bd449 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how bd449 ("we", "us", "the Platform") collects, processes, stores, and protects the personal data of players and visitors ("you", "the User") who access and use the bd449 website at https://bd449.app and all services available through it. bd449 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

By registering an account with bd449, depositing funds, or using any service on the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described herein. This Policy should be read together with bd449's Terms & Conditions, which govern the overall relationship between you and the platform. If you do not agree with this Policy, you should not use bd449.

Our Privacy Commitments at a Glance

2. Personal Data We Collect

bd449 collects personal data from you in the following categories. We collect only what is necessary to provide and improve our services, verify your identity, process payments, and comply with our legal obligations.

3. How We Use Your Personal Data

bd449 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent or as otherwise required by law:

• Account creation and management — to register your account, verify your identity through KYC, and manage your account settings, preferences, and security credentials throughout your use of bd449.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records for your account.
• Service delivery and platform operation — to provide access to casino games, sports betting markets, bonuses, and other features of the bd449 platform; to personalise your experience based on your gaming history and preferences.
• Legal and regulatory compliance — to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud detection and prevention procedures, and any other applicable legal or regulatory obligations.
• Customer support — to respond to your support queries, investigate and resolve account issues, process complaints, and maintain records of all support interactions for quality assurance purposes.
• Responsible gaming — to monitor account activity for signs of problem gambling, to apply and enforce responsible gaming tools you have set (deposit limits, self-exclusion, session reminders), and to identify accounts that may require welfare interventions.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates that may be relevant to your interests, if you have consented to receive such communications. You may withdraw this consent at any time by contacting [email protected].

bd449 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without human oversight and an opportunity for you to challenge the outcome.

4. Legal Basis for Processing

bd449 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely on are:

• Contractual necessity — processing that is required to perform the contract between you and bd449, including account registration, payment processing, and delivery of gaming services. Without this processing, bd449 cannot provide its services to you.
• Legal obligation — processing required to comply with applicable laws and regulations, including AML/KYC obligations, fraud prevention requirements, and responses to lawful requests from competent authorities.
• Legitimate interests — processing for purposes such as fraud detection, platform security, responsible gaming monitoring, and improvement of platform features and services, where these interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for optional purposes such as marketing communications, where we have obtained your prior, explicit, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

5. Sharing Your Personal Data

bd449 does not sell your personal data. We share your personal data only in the limited circumstances described below, and always subject to appropriate data protection safeguards:

Categories of Recipients

• Payment processors and mobile wallet operators — including bKash, Nagad, Rocket, Upay, and bank partners — to the extent necessary to process your deposits and withdrawals. These processors receive only the transaction data required to execute the payment.
• Game content providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other certified studios — receive technical session data (such as game round IDs and session tokens) necessary to authenticate your game sessions and resolve disputes.
• Compliance and fraud prevention service providers — third-party KYC verification providers and fraud detection services that assist bd449 in meeting its legal obligations. These providers process your identity data under strict contractual data protection terms and may not use it for their own purposes.
• Law enforcement and regulatory authorities — where bd449 is required by law, court order, or binding regulatory direction to disclose personal data. bd449 will, where legally permitted, notify you of any such disclosure.

bd449 does not transfer your personal data to recipients outside your region except where necessary to deliver the services described above and where appropriate data transfer safeguards are in place.

6. Cookies and Tracking Technologies

bd449 uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyse how users interact with the site. A cookie is a small text file stored on your device by your browser. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Essential cookies — required for the platform to function correctly. These include session authentication cookies that keep you logged in securely, cookies that store your language preference, and cookies that enable payment processing flows. You cannot opt out of essential cookies without losing core platform functionality.
• Analytical cookies — used to understand how players navigate bd449, which game categories receive the most engagement, how long sessions typically last, and where users encounter difficulties. This data is aggregated and anonymised and is used solely to improve platform performance and user experience.
• Security and fraud-detection cookies — used to identify suspicious login attempts, detect automated bot activity, and flag unusual transaction patterns that may indicate fraud or account compromise. These cookies are a core component of bd449's security infrastructure.

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies; however, blocking essential cookies will impair your ability to use bd449. Instructions for managing cookies are available in your browser's help documentation. By continuing to use bd449 after being presented with our cookie notice, you consent to our use of cookies as described in this Policy.

7. Data Retention

bd449 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including providing services to you, complying with legal obligations, resolving disputes, and enforcing our agreements. The specific retention periods that apply to different categories of your personal data are as follows: account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements; financial and transaction records are retained for a minimum of five (5) years from the date of each transaction; gaming activity records are retained for two (2) years following account closure; support communications are retained for three (3) years from the date of each interaction.

When personal data is no longer required, bd449 securely deletes or anonymises it so that it can no longer be associated with you as an identifiable individual. Where data is anonymised rather than deleted, it may be retained for statistical analysis and platform improvement purposes indefinitely.

8. Data Security

bd449 takes the security of your personal data seriously and implements robust technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bd449's servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive personal data, including identity documents and financial records, on servers with restricted access controls. Only authorised bd449 personnel with a legitimate operational need may access stored personal data.
• Two-factor authentication (2FA) availability for all player accounts. bd449 strongly recommends enabling 2FA to provide an additional layer of protection for your account beyond your password alone.
• Regular security audits and penetration testing of bd449's platform infrastructure, conducted by qualified independent security professionals, to identify and remediate vulnerabilities before they can be exploited.

While bd449 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. bd449 cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bd449 will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

9. Your Rights Over Your Personal Data

You have the following rights in respect of the personal data that bd449 holds about you. To exercise any of these rights, contact us at [email protected]. We will respond to all valid requests within 30 days:

• Right of access — you may request a copy of all personal data bd449 holds about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data bd449 holds about you. Requests to update your mobile number or identity documents may require re-verification.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw the consent on which processing is based, or where the data has been unlawfully processed. Note that bd449 may be required by law to retain certain data (particularly AML/KYC records) even following an erasure request.
• Right to restriction — you may request that bd449 restrict processing of your personal data where you contest its accuracy, where processing is unlawful but you prefer restriction over erasure, or where bd449 no longer needs the data but you require it for legal claims.
• Right to data portability — you may request a machine-readable copy of the personal data you have provided to bd449 (such as your account information and transaction history), which you may transfer to another service provider.
• Right to object — you may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on bd449's legitimate interests, although bd449 may be entitled to continue processing where it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

bd449 will not charge a fee for handling any data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. bd449 reserves the right to verify your identity before acting on a data rights request to ensure that personal data is not disclosed to or altered by an unauthorised person.

10. Children and Age Restrictions

bd449 is strictly an adult platform. The minimum age to register and use bd449 is 21 years. bd449 does not knowingly collect personal data from individuals under the age of 21. If bd449 discovers that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.

If you believe that a person under the age of 21 has registered a bd449 account or provided personal data to bd449, please contact us immediately at [email protected] so that we can investigate and take appropriate action. Parents and guardians who are concerned about minors accessing online gambling platforms are encouraged to use parental control software to restrict access to such sites.

11. Changes to This Privacy Policy

bd449 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When we make material changes to this Policy, we will publish the updated version on this page with a revised "Last updated" date. Where changes are significant, we may also notify you directly via your registered mobile number or email address.

Your continued use of bd449 following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should stop using bd449 and may request account closure by contacting [email protected]. We encourage you to review this page periodically to stay informed about how bd449 protects your personal data.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints about how bd449 handles your personal data, or if you wish to exercise any of your data rights as described in this Policy, please contact our privacy team directly. We handle all privacy enquiries with confidentiality and respond within 30 minutes on average during operating hours (Bangladesh Standard Time, UTC+6).