Privacy Policy — How bd449 Protects Your Data

This Privacy Policy (hereinafter "the Policy") describes how bd449 (the "Platform", "we", "us", or "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the player", or "the user") who access or use the bd449 website and associated online gambling and betting services. This Policy applies to all data processing activities conducted by bd449 in connection with your use of the platform.

By registering an account on bd449 or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the platform and may request account closure as described in the Terms & Conditions.

1. Data Controller Information

bd449 acts as the data controller for all personal information collected through the bd449 platform. As data controller, bd449 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

For all privacy-related inquiries, data subject requests, or complaints regarding the handling of your personal data, please contact our privacy team using the details provided in Section 12 of this Policy.

2. What Data We Collect

bd449 collects personal data through several channels depending on how you interact with the platform. The categories of data we collect are as follows:

2.1 Registration Data

When you create a bd449 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth — used to verify that you meet the 18+ age requirement;
• Email address — used for account communications, security alerts, and promotional messages (where consented);
• Mobile number — used for two-factor authentication and account recovery;
• Residential address including district, division, and postcode within Bangladesh (or country of residence for international players);
• Username and password — your password is hashed using industry-standard cryptographic methods and is never stored in plain text.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering and fraud prevention obligations, we collect:

• Copies of government-issued photo identification (National Identity Card, passport, or birth certificate);
• Proof of address documentation (utility bills, bank statements, or government correspondence);
• Proof of payment method ownership (e.g., bKash or Nagad account screenshots showing the registered mobile number);
• Where applicable, source-of-funds documentation for high-value accounts.

2.3 Transaction and Financial Data

For every deposit and withdrawal processed on bd449, we record:

• Transaction amount, currency (BDT / ৳), date, and time;
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Transaction reference numbers and payment gateway responses;
• Account balance history and bonus credit records.

bd449 does not store full card numbers for Visa or Mastercard transactions. Card details are processed directly by our PCI-DSS compliant payment gateway partner and are not retained on bd449 servers.

2.4 Gameplay and Betting Data

We maintain server-side records of all betting and gaming activity, including:

• Bets placed, stakes, odds, outcomes, and settlements;
• Casino game sessions including game title, provider, duration, wagers, and results;
• Bonus utilisation, wagering progress, and promotional participation;
• Responsible gaming tool usage, including deposit limit settings and self-exclusion requests.

2.5 Technical and Device Data

When you access bd449, our servers automatically log certain technical information:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session timestamps, page views, and navigation paths;
• Referral source (if you arrived via a tracked link).

2.6 Communications Data

When you contact bd449 support or submit a complaint, we retain records of that correspondence, including the content of emails sent to [email protected], the date and time of contact, and the resolution outcome. This data is used for quality assurance and dispute resolution purposes.

3. Legal Basis for Processing

bd449 processes your personal data on one or more of the following legal bases:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract — necessary to provide the service
KYC identity verification	Legal obligation (anti-money laundering compliance)
Processing deposits and withdrawals	Performance of a contract
Fraud detection and security monitoring	Legitimate interests of bd449 to protect the platform and its players
Responsible gaming monitoring	Legal obligation and legitimate interests (player protection)
Sending promotional communications	Consent — you may withdraw consent at any time
Analytics and platform improvement	Legitimate interests of bd449 to improve service quality
Compliance with legal requests	Legal obligation

4. How We Use Your Data

bd449 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your bd449 player account, processing login authentication, and managing account settings;
• Service delivery: Enabling you to place bets, play casino games, claim bonuses, make deposits, and withdraw winnings;
• Identity verification: Confirming that you meet the 18+ age requirement and verifying your identity in accordance with our KYC obligations;
• Fraud prevention and security: Detecting and investigating suspicious activity, multiple account abuse, payment fraud, and platform exploitation;
• Responsible gaming: Monitoring betting patterns for signs of problem gambling behaviour and enforcing self-exclusion and deposit limit settings applied by the player;
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance;
• Legal compliance: Fulfilling obligations under applicable anti-money laundering regulations and responding to lawful requests from competent authorities;
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, design, and features of the bd449 platform;
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal campaign updates — only where you have given your explicit consent. You may opt out at any time via your account settings or by emailing [email protected].

5. Data Sharing & Third Parties

bd449 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your data with third parties only in the following circumstances and only to the extent strictly necessary:

5.1 Payment Processing Partners

To process deposits and withdrawals, bd449 shares necessary transaction data with our payment gateway partners including bKash, Nagad, Rocket, Upay, and the card processing networks for Visa and Mastercard. These partners are contractually bound to handle your data securely and only for the purpose of processing the specific transaction.

5.2 Game Software Providers

Live casino and slot game content is provided by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may process certain session-level data (such as your player token and game outcome data) on their own certified servers to deliver the game. They do not receive your full identity data unless required for game-specific compliance reasons.

5.3 KYC and Identity Verification Services

Where bd449 uses a third-party identity verification service to assist with KYC document review, your identity documents may be shared with that provider solely for the purpose of verification. Such providers are bound by strict data processing agreements and are prohibited from using your data for any other purpose.

5.4 Legal and Regulatory Disclosures

bd449 may disclose your personal data to competent governmental or law enforcement authorities where required by law or in response to a lawful request. bd449 will, where legally permitted, notify you of such a request before complying.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd449's business assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights under this Policy will continue to apply.

6. Cookies & Tracking Technologies

bd449 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens, fraud prevention flags	Session / up to 24 hours
Functional	Remembering your language preference, display settings, and last-visited game category	Up to 30 days
Analytics	Aggregated, anonymised data on page views, navigation paths, and feature usage — used to improve the platform	Up to 12 months

bd449 does not use third-party advertising or retargeting cookies. We do not participate in cross-site tracking networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair platform functionality including the ability to log in or maintain a session.

7. Data Retention Periods

bd449 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML compliance and legal obligations
KYC identity documents	5 years after account closure	Regulatory compliance
Transaction records	7 years from transaction date	Financial record-keeping obligations
Betting and game session records	5 years from session date	Dispute resolution and responsible gaming
Support correspondence	3 years from last contact	Quality assurance and dispute history
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent
Technical / server logs	90 days rolling	Security monitoring and fraud detection

After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual.

8. Security Measures

bd449 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport Layer Security (TLS/SSL): All communications between your browser and the bd449 platform are encrypted using 256-bit TLS encryption. Our SSL certificate is maintained and renewed on a continuous basis.
• Encryption at rest: Personal data and KYC documents stored on bd449 servers are encrypted at rest using AES-256 encryption. Database backups are also encrypted.
• Access controls: Access to personal data is restricted to bd449 personnel who require it to perform their specific role. All staff with data access are subject to confidentiality obligations and undergo data protection training.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. Internal bd449 system access also requires 2FA for all personnel.
• Penetration testing: bd449 conducts periodic security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response: In the unlikely event of a data breach that poses a risk to player rights, bd449 will notify affected players without undue delay and take immediate steps to contain and investigate the incident.

9. Your Privacy Rights

As a bd449 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our privacy team as described in Section 12.

• Right of access: You may request a copy of the personal data bd449 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Basic account details (such as email address and mobile number) can be updated directly from your account settings.
• Right to erasure: You may request deletion of your personal data. This right is subject to our legal retention obligations — in particular, transaction records and KYC data must be retained for the periods specified in Section 7 regardless of an erasure request.
• Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a complaint or correction request is under review.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of bd449's legitimate interests. bd449 will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests.

bd449 will respond to all privacy rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

10. Children & Minors

bd449 is strictly an adult platform. Our services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18. If we discover that personal data has been collected from a minor, we will immediately suspend the associated account, delete the personal data in question, and return any deposits made. Parents or guardians who believe a minor has registered on bd449 should contact us immediately at [email protected].

bd449 actively uses age verification as part of the KYC process and applies behavioural screening to identify accounts that may belong to underage individuals. We are committed to maintaining a safe, adult-only gaming environment in accordance with responsible gaming best practices.

11. Policy Updates

bd449 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made to this Policy, we will notify registered players via the email address associated with their bd449 account at least 7 days before the updated Policy takes effect.

The version number and "Last Updated" date displayed at the top of this page will always reflect the current version of the Policy. We encourage you to review this Policy periodically. Your continued use of the bd449 platform after an updated Policy takes effect constitutes your acknowledgement of and agreement to the revised terms.

12. Contact Our Privacy Team

For all privacy-related matters, including data subject access requests, consent withdrawals, complaints about how your data has been handled, or questions about this Policy, please contact bd449 using the following details:

• General privacy enquiries: [email protected] (subject line: Privacy Enquiry)
• Data subject access requests: [email protected] (subject line: Data Access Request)
• Data erasure or portability requests: [email protected] (subject line: Data Erasure / Portability)
• Privacy complaints: [email protected] (subject line: Privacy Complaint)

Our privacy team operates during Bangladesh Standard Time (BST, UTC+6) business hours, Monday through Friday. We aim to acknowledge all privacy-related communications within 24 hours and provide a substantive response within 30 days. For urgent security matters such as suspected unauthorised data access, please mark your email as urgent — these are triaged and responded to on a priority basis.