bd91 Privacy Policy — How We Collect, Use, and Protect Your Data

bd91 ("bd91", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "Player", "User") who access and use the bd91 online betting and casino platform at bd91.io. This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of your personal information.

This Policy applies to all personal data collected through the bd91 website, mobile platform, customer support channels, and any other interaction you have with bd91. It applies to all players in Bangladesh and any other jurisdiction from which bd91 accepts registrations.

bd91 acts as the data controller in respect of the personal data you provide to us. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, they act as data processors and are bound by contractual obligations that require them to handle your data with no less care than we apply ourselves.

By registering an account on bd91, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not register or continue to use the bd91 platform.

bd91 collects personal data through multiple touchpoints during your use of the platform. The categories of data we collect, and the specific data points within each category, are set out below.

bd91 uses the personal data we collect for the following purposes. Each purpose is tied to a specific legal basis described in Section 4 of this Policy.

• Account Creation and Management: To register your account, verify your identity, manage your profile, and maintain your account history on the bd91 platform.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and to maintain accurate financial records of all transactions.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our anti-money laundering obligations.
• Fraud and Risk Management: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and any other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide technical assistance.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to enforce self-exclusion, deposit limits, and cooling-off periods that you have set or that we impose under our Responsible Gaming obligations.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement agencies, and enforce our Terms & Conditions.
• Platform Improvement: To analyse usage patterns, improve site performance, fix bugs, develop new features, and personalise your experience on bd91.
• Marketing Communications: To send you promotional offers, bonus notifications, and event information via email or SMS, where you have given explicit opt-in consent to receive such communications.

Every processing activity carried out by bd91 is grounded in one of the following legal bases. We document our legal basis for each processing purpose internally and can provide this documentation upon request.

• Contract Performance: Processing is necessary to perform the contract between you and bd91 — specifically, to operate your account, process bets and payments, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including know-your-customer (KYC) and anti-money laundering (AML) obligations.
• Legitimate Interests: Processing is necessary for bd91's legitimate interests in operating a safe, secure, and commercially sustainable platform — including fraud prevention, risk management, platform analytics, and system security — provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bd91 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We share your data only in the circumstances set out below, and only to the extent necessary for the specified purpose.

• Payment Service Providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, and card processing partners (Visa, Mastercard networks) to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity Verification Partners: We may share identity documents and biometric data with third-party KYC service providers to confirm your age and identity. These providers are certified and operate under strict data security standards.
• Game Software Providers: Game session data may be shared with our game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) to the extent necessary to deliver games, audit outcomes, and resolve disputes.
• Fraud Prevention Networks: We participate in industry fraud prevention networks and may share data about accounts suspected of fraudulent activity with other operators and payment providers within such networks.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or valid legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of bd91, its players, or the public.
• Professional Advisors: We may share data with our legal counsel, auditors, and accountants under strict confidentiality obligations, where necessary for the provision of their professional services.

bd91 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to improve the functionality, performance, and personalisation of the platform. The categories of cookies we use are described below.

You may manage your cookie preferences at any time through the cookie settings panel available in your bd91 account dashboard. Disabling non-essential cookies will not prevent you from using the platform, but may reduce some personalisation features.

bd91 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below serve as general guidelines; specific circumstances may require shorter or longer retention in accordance with legal obligations.

• Account and Registration Data: Retained for the duration of your active account plus a minimum of five years after account closure, in line with standard financial record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in compliance with anti-money laundering requirements.
• Transaction Records: Retained for a minimum of seven years from the date of each transaction to satisfy financial audit and regulatory obligations.
• Customer Support Records: Retained for three years from the date of the last support interaction, or longer if the interaction relates to an unresolved dispute or ongoing investigation.
• Marketing Consent Records: Retained for the duration of your opt-in status plus three years thereafter, to provide a defensible record of consent.
• Technical and Device Logs: Retained for a rolling period of 12 months, after which they are anonymised or deleted, unless required for an ongoing security investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

bd91 takes the security of your personal data seriously and implements a multi-layered security framework designed to protect your information from unauthorised access, disclosure, alteration, or destruction.

• Encryption in Transit: All data transmitted between your browser or mobile device and the bd91 platform is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon and "https" in your browser's address bar.
• Encryption at Rest: Sensitive data stored in bd91's databases — including identity verification records and payment references — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised bd91 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Payment Security: bd91 does not store full payment card numbers on its own servers. Card transactions are processed through PCI DSS-certified payment gateways. Mobile wallet credentials are tokenised and never stored in plain text.
• Intrusion Detection: bd91's platform is monitored continuously by automated intrusion detection and anomaly monitoring systems. Suspicious activity triggers immediate alerts and investigation by our security team.
• Incident Response: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bd91 will notify affected players and relevant authorities in a timely manner as required by applicable data protection obligations.

As a player on bd91, you hold the following rights with respect to your personal data. bd91 is committed to honouring these rights promptly and without undue obstruction. To exercise any of the rights below, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username.

• Right of Access: You have the right to request a copy of the personal data bd91 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that certain data may need to be retained to comply with legal obligations even after an erasure request.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data on the basis of bd91's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bd91 aims to respond to all data rights requests within 30 days of receipt. In complex cases requiring additional time, we will notify you within the initial 30-day period and provide an estimated completion date.

bd91 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, seasonal promotions, new game launches, and special events for players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh. We will only send marketing communications where you have explicitly opted in to receive them during the registration process or at a later date through your account settings.

You may opt out of marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link at the bottom of any promotional email from bd91.
• Updating your communication preferences in the "Notifications" section of your bd91 account dashboard.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Please allow up to five business days for opt-out requests to take effect across all communication channels. Note that transactional and account-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and cannot be opted out of while your account is active, as they are essential to the operation of your account.

bd91 is strictly an adult platform. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes an age verification step, and we conduct further identity verification checks on all accounts to confirm that players meet the minimum age requirement.

If bd91 discovers or has reasonable grounds to believe that a registered player is under 21 years of age, we will immediately suspend the account, initiate a review of all associated transactions, and take appropriate action including permanent account closure and withholding of any funds pending investigation. We may report the matter to relevant authorities where required.

If you are a parent or guardian and believe that a minor has registered on bd91 using false age information, please contact us immediately at [email protected] with details of the account. We will investigate the matter as a priority and take corrective action without delay.

The bd91 platform may contain links to the websites of third-party game providers, payment partners, or affiliated services. These links are provided for your convenience and do not constitute an endorsement of those third parties or their privacy practices.

bd91 has no control over the content, privacy policies, or data handling practices of any third-party website. When you navigate away from bd91.io to a third-party site, this Privacy Policy no longer applies. We encourage you to review the privacy policy of any third-party site before providing any personal information.

Payment partner sites — including those of bKash, Nagad, Rocket, and Upay — operate under their own privacy policies, which govern how those organisations handle your financial data. bd91 recommends reviewing those policies directly through the respective provider's official channels.

bd91 reserves the right to update, amend, or replace this Privacy Policy at any time. The current version of this Policy will always be published at bd91.io/privacy-policy and will display the effective date of the most recent revision at the top of the document.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — bd91 will notify registered players via email to the address held on their account at least 14 days before the changes take effect. This gives you sufficient time to review the updated Policy and, if necessary, exercise your rights under Section 9 before the new terms apply.

Non-material changes, such as typographical corrections or minor clarifications that do not alter the substance of the Policy, may be made without advance notice. Your continued use of bd91 following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you must close your account before the effective date and cease using the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bd91 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy / Data Request" and include your registered account username for faster processing.
• Live Chat: Available from within your bd91 account dashboard, 24 hours a day, seven days a week. For formal data rights requests, written email contact is preferred to ensure a documented record.
• Response Time: bd91 aims to acknowledge all data-related queries within 48 hours and to provide a full response within 30 days. Where a request is complex or involves a large volume of data, we will notify you of an extended timeframe within the initial 30-day window.

All formal data protection correspondence must be submitted in writing in English to [email protected]. Please include your full registered name, registered email address, and account username in all communications to allow us to verify your identity before processing any data request.