bdeasy Privacy Policy

bdeasy is an online casino and sports betting platform serving players in Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our website, mobile interface, games, payment systems, and customer support channels. This Policy applies to all personal data collected through these touchpoints, regardless of whether you are a registered player or a visitor browsing the platform without an account.

This Policy should be read alongside the bdeasy Terms and Conditions and Responsible Gaming Policy. Where there is any conflict between this Policy and another document, this Privacy Policy governs with respect to data protection matters.

We review and update this Policy periodically to reflect changes in our data practices, applicable laws, or platform features. The effective date at the top of this document indicates the most recent revision. Continued use of the bdeasy platform after the publication of an updated Policy constitutes your acceptance of the revised terms.

bdeasy collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the platform, and occasionally from third-party verification or payment partners. The categories of data we collect include:

2.1 Registration and Identity Data

When you create a bdeasy account, we collect your full legal name, date of birth, email address, mobile phone number, and the credentials you choose (username and encrypted password). This data is essential for account creation, identity verification, and communication.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that you meet the minimum age requirement of 18 years, we may request copies of government-issued identity documents, including your National Identity Card (NID), passport, or driving licence. We may also request proof of address in the form of a utility bill or bank statement.

2.3 Financial and Transaction Data

We collect information about the payment methods you use, including mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, card numbers (partially masked), and transaction records. This data is necessary for processing deposits, withdrawals, and detecting fraudulent activity.

2.4 Gaming Activity Data

We record your gaming and betting activity on the platform, including the games you play, bet amounts, win and loss records, session durations, and bonus usage. This data supports fair play monitoring, responsible gaming interventions, and customer support.

2.5 Technical and Device Data

We automatically collect technical information about your device and connection, including IP address, browser type and version, operating system, device identifiers, screen resolution, and time-zone settings. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Usage and Behavioural Data

We collect data about how you navigate and interact with the bdeasy platform, including pages visited, links clicked, features used, and session timestamps. This information helps us improve user experience and personalise content where permitted.

2.7 Communications Data

When you contact bdeasy customer support via live chat or email, we retain records of those communications, including the content of your messages and any attachments, to ensure continuity of service and for quality assurance purposes.

bdeasy uses personal data strictly for the purposes described in this Policy. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The primary purposes for which we use personal data are:

We will only send you promotional communications — such as bonus offers, tournament announcements, and seasonal promotions related to events like Eid, Pohela Boishakh, or the BPL cricket season — if you have opted in to receive them. You may withdraw consent for marketing communications at any time by contacting our support team.

bdeasy processes personal data only when there is a valid legal basis for doing so. The legal bases we rely on are:

• Contract Performance: Processing is necessary to fulfil our obligations under the agreement between you and bdeasy, including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and data retention mandates.
• Legitimate Interests: Processing is necessary for the legitimate business interests of bdeasy, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and analytics.
• Consent: Where we rely on consent — for example, for marketing communications — we will obtain your explicit agreement before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdeasy does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data in the following limited circumstances:

5.1 Payment Processing Partners

To process deposits and withdrawals, we share necessary financial data with our payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks, and partner banks such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners receive only the minimum data necessary to complete the transaction and are contractually bound to handle it securely.

5.2 Game and Technology Providers

Our platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive pseudonymised player identifiers and gaming session data to deliver their games and ensure fair play. They are prohibited from using this data for any purpose beyond game delivery and integrity monitoring.

5.3 Identity Verification Services

We may use third-party KYC and identity verification services to validate the identity documents you submit. These providers process your data under strict confidentiality agreements and are used solely for verification purposes.

5.4 Legal and Regulatory Authorities

bdeasy will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required by applicable law, a valid court order, or a regulatory directive. We will notify you of such disclosures where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bdeasy's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected players in advance and ensure that equivalent data protection standards are maintained by the successor entity.

bdeasy retains personal data only for as long as it is necessary to fulfil the purposes described in this Policy and to meet applicable legal and regulatory obligations. Our standard retention periods are:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with anti-money laundering retention requirements.
• KYC Documents: Retained for a minimum of five years from the date of submission or the date of the last transaction, whichever is later.
• Financial and Transaction Records: Retained for a minimum of seven years to comply with financial record-keeping obligations.
• Gaming Activity Logs: Retained for three years from the date of the relevant activity for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Communications: Retained for two years from the date of the interaction unless the communication is relevant to an ongoing investigation or dispute.
• Marketing Preferences and Consent Records: Retained for three years from the date of last interaction or until consent is withdrawn, whichever is earlier.
• Technical and Log Data: Retained for up to 90 days for security and fraud monitoring purposes, then automatically deleted.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

bdeasy implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and bdeasy servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on secured servers.
• Access Controls: Access to personal data is restricted to bdeasy employees and contractors who require it to perform their specific job functions. Access is governed by role-based permissions and logged for audit purposes.
• Password Hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms to store password data securely.
• Fraud Monitoring: Our automated fraud detection systems continuously monitor account activity for suspicious patterns, including unusual login locations, rapid withdrawal requests, and payment anomalies.
• Regular Security Audits: bdeasy conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our platform infrastructure.

bdeasy uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the website to recognise your device on subsequent visits and retain session information.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and security controls. The platform cannot operate without them, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language, display settings, and responsible gaming configurations, so you do not have to re-enter them on each visit.
• Analytics Cookies: We use analytics cookies to understand how users navigate the platform, which pages are most visited, and where users encounter difficulties. This data is used in aggregate, anonymised form to improve the platform. We do not use analytics cookies to identify individual users.
• Security Cookies: These cookies assist in fraud detection and security monitoring by identifying unusual access patterns or suspicious activity linked to a device or session.

8.2 Third-Party Cookies

Some cookies on the bdeasy platform are set by third-party providers, including game studios and analytics services. These providers are contractually prohibited from using cookies placed on our platform to track users across unrelated websites or for advertising profiling purposes.

8.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block, delete, or receive warnings before cookies are placed. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Detailed instructions for managing cookies can be found in your browser's help documentation.

bdeasy respects your rights over your personal data. As a data subject, you have the following rights with respect to the personal information we hold about you:

To exercise any of these rights, please contact the bdeasy data protection team at [email protected]. We will respond to verified requests within 30 calendar days. We may ask you to verify your identity before processing a request to protect your data from unauthorised disclosure. Some rights are subject to limitations where legal obligations require us to retain or process data regardless of your request.

bdeasy implements age verification controls at the point of account registration and at the time of withdrawal processing. If we become aware that a minor has registered an account or provided personal data without appropriate parental or guardian authorisation, we will take immediate steps to close the account, delete the associated personal data, and, where applicable, reverse any transactions. Any funds deposited by an underage player will be returned to the original payment source.

If you believe that a minor in your household has accessed the bdeasy platform or created an account, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will prioritise any report of this nature.

The bdeasy platform integrates with third-party services including payment gateways, game studios, and analytics providers. While we take care to partner only with reputable service providers, bdeasy is not responsible for the privacy practices of third-party websites or services that are accessible from or integrated into our platform.

Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their own data processing environments. When you play a game delivered by one of these studios, a degree of technical interaction with their servers may occur. We recommend reviewing the privacy policies of any third-party provider whose services you use in conjunction with the bdeasy platform.

Payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard each operate under their own privacy frameworks when processing payment instructions. bdeasy shares only the minimum data necessary to complete a transaction, but we have no control over how payment partners handle data within their own systems.

bdeasy reserves the right to update or revise this Privacy Policy at any time. We will notify registered players of material changes by sending an email to the address on file or by displaying a prominent notice on the bdeasy website. The updated Policy will take effect on the date stated at the top of the document.

Minor changes that do not materially affect how we process your data — such as clarifications of existing language or corrections of typographical errors — may be made without separate notification. In all cases, the current version of this Policy published on the bdeasy website represents the authoritative and binding version.

We encourage you to review this Privacy Policy periodically to remain informed about how bdeasy protects your personal data. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdeasy processes your personal data, please contact our support and data protection team using the details below. All privacy-related enquiries will be handled with priority and responded to within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the bdeasy platform
• Response Time: Within 30 calendar days for formal data subject requests; within 24 hours for urgent security concerns

When contacting us about a data subject request, please include your registered email address and a description of your request so that we can verify your identity and process your enquiry efficiently. bdeasy will not charge a fee for handling data subject requests unless they are manifestly unfounded or excessive in scope.