bd499 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how bd499 ("we", "us", "our", "bd499") collects, processes, stores, and protects personal data belonging to users ("you", "player", "user") of the bd499 platform accessible at bd499.io ("Platform", "Site").

By registering an account, accessing the Platform, or using any service offered by bd499, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use the bd499 platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which contain additional information relevant to your rights and obligations as a bd499 player.

2. Data We Collect

bd499 collects personal data in several categories. The table below summarises what we collect and why each category is necessary for the operation of the Platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, national ID number, passport number	Account registration, KYC verification, age verification (21+ requirement)
Contact Data	Email address, phone number, residential address (including city, district, division)	Account communications, support responses, withdrawal confirmations
Financial Data	bKash/Nagad/Rocket account references, bank account details, transaction history, deposit and withdrawal records	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, browser type and version, device type, operating system, time zone, screen resolution	Platform security, fraud detection, geo-restriction enforcement
Usage Data	Pages visited, games played, bets placed, session duration, clickstream data	Platform improvement, responsible gaming monitoring, personalisation
Communications Data	Support tickets, live chat transcripts, email correspondence with bd499	Customer support, dispute resolution, quality assurance
Document Data	Copies of national ID, passport, utility bills, bank statements submitted for KYC	Identity verification, AML compliance, regulatory obligations

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data except where expressly required by applicable law or regulatory obligation.

3. How We Collect Data

bd499 collects personal data through the following methods:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, contacting our support team, or completing any other form or interaction on the Platform.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 9 for details).
• Third-Party Sources: Data received from payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard) in the course of processing your transactions, and from identity verification service providers engaged to assist with KYC compliance.
• Fraud and AML Screening: Data received from third-party fraud prevention and anti-money laundering screening tools that bd499 uses to protect the integrity of the Platform and comply with applicable obligations.

4. Why We Use Your Data

bd499 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your bd499 player account, including processing registration information, verifying your identity and age (21+ requirement), and managing your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), reconcile transactions, and maintain accurate financial records.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering ("AML"), know-your-customer ("KYC"), counter-terrorist financing ("CTF"), and responsible gaming regulations. This includes verifying player identities, monitoring transactions for suspicious activity, and retaining records as required by law.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and any other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our duty of care obligations to players. This includes using automated tools to flag unusual betting patterns.
• Customer Support: To respond to your support queries, resolve disputes, process complaints, and maintain records of all communications for quality assurance and training purposes.
• Platform Improvement: To analyse how players interact with the Platform, identify technical issues, improve the user experience, and develop new features and product offerings. Usage data used for this purpose is analysed in aggregated or anonymised form wherever possible.
• Service Communications: To send you transactional messages relating to your account, including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These communications are essential to the operation of your account and cannot be opted out of.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and news about bd499 products where you have explicitly consented to receive such communications. You may withdraw this consent at any time by contacting support or updating your notification preferences in your account settings.

5. Legal Basis for Processing

bd499 processes your personal data on the following legal bases:

• Contract Performance: Processing that is necessary to perform our contract with you — specifically, to operate your bd499 player account and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing that is necessary for bd499 to comply with applicable legal and regulatory requirements, including AML, KYC, and responsible gaming obligations.
• Legitimate Interests: Processing carried out for the legitimate business interests of bd499, including fraud prevention, platform security, abuse detection, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular, the sending of optional marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

bd499 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your personal data only in the following limited circumstances:

• Payment Processors: We share financial and identity data with payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) solely for the purpose of processing your transactions. These providers are bound by their own privacy and security obligations.
• KYC and Identity Verification Providers: We share identity documents and personal details with accredited third-party KYC verification partners to fulfil our age and identity verification obligations. These partners process your data strictly on our instructions and are subject to appropriate data processing agreements.
• Game Providers: Certain technical identifiers (such as an anonymised player session token) are shared with game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi to enable game delivery and ensure fair play. Game providers do not receive your name, contact details, or financial data through this process.
• Fraud and AML Screening Partners: We may share data with specialist fraud prevention and AML screening services to protect the Platform and meet our legal obligations. These partners are contractually prohibited from using your data for any purpose other than providing their services to bd499.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where we are required to do so by applicable law, court order, or in connection with an investigation into suspected illegal activity. bd499 will, where permitted by law, notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of bd499 or its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7. International Transfers

bd499 operates as an internationally licensed platform. Some of the third-party service providers we work with may be located outside Bangladesh and may process your personal data in other jurisdictions. Where your data is transferred internationally, bd499 takes appropriate steps to ensure that adequate protections are in place, including through contractual safeguards with our service providers.

By using the bd499 platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh. bd499 ensures that any such transfers are conducted in a manner consistent with the protections described in this Privacy Policy.

8. Data Retention

bd499 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and regulation. The following retention principles apply:

• Active Account Data: Personal data associated with an active bd499 account is retained for the lifetime of the account.
• Closed Account Data: Following account closure, bd499 retains identity, financial, and transaction records for a minimum period of five (5) years, in accordance with AML and record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the closure of the associated account, or longer where required by applicable law.
• Support Communications: Customer support records are retained for a minimum of three (3) years following the closure of the relevant support case.
• Marketing Data: Where you have consented to marketing communications, your preferences and associated data are retained until you withdraw consent, at which point they are deleted or anonymised within thirty (30) days.
• Technical and Usage Data: Anonymised or aggregated usage and technical data may be retained indefinitely for platform analytics and improvement purposes, as it cannot be used to identify you.

When your personal data is no longer required, bd499 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

9. Cookies and Tracking

bd499 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you access a website. The cookies used on bd499.io fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They include session management cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and regional preferences. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the Platform — which pages are visited most frequently, where errors occur, and how players navigate between sections. This data helps bd499 improve the platform experience. No personally identifiable information is collected through these cookies.
• Functional Cookies: These cookies remember your account preferences and personalisation settings (such as game display preferences and responsible gaming tool configurations) to provide a more consistent experience across sessions.
• Security and Fraud Detection Cookies: These cookies assist bd499 in identifying suspicious activity, detecting bot traffic, and protecting against account takeover attempts. They are integral to the security of the Platform.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your bd499 account. Disabling performance or functional cookies will not prevent Platform access but may affect certain features.

10. Security Measures

bd499 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bd499 platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. bd499 never stores passwords in plain text.
• Access controls that restrict internal access to personal data to employees and contractors who require it to perform their job functions, subject to confidentiality obligations.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Automated monitoring systems that detect and flag anomalous login activity, unusual transaction patterns, and other potential security incidents in real time.
• Secure data handling procedures for KYC documents, including restricted-access storage and defined document retention and disposal protocols.

While bd499 applies industry-standard security practices, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, bd499 will notify you promptly in accordance with applicable legal requirements and take all reasonable steps to mitigate the impact.

11. Your Rights

As a player on the bd499 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data bd499 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by bd499. You may also update certain account details directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Please note that this right is subject to our legal retention obligations; bd499 is required to retain certain records for a minimum of five (5) years following account closure.
• Right to Restriction: You have the right to request that bd499 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is disputed or while a complaint is under investigation.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Please note that some of these rights are subject to exceptions and limitations under applicable law. Where bd499 is unable to fulfil a request in full, we will explain the reason and, where possible, fulfil the request partially.

12. Children's Privacy

The bd499 platform is strictly intended for adults aged 21 years and above. bd499 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will promptly close the relevant account, delete the associated personal data, and retain only the records necessary to prevent the individual from registering again in the future.

If you believe that bd499 may have inadvertently collected data from an underage individual, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. Third-Party Links

The bd499 platform may, from time to time, contain references or links to third-party websites, services, or content providers (for example, game provider documentation or payment method help pages). bd499 is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policies of any external platform you visit. The inclusion of a reference to a third party on the bd499 platform does not constitute an endorsement of that third party's privacy practices.

14. Changes to This Policy

bd499 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players via their registered email address and update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how bd499 protects your personal data.

Material changes will take effect no earlier than fourteen (14) days after notice is provided, except where changes are required immediately by applicable law or to address an urgent security issue. Your continued use of the bd499 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd499 handles your personal data, please contact our support team using the details below. All data-related requests will be handled by a designated member of our compliance team.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: bd499 aims to acknowledge all privacy-related requests within five (5) business days and provide a substantive response within thirty (30) days of receipt, during Bangladesh Standard Time (BST, UTC+6) business hours.
• Complaint Escalation: If you are not satisfied with our response to a privacy-related request or complaint, you may request escalation to a senior member of the bd499 compliance team. We will provide a final written decision within fourteen (14) days of escalation.

For information about your betting and gaming rights and obligations, please refer to our Terms & Conditions. For guidance on safer gambling tools and resources, please visit our Responsible Gaming page.