Privacy Policy — bd55 Data Protection

Who We Are

This Privacy Policy is issued by bd55, the online betting and casino platform operating at https://bd55.io. In this Policy, references to "bd55", "we", "us", or "our" refer to the bd55 platform and its operating entity. References to "you", "your", or "Player" refer to any individual who accesses, registers on, or uses the bd55 platform in any capacity.

bd55 is the data controller in respect of the personal data collected through the bd55 platform. As data controller, bd55 determines the purposes and means by which your personal data is processed. Our primary support contact for data-related enquiries is [email protected], available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

This Privacy Policy applies to all personal data collected by bd55 through the bd55 website, mobile browser interface, account registration and verification processes, payment transactions, customer support interactions, and any other touchpoint through which you interact with bd55.

Data We Collect

bd55 collects personal data through several distinct channels. The categories of personal data we collect, and the circumstances in which each category arises, are set out below.

2.1 Registration Data

When you create a bd55 account, we collect the information you provide in the registration form, including:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including division, district, and postal code within Bangladesh.
• Mobile phone number registered in Bangladesh (used for account security and transaction authentication).
• Email address (used for account communications, password reset, and promotional messages where consented).
• Username and hashed password (your plain-text password is never stored).

2.2 Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, bd55 may request and process the following documentation:

• A copy of your National Identity Card (NID), passport, or driving licence.
• A recent proof-of-address document (e.g., a utility bill or bank statement dated within 90 days).
• A selfie photograph or live facial verification image, used solely to match against your submitted identity document.

Identity verification documents are processed securely and are not used for any purpose other than verifying your identity and age, detecting duplicate accounts, and satisfying applicable legal requirements.

2.3 Transaction Data

bd55 records the details of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method types (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction timestamps, and transaction reference numbers. bd55 does not store your mobile banking PINs or card CVV numbers — see Section 6 for full details of how payment data is handled.

2.4 Betting and Gaming Activity Data

bd55 records your betting and gaming history, including the markets and events on which bets were placed, stake amounts, odds accepted, game sessions played, wager amounts, and outcomes. This data is used for account management, bonus eligibility assessment, responsible gaming monitoring, and dispute resolution.

2.5 Technical and Device Data

When you access bd55, our systems automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, session duration, pages visited, and referring URL. This data is used for platform security, fraud detection, and improving the bd55 user experience.

2.6 Communications Data

bd55 retains records of all communications between you and bd55 support staff, including live chat transcripts, email correspondence, and any documents or screenshots you submit as part of a complaint or dispute. These records are retained to ensure quality of service and to support dispute resolution processes.

How We Use Your Data

bd55 uses the personal data it collects for the following purposes:

• Account creation and management: To register your bd55 account, authenticate your identity at login, and manage your account settings and preferences.
• Identity verification and age confirmation: To confirm that you meet the mandatory 21+ age requirement and to satisfy our KYC obligations.
• Payment processing: To facilitate your deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records.
• Betting and gaming services: To accept, record, and settle your bets and casino game sessions, and to calculate and credit any winnings or bonuses to your account.
• Responsible gaming: To monitor your account activity for signs of problem gambling, to enforce deposit limits and self-exclusion periods you have set, and to comply with our responsible gaming obligations.
• Fraud prevention and security: To detect and investigate suspicious account activity, protect against money laundering, and prevent the use of bd55 by persons on self-exclusion registers or in Restricted Territories.
• Customer support: To respond to your enquiries, resolve complaints, and manage disputes in an efficient and documented manner.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features that improve the bd55 experience for players across Bangladesh.
• Legal compliance: To fulfil our obligations under applicable law, including responding to lawful requests from regulatory authorities or law enforcement agencies.
• Marketing communications (where consented): To send you information about bd55 promotions, new games, and special offers — only where you have provided explicit consent during registration or at a later date via your account settings.

bd55 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where such processing is required by applicable law or where you have provided explicit consent.

Legal Basis for Processing

bd55 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to perform our contract with you — i.e., to provide the bd55 betting and casino service, process payments, and manage your account.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including KYC obligations, anti-money-laundering requirements, and responses to lawful authority requests.
• Legitimate interests: Processing that is necessary for bd55's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for purposes where you have provided a clear, voluntary, and informed consent — primarily in the context of marketing communications. You may withdraw your consent at any time by contacting [email protected] or by updating your preferences in account settings.

Data Sharing and Disclosure

bd55 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your personal data may be shared in the following limited and controlled circumstances:

All third parties with whom bd55 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations. bd55 remains responsible for ensuring that such third-party processors handle your data in accordance with this Privacy Policy.

Payment Data and Financial Security

bd55 places particular emphasis on the protection of payment-related data. The following principles govern how payment information is handled on the bd55 platform:

• No storage of authentication credentials: bd55 does not store, log, or have access to your bKash PIN, Nagad PIN, Rocket PIN, Upay PIN, or the CVV/CVC number of any debit or credit card. These credentials are entered and authenticated exclusively within the respective payment provider's own secure environment.
• Transaction reference only: Once a payment is completed, bd55 receives a transaction reference number and a confirmation of the amount and status from the payment provider. This is the only payment data stored by bd55 in relation to that transaction.
• Encrypted transmission: All financial data transmitted between your device and bd55's servers is encrypted using 256-bit SSL/TLS protocols. This applies to both deposit initiation and withdrawal request flows.
• Same-name withdrawal policy: bd55 requires that withdrawals be processed to a payment method registered in the same name as your bd55 account. This policy protects against fraudulent withdrawal attempts by third parties and helps ensure that funds are returned to their rightful owner.
• Transaction monitoring: bd55's systems continuously monitor transaction patterns for indicators of fraud, money laundering, or account compromise. Unusual transaction activity may trigger a temporary account hold pending investigation.

Cookies and Tracking Technologies

bd55 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the bd55 platform to function. They include session authentication cookies, security tokens, and load-balancing identifiers. The platform cannot operate without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your account preferences — such as your preferred currency display and notification settings — so that you do not need to reconfigure them on each visit.
• Analytics cookies: bd55 uses anonymised analytics data to understand how players navigate the platform, which pages are most visited, and where technical issues arise. This data is processed in aggregate and does not identify individual players.
• Fraud prevention cookies: These cookies help bd55 identify and block suspicious login attempts, detect duplicate account creation, and flag devices associated with previously closed or suspended accounts.

By continuing to use bd55 after the first page load, you consent to the use of strictly necessary and fraud prevention cookies. Functional and analytics cookies may be managed through your browser settings or by contacting bd55 support. Disabling functional cookies may affect the quality of your bd55 experience.

Data Retention

bd55 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any applicable legal requirements that mandate a longer retention period. The following general retention principles apply:

• Active account data: Personal data associated with an active bd55 account is retained for the full duration of the account's existence.
• Closed account data: Following account closure, bd55 retains personal data, transaction records, and KYC documentation for a minimum period of five (5) years from the date of closure. This retention period is required to comply with anti-money-laundering regulations, to support dispute resolution, and to enforce self-exclusion decisions.
• Communications data: Support correspondence and live chat transcripts are retained for a minimum of two (2) years from the date of the most recent communication in a given thread.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account and for a minimum of three (3) years following account closure, to demonstrate compliance with consent obligations.

Once the applicable retention period has expired and there is no legal basis for continued retention, bd55 will securely delete or irreversibly anonymise your personal data. Where anonymisation is used rather than deletion, the anonymised data no longer constitutes personal data and may be retained indefinitely for statistical and analytical purposes.

Data Security

bd55 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bd55's servers.
• Encryption of sensitive data fields at rest within bd55's database infrastructure.
• Bcrypt password hashing — your plain-text password is never stored or accessible to any bd55 employee or system.
• Multi-factor authentication (MFA) options available to Players for account login and high-value withdrawal requests.
• Role-based access controls limiting internal staff access to personal data strictly to those employees whose job function requires it.
• Regular penetration testing and security auditing of bd55's platform infrastructure.
• 24/7 automated intrusion detection and anomaly monitoring across bd55's server environment.

While bd55 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own device, browser, and account credentials. If you believe your account has been compromised, contact bd55 support immediately at [email protected].

Your Data Rights

As a bd55 Player, you have the following rights in relation to your personal data, exercisable at any time by contacting [email protected]:

• Right of Access: You have the right to request a copy of the personal data bd55 holds about you, along with information about how that data is being used and with whom it has been shared.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held by bd55. Some corrections may require identity re-verification.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent on which processing was based, or where the processing is unlawful. Note that this right is subject to legal retention obligations — bd55 may be required to retain certain data for compliance purposes even following a deletion request.
• Right to Restriction: You may request that bd55 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while a complaint is being investigated.
• Right to Withdraw Consent: Where bd55 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal.
• Right to Complain: If you are dissatisfied with how bd55 has handled your personal data, you have the right to lodge a complaint with bd55 support in the first instance. bd55 will acknowledge your complaint within 24 hours and provide a substantive response within 10 business days.

To exercise any of the above rights, please contact bd55 support in writing at [email protected]. We may ask you to verify your identity before processing your request. bd55 aims to respond to all data rights requests within 30 days of receipt.

Children's Privacy

bd55 is strictly an adult platform. Access to real-money betting and casino services is limited to individuals who are 21 years of age or older. bd55 does not knowingly collect or process personal data from any person under the age of 21.

If bd55 discovers or is notified that personal data has been collected from a person under the age of 21, bd55 will immediately close the relevant account, return any deposited funds to their originating payment method, forfeit any winnings generated during the period of underage use, and permanently delete all personal data associated with that account from our systems.

If you are a parent or guardian and believe that a person under 21 in your care may have registered on bd55, please contact us immediately at [email protected]. We take all such reports seriously and will investigate and act promptly.

Third-Party Links

The bd55 platform may, from time to time, contain references to third-party services such as mobile banking providers (bKash, Nagad, Rocket, Upay) or game software studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt). Where the bd55 interface redirects you to a third-party environment — such as your mobile banking app for payment authentication — that third party's own privacy policy governs the processing of your data within their environment.

bd55 is not responsible for the privacy practices, data security measures, or content of any third-party platform or service. We encourage you to review the privacy policies of any third-party services you use in connection with your bd55 account.

Changes to This Privacy Policy

bd55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. Where amendments are material, bd55 will notify registered Players via email to their registered address and via a prominent notice on the bd55 platform, with a minimum of 14 days' advance notice before the updated Policy takes effect.

Your continued use of the bd55 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. The most current version of this Privacy Policy is always available at https://bd55.io/privacy-policy, with the "Last Updated" date clearly indicated at the top of the page.

If you have any concerns about changes to this Privacy Policy, you may contact our support team at [email protected] before the effective date of the amendment.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bd55, please contact our support team using the details below. All privacy-related communications should be submitted in writing to ensure a complete and documented record.

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in the subject line of your email to ensure prompt routing to the appropriate team.
• Operating Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6).
• Response Target: bd55 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 10 business days. Complex data rights requests may require up to 30 days for full resolution.

bd55 is committed to resolving all privacy concerns promptly and transparently. If you feel your concern has not been adequately addressed after contacting bd55 support, you retain the right to escalate the matter through any legally available dispute resolution channel in your jurisdiction.