bdbake Privacy Policy

When you create a bdbake account, use our Services, or interact with our platform in any capacity, we may collect the following categories of personal data:

Identity and Contact Data: Full legal name, date of birth, email address, mobile phone number (Bangladesh registered), and residential address. This information is collected during registration and is required for Know Your Customer (KYC) verification, account management, and regulatory compliance.

Identity Verification Documents: Copies of government-issued photo identification (National Identity Card, passport, or driving licence), proof of address documents, and proof of payment method ownership. These are collected when bdbake exercises its right to verify your identity under its account security and anti-fraud obligations.

Financial Data: Details of the payment methods registered to your account (bKash number, Nagad number, Rocket number, Upay number, or masked card details for Visa and Mastercard). Full card numbers are never stored by bdbake — card data is processed exclusively by PCI-DSS compliant payment processors. Transaction histories, deposit amounts, withdrawal requests, and account balance records are retained for financial audit and dispute-resolution purposes.

Technical and Usage Data: IP address, device type, operating system, browser type and version, referral URL, pages visited within the bdbake platform, session duration, clickstream data, and in-game activity logs. This data is collected automatically via server logs and cookies.

Communications Data: Records of any communications you send to bdbake via live chat, email, or support ticket, including the content of those communications and any attachments. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

Responsible Gaming Data: Any self-exclusion requests, deposit limits, time-out settings, or responsible gaming flags associated with your account. This data is treated with the highest level of confidentiality and is used solely for the purpose of enforcing the safeguards you request.

bdbake uses the personal data we collect for the following specific, lawful purposes. We do not use your data for any purpose that is incompatible with those stated here.

• Account creation and management: To register your bdbake account, verify your identity, and maintain the accuracy of your account records throughout your membership.
• Service delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to make games and betting markets available to you; and to calculate, credit, and pay out any winnings.
• Customer support: To respond to your enquiries, investigate disputes, and resolve complaints in a timely manner via email and live chat.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities. Technical and usage data is analysed continuously for anomalous patterns.
• Legal and regulatory compliance: To fulfil bdbake's obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection frameworks, including the production of records for audit purposes.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour, to enforce self-exclusion and deposit limit requests, and to provide information and referrals to responsible gaming resources where appropriate.
• Platform improvement: To analyse aggregate, anonymised usage data in order to improve the performance, design, and content of the bdbake platform. No individual is identified in this analysis.
• Marketing communications: To send you personalised promotional offers, bonus notifications, and platform news by email or on-platform notification — but only where you have given your explicit consent to receive such communications at registration or in your account preferences. You may withdraw consent at any time by updating your notification preferences or emailing [email protected].

bdbake does not sell, rent, or trade your personal data to any third party for marketing purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum financial data necessary to process your transactions. These providers operate under their own privacy policies and are PCI-DSS certified.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, and Ezugi may receive a session token and anonymised player identifier to initialise game sessions. They do not receive your full name, email address, or payment details.
• Identity verification services: Third-party KYC verification providers may receive your identity documents and personal details for the purpose of confirming your eligibility to use the platform. These providers are contractually bound to use your data only for verification purposes.
• Fraud and risk management providers: Specialist providers may receive technical and usage data (such as IP address, device fingerprint, and behavioural data) for the purpose of detecting fraud and ensuring platform integrity.
• IT infrastructure and cloud services: Hosting, database, and security service providers who store or process data on bdbake's behalf under strict data processing agreements.
• Legal and regulatory authorities: bdbake may be required to disclose personal data to law enforcement agencies, financial intelligence units, tax authorities, or other regulatory bodies where required to do so by applicable law. bdbake will, where legally permitted, notify affected members of any such disclosure.

bdbake does not transfer your personal data to recipients outside of the jurisdictions in which it operates without ensuring that appropriate safeguards are in place. Where international data transfers are necessary, bdbake relies on standard contractual clauses or equivalent mechanisms to protect your data.

bdbake uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit bdbake. Cookies do not contain executable code and cannot access other files on your device. bdbake uses the following categories of cookie:

bdbake does not use third-party advertising cookies or behavioural tracking cookies that profile your activity across other websites for advertising purposes. All analytics data collected is aggregated and anonymised before analysis.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your bdbake account and accessing the platform. Instructions for managing cookies are available in the help section of your preferred browser.

bdbake retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, audit, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your active membership with bdbake, plus a minimum of five years following account closure, in order to meet anti-money laundering and financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of each transaction for financial audit purposes.
• Customer support communications: Retained for three years from the date of the last communication in a support thread, unless the thread relates to a dispute or regulatory matter, in which case it is retained for five years.
• Technical and usage logs: Server logs and session data are retained for a maximum of 13 months, after which they are deleted or anonymised.
• Marketing consent records: Records of your marketing consent preferences are retained for as long as your account is active and for two years following any withdrawal of consent, to demonstrate compliance with marketing regulations.
• Responsible gaming records: Self-exclusion and deposit limit records are retained indefinitely while the restriction is active and for five years following its removal, to prevent circumvention via re-registration.

At the end of the applicable retention period, personal data is securely deleted from bdbake's systems or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a bdbake member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact bdbake at [email protected] with the relevant request. We will respond within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data bdbake holds about you. This is commonly known as a Subject Access Request (SAR). bdbake will provide this information in a structured, commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity changes (such as a legal name change) may require supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to bdbake's legal retention obligations.
• Right to Restrict Processing: You may request that bdbake temporarily pause the processing of your personal data while a rectification request is being resolved or while you exercise your right to object.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where bdbake relies on legitimate interests as its legal basis, or where your data is being processed for direct marketing purposes. Objections to direct marketing will always be honoured without condition.

bdbake takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. The key security controls in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the bdbake platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption. Our SSL certificate is maintained and renewed continuously to prevent lapses.
• Data encryption at rest: Sensitive personal data stored in bdbake's databases, including KYC documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data held by bdbake is restricted on a strict need-to-know basis. All internal staff who handle personal data are subject to confidentiality obligations, background checks, and regular data protection training.
• Penetration testing and vulnerability management: bdbake conducts periodic security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bdbake maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, bdbake will notify affected members without undue delay and take all reasonable steps to contain and remediate the breach.
• PCI-DSS compliance: All card payment processing is handled by PCI-DSS Level 1 certified payment processors. bdbake does not store, process, or transmit full card numbers on its own infrastructure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how bdbake handles your personal data, please contact our data support team using the details below. All privacy-related communications are handled by a dedicated member of the bdbake compliance team.

Email: [email protected]

Please use the subject line that best describes your request (e.g., "Subject Access Request", "Data Deletion Request", "Marketing Opt-Out", "Privacy Complaint") so that your message is routed to the correct team member. bdbake will acknowledge receipt of your request within two business days and provide a full response within 30 calendar days.

If you are not satisfied with bdbake's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bdbake encourages members to contact us directly in the first instance so that we have the opportunity to resolve the matter promptly and informally.

This Privacy Policy was last reviewed and updated on 1 January 2026. bdbake reserves the right to update this policy at any time to reflect changes in legal requirements, platform functionality, or data processing practices. Material changes will be communicated to active members via email or an on-platform notification prior to the change taking effect. Continued use of the bdbake platform after any such update constitutes your acceptance of the revised Privacy Policy. The most current version of this policy is always available at bdbake.com/privacy-policy.