Privacy Policy — bd879

bd879 collects personal information from users in several ways: directly when you register an account or contact support, automatically through your use of the platform, and from third-party verification and payment partners where necessary. The categories of information we collect are set out below.

Account Registration Data

When you create a bd879 account, we collect your full legal name, date of birth, email address, mobile phone number registered in Bangladesh, preferred username, and a hashed version of your chosen password. This information is required to open and operate your account.

Identity Verification Data

To comply with anti-money-laundering obligations and to verify that users are aged 18 or above, bd879 may request and store copies of the following documents: National Identity Card (NID), passport, or birth certificate. Document images are stored securely and accessed only by authorised compliance personnel.

Financial Transaction Data

bd879 records details of all deposits, withdrawals, bonus awards, wagers, and win nings processed through your account. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method identifiers (e.g., the last four digits of a bKash number or a masked Nagad reference), and transaction status. Full mobile banking credentials are never stored by bd879.

Usage & Technical Data

When you access the bd879 platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, game sessions played, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.

Communications Data

If you contact bd879 support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the identity of the support agent who handled your query. These records are kept to maintain service quality and to resolve any subsequent disputes.

bd879 does not sell, rent, or exchange personal data with third parties for their own commercial purposes. We share personal data with third parties only in the specific, limited circumstances described below.

Payment Service Providers

To process deposits and withdrawals, bd879 shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these providers operates under its own privacy policy and security framework. bd879 selects payment partners who maintain appropriate data protection standards.

Game Content Providers

bd879 integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In order to deliver live casino, slot, and sports betting content, limited technical session data — such as a session token and account identifier — is shared with these providers. No sensitive personal data such as your NID details or full financial records is shared with game providers.

Identity Verification Services

bd879 may use third-party identity verification services to assist with KYC (Know Your Customer) checks. Where such a service is used, document images and identity data are transmitted securely and the provider is contractually bound to use the data solely for verification purposes on behalf of bd879.

Legal and Regulatory Authorities

bd879 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal obligation, court order, or regulatory direction. bd879 will not make such disclosures voluntarily and will, where legally permitted, notify the affected user of any such request.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd879's business assets, personal data held by bd879 may be transferred to the acquiring entity. Users will be notified of any such transfer and of any material changes to data handling practices that result from it. The acquiring entity will be required to honour the commitments set out in this Privacy Policy.

bd879 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to different categories of data are outlined below.

Active Account Data

While your bd879 account remains active, all account data, transaction history, and communication records are retained in full. This data is necessary to operate your account, resolve disputes, and comply with ongoing legal obligations.

Post-Closure Retention

Following the closure of a bd879 account — whether initiated by the user or by bd879 — personal data is retained for a minimum period of five years from the date of account closure. This retention period is required to satisfy anti-money-laundering record-keeping obligations and to enable bd879 to respond to any regulatory inquiry or legal claim that may arise after closure.

Identity Verification Documents

Copies of identity documents (NID, passport, birth certificate) submitted for KYC verification are retained for the duration of the account plus the applicable post-closure retention period. Document images are stored in an access-restricted environment separate from general account data.

Communication Records

Support chat transcripts and email communications are retained for a period of three years from the date of the interaction, after which they are securely deleted unless they are relevant to an ongoing investigation, dispute, or legal proceeding.

Analytics Data

Anonymised and aggregated analytics data — from which no individual user can be identified — may be retained indefinitely for the purpose of long-term platform analysis and improvement. This data is not subject to individual data deletion requests.

bd879 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect personal data against unauthorised access, loss, alteration, or disclosure.

Technical Security Controls

• SSL/TLS Encryption: All data in transit between your browser and bd879 servers is encrypted using current-generation TLS protocols. The bd879 website operates exclusively over HTTPS.
• Password Hashing: User passwords are never stored in plain text. bd879 uses industry-standard cryptographic hashing with salt to store password credentials, ensuring that even in the unlikely event of a data breach, raw passwords cannot be recovered.
• Access Controls: Access to production systems and personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to audit.
• Firewalls and Intrusion Detection: bd879's infrastructure is protected by network firewalls, web application firewalls, and intrusion detection systems that monitor for abnormal access patterns in real time.

Operational Security Procedures

bd879 staff who handle personal data are subject to confidentiality obligations and receive regular training on data protection best practices. Access privileges are reviewed periodically and revoked promptly when staff members change roles or leave the organisation.

Incident Response

In the event of a confirmed personal data breach that poses a risk to affected users, bd879 will notify impacted users without undue delay and will provide information about the nature of the breach, the data affected, and the steps being taken to address it. bd879 maintains a documented incident response procedure for this purpose.