Privacy Policy — How bd334 Collects, Uses, and Protects Your Data

bd334 is an online casino and sports betting platform operating at bd334.io and targeting players based in Bangladesh. For the purposes of this Privacy Policy, bd334 is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the bd334 website, mobile-optimised web application, customer support communications, and any other touchpoint through which a player interacts with the bd334 platform. It applies to all current and former players, prospective registrants who have begun but not completed the registration process, and any individual who contacts bd334 support without holding an account.

The categories of personal data that bd334 collects from or about players are set out in the table below. The collection of each category is tied to a specific operational purpose, and bd334 does not collect any category of data for which no operational purpose exists.

bd334 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where an individual voluntarily discloses such information during a responsible gaming interaction (for example, disclosing a health condition when requesting self-exclusion). Any such voluntarily disclosed sensitive data is handled with additional care and is used solely for the purpose for which it was disclosed.

bd334 collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a promotional offer.
• Automated technical collection: Data collected automatically when you access the bd334 website, including IP address, device identifiers, browser fingerprint, and session behaviour, primarily through server logs and first-party cookies.
• Payment provider data: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. bd334 receives only the data necessary to confirm the transaction — we do not receive or store your full mobile banking PIN or password.
• KYC verification partners: Where bd334 uses a third-party identity verification service to cross-check documents submitted during KYC, that service may return a verification result and confidence score to bd334, which is stored against your account record.
• Customer support interactions: Data provided in live chat conversations, emails, and support tickets is recorded and stored as part of your account history for the purpose of service continuity and dispute resolution.

bd334 processes your personal data only where a lawful basis for doing so exists. The primary lawful bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including account creation, payment processing, game delivery, and customer support. Without this processing, bd334 cannot provide the service.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties. bd334 cannot waive these processing activities even at a player's request.
• Legitimate interests: Processing carried out for bd334's legitimate business interests where those interests are not overridden by your rights and interests. This includes platform security monitoring, fraud detection, responsible gaming oversight, and internal analytics for service improvement.
• Consent: Processing of your data for marketing communications is carried out only on the basis of your freely given, specific, and informed consent. You may withdraw marketing consent at any time by contacting [email protected] or using the unsubscribe option in any marketing communication. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

bd334 uses the personal data it collects for the following purposes:

• To create, verify, and manage your bd334 player account, including processing your registration, maintaining your account profile, and administering your wallet balance.
• To process deposits and withdrawals via your nominated mobile payment method (bKash, Nagad, Rocket, or Upay) and to maintain an accurate transaction history.
• To conduct KYC identity and age verification to confirm you meet the 21+ eligibility requirement and to satisfy anti-money laundering compliance obligations.
• To deliver customer support, respond to account enquiries, investigate disputes, and resolve complaints in a timely and documented manner.
• To monitor betting patterns, game session behaviour, and account activity for the purposes of responsible gaming, fraud detection, and platform integrity.
• To administer promotional bonuses, verify wagering requirement completion, and prevent fraudulent exploitation of promotional offers.
• To send transactional communications, including deposit confirmations, withdrawal notifications, account security alerts, and policy update notices.
• To send marketing communications — including information about new games, seasonal promotions (for example, Eid or BPL-related offers), and deposit bonuses — where you have provided explicit consent and have not subsequently withdrawn it.
• To improve the bd334 platform through internal analytics, A/B testing, and user experience research, using aggregated or anonymised data wherever possible.

bd334 shares player data only with the categories of third parties described below, and only to the extent necessary for the specified purpose. All third-party recipients are required to maintain the confidentiality and security of the data they receive and are prohibited from using it for any purpose beyond the service they provide to bd334.

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to execute deposit and withdrawal instructions. These providers operate under their own data protection frameworks and terms of service.
• KYC and identity verification providers: Third-party verification services receive copies of the identity and address documents you submit during KYC in order to perform automated and manual verification checks on behalf of bd334.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive a session token and minimal player identifier necessary to launch and authenticate game sessions. These providers do not receive your full personal profile.
• Fraud prevention and security services: bd334 may use third-party fraud detection tools that analyse technical data (such as IP address and device fingerprint) to identify and prevent fraudulent account activity.
• Legal and regulatory authorities: bd334 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory instruction. bd334 will notify affected players of such disclosures where legally permitted to do so.
• Professional advisers: Lawyers, accountants, and auditors retained by bd334 may access player data on a strictly need-to-know basis, subject to professional confidentiality obligations.

bd334 does not sell, license, or rent personal data to third parties for their own commercial or marketing purposes under any circumstances.

bd334 uses first-party cookies and similar session-tracking technologies to operate the platform, maintain your login session, and support platform security. The following cookie categories are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in across page requests and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your platform preferences such as language settings, preferred game category, and last-visited page, enabling a more consistent experience across sessions.
• Analytics cookies: Collect anonymised or pseudonymised usage data about how players interact with the platform — including pages visited, time spent, and navigation paths — to help bd334 improve the user experience. No personally identifiable data is transmitted through analytics cookies.

bd334 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts that send your data to external advertising networks. If this changes in the future, this Privacy Policy will be updated and players will be notified.

You may manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your bd334 account.

bd334 takes the security of player data seriously and has implemented a layered set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser and bd334 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The bd334 website enforces HTTPS across all pages.
• Encryption at rest: Sensitive data fields, including payment method identifiers and KYC document copies, are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to player data within bd334's internal systems is role-based and strictly limited to personnel whose job function requires it. All internal access to sensitive data is logged.
• Two-factor authentication: bd334 staff accounts with access to player data require two-factor authentication. Players are also strongly encouraged to enable OTP-based two-factor authentication on their own bd334 accounts.
• Penetration testing and vulnerability management: bd334 conducts periodic security assessments and acts promptly to remediate identified vulnerabilities.
• Incident response: bd334 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to player rights and freedoms, bd334 will notify affected players without undue delay and will provide clear guidance on protective steps they should take.

Notwithstanding the above measures, no data transmission over the internet can be guaranteed to be completely secure. Players are encouraged to maintain strong, unique passwords for their bd334 accounts and to contact [email protected] immediately if they suspect their account has been compromised.

bd334 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of the account relationship and for a period of five years following account closure, to meet potential regulatory inspection, dispute resolution, and anti-money laundering audit requirements.
• KYC documents: Retained for a minimum of five years from the date of submission, in line with standard AML record-keeping best practice.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for the lifetime of the account plus three years, to evidence the lawful basis for any marketing communications sent during that period.
• Technical and server log data: Retained for up to 12 months, after which it is automatically deleted or anonymised.

At the expiry of applicable retention periods, data is securely deleted or irreversibly anonymised. Where anonymisation is used rather than deletion, the anonymised data no longer constitutes personal data and may be retained for statistical or analytical purposes without time limit.

As a bd334 player, you have the following rights in relation to your personal data. bd334 is committed to honouring these rights and will respond to all valid requests within 30 calendar days of receipt:

• Right of access: You may request a copy of all personal data that bd334 holds about you, along with information about how it is processed and with whom it is shared.
• Right to rectification: If any of your personal data held by bd334 is inaccurate or incomplete, you may request that it be corrected or updated. Note that corrections to identity data may require re-submission of KYC documents.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations — bd334 cannot delete data it is legally required to retain.
• Right to restrict processing: You may request that bd334 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request a copy of personal data you have provided to bd334 in a structured, commonly used, machine-readable format for the purpose of transferring it to another service provider.
• Right to withdraw consent: Where bd334 relies on your consent as the lawful basis for processing (specifically, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on bd334's legitimate interests where you feel that your own rights and interests outweigh bd334's. bd334 will assess such objections and cease the relevant processing unless compelling grounds exist to continue.

bd334 enforces a strict minimum age requirement of 21 years. The platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age verification is conducted as part of the KYC process and bd334 employs additional monitoring to identify accounts that may have been registered with incorrect age information.

If bd334 discovers or is notified that an account has been registered by a person under the age of 21, the account will be immediately suspended, all associated wagers will be voided, and any deposited funds will be returned to the originating payment method. All data associated with the underage account will be deleted as quickly as applicable legal obligations permit.

If you are a parent or guardian and believe that your child has registered on bd334, please contact [email protected] immediately with as much detail as possible. bd334 will investigate and act on all such reports with priority.

bd334 primarily processes and stores player data on servers located within or near the Asia-Pacific region to minimise latency for Bangladeshi players. However, some third-party service providers used by bd334 — including game software providers and fraud detection services — may process data on servers located outside Bangladesh.

Where personal data is transferred to a country that does not have equivalent data protection standards, bd334 takes appropriate safeguards to protect that data, including requiring contractual data protection commitments from the receiving party equivalent to those described in this Privacy Policy.

By registering an account with bd334, you acknowledge and consent to the transfer of your personal data to third-party service providers operating in other jurisdictions, subject to the safeguards described above.

The bd334 platform does not contain links to third-party websites for commercial or advertising purposes. Where references to third-party payment providers (bKash, Nagad, Rocket, Upay) or game providers (Pragmatic Play, Evolution Gaming, etc.) appear on the platform, these are operational references rather than navigational links to external sites.

bd334 has no responsibility for the privacy practices, data collection activities, or content of any third-party website or application. If you independently navigate to a third-party website from outside the bd334 platform, you should consult that website's own privacy policy.

bd334 reviews this Privacy Policy periodically and will update it when necessary to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The effective date at the top of this document will be updated to reflect the date on which any revised version comes into force.

Where changes are material — meaning they significantly affect how your data is collected, used, or shared — bd334 will notify all registered players by email to their registered address and will display a notice on the bd334 platform for a minimum of 14 days before the changes take effect. Your continued use of the bd334 platform after the effective date of a revised Privacy Policy constitutes your acceptance of those changes.

For minor, non-material changes such as typographical corrections, formatting updates, or clarifications that do not alter the substance of how data is processed, bd334 may update the policy without proactive notification, though the effective date will always be updated accordingly.

The current version of this Privacy Policy is always available at bd334.io/privacy-policy. We recommend that you revisit this page periodically to stay informed of how bd334 handles your personal data.

If you have questions, concerns, or requests relating to this Privacy Policy or the way bd334 handles your personal data, please contact the bd334 Data Protection team. All communications should be in English and include your registered account username where applicable.

Please note that the email address above is displayed as plain text for reference only. bd334 does not operate a telephone privacy line. All formal data rights requests must be submitted in writing to [email protected] to ensure a complete and auditable response.

This Privacy Policy should be read alongside the bd334 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the bd334 platform.