bd878 Privacy Policy

1 Introduction & Scope

This Privacy Policy (the "Policy") explains how bd878 ("bd878", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", or "the Player") who access or use the bd878 platform available at bd878.io, including all associated services, games, payment features, and customer support channels.

bd878 is committed to handling your personal data with care, transparency, and respect. This Policy is written in plain formal English and is intended to be read in full before you register an account. It should be read alongside the bd878 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

bd878 acts as the data controller in respect of personal data processed under this Policy. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to process your data only in accordance with our documented instructions.

2 Data We Collect

bd878 collects the following categories of personal data in connection with your use of the platform. We collect only what is necessary for the specific purposes described in this Policy.

Category	Examples	Collected At
Identity Data	Full legal name, date of birth, gender, NID / passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (Dhaka, Chittagong, Sylhet, etc.)	Registration & account updates
Financial Data	bKash / Nagad / Rocket wallet numbers, bank account references (Dutch-Bangla Bank, BRAC Bank, City Bank, etc.), transaction history	Deposit & withdrawal processing
Gaming Activity Data	Game history, bet amounts, wager outcomes, session durations, bonus usage, cricket and slots activity	Throughout platform use
Technical Data	IP address, browser type, device type, operating system, screen resolution, referral URL	Automatic collection on site visit
Usage Data	Pages visited, features used, click patterns, session timestamps, login history	Automatic collection throughout session
Communications Data	Records of live chat, email, and support ticket exchanges with the bd878 support team	When you contact support
Verification Documents	Scanned or photographed copies of NID, passport, or utility bills submitted during KYC	KYC / AML verification

bd878 does not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records. If you voluntarily disclose such information through a support interaction, it will not be stored beyond what is required to resolve your query.

3 How We Collect Data

bd878 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or communicating with the support team.
• Automated technical collection: Data gathered automatically by our servers when your device connects to the bd878 platform, including IP addresses, device identifiers, and browser metadata.
• Cookies and similar technologies: Session and persistent cookies, pixel tags, and local storage objects used to maintain your login session, remember preferences, and collect analytics data. See Section 9 for full details.
• Payment service providers: Confirmation data returned by bKash, Nagad, Rocket, Upay, and banking partners following a deposit or withdrawal transaction — sufficient to reconcile your account balance but not including your full wallet credentials or bank login details.
• Identity verification partners: Where bd878 uses a third-party KYC provider to verify the authenticity of identity documents, that provider may return a verification decision and a risk score. bd878 retains the outcome of the verification rather than the full document image where technically possible.
• Fraud and risk management systems: Automated systems that analyse patterns in gaming activity, transaction behaviour, and account usage to identify potential fraud, money laundering, or bonus abuse.

4 Purposes & Legal Bases for Processing

bd878 processes your personal data only where a valid legal basis exists. The primary purposes for which we process data, and the corresponding legal basis for each, are set out below.

4.1 Contract Performance

The majority of data processing carried out by bd878 is necessary for the performance of the contractual relationship between you and bd878 as established by the Terms and Conditions. This includes creating and maintaining your account, processing deposits and withdrawals, crediting winnings, administering bonuses, and providing customer support.

4.2 Legal Obligation

bd878 is required to process certain categories of personal data to comply with applicable legal obligations, including but not limited to: identity verification to prevent under-age gambling (minimum age 21); anti-money laundering (AML) checks on financial transactions; and record-keeping obligations applicable to financial service operators. Compliance with these obligations is not optional and cannot be waived by the player.

4.3 Legitimate Interests

bd878 processes certain data categories on the basis of legitimate business interests, provided that those interests are not overridden by your privacy rights. Legitimate-interest processing activities include: fraud detection and prevention; platform security monitoring; abuse and collusion detection; analytics to improve platform performance; and the administration of responsible gaming tools such as deposit limit monitoring and self-exclusion enforcement.

4.4 Consent

Where bd878 relies on your consent as the legal basis for processing — most notably for marketing communications — that consent is obtained expressly at the point of registration and can be withdrawn at any time without detriment to your ability to use the platform. Withdrawal of consent for marketing does not affect the lawfulness of processing carried out prior to the withdrawal.

5 Data Sharing & Disclosure

bd878 does not sell or rent personal data to third parties. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive transactional data necessary to execute deposit and withdrawal instructions.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Spribe, Habanero, and Ezugi may receive a pseudonymous player identifier and session token to deliver game content. They do not receive your full name, NID, or payment details.
• Identity verification providers: Third-party KYC service providers receive copies of identity documents submitted during verification, under a data processing agreement that restricts their use of that data solely to the verification purpose.
• Fraud prevention and security vendors: Specialist providers of fraud detection, IP risk scoring, and AML screening services may receive technical and transactional data necessary for risk assessment.
• Legal and regulatory authorities: bd878 may be required to disclose personal data to competent authorities in Bangladesh in response to a lawful request, court order, or legal process. Where legally permissible, bd878 will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of bd878's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

6 International Data Transfers

Some of bd878's technology partners and game content providers maintain servers or processing infrastructure outside of Bangladesh. Where personal data is transferred to a jurisdiction outside Bangladesh in connection with the delivery of platform services, bd878 takes reasonable steps to ensure that the receiving party maintains data protection standards equivalent to those described in this Policy, including through contractual clauses, data processing agreements, and technical security measures.

bd878 does not transfer financial data — including bKash and Nagad wallet references and bank account identifiers — to any overseas entity except where strictly necessary for the execution of a specific transaction instructed by the player. In all such cases, the transfer is limited to what the payment network requires to process the instruction.

7 Data Retention

bd878 retains personal data for the periods described below. Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Data Category	Retention Period	Basis
Account & identity data	Duration of account + 5 years post-closure	Legal obligation / AML compliance
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Gaming activity logs	3 years from last activity	Legitimate interests / dispute resolution
KYC verification documents	5 years post-account closure	Legal obligation / AML compliance
Support communications	2 years from ticket closure	Legitimate interests / dispute resolution
Marketing consent records	3 years from last interaction or until withdrawn	Consent documentation obligations
Technical / access logs	12 months from collection	Security monitoring

Where a player exercises a right to erasure (described in Section 11), bd878 will assess the request against applicable retention obligations before acting. Data that must be retained to comply with a legal obligation cannot be erased ahead of the applicable mandatory retention period, even following a valid erasure request.

8 Security Measures

bd878 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key technical and organisational security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between the player's device and bd878 servers.
• Encryption at rest for sensitive data fields including identity document references and payment identifiers stored in our databases.
• Role-based access controls ensuring that bd878 staff can only access personal data to the extent required by their specific job function.
• Two-factor authentication enforced for all internal staff systems that have access to player data.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Intrusion detection systems that monitor network traffic and flag anomalous access patterns in real time.
• Incident response procedures that define how bd878 identifies, contains, and reports data security incidents, including timely notification to affected players where a breach poses a risk to their rights.

9 Cookies & Tracking Technologies

bd878 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and gather analytics data that helps us improve the player experience. The categories of cookies used on bd878 are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, store your currency and language preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the platform.

9.2 Analytics Cookies

bd878 uses analytics cookies to understand how players navigate the platform — which pages are visited most frequently, where users spend the most time, and where they exit. This data is collected in aggregate and pseudonymised form and is used solely to improve platform design and content. You may opt out of analytics cookies through your account preferences.

9.3 Functional Cookies

Functional cookies remember choices you have made on the platform, such as your preferred deposit method, notification settings, and responsible gaming tool configurations. Disabling functional cookies may result in a less personalised experience but will not prevent you from accessing core features.

9.4 Marketing Cookies

Where you have consented to receive marketing communications, bd878 may use marketing cookies to tailor promotional content shown on the platform — for example, displaying cricket betting promotions relevant to upcoming BPL or IPL fixtures to players who have previously bet on cricket markets. Marketing cookies are only activated following your affirmative consent and can be deactivated at any time.

bd878 does not permit third-party advertising networks to place cookies on the platform for the purpose of building advertising profiles linked to your personal data for use on third-party websites.

10 Protection of Minors

The bd878 platform is strictly intended for adults aged 21 and above. bd878 does not knowingly collect personal data from individuals under the age of 21. If during the account registration or KYC verification process bd878 establishes or reasonably suspects that a user is under 21 years of age, the account will be suspended immediately, all pending transactions will be voided, and any deposited funds will be returned to the source payment method.

If a parent or guardian believes that their child has registered an account on bd878 or has submitted personal data to the platform, they should contact the support team immediately at [email protected]. bd878 will investigate and, where the claim is substantiated, will delete the minor's data without undue delay and return any funds deposited.

11 Your Data Rights

As a user of the bd878 platform, you hold the following rights in respect of your personal data. These rights may be exercised at any time by submitting a written request to [email protected] with the subject line "Data Rights Request", including your registered username and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data that bd878 holds about you. We will provide this in a structured, readable format within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity data (name, date of birth) may require submission of supporting documentation.
• Right to Erasure: Subject to our legal retention obligations (see Section 7), you may request that bd878 delete all personal data associated with your account. This right cannot be exercised in respect of data we are legally required to retain, such as AML transaction records.
• Right to Restriction of Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict our use of your personal data to storage only, pending resolution.
• Right to Data Portability: You may request that we provide your personal data (in particular, account and gaming activity data) in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where bd878 relies on legitimate interests as the legal basis. Upon receipt of a valid objection, bd878 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bd878 will respond to all valid data rights requests within 30 calendar days of receipt. In cases of particular complexity or where multiple requests are received simultaneously, this period may be extended by a further 30 days, of which you will be informed in writing.

12 Marketing Communications

bd878 may send you promotional communications — including bonus offers, cricket betting promotions tied to BPL and IPL fixtures, new game announcements, and seasonal promotions such as those associated with Eid, Pohela Boishakh, or Victory Day — where you have given explicit consent to receive such communications at the point of registration.

Marketing messages may be delivered by email to your registered address, by SMS to your registered Bangladeshi mobile number, or via in-platform notification. bd878 does not send marketing communications via third-party messaging applications.

You may opt out of any or all marketing communication channels at any time through your account notification settings, or by contacting the support team at [email protected]. Opting out of marketing communications does not affect transactional notifications — such as deposit confirmations, withdrawal approvals, or security alerts — which are sent regardless of marketing preferences as they are necessary for the operation of your account.

13 Changes to This Privacy Policy

bd878 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — for example, a new category of data is collected, or a new third-party processor is engaged — bd878 will notify registered players via email or in-platform notification at least 7 calendar days before the change takes effect.

Minor updates, such as typographical corrections or clarifications that do not alter the substance of how data is processed, may be made without prior notification. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Players are encouraged to review this Policy periodically to remain informed of how bd878 handles their personal data.

Continued use of the bd878 platform after a revised Policy takes effect constitutes your acknowledgement that you have reviewed and understood the updated terms. If you do not accept a material change to this Policy, you should close your account before the change takes effect, following the procedure described in Section 11 of the Terms and Conditions.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 11, or wish to raise a complaint about the way bd878 has handled your personal data, please contact the bd878 data support team using the details below. All data-related enquiries are handled by trained staff and are treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Complaints: "Privacy Complaint"
• Response Time: Standard queries within 2–4 hours; formal data rights requests within 30 calendar days.
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)