Privacy Policy — bd3339

bd3339 collects personal information only to the extent necessary to provide a safe, compliant, and functional gaming platform. The categories of information we collect are set out below.

We collect information directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the platform. We also collect certain technical and usage data automatically through cookies and server logs each time you access the platform. Where permitted and necessary, we may obtain identity verification data from third-party KYC service providers.

bd3339 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are as follows:

• Account creation and management: To register your account, verify your identity, authenticate your login sessions, and maintain accurate account records throughout your time as a bd3339 player.
• Payment processing: To process your BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records for each transaction.
• KYC and AML compliance: To verify your identity and age in accordance with our platform's Know Your Customer obligations, and to screen transactions for potential money laundering or fraud indicators as part of our Anti-Money Laundering programme.
• Platform security and fraud prevention: To monitor account activity for signs of unauthorised access, account takeover, bonus abuse, or other fraudulent or prohibited conduct, and to take appropriate action where such activity is detected.
• Customer support: To respond to your enquiries, resolve complaints, process responsible gaming requests, and maintain a record of your interactions with our support team.
• Responsible gaming: To administer self-exclusion requests, deposit limits, loss limits, and time-out tools that you activate on your account, and to monitor usage patterns that may indicate problem gambling behaviour requiring intervention.
• Platform improvement: To analyse aggregated, anonymised usage data in order to identify technical issues, optimise game performance, improve the user interface, and develop new platform features.
• Marketing communications (with consent): Where you have provided explicit consent, to send you promotional emails, SMS notifications, or in-platform messages regarding bonuses, new games, seasonal promotions such as Eid and BPL tournament offers, and other bd3339 news. You may withdraw this consent at any time.
• Legal obligations: To comply with applicable laws and regulations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions where necessary.

bd3339 does not sell your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

• Payment service providers: We share the financial information necessary to process your deposits and withdrawals with our supported payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card networks (Visa, Mastercard). These providers are contractually bound to process your data solely for payment processing purposes and may not use it for any other purpose.
• KYC and identity verification providers: We share identity and document data with third-party KYC service providers who assist us in verifying player identities and ages. These providers operate under strict confidentiality and data processing agreements.
• Game technology providers: Certain game-level usage data (such as session IDs and game round outcomes) is shared with the game studios whose titles are integrated on the bd3339 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely for the purpose of game delivery and dispute resolution.
• Fraud prevention and security services: We share technical and usage data with specialist fraud detection and cybersecurity partners to protect the platform and its players from unauthorised access, account takeover, and financial crime.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required or compelled to do so by a valid legal process. Where permitted by law, we will notify the affected player of such a disclosure.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bd3339's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer that materially affects the processing of your data.

In all cases where your personal data is shared with a third party, bd3339 requires that the recipient implements appropriate technical and organisational security measures to protect your data and processes it only for the disclosed purpose.

bd3339 uses cookies, web beacons, pixel tags, and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and understand how players interact with our services. The following categories of cookies are used on the bd3339 platform:

Strictly necessary and fraud prevention cookies are deployed automatically and cannot be disabled without preventing the platform from operating correctly. Optional analytics and functional cookies can be managed through your account preferences. You may also manage cookies at the browser level, though disabling certain cookies may impair your ability to log in or use specific platform features.

bd3339 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The primary retention periods applied by bd3339 are as follows:

• Active account data: Retained for the full duration of your account's existence on the platform, plus a minimum of five (5) years following account closure, in order to comply with our AML and financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, in line with standard AML compliance requirements.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years following the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Retained for the duration of your marketing subscription and for three (3) years following withdrawal of consent, in order to demonstrate compliance with consent requirements.
• Technical and usage logs: Retained for thirteen (13) months on a rolling basis, after which they are deleted or anonymised.

Where your personal data is no longer required for any of the above purposes, bd3339 will securely delete or irreversibly anonymise it. In cases where deletion is not immediately technically feasible — for example, data stored in backup archives — the data will be isolated from active processing until deletion can be completed.

Players who close their accounts may request confirmation of the data deletion timeline applicable to their records by contacting [email protected]. Please note that even following a closure request, certain data must be retained for the minimum periods described above and cannot be deleted earlier regardless of the request.

bd3339 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security practices include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the bd3339 platform is encrypted in transit using current-generation TLS protocols. Our platform enforces HTTPS on all endpoints and rejects plain HTTP connections.
• Encryption at rest: Sensitive personal and financial data stored in bd3339's databases is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to player personal data within bd3339's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls and is subject to regular access reviews. All access events are logged.
• Password security: Player account passwords are stored exclusively as salted cryptographic hashes. bd3339 staff cannot view or retrieve your password in plain text. We recommend using a strong, unique password for your bd3339 account.
• Fraud monitoring: bd3339 operates continuous automated monitoring of account activity, transaction patterns, and login behaviour to detect and respond to potential security incidents in real time.
• Incident response: bd3339 maintains a documented security incident response procedure. In the event of a data breach that is likely to result in a risk to affected players, we will notify the relevant players within the timeframe required by applicable law.

As a player on the bd3339 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our data team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe and in any event within thirty (30) calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data that bd3339 holds about you, together with information about how that data is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through your account settings.
• Right to erasure: You have the right to request that bd3339 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent and no other lawful basis applies, or where you object to the processing and there is no overriding legitimate interest. Please note that this right is subject to our legal retention obligations described in Section 5.
• Right to restrict processing: In certain circumstances, you have the right to request that bd3339 restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to object to marketing: You have the right to object at any time to the use of your personal data for direct marketing purposes. Following receipt of a valid objection, bd3339 will cease processing your data for marketing purposes immediately.
• Right to data portability: Where bd3339 processes your data on the basis of your consent or in performance of a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of the data you provided to us in a structured, commonly used, machine-readable format.

bd3339 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or platform features. When we make material changes to this Policy, we will update the effective date displayed at the top of this page and, where the changes significantly affect player rights, notify registered players by email or through a platform notification prior to the changes taking effect.

We encourage all players to review this Privacy Policy periodically. Your continued use of the bd3339 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. The current version of this Policy is always available at bd3339.app/privacy-policy.

This Privacy Policy applies solely to the bd3339 platform and does not extend to any third-party websites, services, or applications that may be linked from our platform. bd3339 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any third-party services you access.