bd101 Privacy Policy

This Privacy Policy ("Policy") describes how bd101 ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "your", "player") of the bd101 online casino and sports betting platform accessible at https://bd101.vip (the "Platform"). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy in full.

bd101 is committed to safeguarding the privacy and personal information of all players across Bangladesh. We process personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. This Policy applies to all personal data collected through the Platform, our customer support channels, and any other point of contact between you and bd101.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in any promotion on the bd101 Platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, National Identity Card (NID) number, passport number, or driving licence number.
• Contact Data: Email address, mobile phone number, and residential address (including district, division, and postcode for Bangladesh-based players).
• Financial Data: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details (account number, bank name, branch), Visa or Mastercard card details (card number, expiry date — we do not store full CVV data).
• Verification Documents: Copies of government-issued identity documents, proof-of-address documents, and payment method screenshots submitted during KYC review.
• Communications Data: Records of correspondence you send to us via email ([email protected]) or live chat, including support tickets, complaints, and feedback.

1.2 Information Collected Automatically

When you visit or interact with the Platform, certain technical and behavioural data is collected automatically:

• Device & Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited, games played, bet amounts, session duration, login timestamps, deposit and withdrawal history, bonus opt-in history, and game outcome records.
• Cookie Data: Session identifiers, preference cookies, and analytical tracking data as described in Section 5 of this Policy.
• Location Data: Approximate geographic location inferred from your IP address for the purpose of access restriction compliance and fraud prevention. bd101 does not collect precise GPS location data.

1.3 Information from Third Parties

bd101 may receive additional personal data about you from the following third-party sources in connection with fraud prevention, identity verification, and payment processing:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction confirmation data and account ownership verification results.
• Identity verification and KYC service providers — age and identity verification results.
• Fraud and security intelligence partners — flagged IP addresses, device fingerprints, and risk scores.
• Game content providers (Evolution Gaming, Ezugi, Playtech, Pragmatic Play, Spribe, NetEnt, Microgaming) — game session logs and technical records required for dispute resolution.

2. How We Use Your Data

bd101 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

Purpose	Data Categories Used
Account registration and management	Identity, Contact
KYC age and identity verification	Identity, Verification Documents
Processing deposits and withdrawals	Financial, Identity
Fraud detection and prevention	Technical, Usage, Financial, Identity
Anti-money laundering (AML) compliance	Financial, Identity, Usage
Customer support and dispute resolution	Communications, Identity, Usage
Personalised promotions (with consent)	Usage, Contact
Platform security and integrity monitoring	Technical, Usage
Responsible gaming monitoring	Usage, Financial
Legal and regulatory compliance	All categories as required

3. Legal Basis for Processing

bd101 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing is necessary to perform the contract between you and bd101 — including account creation, payment processing, and delivering the games and betting services you have requested.
• Legal Obligation: Processing is required to comply with legal obligations applicable to bd101's operation, including anti-money laundering regulations, fraud prevention requirements, and mandatory age verification obligations.
• Legitimate Interests: Processing is carried out for bd101's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Examples include platform security monitoring, abuse detection, and internal analytics used to improve the Platform.
• Consent: Where we rely on your consent as the legal basis (for example, for sending you promotional communications or for placing non-essential cookies), you may withdraw that consent at any time by contacting [email protected] or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Data Sharing & Disclosure

4.1 Service Providers

bd101 engages trusted third-party service providers to assist in operating the Platform. These providers are permitted to process your personal data only on our documented instructions and are contractually prohibited from using your data for any other purpose. Categories of service providers include:

• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors)
• Identity and KYC verification providers
• Cloud hosting and infrastructure providers
• Game software and live casino content providers (Evolution Gaming, Ezugi, Playtech, Pragmatic Play, Spribe, NetEnt, Microgaming)
• Cybersecurity and fraud detection vendors
• Customer support platform operators
• Email and notification delivery services

4.2 Legal and Regulatory Disclosure

bd101 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or in response to a valid legal request. Such disclosures are made strictly to the extent required and, where legally permitted, we will notify you of any such disclosure.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of bd101's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. bd101 will take reasonable steps to ensure that any such transfer is subject to appropriate data protection commitments, and you will be notified of any material change to the entity responsible for processing your data.

4.4 No Sale of Personal Data

bd101 does not and will not sell, licence, or rent your personal data to any third party for their own marketing, advertising, or commercial profiling purposes. Any third-party data sharing is limited strictly to operational necessity as described in this section.

5. Cookies & Tracking Technologies

The bd101 Platform uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to provide essential platform functionality, improve user experience, and gather aggregate analytical data. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories. These enhance your experience but are not essential.
• Analytical Cookies: Used to collect aggregate, anonymised data about how players use the Platform — including which pages are visited most frequently, average session duration, and popular game categories. This data helps bd101 improve the Platform for all users.
• Marketing Cookies (with consent): Where you have given explicit consent, these cookies may be used to deliver promotional content relevant to your gameplay interests. You may withdraw consent for marketing cookies at any time.

6. Data Retention

bd101 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of five years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of the account relationship plus five years following closure.
• Customer Support Communications: Retained for three years from the date of the final communication in each support thread, unless a longer retention period is required for ongoing dispute resolution.
• Technical and Usage Data (logs): Typically retained for 12 months from the date of collection, after which aggregate or anonymised analytics data may be retained indefinitely.
• Marketing Consent Records: Retained for the duration of the consent period plus two years to document compliance.

When personal data is no longer required and no legal basis for retention exists, it is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

7. Your Privacy Rights

As a player on the bd101 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with sufficient information to verify your identity:

• Right of Access: You may request a copy of the personal data bd101 holds about you, along with details of the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Certain corrections may require submission of updated verification documents.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum of five years regardless of any erasure request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being disputed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format for transfer to another controller.
• Right to Object: You may object to processing carried out on the basis of bd101's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of prior processing.

8. Data Security Measures

bd101 takes the security of your personal data seriously and employs a layered security architecture designed to protect player information against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the bd101 Platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Encryption at Rest: Sensitive personal and financial data stored in bd101's databases is encrypted at rest using strong encryption algorithms, ensuring that data remains protected even in the unlikely event of a storage breach.
• Access Controls: Access to personal data within bd101's systems is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Firewall and Intrusion Detection: bd101's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems that monitor for suspicious activity around the clock.
• Two-Factor Authentication (2FA): Two-factor authentication is available for player accounts and is mandatory for all internal administrative access to production systems.
• Regular Security Audits: bd101 conducts periodic third-party security assessments, penetration testing, and vulnerability scanning to identify and remediate potential weaknesses in the Platform.
• Incident Response: bd101 maintains a documented data breach response plan. In the event of a breach that is likely to result in risk to players' rights and freedoms, affected players will be notified without undue delay once the scope of the breach has been assessed.

While bd101 takes every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

9. Third-Party Services

The bd101 Platform integrates with a number of third-party services to deliver its full range of games, payment processing, and customer support functionality. When you interact with these services, certain data may be processed by the relevant third party in accordance with their own privacy policies:

• Live Casino Providers: Evolution Gaming, Ezugi, and Playtech operate live dealer studio environments that stream games to the Platform. These providers maintain their own game session logs and may process technical identifiers (such as session tokens) independently of bd101.
• Slot Providers: Pragmatic Play, NetEnt, Microgaming, Spribe, and other game studios supply RNG-certified slot titles. Game outcome data is processed on their certified servers and results are relayed to bd101 for account settlement.
• Payment Providers: bKash, Nagad, Rocket, and Upay process mobile financial service transactions independently. Visa and Mastercard card transactions are processed via PCI-DSS compliant payment gateways. bd101 does not store full card numbers or mobile wallet PINs.
• Analytical Services: bd101 may use privacy-compliant web analytics tools to gather aggregate data on Platform performance. No individual player profiles are created for external advertising purposes.

bd101 is not responsible for the privacy practices of third-party service providers. Players who have concerns about how a specific provider handles their data should consult that provider's own published privacy policy.

10. Policy Updates & Contact

bd101 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, the "Last updated" date at the top of this page will be revised accordingly, and where appropriate, we will notify registered players by email.

We encourage you to review this Policy periodically. Continued use of the bd101 Platform following any update constitutes your acknowledgement of the revised Policy. If you disagree with any changes, you should cease using the Platform and may request account closure in accordance with Section 7 above.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd101 handles your personal data, please contact our dedicated support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, English language support available at all times
• Response Time: Privacy-related enquiries are typically addressed within two business days