Privacy Policy —
How bdfun Protects Your Data

1. Information We Collect

bdfun collects personal data from you through several channels — directly when you register or use our Services, automatically when you interact with the platform, and occasionally from third-party sources for verification and fraud-prevention purposes. The categories of data we collect are described in the table below.

bdfun does not knowingly collect special-category (sensitive) personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless you voluntarily disclose such information during a responsible gaming self-assessment process, in which case it is treated with the highest level of confidentiality.

2. How We Use Your Data

bdfun uses the personal data we hold about you for the following specific purposes. We do not use your data for any purpose that is incompatible with the original reason for which it was collected.

• Account Management: To create, verify, maintain, and administer your bdfun player account, including processing your registration details and authenticating your identity at login.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to apply funds to your account balance, and to maintain accurate transaction records in Bangladeshi Taka (BDT).
• Identity & Age Verification: To verify that you are at least 18 years of age and to confirm that the identity you have provided is genuine. This is a regulatory obligation for any responsible gaming platform.
• Service Delivery: To provide access to cricket betting, live casino games, slots, and all other products on the bdfun platform, and to personalise your experience based on your gaming preferences and history.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, underage access, and other forms of prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns and intervene — with deposit limits, session reminders, cooling-off periods, or account suspension — where player behaviour suggests a potential gambling-related harm. This is one of bdfun's most important uses of data.
• Customer Support: To respond to your enquiries, resolve account issues, and maintain records of support interactions for quality assurance and audit purposes.
• Marketing & Promotions: To send you information about bdfun promotions, seasonal offers (Eid, Pohela Boishakh, BPL season, T20 World Cup), and platform updates — but only if you have opted in to receive marketing communications. You may withdraw consent at any time.
• Legal & Compliance: To comply with applicable laws and regulations, to respond to lawful requests from competent authorities, and to establish, exercise, or defend legal claims involving bdfun.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and feature set of the bdfun platform for all players.

3. Legal Basis for Processing

bdfun processes your personal data on one or more of the following legal bases, depending on the specific purpose of each processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and bdfun — specifically, to operate your player account, process your payments, and deliver the gaming services you have subscribed to.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, age verification mandates, and know-your-customer (KYC) procedures.
• Legitimate Interests: Processing is necessary for bdfun's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you direct marketing communications — we will obtain that consent clearly and separately. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Cookies & Tracking Technologies

bdfun uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform, personalise your experience, analyse usage patterns, and maintain security. A cookie is a small text file placed on your device when you visit the bdfun website.

We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function correctly. They enable core features such as secure login sessions, account authentication, and payment processing. Without these cookies, the bdfun Services cannot operate. They cannot be disabled.
• Performance & Analytics Cookies: These collect anonymised data about how players interact with the bdfun platform — which pages are visited most frequently, how long sessions last, and which features generate the most engagement. We use this data to improve the platform for all users.
• Functionality Cookies: These remember your preferences — such as your preferred language (English), display settings, and last-visited game category — to personalise your experience across sessions.
• Marketing & Targeting Cookies: These are placed only with your explicit consent and are used to deliver promotional content relevant to your interests. If you have opted in to marketing communications, these cookies help us ensure that promotions you see are contextually relevant to your gaming activity.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from using key features of the bdfun platform. Instructions for managing cookies are available in your browser's help documentation.

5. Data Sharing & Third Parties

bdfun does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose in each case.

• Payment Processors: We share necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process deposits and withdrawals. These providers are independently regulated and maintain their own privacy and data-security standards.
• Identity Verification Providers: We use specialist third-party KYC and age-verification services to authenticate your identity and confirm your eligibility to play. These providers process your identity documents securely and are bound by strict confidentiality obligations.
• Game Content Providers: Game providers such as Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi may receive session-level technical data (such as player ID and bet amount) necessary to operate their games within the bdfun platform. They do not receive your name, address, or payment details.
• Fraud Prevention & AML Services: We share data with specialist fraud-detection and anti-money-laundering services to protect the integrity of the platform and comply with applicable legal requirements.
• Analytics Providers: Aggregated, anonymised usage data may be processed by third-party analytics platforms to help bdfun understand platform performance. No personally identifiable information is included in these data sets.
• Legal & Regulatory Authorities: We may disclose your personal data to law enforcement agencies, courts, regulators, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bdfun, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bdfun's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players via the registered email address before any such transfer takes effect.

All third parties with whom bdfun shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

6. Data Retention

bdfun retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active bdfun player account is retained for the duration of the account's active status and for a period of five (5) years following permanent account closure.
• Financial Transaction Records: Records of deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC & Identity Documents: Copies of identity documents submitted during the verification process are retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy anti-money-laundering compliance requirements.
• Support Communications: Records of customer support interactions, including emails and chat transcripts, are retained for a period of two (2) years from the date of the most recent communication in a given support thread.
• Marketing Data: If you have opted in to marketing communications, your contact details and preference records are retained until you withdraw consent or request deletion — whichever comes first.
• Analytics Data: Anonymised, aggregated analytics data that cannot be linked to an individual player may be retained indefinitely for platform improvement purposes.

When personal data is no longer required for any of the above purposes, bdfun will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data that cannot be re-linked to an individual is not subject to deletion obligations.

7. Your Privacy Rights

As a bdfun player, you hold a number of rights in relation to the personal data we hold about you. bdfun is committed to honouring these rights promptly and without unnecessary obstruction. To exercise any of the rights listed below, please contact our support team at [email protected].

• Right of Access: You have the right to request a copy of the personal data that bdfun holds about you, along with information about the purposes for which it is processed and the parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by bdfun. You may update certain details directly within your account settings at any time.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to exceptions — for example, we may be required to retain certain data for legal compliance reasons even after an account is closed.
• Right to Restriction: You have the right to request that bdfun restricts the processing of your personal data in certain circumstances — for example, while we investigate the accuracy of data you have disputed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bdfun in a structured, commonly used, machine-readable format, and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where bdfun relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bdfun will respond to all legitimate privacy rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

8. Data Security

bdfun takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

• SSL/TLS Encryption: All data transmitted between your device and the bdfun platform is protected by SSL/TLS encryption. Look for the padlock icon in your browser's address bar when accessing bdfun — this confirms that your connection is secure.
• Data Encryption at Rest: Sensitive personal data stored on bdfun's servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within bdfun's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with specific job responsibilities that require access to player data are granted permission to view it.
• Secure Password Storage: Player account passwords are never stored in plain text. bdfun uses industry-standard hashing algorithms to store password credentials securely.
• Fraud Detection Systems: bdfun operates automated monitoring systems that flag unusual account activity, suspicious login patterns, and potential security breaches in real time.
• Regular Security Reviews: bdfun conducts periodic reviews of its data security infrastructure and processes to identify and address potential vulnerabilities.

While bdfun takes all reasonable steps to protect your personal data, no platform can guarantee absolute security. You are also responsible for protecting your own account — use a strong, unique password, do not share your login credentials, and contact us immediately at [email protected] if you suspect any unauthorised access to your account.

9. Children's Privacy

bdfun is strictly an 18+ platform. The Services are not directed at, and are not intended for use by, any person under the age of 18. bdfun does not knowingly collect personal data from individuals under the age of 18.

Where bdfun becomes aware that personal data has been collected from a person under 18 — whether through age verification failure, parental notification, or any other means — we will take immediate steps to suspend the relevant account, delete the data collected, and void any associated transactions or balances.

If you are a parent or guardian and believe that your child has registered with or accessed the bdfun platform, please contact our support team immediately at [email protected]. We will investigate and act without delay. We also encourage parents and guardians to use parental control software to restrict access to online gambling platforms for minors.

10. Updates to This Policy

bdfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the nature of the Services we offer. When material changes are made, we will notify registered players via the email address on file, or by displaying a prominent notice upon login to the platform.

The date of the most recent revision to this Policy is always displayed at the top of this page. We encourage you to review this Policy periodically so that you remain informed about how your personal data is being handled. Your continued use of the bdfun platform following publication of a revised Policy constitutes your acceptance of the updated terms.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bdfun handles your personal data, please contact our support team. Our English-speaking team is available 24 hours a day, 7 days a week, and is ready to assist players across Bangladesh with any privacy-related enquiry.

• Email: support@b dfun.app
• Response Time: We aim to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6).
• Formal Rights Requests: For formal data subject access requests, erasure requests, or other rights exercises under Section 7 of this Policy, please include "Privacy Rights Request" in your email subject line so we can route your message to the appropriate team member promptly.
• Support Hours: Available 24/7 — Bangladesh Standard Time (BST, UTC+6)

When contacting us about a privacy matter, please include your registered bdfun username (do not include your password) and a clear description of your request or concern. This will help us locate your account records and respond to you as efficiently as possible.