bd987 Privacy Policy

1. Data We Collect

bd987 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and from trusted third-party partners involved in payment processing and identity verification. The categories of personal data we collect include the following:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for responsible gaming assessments and only with your explicit consent. We do not collect data from individuals we know to be under 18 years of age. If we become aware that a minor has submitted personal data, we will delete it promptly and close the associated account.

Where you choose not to provide data that is marked as mandatory during registration or verification, we may be unable to open or maintain your bd987 account or process withdrawals from it. Mandatory fields are clearly indicated at the point of collection.

2. How We Use Your Data

bd987 uses your personal data for the following purposes, each of which is supported by a lawful basis under applicable data protection principles:

• Account Creation and Management: To register your bd987 account, verify your identity, maintain your player profile, and manage your account settings and preferences. Lawful basis: performance of a contract.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and supported bank accounts, and to process withdrawal requests to verified payment methods. Lawful basis: performance of a contract.
• Identity and Age Verification (KYC): To confirm that you are aged 18 or over and that the identity information you have provided is accurate and verifiable. Lawful basis: legal obligation and legitimate interest.
• Fraud Prevention and Security: To monitor account activity for signs of fraud, money laundering, duplicate account creation, bonus abuse, and other prohibited conduct. Lawful basis: legal obligation and legitimate interest.
• Personalisation: To tailor your bd987 experience by surfacing game recommendations, relevant promotions, and content that reflects your betting and gaming history. Lawful basis: legitimate interest.
• Responsible Gaming Monitoring: To identify players who may be exhibiting signs of problem gambling and to apply appropriate safeguards such as deposit limit prompts, cooling-off notifications, or account reviews. Lawful basis: legal obligation and legitimate interest.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance. Lawful basis: performance of a contract.
• Regulatory Compliance: To meet financial record-keeping, anti-money-laundering (AML), and other legal obligations imposed on bd987 as a platform operating in this space. Lawful basis: legal obligation.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the quality, reliability, and user experience of the bd987 platform. Lawful basis: legitimate interest.
• Communications: To send you transactional emails and SMS notifications related to your account (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about bonuses and new features. Lawful basis: contract performance for transactional messages; consent for promotional messages.

bd987 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review stage. Where automated tools flag an account for investigation, a member of the compliance team reviews the case before any consequential action is taken.

3. Data Sharing & Third Parties

bd987 does not sell, rent, or trade your personal data with any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment Service Providers: Transaction data is shared with payment network operators including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard to authorise and settle deposits and withdrawals. These providers act as independent data controllers in respect of their own payment infrastructure.
• KYC and Identity Verification Partners: Identity documents, selfies, and related data are processed by certified third-party KYC verification services. These providers are bound by data-processing agreements that restrict their use of your data to the verification purpose only.
• Game Technology Providers: Game session data (bet amounts, game IDs, outcomes) is shared with game studio providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi for the purpose of game delivery, outcome settlement, and jackpot administration. These providers do not receive your name, contact details, or financial data beyond what is required for game settlement.
• Analytics and Platform Infrastructure: Aggregated and anonymised technical data may be processed by cloud hosting and analytics service providers. No personally identifiable information is shared with analytics tools in a manner that would allow identification of individual players.
• Legal and Regulatory Authorities: bd987 will disclose personal data to law enforcement agencies, regulators, or courts where required by law, court order, or in response to a valid legal process. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of bd987's business assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

4. Cookies & Tracking Technologies

bd987 uses cookies and similar technologies (including session storage and local storage) to operate the platform effectively and to improve your experience. A cookie is a small text file placed on your device by our server when you visit the site. Cookies do not contain executable code and cannot access other data on your device.

We use the following categories of cookies on the bd987 platform:

bd987 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not receive bd987-related advertising on other websites as a result of cookies placed by this platform.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to your bd987 account. Blocking functional or analytics cookies will not affect your ability to use the core platform, though some personalisation features may not operate correctly. Instructions for managing cookies are available in the help section of most modern browsers.

5. Data Retention

bd987 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal, regulatory, and financial record-keeping obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with bd987, and for a period of five years after account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction data — including deposit amounts, withdrawal amounts, and payment method identifiers — is retained for a minimum of seven years from the date of the transaction, as required by financial compliance obligations.
• KYC and Identity Documents: Copies of identity documents submitted for verification purposes are retained for five years from the date of submission or from account closure, whichever is later.
• Customer Support Records: Live chat transcripts, email threads, and support ticket records are retained for three years from the date of the most recent interaction in the relevant case.
• Gaming Activity Logs: Bet histories, game session logs, and win/loss records are retained for five years from the date of the relevant activity.
• Marketing Consent Records: Records of your marketing opt-in or opt-out preferences are retained for the duration of your account relationship and for two years after account closure.
• Anonymised Analytics Data: Aggregate, anonymised usage data that contains no personally identifiable information may be retained indefinitely for the purpose of long-term platform improvement analysis.

When your personal data is no longer required, it is securely deleted or anonymised using industry-standard data destruction procedures. Where deletion is not technically feasible (for example, where data is held in backup archives), we isolate the data from further active processing until deletion becomes possible.

6. Your Privacy Rights

As a bd987 player, you hold a number of rights in relation to your personal data. bd987 is committed to facilitating the exercise of these rights in a timely and straightforward manner. The rights available to you include:

• Right of Access: You may request a copy of all personal data that bd987 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe of receiving your verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For account profile details such as your mobile number or email address, you may update these directly through your account settings.
• Right to Erasure: You may request that bd987 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal obligations — for example, we cannot erase transaction records that are required for AML compliance during the mandatory retention period.
• Right to Restriction of Processing: You may request that bd987 restricts its processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is under review.
• Right to Data Portability: Where your data has been processed on the basis of your consent or contract performance, and the processing was carried out by automated means, you may request a machine-readable copy of your data for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for personalisation purposes. Upon receiving a valid objection, bd987 will cease the relevant processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., receipt of promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

To exercise any of the above rights, please contact the bd987 data team via live chat or by email at [email protected]. We will verify your identity before processing any data subject request to protect against unauthorised access to another player's data. We aim to respond to all valid requests within 30 days. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension.

7. Data Security Measures

bd987 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes the following controls:

• Encryption in Transit: All communication between your browser or app and bd987's servers is protected by TLS 1.3 encryption. We enforce HTTPS across the entire platform and use HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks.
• Encryption at Rest: Sensitive data — including identity documents, payment method details, and password hashes — is encrypted at rest using AES-256 encryption. Plain-text passwords are never stored; passwords are hashed using a modern, salted algorithm.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems require multi-factor authentication for all personnel with access to production data environments. Access logs are maintained and reviewed regularly.
• Network Security: bd987's infrastructure is protected by web application firewalls (WAF), intrusion detection systems (IDS), and DDoS mitigation services. Regular penetration testing is conducted by independent security specialists.
• Incident Response: bd987 maintains a documented data breach response plan. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take all reasonable steps to contain and remediate the breach.
• Third-Party Security Standards: Service providers who process personal data on our behalf are required to demonstrate equivalent or higher security standards. KYC providers and payment processors used by bd987 are certified to relevant industry standards including PCI-DSS where applicable.

While bd987 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. You can reduce your personal risk exposure by using a strong, unique password for your bd987 account, enabling two-factor authentication, and logging out of your account when using shared devices.

8. Contact & Data Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd987 processes your personal data, please contact us using one of the following methods:

• Live Chat: Available 24 hours a day, 7 days a week. Average response time under 5 minutes. Access live chat through any page on the bd987 platform.
• Email: [email protected] — for data subject access requests, erasure requests, and general privacy inquiries. Please include "Privacy Request" in the subject line to ensure your email is directed to the correct team.
• Response Timezone: Our support and data teams operate on Bangladesh Standard Time (BST, UTC+6). All response time commitments refer to BST business hours, though live chat is staffed around the clock.

bd987 treats all privacy-related inquiries as high priority. Where a query relates to a data subject right (such as an access or erasure request), we will acknowledge your request within 72 hours and provide a substantive response within 30 days, subject to the extension provisions described in Section 6.

This Privacy Policy was last reviewed and updated on 1 January 2026. bd987 reserves the right to update this policy at any time. When material changes are made, we will notify registered players by email or via a prominent notice on the platform. Continued use of bd987 after notification of a policy update constitutes acceptance of the revised terms. We encourage you to revisit this page periodically to stay informed of how we protect your data.

For responsible gaming support, deposit limit requests, self-exclusion, and related player welfare matters, please visit the Responsible Gaming page or contact the support team directly.