bd56 Privacy Policy

01 Who We Are

bd56 operates the online gaming and sports betting platform accessible at bd56.io (the "Platform"). In this Privacy Policy, "bd56", "we", "us", and "our" refer to the Platform operator. "You" and "your" refer to any individual who visits, registers on, or uses the bd56 Platform in any capacity.

bd56 is the data controller in respect of personal data collected through the Platform. This means we determine the purposes and means of processing your personal data. Where we engage third-party processors — such as payment providers and identity verification services — those parties act on our instructions and are contractually bound to handle your data securely and only for the purposes we specify.

If you have any questions about this Privacy Policy or how bd56 handles your personal data, please contact us at [email protected]. We aim to respond to all privacy-related enquiries within five business days (Bangladesh Standard Time, UTC+6).

02 Data We Collect

bd56 collects the following categories of personal data in the course of operating the Platform and providing services to Members:

Identity and Contact Data

• Full legal name as it appears on government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other) and postal code.
• Email address and mobile phone number.
• Government-issued identification document numbers (National Identity Card, passport, or equivalent), where submitted for KYC verification.

Account and Activity Data

• Username and encrypted password credentials.
• Account registration date and last login timestamp.
• Betting and gaming history, including games played, stakes placed, and outcomes.
• Bonus and promotional activity, including offers claimed and wagering progress.
• Responsible gaming tool settings, including deposit limits and self-exclusion status.
• Customer support communications, including live chat transcripts and email correspondence.

Financial and Payment Data

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (BDT / ৳), dates, and payment method used.
• Mobile financial service account identifiers (e.g., bKash or Nagad registered mobile number) used to process transactions.
• Bank account details where bank transfer payment methods are used.
• Transaction reference numbers issued by payment providers such as bKash, Nagad, Rocket, or Upay.

Technical and Usage Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited on the Platform, time spent, click patterns, and session duration.
• Referral source (how you arrived at the bd56 Platform).
• Cookie and similar tracking technology data, as described in Section 8.

03 How We Collect Your Data

bd56 collects personal data through the following channels:

• Directly from you — when you register an account, complete your profile, submit identity documents for KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically via the Platform — when you visit or use bd56.io, our servers and analytics tools automatically log technical and usage data including your IP address, device identifiers, and browsing behaviour on the Platform.
• From payment providers — when you initiate a deposit or withdrawal, our payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and others) share transaction confirmation data with us to reconcile your account balance.
• From identity verification providers — where we use third-party KYC services to verify the authenticity of identification documents or to cross-check identity data against reference databases.
• From cookies and tracking technologies — as described in Section 8 below, certain data is collected passively via cookies placed on your device when you access the Platform.

04 Why We Use Your Data

bd56 uses the personal data it collects for the purposes set out in the table below. Each purpose is linked to a legal basis, which is described in Section 5.

05 Legal Basis for Processing

bd56 processes your personal data on the following legal grounds:

• Contractual necessity — Processing is necessary to perform the contract between you and bd56 (i.e., to operate your account, process payments, and deliver the services you have requested). Without this processing, bd56 cannot provide its services to you.
• Legal obligation — Processing is necessary to comply with applicable legal obligations, including age verification, anti-money laundering (AML) checks, fraud prevention, and record-keeping requirements.
• Legitimate interests — Processing is necessary for bd56's legitimate business interests, including fraud detection, Platform security, service improvement, and responsible gaming enforcement, where those interests are not overridden by your data protection rights.
• Consent — Where processing is based on your consent (e.g., receiving marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

bd56 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances and with the following categories of recipients:

Payment Processors

To process deposits and withdrawals, bd56 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks. These providers receive only the data required to execute and confirm the transaction.

Identity Verification Providers

To fulfil our Know Your Customer (KYC) obligations, bd56 may share identity document images and personal details with third-party identity verification services. These providers are contractually obligated to process data solely for verification purposes and to maintain appropriate security standards.

Game Technology Providers

Game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Spribe, and Microgaming may receive session tokens and anonymised player identifiers necessary to load and operate game software within the Platform. These providers do not receive your full identity or financial data.

IT and Platform Service Providers

bd56 uses third-party providers for hosting, security monitoring, analytics, and customer support tooling. These providers act as data processors on our behalf and are bound by data processing agreements that restrict them from using your data for any purpose beyond the specific service they provide to bd56.

Legal and Regulatory Authorities

bd56 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required by applicable law, legal process, or in the good-faith belief that such disclosure is necessary to protect the rights, property, or safety of bd56, its Members, or the public.

07 Data Retention

bd56 retains your personal data for as long as your account is active and for a period thereafter as required by legal, regulatory, and business obligations. The following general retention guidelines apply:

• Active account data — retained for the lifetime of your account and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records — deposit, withdrawal, and betting history records are retained for a minimum of five years from the date of the transaction.
• Identity verification documents — retained for a minimum of five years following account closure or the last transaction, whichever is later.
• Customer support records — correspondence and chat transcripts are retained for three years from the date of the interaction.
• Marketing consent records — retained for as long as you are subscribed and for three years after you withdraw consent, as evidence of the consent given.
• Technical and usage logs — server access logs and analytics data are retained for up to 12 months, after which they are aggregated or deleted.

Where bd56 no longer has a lawful basis to retain personal data, it will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

08 Cookies and Tracking Technologies

bd56 uses cookies and similar tracking technologies on the Platform to support core functionality, improve performance, and understand how Members use the site. The following types of cookies may be placed on your device when you access bd56.io:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling performance or functional cookies will not prevent you from using bd56, but may reduce the quality of your experience.

09 Data Security

bd56 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, or destruction.

• SSL/TLS encryption — all data transmitted between your device and bd56 servers is encrypted using industry-standard SSL/TLS protocols. Every page of the Platform operates over HTTPS.
• Password storage — account passwords are stored using a strong one-way cryptographic hashing algorithm. bd56 staff cannot read your password in plain text.
• Access controls — access to Member personal data within bd56's systems is restricted to authorised personnel who require it to perform their role. All access is logged and audited.
• Payment data isolation — full payment account numbers (e.g., bKash wallet numbers beyond the last four digits) are not stored on bd56 servers after a transaction is confirmed. Payment processing is handled by the respective payment provider's secure environment.
• Security monitoring — bd56 operates continuous security monitoring to detect and respond to potential threats, including brute-force login attempts, unusual withdrawal patterns, and suspicious account activity.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bd56 will notify affected Members and relevant authorities in a timely manner and take all reasonable steps to contain and remediate the incident.

10 Your Data Rights

As a bd56 Member, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [your username]". bd56 will respond within 30 days of receiving a valid request.

• Right of access — you may request a copy of the personal data bd56 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification — you may request correction of inaccurate or incomplete personal data. For account profile corrections, many fields can be updated directly within your account settings.
• Right to erasure — you may request deletion of your personal data where bd56 no longer has a lawful basis to retain it. Note that certain data must be retained for legal and regulatory compliance purposes and cannot be deleted on request (see Section 7).
• Right to restriction — you may request that bd56 restrict processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability — where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including profiling for marketing purposes. bd56 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

bd56 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive. In such cases, bd56 may charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

11 Minors and Age Restriction

If you are a parent or guardian and believe that a minor in your care has registered a bd56 account or submitted personal data to the Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.

12 Third-Party Links and Embedded Content

The bd56 Platform may contain links to third-party websites or embed content from third-party providers (such as game studio interfaces). This Privacy Policy applies solely to data collected by bd56 through its own Platform. bd56 is not responsible for the privacy practices of any third-party website or service provider that you access via a link or embedded interface on the Platform.

We encourage you to review the privacy policies of any third-party services you interact with, particularly payment providers such as bKash, Nagad, Rocket, and Upay, which operate their own independent data handling practices governed by their own privacy policies.

13 Updates to This Privacy Policy

bd56 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, bd56 will notify registered Members via email or via a prominent notice on the Platform. The Effective Date displayed at the top of this page will be updated each time a revised version comes into force.

Your continued use of the bd56 Platform after the updated Effective Date constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any changes, you should cease using the Platform and request account closure as set out in the Terms & Conditions. The most current version of this Privacy Policy is always available at bd56.io/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd56 handles your personal data, please contact us using the details below. All privacy-related communications are handled by our dedicated support team with care and confidentiality.

bd56 is committed to resolving all privacy concerns promptly and fairly. If you remain dissatisfied after receiving our response, you may seek further recourse through any applicable dispute resolution or data protection authority available under the laws of Bangladesh.