bdwln Privacy Policy

1 Introduction

bdwln ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the bdwln Platform at bdwln.io (the "Platform"). This Privacy Policy sets out, in plain and accessible English, the basis on which any personal data we collect from you, or that you provide to us, will be processed.

Please read this Privacy Policy carefully before using the Platform. By registering an account, making a deposit, placing a bet, participating in any promotional offer, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read together with the bdwln Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall take precedence.

2 Who We Are

bdwln operates as an online betting and casino platform serving players across Bangladesh, with a primary focus on the cities of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur and Mymensingh. The Platform offers sports betting (with a particular emphasis on cricket, including BPL, IPL and ICC tournaments), live casino, slots, crash games, Teen Patti, Andar Bahar and related entertainment services.

For the purposes of data protection, bdwln acts as the data controller in respect of personal data collected and processed through the Platform. As data controller, we determine the purposes for which and the means by which personal data is processed. Our designated point of contact for all privacy-related enquiries is our support team, reachable at [email protected].

3 Data We Collect

We collect and process the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, city and postcode (e.g., Dhaka, Chittagong, Sylhet).
• Email address registered with your account.
• Mobile telephone number associated with your bKash, Nagad, Rocket or Upay wallet.
• Scanned or photographed copies of government-issued identification documents (National Identity Card, passport, or driving licence) submitted during KYC verification.

3.2 Financial & Transaction Data

• Payment method identifiers (e.g., bKash account number, Nagad wallet number, Visa/Mastercard partial card number).
• Deposit amounts, dates, times and transaction reference numbers.
• Withdrawal requests, amounts, processing status and destination payment method.
• Betting and gaming history, including stake amounts, odds, outcomes and account balance movements.
• Bonus and promotional credit records, including wagering activity related to active bonuses.

3.3 Technical & Usage Data

• IP address and geolocation data derived from your IP address.
• Device type, operating system, browser type and version.
• Session duration, pages visited, features accessed and click-path data.
• Login timestamps and frequency of Platform access.
• Cookie identifiers and similar tracking technology data (see Section 8).

3.4 Communications Data

• Records of correspondence with our customer support team via live chat, email or any other channel.
• Feedback, complaint and dispute records submitted through the Platform.
• Survey responses, where you voluntarily participate in a bdwln survey.

4 How We Collect Data

We collect personal data through the following means:

4.1 Direct Collection

You provide data directly to us when you: register an account on the Platform; complete KYC verification by submitting identity documents; make a deposit or request a withdrawal; contact our support team; participate in a promotion or survey; or set responsible gaming limits and preferences.

4.2 Automated Collection

We automatically collect technical and usage data when you access the Platform. This is done through server logs, cookies, pixel tags, local storage objects and similar technologies embedded in the Platform's web and mobile interfaces. This data is collected to ensure the security and performance of the Platform and to detect fraudulent activity.

4.3 Third-Party Sources

We may receive data about you from third-party sources including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, Dutch-Bangla Bank, City Bank): transaction confirmation data to validate deposits and withdrawals.
• Identity verification providers: supplementary data to assist with KYC and AML compliance checks.
• Fraud prevention and risk management partners: signals that assist us in identifying suspicious account behaviour.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and others): game session and outcome data necessary for account balance calculations and dispute resolution.

5 How We Use Your Data

The following table summarises the primary purposes for which bdwln processes your personal data and the corresponding legal basis for each purpose:

bdwln will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

6 Legal Bases for Processing

bdwln processes your personal data on the following legal bases:

• Performance of a Contract: Processing is necessary to provide the services you have requested when registering an account and using the Platform, including processing transactions and settling bets.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering regulations, age verification requirements and record-keeping obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, Platform security, abuse detection and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain optional processing activities — such as sending promotional emails, SMS notifications about bonuses, or live cricket match alerts — we rely on your freely given, specific and informed consent. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your Account Settings.

7 Data Sharing & Disclosure

bdwln does not sell, rent or trade your personal data. We share your data only in the following limited circumstances:

7.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf and under our instruction. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, cloud hosting and infrastructure partners, customer support platform providers, and fraud-detection technology vendors. All service providers are contractually required to implement appropriate technical and organisational security measures and may not use your data for their own purposes.

7.2 Game Content Providers

When you play games powered by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe or Ezugi), limited session and outcome data is exchanged with those providers as technically necessary to operate the game, settle results and ensure the integrity of the gaming session. These providers operate under their own data protection policies.

7.3 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies or other authorised third parties where we are required to do so by applicable law, court order or binding regulatory directive. In such cases, we will disclose only the minimum data necessary to comply with the legal requirement and will notify you of the disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring or sale of all or a portion of bdwln's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and inform you of any changes to this Privacy Policy that result from it.

8 Cookies & Tracking Technologies

bdwln uses cookies and similar technologies (including local storage objects and session tokens) on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. They cannot be disabled without breaking the Platform's core functionality.
• Performance and Analytics Cookies: Collect anonymised data about how visitors use the Platform — which pages are visited most, how long sessions last, and which features are used. This data is used in aggregate form to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as language setting, preferred payment method and responsible gaming limit configurations, so you do not need to re-enter them each session.
• Security and Fraud Prevention Cookies: Assist in identifying and blocking suspicious login attempts, bot traffic and other security threats.

bdwln does not deploy third-party advertising cookies or behavioural targeting cookies. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent access to the Platform.

9 Data Retention

bdwln retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. The following retention periods apply as a general guide:

After the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business planning purposes.

10 Data Security

bdwln implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and bdwln servers is encrypted using industry-standard Transport Layer Security protocols.
• Data-at-Rest Encryption: Personal and financial data stored on our servers is encrypted at the database level, ensuring that even in the event of physical media compromise, data cannot be read without the corresponding decryption keys.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason may access identifiable personal data, and all access is logged and audited.
• Multi-Factor Authentication: Internal system access for bdwln staff requires multi-factor authentication. We also offer and encourage two-factor authentication for player accounts.
• Regular Security Testing: bdwln conducts periodic penetration testing and vulnerability assessments of the Platform and its underlying infrastructure to identify and remediate potential security weaknesses proactively.
• Incident Response Plan: In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdwln will notify affected individuals as promptly as practicable and take immediate remediation steps.

11 Your Rights

As a data subject, you have the following rights in respect of your personal data held by bdwln. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Subject Rights Request". We will respond within 14 business days of receipt.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can also update certain data directly through your Account Settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based. This right is subject to our legal obligation to retain certain data under AML and financial regulations.
• Right to Restrict Processing: You have the right to request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of the data is contested.
• Right to Data Portability: Where processing is based on your consent or performance of a contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where it is based on our legitimate interests, including profiling for fraud prevention purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12 Children & Minors

The bdwln Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we employ automated and manual checks to prevent underage access.

If you are a parent or guardian and believe that a person under 21 years of age has registered an account or provided personal data to bdwln without your consent, please contact us immediately at [email protected]. We will promptly investigate, close the underage account, void all associated activity and securely delete the relevant personal data to the extent permitted by our legal obligations.

bdwln also recommends that parents and guardians install appropriate parental control software on shared devices to prevent minors from accessing gambling websites.

13 Third-Party Links

The bdwln Platform may contain references to third-party game studios, payment providers and sports data services. While we take care to work only with reputable partners, bdwln has no control over and accepts no responsibility for the privacy practices or content of third-party services. We encourage you to read the privacy policy of any third-party service you access in connection with using the Platform.

This Privacy Policy applies exclusively to data processed by bdwln in connection with the Platform. It does not extend to the websites, applications or services of our payment partners, game providers, or any other external entity.

14 Changes to This Policy

bdwln reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or Platform features. When material changes are made, we will update the Effective Date at the top of this page and, where the changes are significant, notify registered players by email to the address on their Account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way bdwln handles your personal data, please contact our dedicated privacy support team. All correspondence should be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Rights Requests: "Data Subject Rights Request"
• Subject Line for Privacy Enquiries: "Privacy Policy Enquiry"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 14 business days for rights requests; within 24 hours for general privacy enquiries
• Language: English