bdpop Privacy Policy — How We Handle Your Data

Introduction

This Privacy Policy ("Policy") describes how bdpop ("we", "us", "the Platform") collects, processes, stores, and shares personal information relating to individuals who visit, register, and play on bdpop.bar ("the Site"). By accessing or using the Site, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

bdpop takes data privacy seriously. We collect only the minimum data needed to operate the platform safely and fairly, process payments, meet anti-fraud and responsible gaming obligations, and provide player support. We do not sell personal data to third parties, and we do not use your data for purposes unrelated to your use of bdpop.

1. Information We Collect

When you register and use bdpop, we collect personal information in the following categories. All collection is purposeful — we do not gather data we do not need:

• Registration data — your name, date of birth, registered mobile number, and any account security credentials you create. This information is required to create and verify your account, confirm age eligibility, and enable login.
• Identity verification documents — government-issued identity documents (such as a National ID card or passport) and proof of address, collected when KYC verification is required. These are stored securely and used solely for identity verification, fraud prevention, and anti-money laundering compliance.
• Transaction data — records of all deposits and withdrawals including the mobile wallet used (bKash, Nagad, Rocket, or Upay), the amount, the date and time, and the transaction reference number. This data is retained for audit, fraud detection, and dispute resolution purposes.
• Gameplay and betting data — records of games played, bets placed, wagers settled, bonuses claimed, and promotional offers used. This data is used for account management, responsible gaming monitoring, bonus integrity checks, and improving the platform experience.
• Technical and device data — IP address, browser type and version, device type and operating system, session timestamps, and page interaction data. This data is used for platform security, fraud detection, and technical performance monitoring. It is not linked to your identity for marketing purposes.

bdpop does not collect data that is unnecessary for the purposes listed above. We do not collect your physical address unless it is required as part of KYC verification. We do not collect information about your employment, income, or social media profiles unless you voluntarily provide this in a support communication.

2. How We Use Your Information

Personal data collected by bdpop is used for the following specific, documented purposes only. We do not use your data for any purpose not listed here without first updating this Policy and, where required, obtaining your consent:

• Account creation and authentication — to register your account, verify your identity and age, and authenticate your login sessions securely.
• Payment processing — to process your deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions.
• Fraud prevention and platform security — to detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover, multi-accounting, and other forms of prohibited conduct, using automated monitoring and manual review.
• Responsible gaming — to monitor gameplay patterns for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to comply with responsible gaming obligations including age verification requirements.
• Customer support — to respond to your enquiries, process complaints, resolve disputes, and provide assistance with account issues, technical problems, payment queries, and general platform questions.
• Platform improvement — to analyse aggregated, anonymised usage data to identify technical issues, improve page performance, optimise game loading times, and refine the overall mobile experience for players in Bangladesh.

3. Legal Basis for Processing

bdpop processes personal data on the following legal bases. Where more than one basis applies to a processing activity, all applicable bases are noted:

• Contract performance — processing necessary to deliver the services you have signed up for, including account management, payment processing, and access to games and betting markets.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and technical performance analysis, where bdpop's legitimate interest in operating a safe and compliant platform does not override your privacy rights.
• Consent — where you have given explicit consent, for example by opting in to receive promotional communications. You may withdraw consent at any time by contacting [email protected].
• Legal obligation — processing required to comply with applicable legal obligations, including anti-money laundering requirements, fraud reporting obligations, and responses to lawful requests from public authorities.

4. Sharing Your Information

bdpop does not sell, rent, or trade personal data. We share personal information with third parties only in the following limited and documented circumstances:

• Payment service providers — transaction data is shared with the relevant mobile money operator (bKash, Nagad, Rocket, or Upay) as necessary to process your deposit or withdrawal. This data sharing is limited to what the payment provider needs to execute the transaction and is governed by the payment provider's own privacy terms.
• Game providers — certain technical session identifiers may be passed to the game provider (such as Pragmatic Play, Evolution Gaming, or Spribe) to load and authenticate your game session. No personally identifiable information beyond what is technically necessary for game session management is shared with game providers.
• Fraud prevention and security partners — aggregated or pseudonymised data may be shared with third-party fraud detection services to identify suspicious patterns. These partners are contractually bound to handle the data securely and may not use it for any purpose other than fraud detection on behalf of bdpop.
• Legal and regulatory authorities — where we are required by applicable law, court order, or lawful authority to disclose information, we will comply. We will, where legally permitted, endeavour to notify you before disclosing your personal data in response to such a request.

5. Payment Data and Mobile Wallets

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, bdpop receives confirmation data from the mobile money network including the transaction reference number, the amount, and the registered mobile number associated with the wallet. bdpop does not receive, store, or have access to your mobile wallet PIN, password, or full account credentials. The mobile wallet transaction is initiated and authenticated on the mobile money operator's own platform.

Transaction records are retained for a minimum period required to satisfy anti-money laundering record-keeping requirements and to support dispute resolution. After the mandatory retention period expires, transaction records are securely archived or deleted. Payment data is never shared for marketing purposes and is never used to profile your financial behaviour outside of fraud detection and responsible gaming monitoring.

6. Cookies and Session Tracking

bdpop uses a limited set of browser cookies and session storage mechanisms to operate the platform. We do not use advertising cookies, social media tracking pixels, or cross-site user profiling technologies. The cookies we use fall into the following categories:

• Essential session cookies — used to maintain your authenticated login session while you are using the platform. These expire when you close your browser or log out. They are strictly necessary for the platform to function and cannot be disabled without breaking your session.
• Security and fraud detection tokens — short-lived tokens used to validate that a session is genuine and to detect unusual activity patterns, such as simultaneous logins from geographically distant locations or rapid session switching between devices.
• Preference storage — local storage entries that remember your display preferences (for example, preferred language or last viewed game category) to improve your return experience. These are stored in your browser's local storage, not transmitted to bdpop servers except where needed to restore your session.

You can clear cookies and local storage at any time through your browser or device settings. Clearing session cookies will log you out of your bdpop account. bdpop does not use third-party analytics platforms such as Google Analytics or Meta Pixel on the platform.

7. Data Retention

bdpop retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

Account data and identity verification documents are retained for the duration of your active account and for a minimum period following account closure, as required to meet anti-money laundering and fraud record-keeping obligations. Transaction records are retained for a defined period following each transaction. Gameplay logs are retained for a shorter period unless they are relevant to an open dispute or investigation. Technical logs such as IP address records are retained for a shorter period and then automatically purged. When data is no longer required for any of the above purposes, it is securely deleted or anonymised so that it can no longer be linked to your identity.

8. Your Rights Over Your Personal Data

You have the following rights in relation to the personal data bdpop holds about you. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your registered mobile number for identity verification:

• Right of access — you may request a copy of all personal data bdpop holds about you. We will provide this in a readable format within 30 days of a verified request.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Corrections to core account data such as your registered mobile number may require identity re-verification.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Certain data may be exempt from erasure where retention is required by law.
• Right to restriction — you may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to object — where processing is based on legitimate interests, you have the right to object. bdpop will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.

bdpop aims to respond to all data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension within the initial 30-day window. There is no charge for exercising your data rights, unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

9. Data Security

bdpop implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it holds. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting internal staff access to personal data on a need-to-know basis, automated intrusion detection systems, regular security reviews, and incident response procedures. Payment data is handled exclusively through the APIs of regulated mobile money operators and is never stored on bdpop servers in a form that could be used to initiate an unauthorised transaction.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdpop will notify affected players without undue delay and will take immediate steps to contain the breach, assess its impact, and prevent recurrence. If you suspect that your bdpop account has been compromised, contact [email protected] immediately.

10. Minors and Age Restriction

bdpop is strictly a platform for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. If during identity verification or routine monitoring we establish or reasonably suspect that an account holder is under 21, we will immediately suspend the account, conduct a full review, and if the suspicion is confirmed, permanently close the account and return any balance of funds that were deposited (net of any winnings generated, which will be forfeited). Any personal data collected in connection with an underage account will be deleted upon confirmation of underage status, except where retention is required for legal compliance purposes. If you are a parent or guardian and believe that a minor in your care has registered with bdpop, please contact [email protected] immediately.

11. Changes to This Privacy Policy

bdpop may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes, we will update the "Last updated" date at the top of this page. Where the changes are significant and affect how we process your data in a way that requires your consent, we will notify you directly via your registered contact details before the changes take effect.

Your continued use of bdpop after any update to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically so that you remain informed about how we protect your data. The current version of this Policy supersedes all prior versions.

12. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bdpop has handled your personal data, please contact our support team. All data-related enquiries are handled confidentially and in accordance with the procedures described in this Policy.

Data enquiries email: [email protected]