bdgam Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by bdgam, the operator of the online betting and gaming platform accessible at bdgam.io ("Platform"). This Policy explains how bdgam collects, uses, stores, protects, and — where applicable — shares the personal data of individuals who register for and use the Platform ("you", "your", "Player").

By creating an account on the bdgam Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or continue using the Platform.

This Policy should be read alongside the bdgam Terms and Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms and Conditions on a matter of privacy, this Policy shall prevail.

Personal Data We Collect

bdgam collects two broad categories of personal data: information you provide to us directly, and information we collect automatically through your use of the Platform. The specific categories are set out below.

2.1 Data You Provide Directly

2.2 Data We Collect Automatically

• Device information: device type, operating system, browser type and version, screen resolution, device identifiers
• Network information: IP address, approximate geolocation derived from IP, internet service provider
• Usage data: pages visited, features used, bet history, game session data, timestamps, click-path data
• Cookie and tracking data: session cookies, persistent preference cookies, analytics identifiers (see Section 5)
• Fraud-prevention signals: device fingerprint, behavioural analytics data used to detect account misuse

How We Collect Your Data

bdgam collects personal data through the following channels and mechanisms:

• Direct input: Information you type into registration forms, account settings pages, deposit or withdrawal request forms, or support chat windows.
• Document uploads: Identity and address documents you upload during the KYC verification process.
• Payment processors: Transaction confirmation data passed to us by bKash, Nagad, Rocket, Upay, and other payment operators when you complete a deposit or withdrawal.
• Automated technologies: Cookies, web beacons, server logs, and similar technologies that record your interactions with the Platform (see Section 5 for full details).
• Third-party verification services: Identity verification providers who assist us in confirming the authenticity of KYC documents. These providers supply a verification result to bdgam; they do not retain your documents on bdgam's behalf.
• Fraud-prevention providers: Fraud intelligence signals (such as whether a device or IP address is associated with known fraudulent activity) sourced from reputable third-party fraud-prevention services.
• Public sources: Publicly available information — such as sanctions lists, politically exposed person (PEP) registries, and adverse media databases — consulted as part of our anti-money-laundering compliance obligations.

Purposes & Legal Bases for Processing

bdgam processes your personal data only where we have a valid legal basis to do so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each.

Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment and determined that our interests do not override your fundamental rights and freedoms. You may contact us to request a copy of that assessment.

Cookies & Tracking Technologies

bdgam uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse usage patterns, and detect fraudulent or abusive behaviour. The categories of cookies we use are described below.

5.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your login session, maintain your account state across pages, and enable security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the Platform.

5.2 Functional Cookies

Functional cookies remember your preferences — such as your chosen language, display settings, and responsible gaming limit acknowledgements — so you do not need to re-enter them on each visit. These cookies do not track your activity for advertising purposes.

5.3 Analytics Cookies

We use analytics cookies to understand how players use the Platform — which features are most popular, where users encounter difficulties, and how performance can be improved. Analytics data is aggregated and anonymised where possible. Where analytics tools involve third-party processors, we ensure those processors are contractually prohibited from using your data for their own purposes.

5.4 Fraud-Prevention Cookies

These cookies and device fingerprinting technologies help us identify and block fraudulent account creation, bonus abuse, and other security threats. They are essential to our ability to maintain a fair and secure platform for all players and cannot be disabled.

Sharing Your Personal Data

bdgam does not sell your personal data. We share it only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

6.1 Service Providers

We share data with carefully selected third-party service providers who process data on our behalf to help us operate the Platform. These include identity verification providers, payment processors, fraud-prevention providers, cloud hosting providers, analytics providers, and customer support platform operators. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to bdgam.

6.2 Payment Operators

When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a bank transfer, the minimum data necessary to complete the transaction (including your transaction reference, amount, and account identifier) is shared with the relevant payment operator. This sharing is necessary to perform your deposit or withdrawal request.

6.3 Legal and Regulatory Authorities

bdgam may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so — for example, in response to a court order, a statutory anti-money-laundering reporting obligation, or a formal regulatory investigation. We will not disclose data beyond what is legally required in such circumstances.

6.4 Business Transfers

In the event that bdgam undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be processed by the new entity.

International Data Transfers

The bdgam Platform is primarily operated for and by players in Bangladesh. Some of the third-party service providers we use to operate the Platform may process personal data in jurisdictions outside Bangladesh. Where such international transfers occur, bdgam takes the following steps to ensure your data remains protected:

• We only transfer data to service providers located in countries or jurisdictions that maintain adequate data protection standards, as assessed by bdgam's data protection review process.
• Where a service provider is located in a jurisdiction without a formal adequacy determination, we implement standard contractual clauses or equivalent contractual protections to ensure your data is handled to the same standard as it would be under this Policy.
• We maintain a current register of all international data transfers and the safeguards in place for each. Players may request a summary of this register by contacting our support team.

Payment data shared with Bangladeshi payment operators (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, etc.) is processed within Bangladesh and is not subject to international transfer.

Data Retention

bdgam retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the relevant retention period, data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be linked to any individual. Data subject to an active legal hold (e.g., data relevant to ongoing litigation or a regulatory investigation) will be retained until the hold is lifted.

Data Security

bdgam implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored in our databases, including financial account identifiers and document data
• Role-based access controls ensuring that staff can only access the data they need to perform their specific job functions
• Multi-factor authentication required for all staff accessing systems that hold personal data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Continuous monitoring of system activity for anomalies indicative of unauthorised access attempts
• Secure data centre infrastructure with physical access controls and environmental protections
• Regular staff training on data protection obligations and secure data handling practices

While bdgam takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password and by notifying us immediately if you suspect unauthorised access to your account.

Your Data Protection Rights

As a player on the bdgam Platform, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected] with the subject line "Data Rights Request".

We will respond to all data rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

Children's Privacy

The bdgam Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have collected personal data from a person under 21 — whether through a misrepresentation during registration or by any other means — we will take the following steps immediately:

• Permanently close the account associated with the underage individual
• Void all bets placed by that account and return any genuine deposits via the original payment method
• Delete all personal data associated with the account, subject only to any legal retention obligations that apply

If you are a parent or guardian and believe that your child has registered an account on the bdgam Platform, please contact us immediately at [email protected] with the subject line "Underage Account". We will investigate and take action within 24 hours of receiving your report.

Marketing Communications

With your consent, bdgam may send you promotional communications about new games, bonus offers, seasonal promotions (such as Eid specials or Pohela Boishakh offers), cricket betting events, and platform news. These communications may be delivered via email or SMS to the contact details registered on your account.

Your marketing consent preferences are captured at the point of registration and can be updated at any time through your account settings page or by contacting our support team. Withdrawing your consent for marketing communications will not affect your ability to use the Platform, your account status, or your eligibility for any non-promotional bonuses you have already been awarded.

Please note that certain operational communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates — are not marketing communications and will be sent to you regardless of your marketing consent status, as they are necessary for the performance of our contract with you.

Third-Party Links

The bdgam Platform may contain references to or descriptions of third-party services — for example, payment operators such as bKash and Nagad, or game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. While these providers are integrated into the bdgam Platform experience, their own websites and applications operate under their own independent privacy policies.

bdgam is not responsible for the privacy practices of any third-party provider. We encourage you to review the privacy policy of any external service before providing that service with your personal data. The fact that a third-party provider is mentioned in this Policy or on the Platform does not constitute an endorsement of that provider's data protection practices.

Changes to This Privacy Policy

bdgam reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Effective Date" at the top of the document
• Send an in-platform notification to all registered players summarising the key changes
• For significant changes that materially affect how we use your data, send a direct email notification to your registered email address at least 14 days before the changes take effect

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure by contacting our support team.

We recommend that you review this Policy periodically to stay informed about how bdgam protects your personal data. All previous versions of this Policy are available on request.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how bdgam has handled your personal data, please contact our Data Protection team using the details below.

15.1 Formal Complaints

If you believe that bdgam has processed your personal data in a manner that violates applicable data protection law or this Policy, and you are not satisfied with our response to your concern, you have the right to lodge a formal complaint. We take all such complaints seriously and will investigate them thoroughly and impartially.

Please send formal complaints in writing to [email protected] with the subject line "Formal Privacy Complaint". Your complaint should include a clear description of the processing activity you are concerned about, the specific provision of this Policy or applicable law you believe has been breached, and any steps you have already taken to raise the concern with us informally.

We will provide a written response to all formal complaints within 30 days of receipt. Where additional time is required due to the complexity of the matter, we will notify you within the initial 30-day window and provide an estimated resolution date.