Privacy Policy — How casinobd Protects Your Personal Data

1. Information We Collect

casinobd collects personal information from you through several channels: directly when you register an account or contact support, automatically as you use the platform, and from third parties such as payment processors and KYC verification services. The categories of data we collect are described in detail below.

1.1 Account Registration Data

When you create a casinobd account, we collect the following information:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — used to verify that you meet the 18+ age requirement.
• Residential address — including city (e.g., Dhaka, Chittagong, Sylhet, Khulna), district, and postal code.
• Email address — used for account communications and notifications.
• Mobile phone number — used for account security and, where opted in, SMS notifications.
• Username and encrypted password — passwords are stored in hashed form only; we never store plain-text passwords.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• Scanned or photographed copies of your National ID card, passport, or driving licence.
• Proof of address documents such as utility bills, bank statements, or official government correspondence dated within the past 90 days.
• Selfie or live photo verification images used to match against your identity document.
• Payment method verification — confirmation that your bKash, Nagad, Rocket, or Upay account is registered in your own name.

1.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method details (e.g., bKash wallet number, Nagad mobile number, DBBL account reference).
• Transaction history, account balance movements, and bonus activity records.
• Currency denomination — all Bangladesh player accounts are operated in Bangladeshi Taka (BDT).

1.4 Gaming Activity Data

• Game session history including games played, bet amounts, win/loss outcomes, and session duration.
• Sports betting history including markets placed on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers), football, kabaddi, and other sports.
• Bonus usage, free spin activity, and promotional participation records.
• Responsible gaming tool usage, including deposit limit settings, cooling-off periods, and self-exclusion requests.

1.5 Technical and Device Data

When you access casinobd, our servers and analytics systems automatically log the following technical data:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Pages visited, click paths, session duration, and referring URLs.
• Cookie identifiers and session tokens — see Section 5 for full cookie details.
• Time zone information (Bangladesh Standard Time, BST, UTC+6 where applicable).

1.6 Communications Data

• Records of all communications between you and the casinobd support team, including live chat transcripts, email correspondence, and support ticket history.
• Voluntary feedback, survey responses, and complaint records.

2. How We Use Your Data

casinobd uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

Purpose	Data Used	Why It Is Necessary
Account creation and management	Registration data, contact details	To provide you with access to the casinobd platform
Age and identity verification (KYC)	Identity documents, selfie verification	Legal obligation — 18+ age gate and AML compliance
Processing deposits and withdrawals	Financial data, payment method details	To fulfil your payment instructions in BDT via bKash, Nagad, Rocket etc.
Fraud prevention and AML monitoring	Transaction data, device data, IP address	To detect and prevent money laundering, fraud, and prohibited account activity
Responsible gaming compliance	Gaming activity data, account history	To apply deposit limits, self-exclusion orders, and monitor for problem gambling indicators
Customer support	Communications data, account data	To resolve queries, complaints, and technical issues
Platform improvement and analytics	Technical data, gaming activity	To improve game performance, user experience, and platform stability
Marketing communications (opt-in only)	Contact details, gaming preferences	To send promotional offers, bonus alerts, and seasonal promotions (e.g., Eid, BPL season) where you have opted in
Legal and regulatory compliance	All categories as required	To comply with applicable offshore gambling licence requirements and respond to lawful authority requests

3. Legal Basis for Processing Personal Data

casinobd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: The majority of data processing activities are necessary to perform the contract between you and casinobd — that is, to provide you with access to real-money gaming and sports betting services, process your BDT deposits and withdrawals, and manage your account.
• Legal obligation: Certain processing activities — particularly KYC identity verification, age verification, and AML transaction monitoring — are required to fulfil our obligations under the terms of our international offshore operating licence and applicable anti-money laundering standards.
• Legitimate interests: We process technical and behavioural data to detect fraud, prevent prohibited conduct, improve our platform, and ensure the security of all player accounts. These processing activities are in the legitimate interests of casinobd and its player community, and do not override your fundamental privacy rights.
• Consent: Where we process data for optional purposes — such as sending marketing communications or placing non-essential cookies — we do so only on the basis of your explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing and Third Parties

casinobd does not sell your personal data. We share personal data only in the circumstances described below, and only to the extent necessary for the defined purpose:

4.1 Payment Processing Partners

To process your BDT deposits and withdrawals, we share necessary financial information with our payment processing partners, including the mobile financial services (MFS) providers that you use — such as bKash, Nagad, Rocket, and Upay. Data shared with payment partners is limited to what is required to execute the specific transaction. These partners are contractually bound to handle your data securely and in accordance with applicable financial regulations.

4.2 KYC and Identity Verification Providers

casinobd uses specialist third-party KYC and identity verification service providers to assist with the processing of identity documents and age verification. These providers act as data processors on our behalf, processing your documents solely for the purpose of identity verification. They are contractually prohibited from using your data for any other purpose.

4.3 Game Software Providers

Games on casinobd are powered by internationally recognised game studios including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Habanero, PG Soft, and Ezugi. These providers receive anonymised or pseudonymised session data necessary to deliver game content, calculate outcomes, and verify RNG integrity. Personal identifying data (such as your full name or payment details) is not shared with game providers.

4.4 Regulatory and Law Enforcement Authorities

casinobd may be required by law or by the terms of our offshore operating licence to disclose personal data to regulatory bodies, law enforcement agencies, or financial intelligence units in connection with investigations into suspected money laundering, fraud, terrorist financing, or other criminal activity. We will comply with all lawful requests for data disclosure. Where permitted by law, we will notify the affected player of any such disclosure.

4.5 Professional Advisers

We may share personal data with our legal advisers, auditors, insurers, and accountants where necessary for the provision of professional services to casinobd. All such third parties are bound by professional confidentiality obligations and contractual data protection agreements.

4.6 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of the casinobd business, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, casinobd will endeavour to notify affected players in advance and ensure that the acquiring entity is bound by data protection obligations no less stringent than those in this Policy.

5. Cookies and Tracking Technologies

casinobd uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and — where you have consented — analyse usage patterns to improve the platform experience for all Bangladesh players.

5.1 What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) by websites you visit. They allow the website to recognise your device across multiple visits, store session information, and enable certain platform features to function correctly.

5.2 Types of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Enable core platform functions: login sessions, account security tokens, cashier functionality, and game loading. These cookies are essential for the platform to operate.	No — required for platform operation
Functional / Preference	Remember your settings such as language preference, preferred payment method (e.g., bKash vs Nagad), last played game category, and display preferences.	Yes — disabling affects personalisation
Analytics / Performance	Collect anonymised data about how players use the platform — page visit frequency, game load times, error rates — used to improve platform stability and user experience.	Yes — via cookie preferences
Security / Fraud Detection	Detect suspicious login patterns, bot activity, and unusual transaction behaviour. These cookies form part of our fraud prevention and AML monitoring systems.	No — required for account security
Marketing / Targeting	Where you have opted in, these cookies allow us to personalise promotional offers and bonus communications based on your gaming activity and preferences.	Yes — opt out in account settings

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies (other than strictly necessary and security cookies) may affect the functionality of the casinobd platform, including the ability to save your payment preferences or access personalised content.

6. Data Retention

casinobd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our operating licence obligations. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your casinobd account, plus a minimum of 5 years following account closure. This retention period is required to fulfil AML record-keeping obligations and to resolve any post-closure disputes.
• KYC identity documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later. This period is mandated by our operating licence and AML compliance requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction. This supports AML monitoring, audit requirements, and player dispute resolution.
• Gaming activity logs: Retained for 3 years from the date of each recorded session, used for dispute resolution, RNG audit purposes, and responsible gaming monitoring.
• Marketing preferences and communications: Retained for the duration of your opt-in consent period, plus 12 months following any opt-out request, after which marketing data is deleted or anonymised.
• Support communications: Live chat transcripts and email records are retained for 3 years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical / device data: IP logs and session data are retained for 12 months from the date of collection, after which they are anonymised or deleted.

When personal data is no longer required and no legal obligation requires its continued retention, casinobd will securely delete or irreversibly anonymise the data in accordance with our internal data lifecycle management procedures.

7. Your Privacy Rights

As a casinobd player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at support@casinobd or via live chat. We will respond to all privacy rights requests within 30 days of receipt, in accordance with internationally recognised data protection standards.

• Right of access: You have the right to request a copy of all personal data that casinobd holds about you. We will provide this in a structured, readable format within 30 days of your verified request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data changes (name, date of birth), additional verification documentation may be required.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data. Note that this right is subject to exceptions — we may be required to retain certain data for legal, regulatory, or contractual reasons (e.g., AML record-keeping obligations). Where erasure is not possible in full, we will explain which data must be retained and why.
• Right to restriction of processing: You may request that we restrict our use of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another provider.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. If you object, casinobd will cease that specific processing activity unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where we process your data on the basis of consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Data Security

casinobd takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the casinobd platform is protected by 256-bit SSL/TLS encryption, the same standard used by international banking institutions.
• AES-256 encryption at rest: Sensitive stored data — including identity documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
• Password hashing: Account passwords are stored exclusively as irreversible cryptographic hashes (using bcrypt or equivalent). casinobd never stores or has access to your plain-text password.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their casinobd accounts for an additional layer of login security.
• Access controls: Access to personal data within casinobd is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason may access player data, and all such access is logged and audited.
• Penetration testing and security audits: casinobd conducts regular security testing and third-party audits of its platform infrastructure to identify and address potential vulnerabilities.
• Fraud monitoring systems: Automated systems continuously monitor account activity for suspicious patterns, unusual login attempts, and anomalous transaction behaviour.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to player rights and freedoms, casinobd will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as practicable. Notifications will be sent to your registered email address and will include a description of the nature of the breach, the categories of data affected, and the steps you should take to protect yourself.

9. International Data Transfers

casinobd operates as an internationally licensed offshore gambling platform. As a result, personal data collected from Bangladesh players may be processed and stored on servers located outside of Bangladesh. This may include transfers to jurisdictions where our platform infrastructure, KYC providers, or game software partners are based.

Where personal data is transferred internationally, casinobd ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to the protections set out in this Privacy Policy. These safeguards may include:

• Standard contractual clauses incorporated into agreements with data processors and sub-processors that require them to protect personal data to internationally recognised standards.
• Transfers only to service providers that have demonstrated compliance with recognised international data security frameworks (e.g., ISO 27001 certified infrastructure providers).
• Data processing agreements with all third-party vendors that restrict the use of player data to the specific purpose for which it is shared.

By registering a casinobd account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to servers and service providers located outside of Bangladesh, subject to the safeguards described above.

10. Amendments to This Policy and Contact Information

casinobd reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our platform, new services offered to Bangladesh players, changes in applicable data protection standards, or amendments to our operating licence requirements.

When we make material changes to this Privacy Policy, we will notify registered players by:

• Posting a prominent notice on the casinobd homepage and within the account dashboard for a period of at least 14 days following the change.
• Sending an email notification to your registered email address, where the change materially affects how we use your personal data.
• Updating the "Effective Date" shown at the top of this Privacy Policy to reflect the date on which the revised Policy takes effect.

Your continued use of the casinobd platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue use of the platform and may request account closure by contacting our support team.

Previous Versions

Archived versions of this Privacy Policy are retained by casinobd for internal compliance purposes. If you require access to a previous version of this Policy (for example, to understand what terms were in effect at the time of a specific transaction), please contact us at support@casinobd and we will provide the relevant version upon verified request.

Contact Our Data Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to how casinobd handles your personal data, please contact our support team through any of the following channels:

• Email: support@casinobd (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the casinobd platform in English
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6)