bdx24 Privacy
Policy

When you register an account, use the bdx24 platform, or contact our support team, we collect personal data about you. This section explains the categories of data we collect, the source of that data, and the legal basis on which we rely to process it.

bdx24 does not knowingly collect special category data (such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless you voluntarily disclose such information in a support communication, in which case it is handled with strict confidentiality and deleted once the relevant matter is resolved.

bdx24 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipient only for the purposes described in this policy:

• Payment service providers: We share financial data with mobile financial service (MFS) providers — including bKash, Nagad, Rocket, and Upay — and with bank partners to process your deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes and to implement appropriate security measures.
• Identity verification services: We may use third-party KYC and document verification platforms to validate the identity documents you submit. These providers process your data under strict data processing agreements and are prohibited from using it for any purpose other than identity verification on our behalf.
• Game content providers: When you play a game hosted by a third-party game studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), certain technical data — including your session token and bet history relevant to that game — is transmitted to the provider's servers for the purpose of delivering the game and settling results. These studios operate under their own privacy frameworks; bdx24 ensures that data sharing agreements with all game providers meet applicable standards.
• Fraud prevention and AML platforms: We may share account and transaction data with anti-fraud and anti-money-laundering (AML) screening services to detect suspicious activity. Results from these checks may inform our compliance decisions.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, bdx24 will disclose personal data to competent authorities. We will notify you of such a disclosure where we are legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or a substantial part of bdx24's assets, your personal data may be transferred to the acquiring entity. We will notify you in advance of any such transfer and of any changes to data handling practices that result from it.

All third parties with whom bdx24 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only in accordance with our instructions and this Privacy Policy. We do not permit third parties to use your data for their own independent marketing or commercial purposes.

bdx24 takes data security seriously and implements a layered set of technical and organisational measures to protect your personal data at every stage of its lifecycle — in transit, in storage, and during processing.

• Encryption in transit: All communications between your browser or app and the bdx24 platform are encrypted using TLS 1.2 or higher. We enforce HTTPS across the entire bdx24.app domain. Plain HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data, including identity documents, payment account references, and authentication credentials, is encrypted at rest using AES-256 encryption. Database backups are encrypted with the same standard.
• Access controls: Access to personal data within bdx24's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and access to sensitive data categories requires multi-factor authentication.
• Penetration testing and security audits: bdx24 conducts regular internal security reviews and periodic third-party penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that results in a risk to your rights and freedoms, bdx24 will notify affected players without undue delay and will take immediate steps to contain the incident and mitigate its effects.
• Staff training: All bdx24 staff with access to personal data receive mandatory data protection and security awareness training. Staff are bound by confidentiality obligations and are prohibited from accessing player data for any purpose outside their job function.

While bdx24 implements robust security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure — see Section 3 of our Terms & Conditions for guidance on maintaining strong account credentials and reporting suspected security breaches promptly.

bdx24 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account email address. We will respond within 30 days of receiving your request.

• Right to access: You have the right to request a copy of all personal data bdx24 holds about you, together with information about how it is used, who it is shared with, and how long it will be retained. We will provide this information in a clear, structured format at no charge for the first request in any 12-month period.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic account information (such as your email address or phone number) directly through your account settings, or by contacting support.
• Right to erasure ("right to be forgotten"): You may request that bdx24 delete all personal data we hold about you. We will honour this request where there is no legal or contractual obligation requiring us to retain the data. Where a legal retention obligation applies (for example, AML record-keeping requirements), we will explain which data must be retained and for how long, and delete everything else.
• Right to restriction of processing: You may request that we restrict how we use your data in certain circumstances — for example, while the accuracy of data is being contested, or while a complaint is being investigated. During a restriction period, we will continue to store your data but will not actively process it except as permitted by law.
• Right to data portability: You have the right to receive a copy of the personal data you provided to bdx24 in a structured, machine-readable format (such as CSV or JSON), and to have that data transmitted to another service provider where technically feasible.
• Right to object to processing: Where bdx24 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You may also object at any time to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing emails, use the unsubscribe link in any such email or contact [email protected].