bd70 Privacy Policy

This Privacy Policy ("Policy") describes how bd70 ("we", "us", "Platform") collects, uses, stores, shares, and protects personal information relating to users ("you", "Player") of the bd70.ws website and associated services. This Policy forms part of our Terms & Conditions and should be read alongside them. By registering an account or using bd70 in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

bd70 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection standards. We collect only the data that is necessary for the operation of our platform, the fulfilment of our legal obligations, and the delivery of a secure and fair gaming experience. We do not sell your personal data to third parties for commercial or marketing purposes under any circumstances.

bd70 collects personal data through three primary channels: information you provide directly when registering or using our services; information generated automatically through your use of the platform; and information received from trusted third-party service providers where permitted by law. The categories of data we collect are described in detail below.

Information You Provide Directly

• Registration data: full legal name, date of birth, Bangladesh mobile number, and email address provided when you create an account.
• Identity verification documents: government-issued ID such as NID (National Identity Card), passport, or driving licence, submitted during KYC verification.
• Financial data: mobile wallet numbers (bKash, Nagad, Rocket, Upay), transaction reference numbers, and deposit/withdrawal amounts — collected to process payments and meet AML obligations.
• Support communications: messages, emails, and live-chat transcripts exchanged with our support team — retained to resolve disputes and improve service quality.
• Responsible gaming tool settings: deposit limits, session limits, and self-exclusion preferences that you configure — stored to enforce your chosen restrictions consistently across sessions.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution — used to optimise platform performance and detect fraudulent access.
• Session and activity logs: pages visited, games played, bet amounts, session duration, and feature interactions — used for platform analytics, responsible gaming monitoring, and fraud detection.
• Cookie and similar tracking data: session cookies, preference cookies, and analytics identifiers — see Section 6 for full details on our cookie practices.
• Geolocation data: approximate country/city-level location derived from IP address — used to comply with regional access restrictions and provide localised content.

Information from Third Parties

• KYC and AML verification providers: identity and sanctions-screening data provided by third-party compliance partners to verify your age, identity, and source of funds.
• Payment processor data: transaction confirmation references and fraud-risk scores provided by bKash, Nagad, Rocket, and other payment partners — used to confirm deposits and detect anomalous transactions.
• Fraud prevention networks: where we participate in industry fraud prevention programmes, we may receive alerts from shared network partners indicating that a device or payment method has been flagged in connection with fraudulent activity on other platforms.

The table below summarises the legal basis on which bd70 relies when processing your personal data for each primary purpose:

bd70 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. The following retention schedule applies:

• Active account data: retained for the lifetime of your account and for 5 years following account closure, to meet AML record-keeping obligations and to enable dispute resolution.
• KYC and identity documents: retained for 5 years following account closure or the completion of the last transaction, whichever is later, in accordance with financial compliance requirements.
• Transaction records: retained for 7 years following each transaction for financial auditing and AML compliance purposes.
• Support communications: retained for 3 years from the date of the last interaction, to support dispute resolution and service improvement.

When the applicable retention period expires, bd70 will securely delete or anonymise the relevant data. Anonymised, aggregated data (which cannot be traced back to any individual) may be retained indefinitely for statistical and analytical purposes.

As a user of bd70, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. bd70 will respond to all valid data subject requests within 30 days of receipt:

• Right of access: you may request a copy of all personal data that bd70 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: if any personal data bd70 holds about you is inaccurate or incomplete, you may request that it be corrected or supplemented. Requests to correct KYC-verified data may require submission of updated supporting documents.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations — bd70 cannot erase data it is legally required to retain.
• Right to restriction: you may request that bd70 restrict processing of your data — for example, while a rectification request is being assessed, or pending resolution of an objection.
• Right to data portability: where data is processed on the basis of your consent or the performance of a contract, and processing is carried out by automated means, you may request that bd70 provide your data in a structured, commonly used, machine-readable format.
• Right to object: you may object to processing of your data for direct marketing purposes at any time, and we will cease that processing immediately. You may also object to processing based on legitimate interests, and bd70 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

bd70 will not charge a fee for processing data subject requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. Where bd70 is unable to comply with a request (for example, because legal retention obligations prevent deletion), we will explain the reason in our response.

bd70 does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly for adults aged 21 and above. During the registration process, all users are required to confirm that they are aged 21 or older, and bd70 conducts KYC verification to confirm age before accounts can be used for real-money gaming.

If bd70 becomes aware that personal data has been collected from an individual under the age of 21 — whether through KYC review, a report from a third party, or any other means — the account will be immediately suspended, the data will be securely deleted, and any funds in the account will be handled in accordance with our Terms & Conditions.

bd70 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via their registered contact details or through a prominent notice on the platform.

Your continued use of bd70 following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you must stop using the platform. The most current version of this Privacy Policy is always available at bd70.ws/privacy-policy. We recommend reviewing this Policy periodically to stay informed about how we protect your data.