bcd44 Privacy Policy — Your Data, Your Rights

1 Introduction

bcd44 is an online casino and sports betting platform operated at bcd44.io, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. As a platform that processes financial transactions and holds sensitive account information, bcd44 takes its data protection responsibilities seriously.

This Policy describes the categories of personal data we collect, the lawful grounds on which we process that data, the purposes for which it is used, the third parties with whom it may be shared, the security measures we apply, and the rights available to you as a data subject. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on bcd44.io.

The version of this Policy currently published on bcd44.io/privacy-policy is the version in effect. The effective date displayed at the top of this document reflects the date on which the most recent material revision was made.

2 Data We Collect

bcd44 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through your use of the Platform; and in limited cases from trusted third-party verification services. The categories of data we may hold are set out in the table below.

2.1 Data You Are Not Required to Provide

Certain fields in your account profile are optional. Providing optional data (such as preferred language or promotional preferences) helps us personalise your experience but is not a condition of using the Platform. Mandatory fields are clearly marked during the registration and KYC processes.

2.2 Sensitive Personal Data

bcd44 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you voluntarily disclose such information in correspondence with our support team, it will be handled with the highest level of care and will not be used for any profiling or marketing purpose.

3 How We Use Your Data

bcd44 uses personal data only for the purposes described below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

3.1 Account Management

We use your identity and contact data to create and maintain your player account, authenticate your identity at login, communicate account-related notices (such as password resets, security alerts, and verification requests), and enforce the single-account policy described in our Terms & Conditions.

3.2 Payment Processing

Financial data is used to process deposits via bKash, Nagad, Rocket, Upay, and bank transfer channels, to execute withdrawal requests to your verified payment method, to detect and prevent fraudulent transactions, and to comply with anti-money laundering (AML) requirements including transaction monitoring and suspicious activity reporting obligations.

3.3 Legal and Regulatory Compliance

bcd44 is obligated to conduct identity verification (KYC), monitor transactions for AML compliance, screen players against sanctions and politically exposed persons (PEP) lists, and retain certain records for the periods prescribed by applicable law. These processing activities are non-negotiable — we cannot provide platform services to players who decline to participate in the verification process.

3.4 Platform Improvement and Personalisation

Usage and technical data are analysed in aggregate to understand how players navigate the Platform, which features are most used, and where the user experience can be improved. At an individual level, usage data may be used to personalise your game lobby, display relevant promotions, and tailor responsible gaming interventions where behavioural indicators suggest elevated risk.

3.5 Marketing Communications

Where you have opted in to receive marketing communications, we may use your contact data and usage history to send you personalised promotional offers, bonus notifications, and event updates by email or SMS. You may withdraw consent to marketing at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

3.6 Customer Support

Communications data from your interactions with our support team is used to resolve your queries, maintain a record of dispute history, and improve the quality of our support service. Support records are retained for a minimum of 24 months following account closure.

4 Legal Basis for Processing

bcd44 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfil the agreement between you and bcd44 — including account creation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate Interests: Processing that serves bcd44's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics.
• Consent: Processing for which you have given freely-given, specific, and informed consent — primarily marketing communications. You may withdraw this consent at any time.

5 Data Sharing & Third Parties

bcd44 does not sell, rent, or commercially transfer your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1 Payment Processors

To facilitate deposits and withdrawals, bcd44 shares relevant financial and identity data with payment service providers including mobile money operators (bKash, Nagad, Rocket, Upay), banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card networks (Visa, Mastercard). These processors are contractually bound to handle your data securely and exclusively for payment processing purposes.

5.2 Identity Verification Services

To fulfil our KYC obligations, we share identity documents and personal details with accredited third-party verification service providers. These providers perform document authentication, liveness checks, and AML/PEP screening on our behalf under strict data processing agreements.

5.3 Game Providers

Certain casino games on the bcd44 platform are delivered by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Red Tiger, and Spribe. These providers may receive a pseudonymous player identifier and session data necessary to deliver the game. They do not receive your full name, contact information, or financial details.

5.4 Legal and Regulatory Authorities

bcd44 may disclose personal data to competent law enforcement agencies, regulatory bodies, or courts of law where required to do so by applicable law, court order, or in connection with a legitimate investigation into suspected criminal activity including fraud, money laundering, or match-fixing.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of bcd44's assets, personal data held by the Platform may be transferred to the acquiring entity as part of the transaction. We will notify affected players by email in advance of any such transfer and ensure that the recipient is bound by equivalent data protection obligations.

6 Cookies & Tracking Technologies

bcd44 uses cookies and similar tracking technologies to operate core platform functions, analyse usage patterns, remember your preferences, and where applicable, support targeted promotional communications.

6.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, protect against cross-site request forgery (CSRF), and enable the cashier to operate correctly. The Platform cannot function without these cookies and they cannot be disabled.

6.2 Analytics Cookies

We use anonymised analytics data to understand how players navigate bcd44.io, identify popular features, and detect technical errors. Analytics data is processed in aggregate and is not used to build individual player profiles for commercial purposes.

6.3 Preference Cookies

These cookies remember your settings — such as your preferred game category, lobby filter, or language preference — so you do not need to reconfigure them on each visit.

6.4 Managing Cookies

You can control non-essential cookies through your browser settings. Disabling analytics or preference cookies will not prevent you from using the Platform but may affect the personalisation of your experience. Note that disabling essential cookies will impair core functionality including account login.

7 Data Security

bcd44 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bcd44.io.
• Encryption of sensitive data fields (including payment references and identity document numbers) at rest within our database systems.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player data.
• Regular third-party security audits and penetration testing of the Platform infrastructure.
• Two-factor authentication requirements for all internal administrative accounts.
• Automatic session expiry after periods of inactivity to reduce the risk of unauthorised access via unattended devices.

While bcd44 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

8 Data Retention

bcd44 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer periods required by applicable law. Our general retention schedule is as follows:

When data reaches the end of its retention period, it is either securely deleted from all active and backup systems or anonymised in a manner that makes re-identification permanently impossible. Anonymised data may be retained indefinitely for aggregate statistical analysis.

9 Your Rights as a Data Subject

You have the following rights in relation to the personal data bcd44 holds about you. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We will respond within 14 days of receiving a verifiable request.

9.1 Right of Access

You have the right to request a copy of all personal data bcd44 holds about you, together with information about how it is used, who it is shared with, and how long it will be retained. We will provide this information in a structured, commonly used, and machine-readable format.

9.2 Right to Rectification

If any personal data held by bcd44 is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly within your account profile. For changes to identity-verified fields, you will need to provide supporting documentation.

9.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute — where bcd44 is required by law to retain data (for example, AML transaction records), we are not able to erase it prior to the end of the applicable retention period. We will inform you of any such limitations when responding to your erasure request.

9.4 Right to Restriction of Processing

You may request that bcd44 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing based on legitimate interests and we are assessing your objection.

9.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted directly to another controller where technically feasible.

9.6 Right to Object

You have the right to object to processing based on legitimate interests, including profiling for responsible gaming or fraud detection purposes. You also have an absolute right to object to the use of your data for direct marketing at any time. Where you object to legitimate-interests processing, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal can be effected via the unsubscribe link in any marketing communication or by contacting [email protected].

10 Children's Privacy

bcd44 is strictly an adult platform. Use of the Platform is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If bcd44 discovers or is notified that an account has been created by a person under this age threshold, the account will be immediately suspended, all balances will be forfeited in accordance with our Terms & Conditions, and all associated personal data will be deleted from our systems as soon as the mandatory compliance review period permits.

If you are a parent or guardian and believe that a minor under your care has registered on bcd44.io, please contact us immediately at [email protected]. We take underage access seriously and will act on any credible report within 24 hours.

11 International Data Transfers

bcd44 operates primarily to serve players in Bangladesh. Some of our service providers — including identity verification partners, game providers, and cloud infrastructure operators — may be located outside Bangladesh. Where personal data is transferred internationally, bcd44 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose equivalent data protection standards on the recipient.

We do not transfer personal data to countries or territories that do not provide an adequate level of protection for personal data without first implementing appropriate contractual and technical safeguards. If you have questions about specific transfer mechanisms, please contact [email protected].

12 Amendments to This Policy

bcd44 reserves the right to update this Privacy Policy at any time. When material changes are made — such as the introduction of a new data processing purpose or a change in how data is shared with third parties — we will publish the updated Policy on bcd44.io/privacy-policy and, where reasonably practicable, notify registered players via email at least 7 days before the changes take effect.

The effective date at the top of this document will be updated to reflect the date of the most recent revision. Non-material changes (such as corrections to typographical errors or clarifications that do not affect the substance of our data practices) may be made without prior notice. We encourage you to review this Policy periodically to stay informed about how we protect your data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which bcd44 processes your personal data, please contact our data team using the details below. All formal data rights requests must be submitted in writing.

We aim to respond to all privacy-related enquiries within 5 business days. Formal data subject access requests will be fulfilled within 14 days of receipt of a verifiable request, in accordance with applicable data protection obligations.