bdpoop Privacy Policy — How We Protect Your Personal Data

bdpoop collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from trusted third-party verification and payment service providers. The categories of information we collect are described below.

Information You Provide Directly

When you register an account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with the following:

• Identity data: Full legal name, date of birth, and national identity card (NID) number or passport number
• Contact data: Email address and Bangladeshi mobile phone number
• Financial data: Mobile wallet identifiers (bKash number, Nagad number, Rocket number, Upay number), bank account details for withdrawal purposes, and transaction history on the platform
• Verification documents: Copies of NID cards, passports, utility bills, or mobile banking statements submitted for KYC purposes
• Communications data: Records of support conversations via live chat or email, including complaint history and feedback submitted to bdpoop

Information Collected Automatically

When you access bdpoop — whether via a desktop browser or a mobile device — our systems automatically collect certain technical data to ensure the platform operates correctly and securely:

• Device & browser data: IP address, device type, operating system version, browser type and version, screen resolution, and device language settings
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, click paths, and features accessed
• Location data: General geographic location inferred from IP address (used for fraud prevention and jurisdictional compliance — bdpoop does not use GPS-level location tracking)
• Cookie and session data: Session identifiers, authentication tokens, and preference settings stored in browser cookies or local storage

Information from Third Parties

In limited circumstances, bdpoop may receive personal data about you from third-party service providers engaged to support platform operations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card networks (Visa, Mastercard) may confirm transaction status, amounts, and wallet ownership data
• Identity verification providers: Third-party KYC services may cross-reference the documents you submit against national databases to confirm authenticity
• Fraud detection services: Automated fraud prevention systems may provide risk scores or flag suspicious activity patterns associated with your account or device

bdpoop uses the personal data it collects for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The table below summarises our primary data processing activities and the legal basis for each.

Responsible Gaming Monitoring

bdpoop has a legal and ethical obligation to monitor player behaviour for signs of problem gambling. This means our systems analyse betting patterns, deposit frequency, session durations, and account activity to identify players who may benefit from responsible gaming interventions. If a pattern of concern is detected, the affected player may be contacted by our Player Welfare team with information about available support tools, including deposit limits and self-exclusion. This processing is carried out in the player's interest and in compliance with our responsible gaming commitments.

Marketing Communications

If you have opted in to receive marketing communications from bdpoop, we will use your email address and/or mobile number to send you information about promotions, bonuses, new games, and seasonal offers relevant to players in Bangladesh — including BPL and IPL cricket promotions, Eid and Pohela Boishakh seasonal offers, and new game launches from Pragmatic Play, Spribe, and other studios. You may withdraw your consent and opt out of all marketing communications at any time by updating your preferences in your account settings or by contacting [email protected].

bdpoop does not sell your personal data to any third party. We share personal data only in limited, clearly defined circumstances, and only with parties who are contractually bound to protect it to the same standard as bdpoop.

Service Providers

We engage a small number of trusted third-party service providers to support our platform operations. These providers act as data processors on our behalf and are permitted to use your data only for the specific purpose for which it was shared:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) receive the minimum financial data necessary to execute and verify transactions. These providers operate under their own privacy frameworks and security certifications.
• KYC and identity verification providers: Third-party identity verification services receive copies of the documents you submit for account verification. These providers are contractually prohibited from retaining or using your documents beyond the stated verification purpose.
• Game studio providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your player session identifier and bet data to deliver and settle game rounds. These providers do not receive your full name, NID, or financial details.
• Analytics providers: Anonymous, aggregated usage data may be processed by analytics platforms to help bdpoop understand platform performance. No individually identifiable data is shared for analytics purposes.

Legal Disclosure

bdpoop may disclose personal data to law enforcement agencies, financial regulators, or other government authorities when required to do so by applicable law, court order, or regulatory directive. In such cases, bdpoop will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of bdpoop's business or assets, your personal data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified by email of any such transfer and of any changes to the Privacy Policy that result from the transaction.

bdpoop uses cookies and similar local storage technologies to make the platform work correctly, keep your session secure, and gather anonymous data about how players use the site. We do not use third-party behavioural advertising cookies or cross-site tracking technologies.

Types of Cookies We Use

Managing Cookies

Strictly necessary and fraud prevention cookies cannot be disabled as they are essential to the secure and correct operation of the platform. Functional and analytics cookies may be managed through your browser settings. Please be aware that disabling functional cookies may affect your experience on bdpoop, such as resetting your preference settings on each visit.

All major browsers — including Chrome, Firefox, Safari, and Edge — provide cookie management tools in their settings menus. Refer to your browser's help documentation for specific instructions on clearing or blocking cookies. Mobile browsers on Android and iOS devices offer equivalent controls in their privacy settings.

bdpoop treats the security of your personal data as a primary operational concern. We maintain a layered set of technical and organisational measures designed to prevent unauthorised access, disclosure, alteration, or destruction of the data we hold.

Security Measures

• Encryption in transit: All data transmitted between your device and bdpoop's servers is protected by 256-bit SSL/TLS encryption, the same standard used by major international banks.
• Encryption at rest: Sensitive fields — including identity document data, financial account identifiers, and password hashes — are encrypted at the database level using AES-256 encryption.
• Access controls: Access to personal data within bdpoop's systems is restricted to employees and contractors who require it to perform their job functions, under a strict need-to-know policy. Access logs are maintained and reviewed regularly.
• Password hashing: Account passwords are never stored in plain text. bdpoop uses industry-standard bcrypt hashing with per-user salting so that passwords remain protected even in the unlikely event of a data breach.
• OTP authentication: All new device logins require one-time password (OTP) verification via the mobile number registered on your account, providing an additional security layer beyond your password.
• Penetration testing: bdpoop conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Data Retention

bdpoop retains personal data for as long as your account is active and for a defined period thereafter. The retention periods we apply are based on the purpose for which data was collected and any applicable legal obligations:

• Account data and transaction history: Retained for the duration of your account plus 5 years following closure, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for the duration of your account plus 5 years following closure.
• Support communications: Retained for 3 years from the date of the interaction.
• Analytics data: Retained in anonymised, aggregated form indefinitely. Individually identifiable components are deleted or anonymised within 24 months.
• Marketing consent records: Retained for 3 years from the date consent was last confirmed or updated.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to affected players, bdpoop will notify impacted players via their registered email address within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed by bdpoop in response. Players who are concerned about account security at any time should contact [email protected] immediately.

As a registered player on bdpoop, you hold a set of rights in relation to the personal data we hold about you. bdpoop is committed to honouring these rights promptly and without undue complication. All requests can be submitted by contacting [email protected] with the subject line "Privacy Rights Request".

Right of Access

You have the right to request a copy of the personal data bdpoop holds about you. We will provide a structured summary of the data categories held, the purposes for which each is processed, and (where applicable) the parties with whom it has been shared. We aim to respond to access requests within 14 business days.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data — such as your name or date of birth — bdpoop may require supporting documentation to verify the correction before applying it.

Right to Erasure

You may request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent and no other legal basis applies. Please note that bdpoop is legally required to retain certain categories of data — particularly financial and KYC records — for defined periods even after account closure. In such cases, bdpoop will delete the data as soon as the mandatory retention period expires.

Right to Restrict Processing

You may ask bdpoop to restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved. During a restriction period, bdpoop will continue to store the data but will not actively process it for other purposes.

Right to Withdraw Consent

Where bdpoop processes your personal data on the basis of your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw marketing consent from within your account settings or by emailing [email protected].

bdpoop is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, access the platform, or use any of its services. We do not knowingly collect personal data from individuals under the age of 18.

If bdpoop becomes aware that personal data has been collected from a person under 18, we will immediately suspend the associated account, delete the personal data collected, and refund any net deposits made — less any bonus amounts awarded — to the payment method used. Winnings generated by an underage account will not be paid out under any circumstances.

If you are a parent or guardian and have reason to believe your child has registered on bdpoop, please contact [email protected] immediately. We take underage gambling prevention very seriously and will act on all such reports as a matter of urgency.

bdpoop reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform features. The effective date at the top of this page will always reflect when the policy was last revised.

When material changes are made to this Privacy Policy — for example, changes to what data we collect, how we use it, or with whom we share it — bdpoop will notify registered players via the email address associated with their account at least 7 days before the changes take effect. For minor or clarificatory changes, the updated policy will be posted on this page without separate notification.

Your continued use of bdpoop following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you are entitled to close your account and request deletion of your personal data in accordance with the rights described in Section 6 above.

If you have any questions about this Privacy Policy or about how bdpoop handles your personal data, please contact our support team at [email protected]. Our team is available around the clock on Bangladesh Standard Time (BST, UTC+6) and will be happy to assist.