bd59 Privacy Policy

Welcome to bd59 ("the Platform", "we", "us", or "our"). bd59 operates the online betting and casino platform accessible at bd59.io, serving the adult gaming audience in Bangladesh. We provide cricket betting, live casino, slots, crash games, and other gaming products, accessible in English and denominated in Bangladeshi Taka (BDT, ৳) and USDT.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bd59. Please read the following carefully to understand our views and practices regarding your personal data and how we treat it. This policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform.

References to "personal data" in this policy mean any information that can identify you as an individual, directly or indirectly — for example, your name, email address, mobile number, device identifier, or financial transaction data. References to "processing" mean any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

bd59 takes its data protection responsibilities seriously. We collect only the data we genuinely need, retain it only for as long as necessary, and apply robust technical and organisational safeguards to keep it secure. We do not sell your personal data to third parties for commercial purposes.

bd59 collects the following categories of personal data from users of the Platform:

2.1 Identity & Registration Data

• Full legal name as per government-issued identification
• Date of birth (for age verification — players must be 21 or older)
• Gender (optional, where provided during registration)
• Nationality and country of residence
• Chosen username and account credentials (password stored in hashed, non-reversible form)

2.2 Contact Data

• Email address
• Mobile phone number (used for OTP verification and 2FA)
• Residential address (required for KYC verification)

2.3 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
• Visa / Mastercard card details (masked — we store only the last 4 digits and card type; full card numbers are processed by our PCI-DSS compliant payment gateway partner and are never stored on bd59 servers)
• USDT TRC-20 wallet addresses used for crypto transactions
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance history

2.4 Identity Verification (KYC) Documents

• Copies of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address documents (utility bills or bank statements dated within 90 days)
• Selfie or liveness check images submitted during KYC (where required)

2.5 Gaming & Betting Activity Data

• Game session logs: games played, bets placed, outcomes, timestamps
• Sports betting records: markets wagered on, odds accepted, settlement results
• Responsible gaming settings: deposit limits, loss limits, session time configurations, self-exclusion status
• Bonus and promotional activity: bonuses claimed, wagering progress, bonus settlements

2.6 Technical & Device Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps and login/logout records
• Platform interaction logs (pages visited, features used, errors encountered)

2.7 Communications Data

• Content of support communications submitted to bd59 via email or live chat
• Feedback, survey responses, and complaint records

bd59 collects personal data through the following means:

3.1 Direct Collection

Data you provide directly to bd59 when you: create an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or update your account settings.

3.2 Automated Collection

Data collected automatically as you use the Platform, including via cookies, log files, analytics tools, and device fingerprinting technologies. This includes your IP address, device identifiers, session data, and browsing behaviour on bd59.io. See Section 7 for full details on our Cookie Policy.

3.3 Third-Party Sources

In some cases, bd59 may receive data about you from third-party sources to supplement the information you have provided, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard networks): transaction confirmation data, fraud signals, and payment method validation
• KYC / identity verification service providers: identity verification outcomes and risk scores
• Anti-fraud and AML screening services: sanctions list screening results and risk flags
• Game providers (Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Vivo Gaming, etc.): game round data and RNG certification records

bd59 uses the personal data it collects for the following purposes:

bd59 processes your personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contract performance: Processing necessary to provide you with the services you have requested — including account creation, payment processing, and game access — under our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification obligations, and any requests from competent authorities.
• Legitimate interests: Processing carried out for bd59's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out with your explicit consent, such as sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bd59 does not sell, rent, or commercially transfer your personal data to third parties. We may share your data with the following categories of recipients only where strictly necessary and proportionate:

6.1 Service Providers & Partners

• Payment processors: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, and USDT processing partners — solely to process your transactions.
• KYC & identity verification providers: third-party services that assist with document verification and age confirmation.
• Anti-fraud and AML screening services: to screen transactions and player profiles against sanctions lists and fraud databases.
• Game content providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming, Vivo Gaming — share only the minimum data required to facilitate game access and settle round outcomes.
• Cloud hosting and infrastructure providers: who store Platform data on bd59's behalf under strict data processing agreements.
• Customer support software providers: for managing support ticket communications.

All third-party service providers who process personal data on our behalf are bound by data processing agreements that require them to handle your data securely, use it only for the specified purpose, and not disclose it to any further parties.

6.2 Legal & Regulatory Disclosure

bd59 may disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory requirement. bd59 will disclose only the minimum personal data necessary to satisfy the legal obligation and will notify the affected player where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd59's business assets, personal data held by bd59 may be transferred to the acquiring entity as part of the transaction. Players will be notified via email of any such transfer and of any changes to this Privacy Policy that result from it.

bd59 uses cookies and similar tracking technologies (such as pixel tags and local storage) on bd59.io to operate the Platform effectively and to improve your experience. A cookie is a small text file stored on your device by your browser when you visit a website.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary or anti-fraud cookies may prevent you from accessing parts of the Platform. For guidance on managing cookies in your browser, refer to your browser's help documentation. Please note that bd59 does not respond to "Do Not Track" (DNT) browser signals at this time, as there is no universally accepted standard for DNT.

bd59 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active account data (identity, contact, financial, gaming activity): retained for the full duration of your account's active status and for a minimum period of 5 years following account closure, in order to comply with AML record-keeping obligations.
• KYC documents (ID copies, proof of address): retained for a minimum of 5 years from the date of verification, or longer where required by applicable law.
• Transaction records: retained for a minimum of 5 years from the date of transaction in compliance with financial record-keeping requirements.
• Support communications: retained for 3 years from the date of the last communication in the support thread.
• Marketing consent records: retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent history.
• Technical/server logs: retained for up to 12 months in rolling logs for security and fraud investigation purposes.

Where personal data is no longer required, bd59 will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised or aggregated data that can no longer be used to identify an individual may be retained indefinitely for analytical purposes.

bd59 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS 1.3 encryption for all data in transit between your device and bd59 servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Bcrypt password hashing — your password is never stored in plaintext
• Two-factor authentication (2FA) via mobile OTP, available to all registered players and strongly recommended
• Role-based access controls ensuring that bd59 staff can only access personal data relevant to their specific role
• Regular security audits and penetration testing of Platform infrastructure
• 24/7 intrusion detection and monitoring of all Platform systems
• PCI-DSS compliant payment gateway integration — card data is processed entirely by our certified payment partner; full card numbers are never stored on bd59 servers

While bd59 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee 100% security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bd59 will notify you without undue delay and take all appropriate remediation steps.

You also have an important role to play in keeping your account secure. Please use a strong, unique password for your bd59 account, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact us immediately at [email protected].

bd59 respects your rights in relation to the personal data we hold about you. You may exercise the following rights by contacting us at [email protected]:

bd59 will respond to all data rights requests within 30 days of receipt. Where a request is complex or where we receive a high volume of requests, we may extend this period by up to a further 60 days, in which case we will notify you of the extension within the initial 30-day period. We may ask you to verify your identity before processing a data rights request to protect your data from unauthorised access.

The bd59 Platform integrates third-party services to deliver its full range of gaming, payment, and support functionality. When you interact with these services, their own privacy policies may apply in addition to this Privacy Policy. bd59 takes care to select third-party partners who uphold strong data protection standards and is not responsible for the privacy practices of third parties beyond what is covered by our data processing agreements.

Key third-party service providers whose services are embedded in or accessible via the bd59 Platform include:

• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, SA Gaming, Vivo Gaming — who power the live casino, slots, and crash game products on the Platform
• Payment networks: bKash, Nagad, Rocket, Upay, Visa, Mastercard — who process financial transactions on behalf of players
• Cloud infrastructure: server hosting, CDN, and database services underpinning the bd59 Platform
• Analytics platforms: anonymised and aggregated usage analytics used for Platform improvement
• Fraud and AML screening: services that screen player activity against sanctions databases and fraud signals

bd59.io may contain hyperlinks to the websites of partner organisations. These links are provided for your convenience only. Clicking on a link to a third-party website will take you away from bd59.io, and bd59 is not responsible for the content or privacy practices of those external sites. We encourage you to review the privacy policy of any third-party website you visit.

bd59 operates a strict 21+ only policy. The Platform is not directed at, and must not be used by, any person under the age of 21. We do not knowingly collect or process personal data of individuals under the age of 21.

As part of our registration and KYC process, every player is required to verify their age by submitting a valid government-issued photo identification document. Accounts where age verification cannot be completed, or where we have reason to believe the account holder may be under 21, are suspended pending investigation and may be permanently closed.

If bd59 discovers or is notified that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered with bd59, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

bd59 supports parental control tools and responsible gaming software that can be installed on shared devices to prevent underage access to online gambling platforms. For more information, please visit our Responsible Gaming page.

bd59 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, applicable law, or regulatory requirements. The most current version of this Privacy Policy will always be available at bd59.io/privacy-policy, along with the date on which it was last updated.

Where we make material changes to this Privacy Policy — that is, changes that significantly affect how we use your personal data or your rights in relation to it — we will notify you by email to the address registered with your bd59 account at least 14 days before the changes take effect. Continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bd59 protects your personal data. If you do not agree with any changes to this Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bd59 processes your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week, 365 days a year — including Bangladesh public holidays such as Eid, Victory Day (December 16), and Independence Day (March 26)
• Response target: We aim to respond to all privacy-related enquiries within 3 business days and to formal data rights requests within 30 days
• Language: English-speaking support agents are always available

When contacting us regarding a data rights request, please include your registered email address and account username so that we can locate your account and verify your identity efficiently. Do not send copies of identity documents via unencrypted email — our support team will provide a secure upload link where document submission is required.