Privacy Policy – bd15

Introduction

This Privacy Policy ("Policy") describes how bd15 ("we", "us", or "our") collects, uses, stores, and discloses information about you when you access or use the bd15 website, mobile interface, and all related services (collectively, the "Platform"). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

bd15 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. We do not sell your personal data to third parties. This Policy should be read alongside the bd15 Terms and Conditions, which govern your overall use of the Platform.

Your Privacy at a Glance

1. Information We Collect

bd15 collects personal information in three broad categories: information you provide directly when using the Platform, information generated automatically through your use of the Platform, and information received from third-party service providers. The specific types of information collected within each category are set out below.

Information You Provide Directly

• Registration data: full name, date of birth, mobile number, and the payment account details (e.g. bKash or Nagad number) associated with your bd15 account.
• Identity verification (KYC) documents: national ID card, passport, or any other government-issued identification document submitted to verify your identity and age.
• Communications: messages, queries, and complaint records submitted through the live chat, email support channel ([email protected]), or any other support interface.
• Self-exclusion and responsible gaming requests: records of deposit limit settings, time-out requests, or self-exclusion applications submitted through the Platform or support team.

Automatically Collected Information

• Device and technical data: IP address, device type, operating system version, browser type and version, and mobile network information collected each time you access the Platform.
• Usage data: pages visited, session duration, features used, games played, wagers placed, and navigation paths within the Platform.
• Cookie and tracking data: identifiers stored on your device by our first-party cookies and, where applicable, analytics tools used to measure Platform performance.

Information From Third Parties

• Payment processor data: transaction confirmations, reference numbers, and status updates received from bKash, Nagad, Rocket, Upay, Visa, or Mastercard when you make a deposit or withdrawal.
• Identity verification partners: results and flags returned by third-party KYC service providers engaged by bd15 to verify player identity and age.
• Fraud prevention and compliance data: risk scores and watchlist information received from fraud detection and anti-money-laundering screening services.

2. How We Use Your Information

bd15 uses personal data only for the purposes described in this Policy. The table below summarises the primary purposes for which each category of data is used.

3. Legal Basis for Processing

bd15 processes your personal data on one or more of the following legal bases, depending on the specific activity involved.

• Contractual necessity: processing required to provide you with the bd15 Platform services you have requested, including account management, game access, and payment processing.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and record-keeping duties.
• Legitimate interests: processing necessary for fraud detection and prevention, platform security, and the improvement of bd15 services, where these interests are not overridden by your data protection rights.
• Consent: where you have given specific, informed consent to a particular processing activity, such as receiving promotional communications. Consent may be withdrawn at any time by contacting the bd15 support team.

4. Sharing Your Information

bd15 does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment processors: we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposits and withdrawals. These providers are bound by their own data protection obligations and do not receive your full account profile.
• Identity verification providers: we share your registration data and KYC documents with third-party identity verification services for the purpose of confirming your identity and verifying that you meet the 21+ age requirement.
• Fraud and compliance services: we share limited data with fraud detection and anti-money-laundering screening providers to protect the Platform and its players from financial crime.
• Legal and regulatory authorities: we may disclose your information to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, or where we determine that disclosure is necessary to protect the rights, property, or safety of bd15, its players, or others.

All third-party recipients of your personal data are required to handle it in accordance with appropriate data protection standards. bd15 does not authorise third-party service providers to use your data for their own marketing or commercial purposes.

5. Payment Data and Financial Information

bd15 processes financial transaction data solely for the purpose of facilitating your deposits and withdrawals. We record transaction amounts, timestamps, reference numbers, and the mobile wallet or card details necessary to route the payment. Full card numbers and full mobile money PINs are never stored by bd15. Payment credentials are handled directly by the relevant payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard), whose own security and privacy policies apply to the processing of that credential data.

Transaction records are retained for the period required to comply with applicable financial record-keeping obligations, which may extend beyond the closure of your bd15 account. During this retention period, historical transaction records are stored in encrypted form and are accessible only to authorised bd15 compliance personnel.

6. Cookies and Tracking Technologies

bd15 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how the Platform is used. A cookie is a small text file placed on your device by our web server when you visit the Platform. Cookies do not contain your full personal details and cannot execute code or carry viruses.

Types of Cookies We Use

• Essential cookies: strictly necessary for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled without significantly impairing Platform functionality.
• Functional cookies: used to remember your preferences such as language settings and to personalise your experience on the Platform.
• Analytics cookies: used to collect aggregated, anonymised information about how visitors use the Platform. This helps us understand which features are most used and where improvements can be made. Analytics data is not linked back to individual player identities.
• Security and fraud prevention cookies: short-lived identifiers used to detect unusual session behaviour and protect against automated attacks or account takeover attempts.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies will prevent certain Platform features from working correctly. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Retention

bd15 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account data is retained for the duration of your account and for a period of up to 5 years following account closure; KYC documents are retained for a minimum of 5 years from the date of verification; transaction records are retained for the period required by applicable financial regulations; communications and support records are retained for up to 3 years from the date of the interaction.

When personal data is no longer required, bd15 securely deletes or anonymises it so that it can no longer be associated with any individual player. Data that has been anonymised may be retained for longer periods for statistical and analytical purposes.

8. Data Security

bd15 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data fields, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments of our systems and infrastructure, and monitoring for unusual access patterns or suspicious activity.

While bd15 takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. In the event of a data security incident that affects your personal data, bd15 will take prompt action to contain the incident and will notify affected players as required by applicable law.

9. Your Rights Regarding Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data that bd15 holds about you. To exercise any of these rights, please contact the bd15 support team via live chat or by email at [email protected].

• Right of access: you have the right to request a copy of the personal data that bd15 holds about you, along with information about how it is being processed.
• Right to rectification: you have the right to request the correction of inaccurate or incomplete personal data held about you.
• Right to erasure: in certain circumstances, you have the right to request that bd15 delete the personal data it holds about you, subject to our legal data retention obligations.
• Right to restrict processing: you have the right to request that bd15 restrict the processing of your personal data in certain circumstances, for example where you contest its accuracy.
• Right to data portability: where processing is based on your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bd15 will respond to all data rights requests within 30 days of receipt. Where a request is complex or where a large number of requests are received simultaneously, this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reasons for it.

10. Children's Privacy

The bd15 Platform is strictly restricted to individuals aged 21 and above. bd15 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately via live chat or at [email protected].

11. Third-Party Links

The bd15 Platform does not include links to third-party websites. bd15 is not responsible for the privacy practices or content of any third-party services that players may access independently outside of the bd15 Platform. This Policy applies exclusively to the bd15 Platform and its associated services.

12. Changes to This Privacy Policy

bd15 reserves the right to update this Privacy Policy at any time. Where a material change is made to the Policy, we will notify registered players via the contact details held on their account, or by displaying a prominent notice on the Platform, at least 7 days before the change takes effect. The date at the top of this Policy reflects when it was most recently updated.

Your continued use of the bd15 Platform following notification of any change to this Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must cease use of the Platform and may request the closure of your account by contacting the bd15 support team.

13. Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd15 handles your personal data, please contact the bd15 support team via live chat on the Platform. Live chat is available 24 hours a day, 7 days a week, with an average response time of under 3 minutes.

You may also contact the bd15 support team by email at [email protected]. For formal privacy requests (such as data access, correction, or erasure requests), please send your request by email with the subject line "Privacy Request" and include your registered mobile number so that we can verify your identity before processing the request.