bdaee Privacy Policy

Introduction and Scope

bdaee ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the bdaee online betting and casino platform, accessible at bdaee.io ("Platform"). This Privacy Policy ("Policy") sets out, in clear and accessible language, how bdaee collects, processes, stores, shares, and protects personal data in connection with the operation of the Platform and the provision of services to players based primarily in Bangladesh.

This Policy applies to all personal data processed by bdaee in connection with the Platform, including data collected through account registration, identity verification (KYC), deposits and withdrawals, gameplay, customer support interactions, marketing communications, and your use of the bdaee website and any related applications. It applies whether you are a registered account holder, a visitor browsing the Platform without an account, or a former player whose account has been closed.

By registering an account on bdaee or by continuing to use the Platform after this Policy has been brought to your attention, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your data as described herein. If you do not agree to this Policy, you must not use the Platform.

Personal Data We Collect

bdaee collects only the data that is necessary to provide a safe, compliant, and high-quality betting and gaming service. The categories of personal data we collect are described in the table below.

bdaee does not collect or store full card numbers, CVV codes, or full mobile wallet PINs. Payment processing is handled by certified third-party payment gateways that comply with applicable security standards. bdaee receives only transaction confirmation data and partial identifiers sufficient for reconciliation and fraud detection.

How We Collect Your Data

bdaee collects personal data through the following means:

• Direct provision by you: When you complete the account registration form, submit KYC documents, fill in payment details, or contact the support team, you directly provide personal data to bdaee.
• Automated technical collection: When you visit or use the Platform, our servers automatically record technical and usage data including your IP address, device identifiers, browser fingerprint, and session logs. This data is collected through server logs and first-party analytics tools.
• Cookies and similar technologies: bdaee uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse aggregate usage patterns. Full details are provided in Section 8 of this Policy.
• Identity verification services: During KYC, bdaee may use a third-party identity verification provider to cross-reference the documents you submit against databases for the purpose of fraud prevention and anti-money laundering compliance. The data shared with such providers is limited to what is strictly necessary for verification.
• Payment processing partners: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, bdaee receives a transaction confirmation and associated metadata from the relevant payment gateway. Full payment credentials are never transmitted to or stored by bdaee.
• Game providers: bdaee receives aggregated session and outcome data from third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to facilitate game settlement, detect irregularities, and improve the player experience.

How We Use Your Personal Data

bdaee processes your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and allow you to log in and access bdaee services.
• Service delivery: To process your bets, settle game outcomes, manage deposits and withdrawals, and provide access to the full range of bdaee betting and casino products.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and know-your-customer regulations — including verifying your identity, monitoring transactions for suspicious activity, and reporting to competent authorities where required by law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and any other conduct that violates bdaee's Terms & Conditions. This includes automated risk-scoring of transactions and session behaviour analysis.
• Customer support: To respond to your support queries, complaints, disputes, and account requests, and to maintain records of those interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor your gambling activity for signs of problem gambling and, where appropriate, proactively reach out with responsible gaming resources. To administer the deposit limits, session timers, and self-exclusion settings you have activated.
• Marketing communications: Where you have given your explicit consent, to send you promotional offers, bonus notifications, and seasonal campaign messages via email or SMS. You may withdraw this consent at any time by updating your account preferences or contacting support.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance, design, and content of the Platform. Analytics data used for this purpose is anonymised or pseudonymised wherever possible.

Legal Basis for Processing

bdaee processes your personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing that is necessary to perform the contract between you and bdaee (i.e., to operate your account and deliver the services you have requested) is carried out on the basis of contractual necessity. This includes account registration, KYC, deposits, withdrawals, and game settlement.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering regulations, counter-terrorism financing obligations, and any reporting requirements imposed by competent authorities — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out to protect bdaee's legitimate business interests where those interests are not overridden by your data protection rights. This includes fraud detection, security monitoring, platform analytics, and improvement of services.
• Consent: Processing of your data for direct marketing purposes, and the placement of non-essential cookies, is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

bdaee does not sell, rent, lease, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following limited and controlled circumstances:

• Payment processors: We share transaction-related data with certified payment gateways (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard partner networks) to process your deposits and withdrawals. These processors are contractually bound to use your data solely for payment processing.
• Identity verification providers: During KYC, identity and document data may be shared with regulated third-party verification providers to authenticate your identity in compliance with anti-money laundering regulations.
• Game providers: Session and gameplay data is shared with certified game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) for the purpose of delivering games, settling results, and auditing outcomes. These providers are contractually prohibited from using your data for any purpose beyond service delivery.
• Regulatory and law enforcement authorities: bdaee may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by applicable law, a court order, or a lawful regulatory demand. bdaee will notify you of such disclosure to the extent permitted by law.
• Fraud prevention agencies: Where bdaee has reasonable grounds to suspect fraud or financial crime, relevant data may be shared with specialist fraud prevention services or industry-wide data-sharing initiatives.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving bdaee, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom bdaee shares personal data are subject to contractual data processing agreements that require them to maintain appropriate technical and organisational security measures and to process your data only as instructed by bdaee.

Data Retention

bdaee retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active account data: All personal and transactional data associated with an active bdaee account is retained for the full duration of the account's active status.
• Closed account data: Following account closure (whether initiated by you or by bdaee), personal data and transaction records are retained for a minimum of five years from the date of closure. This retention period supports our obligations under anti-money laundering regulations, enables the resolution of post-closure disputes, and ensures that self-exclusion records remain enforceable.
• KYC documents: Identity and address verification documents are retained for a minimum of five years after the end of the business relationship, consistent with applicable anti-money laundering regulations.
• Support and communication records: Live chat transcripts and email correspondence are retained for a minimum of two years from the date of the interaction.
• Marketing consent records: Records of your marketing consent (or withdrawal of consent) are retained for the duration of your account and for two years following account closure.
• Technical and log data: Server logs and session data are retained for up to 12 months in identifiable form and may be retained longer in anonymised or aggregated form for analytics purposes.

When your data is no longer needed for any of the above purposes and no legal obligation requires further retention, bdaee will securely delete or anonymise the data.

Cookies and Tracking Technologies

bdaee uses cookies and similar technologies to provide a functional, secure, and personalised experience on the Platform. A cookie is a small text file placed on your device by the bdaee website when you visit. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language and regional preferences, and protect against cross-site request forgery. These cookies cannot be disabled without preventing you from using core Platform features.
• Functional cookies: These cookies remember your preferences and settings (such as your preferred deposit method or responsible gaming settings) to personalise your experience. They are activated on the basis of consent.
• Analytics cookies: bdaee uses first-party analytics tools to measure aggregate page visits, session durations, and feature usage patterns. This data is used to improve Platform performance and content. Analytics cookies are activated on the basis of consent and data is processed in pseudonymised form wherever possible.
• Security cookies: These cookies support bdaee's fraud detection systems by identifying unusual patterns of access and helping to distinguish legitimate players from automated bots.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will impair Platform functionality. bdaee does not use third-party advertising or retargeting cookies.

Your Data Rights

As a bdaee player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the bdaee Data Privacy team at [email protected] with the subject line "Data Rights Request". bdaee will acknowledge your request within 48 hours and respond substantively within 30 days (Bangladesh Standard Time, UTC+6).

• Right of access: You have the right to request a copy of the personal data bdaee holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For basic profile data (name, address, contact number), you may also update this directly within your account settings.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right is subject to bdaee's legal obligations — we cannot delete data that we are required to retain by law (e.g., transaction records under anti-money laundering regulations) or data needed to resolve an outstanding dispute.
• Right to restriction of processing: You may request that bdaee restricts processing of your data while a rectification request is under review or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to bdaee, where processing is based on consent or contractual necessity.
• Right to object: You have the right to object to processing of your data carried out on the basis of legitimate interests, including profiling. bdaee will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications, functional cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Security Measures

bdaee applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our core security measures include:

• Encryption in transit: All data transmitted between your device and the bdaee Platform is encrypted using TLS 1.2 or higher (256-bit encryption). This applies to account login, payment transactions, KYC document uploads, and all other data exchanges.
• Encryption at rest: Sensitive personal data stored in bdaee databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within bdaee's systems is strictly role-based. Staff access to player data is granted on a need-to-know basis, is logged, and is subject to regular review.
• Intrusion detection: bdaee operates continuous monitoring for suspicious access patterns, unauthorised login attempts, and system anomalies. Automated alerts are triggered when unusual behaviour is detected.
• Third-party security standards: All third-party service providers who process player data on behalf of bdaee are contractually required to maintain security standards at least equivalent to those described in this section.
• Data breach response: In the event of a personal data breach that poses a risk to affected players, bdaee will notify the relevant individuals without undue delay and take all reasonable steps to contain and remediate the breach.

While bdaee takes data security seriously and applies robust measures, no online platform can guarantee absolute security. You can contribute to your own data security by using a strong, unique password, keeping your login credentials confidential, and logging out of your account when using shared devices.

Children's Privacy

The bdaee Platform is strictly intended for adults aged 21 years and above. bdaee does not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21 years of age, you must not use the Platform, create an account, or provide any personal data to bdaee.

If bdaee becomes aware or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, that account will be suspended immediately, all associated data will be reviewed, and the data will be securely deleted to the extent permitted by law. Any deposits made to such an account will be refunded to the original payment source after verification of ownership.

If you are a parent or guardian and believe that your child under 21 years of age has registered on the Platform or provided personal data to bdaee, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, to delete the data and close the account.

Third-Party Links

The bdaee Platform may display informational references to third-party organisations such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard). This Privacy Policy applies solely to data processed by bdaee in connection with the Platform.

bdaee is not responsible for the privacy practices or content of any third-party services, platforms, or organisations. If you visit or interact with any third-party service provider's own platform, that entity's privacy policy will govern the use of your data in that context. bdaee recommends that you read the privacy policies of any third-party services with which you interact.

Changes to This Privacy Policy

bdaee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, bdaee will notify registered players by displaying a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account.

The "Last Updated" date displayed at the top of this page and in the hero section above will always reflect the most recent revision of this Policy. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure by contacting the support team.

bdaee encourages you to review this Policy periodically so that you remain informed about how your personal data is being protected. This is particularly important following any significant changes to our services or payment methods.

Contact and Data Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdaee handles your personal data, please contact the bdaee Data Privacy team through the following channel:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week from within your bdaee account. For data rights requests submitted via live chat, please also follow up with an email to create a written record.
• Response Time: Data privacy enquiries are acknowledged within 48 hours and substantively responded to within 30 days (Bangladesh Standard Time, UTC+6). Complex requests may require additional time; bdaee will notify you if an extension is needed.