bdgl Privacy Policy — How We Protect and Handle Your Personal Data

bdgl ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the bdgl platform at https://bdgl.io (the "Platform"). This Privacy Policy sets out in formal, plain English the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our practices regarding your personal data. By registering an account, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein to the extent that such processing is based on consent.

This Privacy Policy is incorporated by reference into the bdgl Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-protection matter, this Privacy Policy shall prevail.

For the purposes of applicable data protection legislation, bdgl is the data controller in respect of personal data collected through the Platform. As data controller, bdgl determines the purposes for which, and the means by which, personal data is processed.

All data protection enquiries, access requests, and complaints should be directed to the bdgl data protection contact point:

• Contact Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Request" or "Privacy Enquiry"
• Response Time: Within 30 calendar days of receipt of a valid written request
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

bdgl collects the following categories of personal data from players and platform visitors. The specific data collected depends on the nature of your interaction with the Platform:

bdgl does not collect or store full payment card numbers. Card payment processing is handled by certified third-party payment processors who maintain their own data security standards. bdgl retains only the partial card reference necessary for transaction matching and withdrawal routing.

bdgl collects personal data through the following channels and mechanisms:

• Direct Provision: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via server logs, session tracking, and first-party cookies. See Section 8 for full cookie details.
• Third-Party Sources: Where permitted, identity verification data may be supplemented by information from KYC service providers, fraud detection agencies, and payment processors to verify the accuracy of the information you have provided.
• Payment Partners: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card payment processors when a deposit or withdrawal is initiated.

Where data is collected from third-party sources, bdgl ensures that such collection is carried out in compliance with applicable data protection requirements and that you have been informed of such processing either by the third party or through this Privacy Policy.

bdgl processes personal data only where a valid legal basis exists. The primary legal bases on which bdgl relies are as follows:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, deposits, withdrawals, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, age verification obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing carried out to pursue bdgl's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics to improve the service.
• Consent: Processing carried out on the basis of your explicit consent, such as the sending of promotional communications and marketing emails. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of prior processing.

The personal data bdgl collects is used for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent or establishing a fresh legal basis:

• Creating, managing, and maintaining your registered bdgl Account.
• Verifying your identity and age as part of the KYC process prior to processing withdrawal requests or at any other point where verification is required.
• Processing deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods.
• Settling bets, resolving disputes, and maintaining accurate betting and gaming records.
• Detecting, investigating, and preventing fraudulent activity, money laundering, and prohibited conduct as defined in the Terms & Conditions.
• Conducting responsible gaming monitoring — including identifying patterns of play that may indicate problem gambling and applying account-level tools where appropriate.
• Sending transactional communications — account confirmations, withdrawal notifications, security alerts, and KYC-related correspondence — that are necessary for the performance of our contract with you.
• Sending promotional communications — bonus offers, seasonal promotions, and platform updates — where you have provided consent or where we have a legitimate interest to do so, subject to your right to opt out.
• Improving the Platform through internal analytics, A/B testing, and usability research using aggregated and anonymised usage data.
• Complying with legal obligations, regulatory inquiries, law enforcement requests, and court orders.

bdgl does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data may be shared with the following categories of third-party recipients only to the extent necessary for the stated purpose and subject to binding data processing agreements:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard processing partners — to facilitate deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services engaged to assist with age and identity confirmation as part of the KYC process.
• Fraud Prevention and AML Services: Specialist agencies used to detect and prevent fraudulent transactions, money laundering, and other financial crimes.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive limited session data necessary to deliver the game experience. These providers are not authorised to use this data for their own independent marketing purposes.
• IT and Infrastructure Providers: Cloud hosting, database, and security service providers who support the technical operation of the Platform under strict confidentiality obligations.
• Legal and Regulatory Authorities: Law enforcement agencies, courts, regulatory bodies, or government authorities where disclosure is required by applicable law or a valid legal order.

All third-party data processors engaged by bdgl are contractually required to implement appropriate technical and organisational security measures and to process personal data only on bdgl's documented instructions.

bdgl uses cookies and similar tracking technologies to operate the Platform effectively, maintain session state, and gather anonymised usage analytics. The following categories of cookies are used:

bdgl does not use third-party advertising cookies or behavioural tracking cookies that profile you for advertising purposes across external websites. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair Platform functionality, including the ability to log in and place bets.

bdgl implements a multi-layered approach to data security. The following technical and organisational measures are in place to protect personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your device and the Platform is protected using 256-bit SSL/TLS encryption. The Platform enforces HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive stored data — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bdgl's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls and all access is logged and audited.
• Password Security: Account passwords are stored as salted cryptographic hashes. bdgl staff cannot view your password in plain text and will never request it via email or live chat.
• Penetration Testing: bdgl's platform infrastructure undergoes regular security assessments and penetration testing by independent security professionals.
• Incident Response: bdgl maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay.

bdgl retains personal data for the periods set out below, after which data is securely deleted or anonymised. Retention periods are determined by the purpose of the data and applicable legal obligations:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from active systems. Backup copies are purged within 90 days of the deletion of the primary record. Anonymised, aggregated data derived from personal data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

As a registered player on the bdgl Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Request". bdgl will respond within 30 calendar days of receiving a valid and properly identified request:

• Right of Access: You have the right to request confirmation of whether bdgl holds personal data about you, and to receive a copy of that data together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For basic account data, you may update this directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bdgl's legal retention obligations. This right does not apply to data that bdgl is required to retain by law.
• Right to Restriction: You have the right to request that bdgl restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdgl will not charge a fee for processing a data rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied or the request refused. bdgl reserves the right to verify your identity before processing any data rights request to protect against unauthorised access to your personal data.

The bdgl Platform is strictly restricted to individuals who are 21 years of age or older. bdgl does not knowingly collect, store, or process personal data relating to any person under the age of 21. The collection of personal data from minors is not permitted under any circumstances.

If bdgl becomes aware that personal data has been collected from an individual under the age of 21, all associated data will be immediately and permanently deleted, the Account will be suspended, any funds wagered will be voided, and deposited funds will be returned to the originating payment method after appropriate investigation.

Parents and guardians who believe that a person under 21 in their care has registered on the Platform or provided personal data are encouraged to contact bdgl immediately at [email protected] with the subject line "Minor Account Report". All such reports are handled with urgency and full confidentiality.

bdgl primarily serves players located in Bangladesh and processes the majority of personal data within secure infrastructure that supports the bdgl Platform. In certain operational contexts — such as when engaging third-party KYC providers, fraud detection services, or game software providers — personal data may be transferred to or accessed from systems located outside Bangladesh.

Where such international transfers occur, bdgl ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements that impose data protection obligations equivalent to those applicable within bdgl's operational framework.
• Limiting transferred data to the minimum necessary for the specific service being provided by the third-party processor.
• Technical security measures — including encryption and access controls — that apply equally to data regardless of the jurisdiction in which it is processed.

You may request further information about the safeguards applied to specific international transfers by contacting [email protected] with the subject line "International Transfer Enquiry".

bdgl reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, or improvements to the clarity and completeness of our disclosures.

Where changes are material — that is, where they significantly affect how we process your personal data or the rights available to you — bdgl will notify registered players by email to the address associated with their Account at least 14 days before the changes take effect.

The effective date at the top of this Privacy Policy will be updated each time the policy is revised. The version published at https://bdgl.io/privacy-policy constitutes the current and binding version of the Privacy Policy at all times. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated policy.

If you do not agree with any material change to this Privacy Policy, you should stop using the Platform and may request Account closure by contacting [email protected] with the subject line "Account Closure Request".

For any questions, concerns, or requests relating to this Privacy Policy or bdgl's data processing practices, please contact the bdgl data protection team using the details below. All privacy correspondence is handled in English on Bangladesh Standard Time (UTC+6):

• Privacy Contact Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Subject Line for International Transfer Queries: "International Transfer Enquiry"
• Response Commitment: Within 30 calendar days of receipt of a valid written request
• Support Availability: 24 hours a day, 7 days a week

If you are not satisfied with bdgl's response to a privacy complaint, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. bdgl is committed to working constructively to resolve all privacy concerns raised in good faith by registered players.