Privacy Policy — How bd49 Protects Your Data
At bd49, protecting the personal data of our players in Bangladesh is a fundamental responsibility. This Privacy Policy explains in clear, plain English precisely what data we collect from you, how we use it, who we share it with, how long we keep it, and what rights you hold over your own information. We are committed to transparency and the highest standards of data security.
Our Privacy Commitments
Six core principles that define how bd49 handles your personal information — built on transparency, security, and respect for your rights as a player in Bangladesh.
Data Minimisation
bd49 collects only the personal data that is strictly necessary to operate your account, process your deposits and withdrawals in BDT, and comply with our identity verification obligations. We do not harvest data for its own sake.
SSL Encryption at All Times
Every connection to bd49 is protected by industry-standard TLS/SSL encryption. Your login credentials, payment details, and personal information are transmitted over secure, encrypted channels at all times — preventing interception by third parties.
No Sale of Your Data
bd49 does not sell, rent, lease, or broker your personal data to any third party for marketing, advertising, or commercial profiling purposes. Your data belongs to you, and we treat it that way.
Your Rights, Always Respected
You have the right to access, correct, restrict, or request deletion of your personal data held by bd49 at any time. Submit a request to [email protected] and our team will respond within the timeframes set out in Section 10 of this Policy.
Clear Retention Periods
bd49 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory retention obligations. Full retention schedules are set out in Section 8 of this Privacy Policy.
Breach Notification
In the unlikely event of a data security breach that affects your personal information, bd49 will notify impacted players promptly via their registered email address and will take immediate steps to contain and remediate the incident.
Table of Contents
This Privacy Policy ("Policy") describes how bd49 ("bd49", "we", "us", "our") collects, uses, stores, and discloses personal data obtained from players and visitors ("you", "your") who access the bd49 website at bd49.io. bd49 is an international online betting and casino platform primarily serving players in Bangladesh.
By registering an account, making a deposit, placing a wager, or simply browsing bd49.io, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside the bd49 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
1 Introduction
bd49 is committed to protecting the privacy and personal data of every player who chooses to use our platform. This Policy has been written in plain English to ensure that players based in Bangladesh fully understand their rights and how their data is handled. We aim to be transparent about our data practices and to give you meaningful control over your personal information.
This Policy applies to all personal data collected through the bd49 website, mobile browser interface, customer support channels, and any other interaction you have with bd49 as an organisation. It does not apply to third-party websites or services that may be linked from our platform — each third party operates under their own privacy policy.
If you have any questions about this Policy or about how bd49 handles your personal data, please contact us at [email protected] at any time.
2 Who We Are
bd49 is the data controller for personal data collected through bd49.io. As data controller, bd49 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is lawful, fair, and transparent.
bd49 operates as an international online gaming platform under an offshore gaming licence. Players accessing bd49 from Bangladesh do so subject to this Privacy Policy and the bd49 Terms and Conditions.
- Platform Name: bd49
- Website: bd49.io
- Primary Market: Bangladesh
- Data Controller Contact: [email protected]
3 Personal Data We Collect
bd49 collects personal data in the following categories depending on how you interact with our platform:
3.1 Registration Data
When you create a bd49 account, we collect:
- Full legal name
- Date of birth (to verify you are 21 years of age or older)
- Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar)
- Email address
- Mobile number (used for MFS payment verification via bKash, Nagad, Rocket, or Upay)
- Username and encrypted password hash
3.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) process, we may collect:
- Copy of government-issued photo ID (National ID card, passport, or driving licence)
- Proof of address document (utility bill or bank statement dated within 90 days)
- Proof of payment method ownership (e.g., bKash or Nagad account screenshot confirming registration in your name)
- Source of funds declaration where applicable
3.3 Financial Transaction Data
When you make deposits or request withdrawals, we collect:
- Deposit and withdrawal amounts in BDT (৳)
- Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer)
- Transaction reference numbers and timestamps
- Account balance history
3.4 Betting and Gaming Activity Data
- Bets placed, games played, wager amounts, outcomes, and winnings
- Bonus claims, wagering requirement progress, and promotion usage history
- Session start and end times, session duration
3.5 Technical and Device Data
- IP address
- Browser type, version, and language settings
- Operating system and device type (desktop, mobile, tablet)
- Cookie identifiers and session tokens
- Referring URL and on-site navigation path
3.6 Customer Support Communications
- Content of emails and support messages you send to [email protected]
- Complaint and dispute records
- Responsible gaming requests (self-exclusion, deposit limits, cooling-off)
4 How We Collect Your Data
bd49 collects personal data through the following channels:
4.1 Directly From You
The majority of data bd49 holds about you is provided directly by you during:
- Account registration and profile updates
- KYC document submission
- Deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, or bank transfer
- Customer support communications sent to [email protected]
- Responsible gaming tool requests (e.g., self-exclusion applications)
- Bonus claim forms and promotion opt-ins
4.2 Automatically Through Platform Use
When you browse or interact with bd49.io, certain technical data is collected automatically via:
- Server logs that record IP addresses, page requests, and timestamps
- Cookies and session tokens placed on your browser (see Section 9)
- Game event logs generated by third-party game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi)
4.3 From Third-Party Service Providers
In limited circumstances, bd49 may receive data about you from:
- Payment processors (transaction status confirmations from bKash, Nagad, Rocket, Upay, Visa, Mastercard)
- Identity verification partners (document validation results from KYC service providers)
- Fraud prevention and anti-money-laundering screening services
5 How We Use Your Personal Data
bd49 uses the personal data collected from you for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your bd49 account | Registration data, technical data |
| Processing deposits and withdrawals in BDT | Financial transaction data, registration data |
| Verifying your identity and age (KYC — 21+ requirement) | KYC documents, registration data |
| Detecting and preventing fraud, money laundering, and prohibited conduct | All categories, especially financial and technical data |
| Providing customer support and resolving disputes | Support communications, account and transaction data |
| Administering bonuses, promotions, and loyalty rewards | Gaming activity data, registration data, financial data |
| Responsible gaming — implementing deposit limits, self-exclusion, cooling-off periods | Registration data, gaming activity data, support communications |
| Sending transactional communications (account confirmations, withdrawal notifications) | Registration data (email address, mobile number) |
| Sending promotional communications (new offers, tournaments) — only with your consent | Registration data, gaming activity data |
| Platform security, performance monitoring, and analytics | Technical and device data, gaming activity data |
| Compliance with legal and regulatory obligations | All categories as required |
6 Legal Basis for Processing
bd49 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing is necessary to perform the contract between you and bd49 — specifically, to operate your account, accept deposits, settle winnings, and provide gaming services.
- Legal Obligation: Processing is required for compliance with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements (21+), and fraud prevention duties.
- Legitimate Interests: Processing is necessary for bd49's legitimate interests, including platform security, fraud detection, abuse prevention, and the improvement of our services — provided these interests do not override your fundamental rights and freedoms.
- Consent: For optional data processing activities (such as sending promotional emails about new offers, BPL cricket season specials, or Eid bonus campaigns), bd49 relies on your freely given consent, which you may withdraw at any time.
7 Data Sharing & Disclosure
bd49 does not sell, rent, or broker your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
7.1 Payment Processors
To process your deposits and withdrawals in BDT, bd49 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These partners process data under their own privacy policies and are bound by contractual data security obligations.
7.2 Game Software Providers
Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a unique player session token and game-event data necessary to deliver the game experience and validate outcomes. These studios do not receive your full registration or financial details.
7.3 Identity Verification Partners
To fulfil our KYC obligations, bd49 may share identity documents you submit with specialist identity verification service providers. These providers are contractually restricted to using your data solely for the purpose of identity verification on behalf of bd49.
7.4 Fraud Prevention and AML Screening
bd49 may share relevant account and transaction data with fraud detection and anti-money-laundering screening services to identify and prevent financial crime. Where required by law, bd49 may also disclose data to law enforcement or regulatory authorities.
7.5 Professional Advisers
bd49 may share data with legal advisers, auditors, or other professional consultants where necessary to obtain professional advice or to protect bd49's legal rights in connection with disputes or regulatory proceedings.
7.6 Business Transfers
In the event of a merger, acquisition, or sale of all or part of bd49's business assets, personal data held by bd49 may be transferred to the acquiring entity as part of that transaction. bd49 will notify affected players via their registered email address in advance of any such transfer.
8 Data Retention
bd49 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, subject to any legal or regulatory requirements that mandate longer retention periods. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money-laundering obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Betting and gaming activity logs | 5 years from activity date | Dispute resolution, fraud prevention |
| Customer support communications | 3 years from last communication | Dispute resolution, service improvement |
| Self-exclusion records | Permanently (or until exclusion expires) | Responsible gaming obligations |
| Technical / server log data | 12 months from collection | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating lawful basis for marketing |
When data is no longer required within the applicable retention period, bd49 will securely delete or anonymise it in a manner that prevents reconstruction or identification.
9 Cookies & Tracking Technologies
bd49 uses cookies and similar tracking technologies to operate the platform, personalise your experience, maintain your login session, and collect analytics data that helps us improve our service for players in Bangladesh.
9.1 Types of Cookies Used
- Strictly Necessary Cookies: These cookies are essential for the bd49 website to function. They maintain your login session, remember your account preferences, and enable secure payment processing. These cookies cannot be disabled without breaking the platform.
- Functional Cookies: These cookies remember your preferences (such as your preferred language and display settings) to deliver a more personalised experience each time you visit.
- Analytics Cookies: bd49 uses anonymised analytics data to understand how players navigate the platform — which pages are visited most, where users drop off, and how features are used — in order to improve the site. This data is aggregated and does not identify you individually.
- Security Cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect account security.
9.2 Cookie Management
You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your bd49 account and using the platform. Disabling analytics cookies will not affect your ability to play.
10 Your Data Rights
As a player using bd49, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the relevant request. bd49 will respond within 30 days of receiving a valid request.
10.1 Right of Access
You have the right to request a copy of all personal data that bd49 holds about you. This is sometimes called a Subject Access Request (SAR). bd49 will provide a structured summary of your data within 30 days of a valid SAR.
10.2 Right to Rectification
If any personal data held by bd49 about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account information (such as your email address or phone number) directly from your account dashboard. For corrections to KYC-verified data (such as your legal name or date of birth), contact [email protected] with supporting documentation.
10.3 Right to Erasure ("Right to be Forgotten")
You may request that bd49 delete all personal data we hold about you. Note that this right is not absolute — bd49 may be required to retain certain data for legal, regulatory, or fraud-prevention purposes even after account closure (see Section 8 for retention periods). Where erasure is not possible in full, bd49 will inform you of the specific legal basis for retaining the data.
10.4 Right to Restriction of Processing
You have the right to request that bd49 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing and bd49 is assessing that objection. During a restriction period, bd49 may store your data but will not actively process it beyond what is legally required.
10.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that bd49 transmit that data directly to another data controller where technically feasible.
10.6 Right to Object
You have the right to object to processing based on bd49's legitimate interests or for direct marketing purposes. Where you object to marketing, bd49 will cease all promotional communications immediately. Where you object to other legitimate-interest processing, bd49 will assess your objection and respond within 30 days.
10.7 Right to Withdraw Consent
Where bd49 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
11 Data Security
bd49 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.
11.1 Technical Security Measures
- All data transmitted between your browser and bd49.io is protected by TLS 1.2+ SSL encryption.
- Passwords are stored as salted cryptographic hashes — bd49 staff cannot view your plaintext password.
- Payment data (card numbers, bKash wallet references) is tokenised and never stored in full on bd49 servers.
- All bd49 servers are hosted in ISO 27001-compliant data centres with physical access controls.
- Database access is restricted to authorised personnel via role-based access controls and multi-factor authentication.
- Regular penetration testing and vulnerability assessments are conducted by independent security professionals.
11.2 Organisational Security Measures
- Only bd49 staff with a legitimate operational need are granted access to player personal data.
- All staff with access to personal data are trained on data protection obligations and bound by confidentiality agreements.
- Data access logs are maintained and reviewed periodically to detect any anomalous access patterns.
11.3 Breach Response
In the event of a data security incident that results in the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of player personal data, bd49 will activate its incident response plan immediately. Affected players will be notified via their registered email address as promptly as reasonably practicable, and bd49 will take all necessary steps to contain and remediate the breach.
12 Children & Minors
bd49 is strictly an adult platform. Access to and use of bd49.io is permitted only to individuals who are 21 years of age or older. bd49 does not knowingly collect personal data from anyone under the age of 21.
During the account registration process, bd49 requires all applicants to confirm that they are aged 21 or above. As part of KYC verification, bd49 validates date of birth against government-issued identity documents to confirm age eligibility.
If bd49 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the relevant account. If you have reason to believe that a minor has registered an account on bd49, please notify us at [email protected] immediately.
13 Third-Party Links
The bd49 website may contain links to third-party websites, game studios, or service providers. These links are provided for convenience and informational purposes only. bd49 has no control over the content, privacy practices, or data handling of any third-party website, and this Privacy Policy does not apply to those sites.
bd49 recommends that you review the privacy policy of any third-party website you visit via a link from bd49.io. bd49 accepts no responsibility or liability for the privacy practices of any third-party site. Your interaction with third-party websites is entirely at your own discretion and risk.
14 Amendments to This Privacy Policy
bd49 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this document will be revised and registered players will be notified via the email address on file. The updated Policy takes effect immediately upon publication to bd49.io.
Your continued use of bd49 following the publication of any revised Privacy Policy constitutes your acceptance of the changes. bd49 recommends that you review this page periodically to stay informed of how your personal data is being protected.
If you do not agree to any revised version of this Privacy Policy, you must cease using the bd49 platform and may request account closure by contacting [email protected].
15 Contact & Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or about how bd49 handles your personal data, please contact the bd49 Data Privacy team using the details below. All communications must be in English to ensure accurate and timely handling.
- General Privacy Enquiries: [email protected] (subject line: "Privacy Enquiry")
- Subject Access Requests: [email protected] (subject line: "Subject Access Request")
- Data Erasure Requests: [email protected] (subject line: "Erasure Request")
- Data Breach Reports: [email protected] (subject line: "Security Concern")
- Marketing Opt-Out: [email protected] (subject line: "Marketing Opt-Out")
bd49's support team operates 24 hours a day, 7 days a week, including Bangladesh public holidays (Victory Day, Independence Day, Eid, and Durga Puja). All privacy-related requests will be acknowledged within 5 business days and resolved within 30 calendar days. Response times are measured in Bangladesh Standard Time (BST, UTC+6).
Your Privacy is Protected — Explore bd49 Confidently
Now that you understand exactly how bd49 safeguards your personal data, explore everything our platform has to offer — cricket betting, live casino, slots, and exclusive promotions, all in Bangladeshi Taka.