Privacy Policy — How bd76 Protects Your Personal Data

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by bd76 ("bd76", "we", "us", "our"), the online casino and sports betting platform accessible at bd76.io and its associated mobile interfaces. bd76 is committed to handling all personal data in a manner that is transparent, proportionate, and consistent with the legitimate expectations of players based in Bangladesh and elsewhere.

This policy applies to all personal data collected from visitors who browse the bd76 website without registering, registered Players who hold an active account, former Players whose accounts have been closed, and any individual who contacts our support team through any channel. By using bd76 in any capacity, you acknowledge that you have read and accepted this Privacy Policy in its entirety.

This Privacy Policy is incorporated by reference into the bd76 Terms & Conditions. In the event of any conflict between this policy and those Terms & Conditions, the Terms & Conditions shall take precedence in respect of matters governing the contractual relationship between bd76 and a Player, while this Privacy Policy shall govern in respect of data protection matters specifically.

bd76 collects the following categories of personal data from Players and platform visitors. All data collection is limited to what is strictly necessary for the purposes described in Section 4 of this policy.

bd76 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than for identity document verification), or health data unless specifically required by applicable law or voluntarily provided by a Player in the context of a responsible gaming request.

bd76 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or responding to a promotion.
• Automated technical collection: Technical data such as your IP address, browser type, device identifiers, and session timestamps are collected automatically each time you access the bd76 platform. This data is collected via server logs and first-party analytics tools operated by bd76.
• Cookie and local storage mechanisms: bd76 uses cookies and similar browser-based storage to maintain your login session, remember your preferences, and measure platform usage for internal analytics. See Section 6 for a full description of cookies used.
• Payment processors: When you make a deposit or withdrawal, bd76 receives transaction confirmation and payment reference data from bKash, Nagad, Rocket, Upay, and Visa/Mastercard processing networks. bd76 does not receive or store full payment credentials beyond what is described in Section 2.
• Third-party KYC service providers: During identity verification, bd76 may use certified third-party KYC technology partners to cross-reference submitted identity documents against available public records. These providers operate under strict data processing agreements with bd76.
• Game providers: Certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may supply bd76 with aggregated gameplay and session data relevant to account management and responsible gaming monitoring. Individual game providers do not receive personally identifying information beyond what is required for game session management.

bd76 processes personal data for specific, lawful purposes. The following table sets out each processing purpose, the data categories used, and the legal basis upon which bd76 relies for that processing activity.

bd76 does not use personal data for automated decision-making that produces solely algorithmic outcomes with significant legal or similarly significant effects on Players, without human review. Where automated tools assist in fraud detection or responsible gaming monitoring, a qualified member of bd76's compliance team reviews any resulting action before it is applied to a Player's account.

bd76 does not sell, rent, or otherwise transfer personal data to third parties for their own commercial or marketing purposes. Personal data may be shared with the following categories of recipients strictly to the extent necessary to operate the platform and fulfil the processing purposes described in Section 4:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and Visa/Mastercard network processors receive only the transactional data required to execute a specific deposit or withdrawal instruction. These partners operate under their own privacy frameworks and applicable financial regulations.
• KYC and identity verification service providers: Certified third-party providers who assist bd76 in verifying the identity, age, and document authenticity of Players during the KYC process. All such providers operate under data processing agreements that restrict their use of data to the verification service only.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers receive session-level data necessary for game delivery. They do not receive financial account details or KYC documentation.
• Regulatory and law enforcement authorities: bd76 may disclose personal data to relevant authorities where required by law, court order, or regulatory directive. bd76 will notify the affected Player of any such disclosure where it is legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations may access personal data in the context of specific engagements.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bd76's business, personal data held by bd76 may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected Players will be notified via email in advance of any such transfer where practicable.

bd76 uses cookies and similar browser storage technologies to operate the platform effectively, maintain secure login sessions, and collect aggregated analytics data that helps us improve the player experience. The following categories of cookies are used on the bd76 platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Store your platform preferences such as language settings, display preferences, and recently accessed game categories. These cookies are not strictly required but improve your experience. They expire at the end of your browser session or after a defined period of up to 30 days.
• Analytics Cookies: Used by bd76's internal analytics infrastructure to collect aggregated, anonymised data on platform traffic, page engagement, and session duration. No individually identifying data is transmitted via analytics cookies. These cookies help bd76 identify which features are most used and where technical issues may be occurring.
• Security and Fraud Prevention Cookies: Assist bd76 in detecting unusual access patterns, multiple-account attempts, and automated bot traffic. These cookies operate in the background and do not collect personally identifying data beyond technical device and session identifiers.

bd76 does not use third-party advertising cookies or tracking pixels that deliver behavioural advertising to Players. You may manage cookie preferences through your browser settings. Disabling cookies beyond strictly necessary cookies may affect certain platform features including saved preferences and session continuity.

bd76 retains personal data for the following periods, after which data is securely deleted or anonymised in accordance with our internal data lifecycle procedures:

• Active account data: Retained for the duration of the Player's account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of last account activity or the date of account closure, whichever is later, in accordance with financial compliance requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support and communications records: Retained for three (3) years from the date of the last communication, unless the matter relates to an ongoing dispute or legal claim, in which case the record is retained until the dispute is fully resolved.
• Technical and log data: Retained for up to twelve (12) months from the date of collection, after which logs are either deleted or anonymised for aggregated statistical analysis.
• Self-exclusion records: Retained indefinitely to prevent the re-registration of a self-excluded Player, regardless of the Player's subsequent requests for data deletion.

Where a Player requests deletion of their personal data under Section 9 of this policy, bd76 will honour that request to the fullest extent permitted by law. Where legal retention obligations require that specific data be retained beyond the Player's deletion request, bd76 will inform the Player of the applicable retention period and will restrict all processing of that data to the legally required retention purpose only.

bd76 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. The following security controls are in place across the bd76 platform and data infrastructure:

• 256-bit SSL/TLS encryption: All data in transit between Players' devices and bd76 servers is encrypted using industry-standard TLS protocols. HTTPS is enforced across all platform pages and API endpoints.
• Encrypted data storage: Sensitive personal data and KYC documents held in bd76's databases are encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only.
• Segregated account funds: Player real-money balances are held in segregated accounts, separate from bd76's operational funds. This ensures that player funds are protected in the event of any business disruption.
• Access controls: Internal access to personal data is controlled on a strict need-to-know basis. All bd76 staff with access to Player data are subject to confidentiality obligations and undergo regular data protection training.
• Intrusion detection and monitoring: bd76's infrastructure is monitored continuously for unusual access patterns, security anomalies, and potential breach indicators. Automated alerts escalate any detected threat to our security team for immediate review.
• Regular security assessments: bd76 conducts periodic internal security reviews and engages external security professionals to conduct vulnerability assessments on a scheduled basis.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to affected Players, bd76 will take immediate steps to contain the breach, notify relevant authorities as required by law, and inform affected Players via their registered email address without undue delay.

As a Player using the bd76 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to our support team via in-app live chat or by emailing [email protected]. bd76 will acknowledge your request within 48 hours and provide a substantive response within five (5) business days.

• Right of Access: You have the right to request a copy of the personal data that bd76 holds about you. bd76 will provide this information in a structured, readable format free of charge for the first request in any twelve-month period.
• Right to Rectification: If any personal data bd76 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a mobile number) can be made directly through your account settings; significant corrections require identity verification before processing.
• Right to Erasure: You may request that bd76 delete your personal data. bd76 will comply to the fullest extent permitted by law. Where legal retention obligations prevent full deletion, bd76 will inform you of the applicable period and restrict processing accordingly.
• Right to Restrict Processing: You may request that bd76 restrict the processing of your personal data in specific circumstances — for example, while a dispute about accuracy is pending resolution.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to have that data transmitted to another service provider where technically feasible.
• Right to Object: You may object to the processing of your personal data where that processing is based on bd76's legitimate interests. bd76 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

The bd76 platform is strictly intended for adults aged 21 and above. bd76 does not knowingly collect personal data from any individual under the age of 21. Registration on the platform requires confirmation of age eligibility, and KYC verification includes age verification as a mandatory step before withdrawal rights are activated.

If bd76 discovers that it has inadvertently collected personal data from an individual who is under 21, it will immediately suspend the associated account, void any balance, and delete all collected personal data relating to that individual as promptly as technically possible. Parents or guardians who believe that a minor has registered on the bd76 platform should contact our support team at [email protected] immediately so that the matter can be investigated and resolved.

The bd76 platform may reference third-party services such as payment processors (bKash, Nagad, Rocket) or game providers (Pragmatic Play, Evolution Gaming) by name in informational contexts. bd76's platform does not embed external third-party tracking scripts, advertising networks, or social media widgets that would allow those parties to independently collect your data during a session on bd76.

Where you navigate from bd76 to a third-party service (such as a payment gateway interface), any personal data you provide to that third party is governed by their own privacy policy, which is entirely separate from this Privacy Policy. bd76 is not responsible for the data practices of third-party services and recommends that Players review the privacy policies of any third-party services they access in connection with their use of bd76.

bd76 operates in the Bangladesh market and processes the majority of Player data within its primary infrastructure. In some cases, data may be processed by service providers whose systems are hosted in other jurisdictions — for example, certified game providers or KYC technology partners whose server infrastructure is located outside Bangladesh.

Where personal data is transferred outside Bangladesh, bd76 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this policy. These safeguards include contractual data processing agreements that impose obligations on receiving parties consistent with recognised data protection standards.

By using the bd76 platform and submitting personal data, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as described in this section, subject to the protections described above.

bd76 takes its responsible gaming obligations seriously and uses certain Player data specifically to monitor for indicators of problem gambling and to apply appropriate interventions. This processing is carried out in the interests of Player welfare and as part of bd76's responsible gaming commitments.

Data used for responsible gaming monitoring includes transaction frequency and volume, session duration, patterns of increasing bet sizes, repeated deposit-after-loss behaviour, and voluntary responsible gaming tool activations. This data is reviewed by bd76's responsible gaming team and may result in a welfare outreach contact, a mandatory account review, or application of a deposit limit at bd76's discretion.

Responsible gaming data — including records of self-exclusion requests, cooling-off periods, and deposit limits — is retained indefinitely as described in Section 7. This retention is non-negotiable and cannot be overridden by a data deletion request, as it serves the critical purpose of protecting vulnerable Players from harm.

If you feel that gambling is becoming a problem for you or someone you know, you may access bd76's responsible gaming tools at any time via your account settings, or contact our support team directly. Further information is available on the bd76 Responsible Gaming page.

bd76 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made in response to new legal or regulatory requirements, changes in platform functionality, updates to data processing practices, or improvements to the clarity of existing provisions.

When a material change is made to this Privacy Policy, bd76 will notify registered Players via the email address associated with their account and via an in-platform notification displayed upon next login. The effective date of the revised policy will always be displayed prominently at the top of this page and in the updated badge above the policy text.

Your continued use of the bd76 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a revised Privacy Policy, you must discontinue use of the platform and contact our support team to initiate account closure. The most current version of this Privacy Policy is always available at bd76.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd76 handles your personal data, please contact our support and compliance team through any of the following channels:

• Email: [email protected] — for formal data rights requests, please include "Privacy Request" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week via the bd76 in-app support interface
• WhatsApp Support Hours: 9:00 AM – 11:00 PM Bangladesh Standard Time (UTC+6)

bd76 values the trust that Players place in us when they share their personal data. We are committed to handling that data responsibly, transparently, and in accordance with the principles set out in this Privacy Policy. Thank you for taking the time to read and understand how bd76 protects your privacy.