bd978 Privacy Policy

1 Who We Are

bd978 is an online betting and casino platform accessible at bd978.io, operated for the benefit of players located in Bangladesh. References in this Privacy Policy to "bd978", "we", "us", or "our" refer to the bd978 platform and its operating entity.

bd978 is the data controller in respect of all personal data collected from players who register and use the bd978 platform. As data controller, bd978 determines the purposes and means by which your personal data is processed.

If you have any questions about how bd978 handles your personal data, or if you wish to exercise any of the rights described in Section 9 of this policy, you may contact our support team. The support contact email address is displayed as plain text in the footer section at the bottom of this page.

2 Data We Collect

bd978 collects personal data across several categories depending on how you interact with the platform. The categories of data we collect are described below.

2.1 Registration and Identity Data

When you create a bd978 account, we collect the information you provide during the registration process, including:

• Your full legal name;
• Date of birth (used to verify that you meet the minimum age requirement of 21 years);
• A valid email address;
• A mobile phone number;
• Your residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi);
• A username and password of your choosing.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your identity before processing withdrawals above applicable thresholds, bd978 may collect:

• A copy of a government-issued photo identification document, such as a National ID card or passport;
• Proof of residential address, such as a utility bill or bank statement;
• Proof of the payment method used for deposits (e.g., a screenshot confirming ownership of a bKash or Nagad account).

2.3 Financial and Transaction Data

bd978 records all financial transactions conducted on the platform, including:

• Deposit amounts, dates, and the payment method used (bKash, Nagad, Rocket, Upay, bank transfer);
• Withdrawal requests, amounts, and processing status;
• Bonus fund credits, wagering activity, and bonus settlement records;
• Account balance history.

bd978 does not store full payment card numbers or mobile banking PINs. Payment processing is handled by third-party payment providers, each of which is subject to their own data security standards.

2.4 Betting and Gaming Activity Data

bd978 records all wagering and gaming activity associated with your account, including sports bets placed (markets, odds, stakes, and outcomes), casino and live casino game sessions, game provider interactions (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi), and session duration and timing data.

2.5 Technical and Device Data

When you access the bd978 platform, our systems automatically collect certain technical information, including:

• IP address;
• Browser type and version;
• Operating system and device type;
• Referring URL and pages visited on the bd978 platform;
• Session timestamps and duration.

2.6 Communications Data

If you contact bd978's customer support team, we retain records of your communications, including the content of emails, chat messages, and any supporting documents you provide. This data is used to resolve your query and to improve the quality of bd978's support services.

3 How We Collect Data

bd978 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotion;
• Automatically: through cookies, server logs, and tracking technologies when you browse or use the bd978 platform (see Section 7 for full details on cookies);
• From payment providers: bKash, Nagad, Rocket, Upay, and the Bangladeshi banks we partner with may share transaction confirmation data with bd978 to facilitate the crediting of deposits and the processing of withdrawals;
• From game providers: third-party game suppliers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi share session and outcome data with bd978 for the purposes of account settlement and fraud detection;
• From fraud and identity verification services: bd978 may use third-party services to verify the authenticity of identity documents submitted during KYC and to screen accounts against sanctions and fraud risk databases.

4 How We Use Your Data

bd978 uses the personal data it collects for the following specific purposes:

bd978 will not use your personal data for any purpose not listed above without obtaining your prior consent. You may withdraw any consent you have given at any time by contacting bd978 support.

5 Legal Basis for Processing

bd978 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and manage your account, process payments, settle bets, and deliver the services you have requested from bd978;
• Legal obligation: Processing required by applicable laws, including anti-money laundering regulations and age verification requirements, which obligate bd978 to collect and retain certain data;
• Legitimate interests: Processing carried out in furtherance of bd978's legitimate business interests, including fraud detection, platform security, abuse prevention, and the improvement of the platform's services — provided that such processing does not override your fundamental rights and interests;
• Consent: For any processing activities that are not covered by the above bases — for example, the use of non-essential cookies or the sending of promotional communications — bd978 will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

6 Sharing Your Data

6.1 Third-Party Service Providers

bd978 shares personal data with third-party service providers strictly as necessary to operate the platform. These providers are contractually bound to process your data only on bd978's instructions and in accordance with applicable data protection standards. Categories of third-party providers with whom data may be shared include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank — to facilitate deposits and withdrawals;
• Game suppliers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi — to deliver game content and settle outcomes;
• Identity verification services: third-party KYC providers used to authenticate identity documents and screen against fraud and sanctions databases;
• IT infrastructure and hosting providers: cloud and server infrastructure providers who host the bd978 platform and its data storage systems.

6.2 Legal Disclosures

bd978 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, bd978 will disclose only the minimum amount of data required to comply with the relevant legal obligation.

6.3 No Sale of Data

bd978 does not sell, rent, or trade your personal information to any third party for commercial marketing purposes. Your data is not used to build advertising profiles or shared with third-party advertisers.

6.4 Business Transfers

In the event that the bd978 platform or its operating entity undergoes a merger, acquisition, or transfer of assets, player personal data may form part of the transferred assets. In such an event, bd978 will provide affected players with advance notice and will ensure that any successor entity is bound by privacy obligations at least equivalent to those set out in this policy.

7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the bd978 platform. They allow the platform to recognise your device across sessions, remember your preferences, and collect aggregated usage data for analytical purposes.

7.2 Types of Cookies Used by bd978

• Essential cookies: Required for the bd978 platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred display settings — so that bd978 can deliver a more personalised experience on subsequent visits.
• Analytical cookies: Used to collect anonymised data about how players navigate the bd978 platform, which pages are visited most frequently, and where users encounter difficulties. This data is used to improve the platform's usability and performance.
• Security and fraud-detection cookies: Used to identify unusual access patterns, detect automated bot activity, and protect the bd978 platform and its players from fraudulent use.

7.3 Managing Cookies

You may control cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Please note that disabling essential cookies will prevent certain core features of the bd978 platform from functioning correctly, including account login. Disabling analytical or functional cookies will not affect your ability to use the platform but may reduce the personalisation of your experience.

8 Data Retention

bd978 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements;
• KYC and identity verification data: Retained for a minimum of five years from the date of verification, in accordance with applicable financial crime prevention regulations;
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction;
• Betting and gaming activity records: Retained for the duration of your active account and for two years following account closure;
• Customer support communications: Retained for two years from the date of the last communication in a support thread;
• Technical and device data (logs): Retained for up to twelve months from the date of collection, unless required for longer as part of a fraud or security investigation.

When personal data is no longer required and no legal obligation requires its retention, bd978 will securely delete or anonymise it so that it can no longer be associated with any individual player.

9 Your Rights

As a player on the bd978 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bd978 support using the contact details displayed in the footer of this page.

• Right of access: You may request a copy of the personal data that bd978 holds about you at any time. bd978 will respond to valid access requests within a reasonable period.
• Right to rectification: If any personal data that bd978 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly within your account dashboard.
• Right to erasure: You may request that bd978 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other legal basis for processing exists. Please note that bd978 may be unable to delete certain data where retention is required by applicable law (e.g., anti-money laundering record-keeping obligations).
• Right to restriction of processing: You may request that bd978 restrict the processing of your personal data in certain circumstances — for example, while a query about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bd978 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where bd978 relies on legitimate interests as its legal basis, and where you believe that your fundamental rights override those interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

bd978 will acknowledge all data rights requests promptly and will respond substantively within a reasonable timeframe. bd978 reserves the right to verify your identity before processing any request to ensure that data is not disclosed to unauthorised parties.

10 Data Security

bd978 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bd978 platform;
• Encrypted storage of sensitive data, including identity documents and financial records, on secured servers;
• Access controls limiting staff access to personal data on a strict need-to-know basis, with all access logged and monitored;
• Regular security assessments to identify and remediate potential vulnerabilities in the bd978 platform;
• Incident response procedures to contain, assess, and notify affected parties in the event of a data security incident.

While bd978 takes data security seriously and applies industry-standard protective measures, no internet-based system can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their bd978 account and to keep their login credentials confidential. If you believe your account has been accessed without your authorisation, contact bd978 support immediately.

11 Children's Privacy

The bd978 platform is strictly restricted to individuals who are 21 years of age or older. bd978 does not knowingly collect personal data from any person under the age of 21. The registration process includes an age declaration, and bd978 may request documentary proof of age at any time during a player's account lifecycle.

If bd978 discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately closed, all associated data will be deleted or anonymised, and any funds in the account will be handled in accordance with applicable legal requirements. If you are aware of an underage individual who has registered on the bd978 platform, please notify us via the support contact details in the footer of this page.

12 Policy Updates

bd978 reserves the right to update or amend this Privacy Policy at any time to reflect changes in the way we process personal data, changes in the services we offer, or changes in applicable data protection law. All updates will be published on this page with a revised effective date.

Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party sharing — bd978 will notify registered players by email or through an on-platform notification prior to the changes taking effect. For non-material updates, the revised policy will be published on this page without a separate notification.

Your continued use of the bd978 platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with the updated policy, you should cease using the platform and may request account closure as described in the Terms & Conditions, accessible via the footer of this page.

The current version of this Privacy Policy is always accessible at bd978.io/privacy-policy. We recommend that you review it periodically to stay informed of how bd978 protects your personal data.