, contact details, or financial data.
• IT and hosting infrastructure: Cloud hosting, content delivery, and cybersecurity partners who maintain the technical infrastructure of bdbuj.net may process server logs and technical data. These partners are contractually required to maintain data confidentiality.
• Analytics providers: Aggregated, de-identified usage data may be shared with analytics tools to help bdbuj understand platform performance. No personally identifiable information is included in analytics data sets.
• Law enforcement and legal authorities: bdbuj will disclose personal data to law enforcement, courts, or regulatory authorities where required to do so by a valid legal obligation or lawful order — for example, in connection with an investigation into money laundering or fraud.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bdbuj's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

4. Cookies & Tracking Technologies

How bdbuj uses cookies, local storage, and similar technologies — and how you can control them

bdbuj uses cookies and similar client-side storage technologies to operate the platform correctly, remember your preferences, and improve your experience. The following table explains the types of cookies we use.

Strictly necessary cookies cannot be disabled as they are essential to the operation of the bdbuj platform. Functional, analytics, and security cookies may be controlled through your browser settings. Note that disabling certain cookies may affect the functionality of parts of the bdbuj platform.

bdbuj does not use third-party advertising cookies or behavioural profiling cookies that track you across other websites for advertising purposes. Any third-party scripts present on bdbuj.net are limited to those strictly necessary for platform functionality (such as game providers' SDKs and payment gateway scripts).

Most modern browsers provide options to view, manage, and delete cookies. You can also use your browser's private or incognito mode to prevent cookies from being stored between sessions. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

5. Data Retention

How long bdbuj keeps your personal data — and the criteria used to determine retention periods

bdbuj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, in accordance with financial record-keeping obligations.
• Transaction records: All deposit and withdrawal records in Bangladeshi Taka (৳) are retained for a minimum of 7 years to comply with financial regulations applicable to gaming operators.
• Identity verification documents: KYC documents (national ID, passport copies) are retained for 5 years following account closure or the date the documents were last reviewed — whichever is later.
• Support communications: Email correspondence and live chat transcripts are retained for 3 years from the date of the communication to allow for dispute resolution and quality improvement.
• Technical and device logs: Server and access logs are retained for 90 days for security monitoring purposes, after which they are automatically deleted unless flagged for a specific investigation.
• Marketing preferences: Records of your consent to (or withdrawal from) marketing communications are retained for 3 years from the date of the consent action.
• Closed and dormant accounts: Data associated with accounts closed due to fraud or policy violation may be retained indefinitely to prevent re-registration by prohibited persons.

When data is no longer required under the above schedule and no legal obligation requires its further retention, bdbuj securely deletes or irreversibly anonymises it. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

6. Your Privacy Rights

The rights you hold over your personal data — and how to exercise them with bdbuj

bdbuj respects your right to understand and control how your personal data is used. As a bdbuj member or site visitor, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data bdbuj holds about you. We will provide this in a commonly used electronic format within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly from your account settings page.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data, subject to any legal retention obligations that override this right (see Section 5 above). Requests for erasure from accounts with an outstanding balance, an active bonus, or an open dispute will be placed on hold until those matters are resolved.
• Right to restrict processing: You may request that bdbuj restricts the processing of your data in certain circumstances — for example, while a dispute about the accuracy of the data is being investigated.
• Right to data portability: You may request your personal data in a structured, machine-readable format suitable for transfer to another service.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to the processing of your personal data for any purpose based on bdbuj's legitimate interests, where you believe your interests override those legitimate interests.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include sufficient information to identify your account. We will respond within 30 days. In some cases, we may need to verify your identity before processing the request.

7. Data Security

The technical and organisational measures bdbuj employs to protect your personal data from loss, theft, or unauthorised access

bdbuj takes data security seriously and implements a layered set of technical and organisational measures to protect your personal data at every stage of its lifecycle — from the moment it is collected to the point at which it is securely deleted.

• Encryption in transit: All communications between your browser or app and bdbuj.net are encrypted using TLS 1.2 or higher. This prevents eavesdropping or tampering with data as it travels across the internet.
• Encryption at rest: Sensitive data fields — including passwords (stored as salted hashes), identity document scans, and financial records — are encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within bdbuj's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data necessary to perform their specific role, and all access is logged for audit purposes.
• Two-factor authentication: bdbuj offers two-factor authentication (2FA) for member accounts and requires it for all internal administrative access. We strongly encourage all registered members to enable 2FA for enhanced account security.
• Security monitoring: bdbuj's infrastructure is monitored continuously for anomalous activity, intrusion attempts, and unusual access patterns. Our security team investigates any alert within defined response timeframes.
• Third-party security audits: The bdbuj platform undergoes periodic security assessments by independent cybersecurity professionals. Identified vulnerabilities are remediated in accordance with a prioritised patching schedule.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights or interests, bdbuj will notify affected members promptly — providing details of what occurred, what data was affected, and what steps have been taken in response.

Despite bdbuj's rigorous security practices, no internet-based platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for reporting any suspected unauthorised access to your account immediately. bdbuj will never ask you for your password — any communication claiming to be from bdbuj and requesting your password should be treated as fraudulent and reported to us immediately.

8. Policy Updates & Contact

How bdbuj notifies you of changes to this Privacy Policy — and how to reach our privacy team

bdbuj reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. The effective date at the top of this page always reflects the most recent revision.

Where any update to this Privacy Policy constitutes a material change — for example, a new category of data being collected, a new purpose for processing, or a new third-party recipient — bdbuj will notify registered members via the email address or mobile number associated with their account before the change takes effect. Continued use of bdbuj following notification of a material change constitutes acceptance of the updated Privacy Policy.

Minor editorial updates (such as corrections of typographical errors, clarification of existing practices without substantive change, or restructuring of the document for readability) do not constitute material changes and will not trigger individual member notification, though the effective date will be updated to reflect the revision.