bd288 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") is published by bd288 ("bd288", "we", "us", "the Company") and applies to all personal data collected from individuals ("you", "Player", "User") who access or use the bd288 online betting and casino platform at https://bd288.io and any related applications, tools, and services (collectively, the "Platform").

bd288 is committed to processing your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy explains what data we collect, the purposes for which it is used, the parties with whom it may be shared, how long it is retained, how it is secured, and the rights available to you as a data subject.

By registering an account on bd288, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of this Privacy Policy, bd288 acts as the data controller in respect of personal data collected from players and visitors to the Platform. As data controller, bd288 determines the purposes and means of processing your personal data.

All data-related enquiries, requests to exercise your rights, and formal complaints regarding bd288's data processing activities should be directed to our designated data point of contact:

• Contact Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: All formal data-related requests should be submitted in English for the fastest processing.

bd288 collects the following categories of personal data from players. We collect only what is necessary for the purposes described in this Policy and do not engage in excessive or speculative data collection.

bd288 collects personal data through the following channels:

• Direct Registration: Data you provide when you create an account, complete your player profile, or update your account settings on bd288.
• Transactions: Data generated when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or card payment (Visa / Mastercard).
• KYC Submission: Documents and photographs you upload in response to identity verification requests from bd288's compliance team.
• Platform Interaction: Automatically collected technical and usage data when you browse the Platform, play games, or place bets — gathered via server logs, cookies, and analytics tools.
• Customer Support: Information you share when contacting bd288's support team via live chat, email, or any other support channel.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification partners and payment processors as part of our compliance obligations. This data is treated with the same level of care as data collected directly from you.

bd288 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your bd288 player account, including authentication and password recovery.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, and to maintain accurate financial records.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with anti-money-laundering (AML) obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct outlined in the bd288 Terms & Conditions.
• Legal Compliance: To fulfil bd288's obligations under applicable law, including record-keeping requirements, responding to lawful requests from authorities, and maintaining audit trails.
• Service Personalisation: To tailor game recommendations, promotional offers, and content to your preferences and activity history on bd288.
• Responsible Gaming: To monitor gambling behaviour patterns that may indicate problem gambling, and to facilitate self-exclusion, deposit limits, and cooling-off requests in accordance with bd288's Responsible Gaming Policy.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance via the bd288 support team operating 24/7 Bangladesh Standard Time.
• Platform Improvement: To analyse aggregated usage data and improve the performance, reliability, and features of the bd288 Platform for the benefit of all players.
• Marketing Communications: To send you promotional emails and notifications about bd288 offers, new games, and seasonal promotions (such as BPL, IPL, Eid, and Pohela Boishakh campaigns) — but only where you have opted in to receive such communications. You may unsubscribe at any time by contacting [email protected].

bd288 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and bd288 — i.e., to operate your account, process your bets, and handle deposits and withdrawals.
• Legal Obligation: Processing necessary to comply with AML regulations, age verification requirements, financial record-keeping obligations, and lawful requests from competent authorities.
• Legitimate Interests: Processing carried out to protect bd288's legitimate business interests — including fraud prevention, platform security, and service quality improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — such as receiving marketing communications from bd288. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bd288 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data-processing agreements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposit and withdrawal transactions in BDT.
• KYC & Identity Verification Partners: Third-party providers engaged by bd288 to perform document verification, age checks, and AML screening on player accounts.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — who receive limited technical data (e.g., player session tokens) necessary to deliver game content within the bd288 Platform.
• IT Infrastructure & Cloud Providers: Hosting and data centre providers who store Platform data on secured servers under strict contractual confidentiality obligations.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to support Platform performance analysis. No individually identifiable data is shared for this purpose.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, bd288 may disclose player data to competent authorities, law enforcement agencies, or financial intelligence units.

bd288 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is required for ongoing legal proceedings or regulatory investigations, retention may be extended until those proceedings are concluded.

bd288 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security controls in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bd288 Platform is encrypted using industry-standard TLS 1.2/1.3 protocols. You can verify this via the padlock icon in your browser's address bar.
• Encrypted Data Storage: Sensitive data at rest — including financial details and identity documents — is stored using AES-256 encryption on hardened servers with restricted access controls.
• Access Controls: Access to player data within bd288 is restricted to authorised personnel on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: bd288 deploys 24/7 automated intrusion detection and prevention systems (IDS/IPS) to monitor for unauthorised access attempts and anomalous activity on the Platform.
• Regular Security Audits: The Platform undergoes routine penetration testing and security reviews by qualified third-party security professionals to identify and remediate vulnerabilities proactively.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their bd288 accounts as an additional layer of login security. Internal administrative systems require 2FA as mandatory.

bd288 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to deliver a functional, personalised, and secure platform experience. Cookies are small text files placed on your device by the Platform when you visit. They do not contain executable code and cannot access other files on your device.

bd288 uses the following categories of cookies:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-visited game categories to provide a more convenient experience on return visits.
• Analytical Cookies: Collect anonymised, aggregated data about how players navigate and use the Platform. This data helps bd288 identify areas for improvement, measure feature performance, and optimise page load speed.
• Session Cookies: Temporary cookies that expire when you close your browser. Used to maintain your login state and preserve your betting session during active use of the Platform.

By continuing to use the bd288 Platform, you consent to the use of cookies as described in this section. Most modern browsers allow you to control or disable cookies through your browser settings. Please note that disabling essential cookies may impair Platform functionality, including your ability to log in and place bets. Analytical and functional cookies may be disabled without affecting core services.

As a player on the bd288 Platform, you hold the following rights in relation to your personal data. bd288 is committed to honouring these rights promptly and without undue restriction. All requests should be submitted in writing to [email protected] and will be acknowledged within 5 business days and resolved within 30 calendar days.

• Right of Access: You may request a copy of all personal data bd288 holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to Rectification: If any personal data bd288 holds about you is inaccurate or incomplete, you may request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal retention obligations (see Section 8).
• Right to Restrict Processing: You may request that bd288 suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while a complaint is under review.
• Right to Data Portability: Where processing is based on consent or contract, you may request that bd288 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of bd288's legitimate interests, and to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

The bd288 Platform is strictly intended for adults aged 21 years and above. bd288 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the bd288 account registration process, and all players are required to confirm their date of birth and provide government-issued identification to complete KYC verification.

If bd288 discovers or has reasonable grounds to believe that a registered player is under 21 years of age, the relevant account will be suspended immediately, all funds held in the account will be frozen pending investigation, and the account will be closed. Any winnings accumulated during the period of underage access may be forfeited in accordance with the bd288 Terms & Conditions.

In the course of operating the bd288 Platform and engaging third-party service providers, your personal data may be transferred to and processed in countries outside Bangladesh. Such transfers may occur, for example, when data is processed by game software providers (such as Pragmatic Play, Evolution Gaming, or NetEnt) or cloud infrastructure partners whose servers are located in other jurisdictions.

Where personal data is transferred internationally, bd288 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Bangladesh. These safeguards include contractual data transfer agreements, standard contractual clauses, and/or transfers to recipients in jurisdictions with recognised adequacy standards for data protection.

By using the bd288 Platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh as described in this section, subject always to the protective measures outlined above.

bd288 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. When material changes are made to this Policy, bd288 will notify registered players via email to their registered address and will display a prominent notice on the Platform for a minimum of 7 days prior to the updated Policy taking effect.

Minor amendments — such as typographical corrections, clarifications, or formatting adjustments — may be made without prior notice. The effective date displayed at the top of this Policy will always reflect the date of the most recent revision. It is your responsibility to review this Policy periodically to stay informed of how bd288 processes your personal data.

Continued use of the bd288 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please discontinue use of the Platform and contact [email protected] to request account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bd288 handles your personal data, please contact our support team using the details below. All privacy-related communications should be submitted in English for the fastest possible response.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" for faster routing to the appropriate team.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: bd288 aims to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 calendar days of receipt.
• Postal Address: Available upon written request to the email address above for verified account holders only.

bd288 is committed to resolving all data privacy concerns in a transparent, respectful, and timely manner. We value the trust you place in us by sharing your personal data and take our obligations as data controller seriously.