bd86 Privacy Policy — How We Protect Your Personal Data

1. Who We Are

bd86 (referred to throughout this policy as "bd86", "we", "us", or "our") operates the online betting and casino platform available at bd86.io. The platform is built specifically for players in Bangladesh and offers a comprehensive range of services including sports betting, live casino, slots, virtual games, and related payment and account management features.

bd86 acts as the data controller in respect of all personal data collected through the bd86.io platform. This means we determine the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you may contact us at any time using the details provided in Section 14 of this policy.

References to "you", "your", or "the user" throughout this policy refer to any individual who accesses, browses, registers with, or otherwise interacts with the bd86 platform, regardless of whether they have completed registration.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create a bd86 account, we collect the information you provide during the registration process. This includes your full name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your identity, verify your age eligibility, and set up your account.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of identity documents. Acceptable documents include a National Identity Card (NID), passport, or utility bill. Biometric data embedded in official identity documents may be processed solely for verification purposes and is not retained beyond the verification lifecycle.

2.3 Financial and Transaction Data

When you make a deposit or request a withdrawal, we collect transaction-related data including your chosen payment method (bKash, Nagad, Rocket, Upay, or bank account details), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and reference identifiers. We do not store full mobile wallet PIN codes or complete bank account passwords.

2.4 Betting and Gaming Activity Data

We maintain records of all bets placed, games played, wager amounts, outcomes, bonus usage, and session history on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and legal compliance purposes.

2.5 Technical and Device Data

When you access bd86.io, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages you visit on our platform. This data is collected through server logs and cookie technologies as described in Section 8.

2.6 Communications Data

If you contact our customer support team via email or live chat, we retain records of those communications, including the content of messages, timestamps, and the resolution of any queries or complaints. This is necessary to maintain service quality and provide continuity of support.

3. How We Collect Your Data

bd86 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, place a bet, or contact support.
• Automatically — through server logs, cookies, and similar tracking technologies when you browse or interact with bd86.io. See Section 8 for full cookie details.
• From payment processors — transaction confirmation data and fraud screening results are shared with us by payment providers such as bKash, Nagad, Rocket, and Upay when you initiate a financial transaction.
• From identity verification services — where we use third-party KYC verification tools, those services may share the result of document authentication checks with us.
• From fraud prevention and security partners — these partners may share information about known fraudulent activity patterns to help us protect the platform and its users.

4. How We Use Your Personal Data

bd86 uses personal data collected from users for the following specific purposes:

Purpose	Data Used
Creating and managing your bd86 account	Registration data, identity data
Verifying your age and identity (KYC)	Identity data, KYC documents
Processing deposits and withdrawals in ৳	Financial data, payment method details
Settling bets, awarding winnings, and applying bonuses	Gaming activity data, financial data
Detecting and preventing fraud, money laundering, and abuse	All categories where relevant
Providing customer support and resolving disputes	Communications data, account data
Monitoring for responsible gaming concerns	Gaming activity data, session data
Improving platform performance and user experience	Technical data, usage analytics
Sending service-critical account notifications	Registration data, communications preferences
Complying with legal and regulatory obligations	All categories where required by law

bd86 does not use your personal data for unsolicited third-party marketing. Where we send promotional communications (such as bonus offers or platform updates), these are sent only to users who have not opted out of such communications and are always directly related to the bd86 platform itself.

5. Legal Basis for Processing

bd86 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which bd86 relies are:

• Contractual necessity — processing required to fulfil our obligations to you under the bd86 Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and fraud reporting duties.
• Legitimate interests — processing carried out in the legitimate interests of bd86 or its users, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights.
• Consent — where bd86 relies on your consent to process data (for example, for optional promotional communications), you may withdraw that consent at any time by contacting [email protected].

6. Data Sharing and Disclosure

6.1 Payment Processors

In order to process deposits and withdrawals, bd86 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and integrated banking partners such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the data required to complete the specific transaction.

6.2 Identity Verification Services

Where third-party KYC verification tools are employed, we share identity document data with those providers solely for the purpose of authentication. These providers are bound by confidentiality agreements and are prohibited from using your data for any other purpose.

6.3 Game and Technology Providers

Casino game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may receive session identifiers and account tier data necessary to deliver their game products within the bd86 platform. These providers do not receive full user profiles or payment credentials.

6.4 Legal and Regulatory Authorities

bd86 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bd86, its users, or the public.

6.5 No Sale of Personal Data

bd86 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Any data sharing is limited strictly to the operational purposes described in this section.

7. Data Retention

bd86 retains personal data only for as long as is necessary for the purposes for which it was collected. Our general retention periods are as follows:

• Account and identity data — retained for the duration of your active account, plus a minimum of five years following account closure to satisfy legal and regulatory retention requirements.
• Financial and transaction data — retained for a minimum of five years from the date of each transaction in accordance with applicable financial record-keeping obligations.
• KYC documents — retained for the duration required by applicable anti-money laundering legislation, typically five years from the end of the customer relationship.
• Gaming and betting activity logs — retained for five years from the date of each session or wager.
• Customer support communications — retained for three years from the date of the last communication.
• Technical and device data — retained in aggregated or anonymised form for up to 24 months for analytics and security purposes.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual user. Data that is anonymised may be retained indefinitely for statistical and analytical purposes without restriction.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, remember user preferences, and provide analytical data to site operators. bd86 uses cookies and similar technologies (such as local storage and session tokens) when you access bd86.io.

8.2 Cookies We Use

bd86 uses the following categories of cookies on its platform:

• Strictly necessary cookies — required for the platform to function. These include session authentication tokens, login state cookies, and security identifiers. Without these cookies, the platform cannot operate. These cannot be disabled.
• Performance and analytics cookies — used to understand how users interact with bd86.io, which pages are most visited, and where technical errors occur. This data is collected in aggregated, anonymised form and is not linked to individual user identities.
• Functional cookies — used to remember preferences such as your preferred language setting and display preferences, so that you do not need to re-enter them on each visit.

8.3 What We Do Not Use

bd86 does not use third-party advertising cookies, retargeting pixels, cross-site tracking technologies, or social media tracking scripts on bd86.io. We do not share cookie data with advertising networks.

8.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or security settings menus. Please note that disabling strictly necessary cookies will impair the functionality of the bd86 platform and may prevent you from logging in or completing transactions.

9. Data Security

bd86 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bd86.io.
• Encrypted storage of sensitive account data and identity documents at rest.
• Access controls — personal data is accessible only to authorised bd86 personnel who require it to perform their specific job functions.
• Regular security audits and vulnerability assessments of the platform infrastructure.
• Fraud monitoring systems that operate continuously to detect unusual account or transaction activity.
• Two-factor authentication options available to users to further secure their bd86 accounts.

While bd86 employs industry-standard security practices, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, bd86 will notify affected users promptly and take all necessary remedial action.

10. Your Data Protection Rights

As a user of the bd86 platform, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data bd86 holds about you at any time.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected.
• Right to erasure — in certain circumstances, you may request that bd86 delete your personal data. Note that we may be required to retain certain data for legal or regulatory reasons even after account closure.
• Right to restriction of processing — in certain circumstances, you may request that we temporarily restrict the processing of your data while a query or complaint is being resolved.
• Right to data portability — where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object — where bd86 processes your data on the basis of legitimate interests, you have the right to object to that processing. We will review your objection and cease processing unless we have compelling grounds to continue.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". All requests will be acknowledged within 48 hours and resolved within 14 business days. We may ask you to verify your identity before processing a data rights request.

11. Children and Minors

The bd86 platform is strictly restricted to individuals who are 21 years of age or older. bd86 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under the age of 21, that account will be immediately suspended, all balances will be reviewed in accordance with our Terms & Conditions, and any personal data collected will be handled in accordance with applicable legal requirements.

If you believe that a minor has registered an account on bd86.io, please contact us immediately at [email protected] so that appropriate action can be taken promptly.

12. Third-Party Services and Links

The bd86 platform integrates third-party game engines and payment services to deliver its full product offering. While bd86 carefully selects its service partners, we are not responsible for the privacy practices of third-party providers. Each provider operates under their own privacy policy, and users are encouraged to review those policies where relevant.

bd86.io does not contain links to external third-party websites for advertising or promotional purposes. Any third-party integrations on the platform are operational in nature — such as game delivery or payment processing — and are governed by data processing agreements that bind those providers to confidentiality and security obligations consistent with this policy.

13. Updates to This Privacy Policy

bd86 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the introduction of new platform features, or updates to applicable laws and regulations. When material changes are made, we will notify registered users via the email address associated with their bd86 account or through a prominent notice on the platform, at least 7 days before the change takes effect.

The date at the top of this page will always reflect when the policy was most recently updated. We encourage you to review this policy periodically to stay informed about how bd86 handles your personal data. Continued use of the platform after any update constitutes your acceptance of the revised policy.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bd86 has handled your personal information, please contact our support team using the details below. Our dedicated privacy support team is available around the clock on Bangladesh Standard Time (UTC+6).

Email: [email protected]

Please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is directed to the appropriate team member. We aim to acknowledge all privacy-related queries within 48 hours and to provide a full resolution within 14 business days.

If you are not satisfied with the resolution provided by our support team, you have the right to escalate your complaint to bd86's senior management team. All escalated privacy complaints are reviewed independently and a final written response will be provided within 28 calendar days of escalation.