Privacy Policy —
bd4447 Data Commitment

bd4447 ("we", "us", "our") is committed to safeguarding the privacy and personal data of every individual who visits, registers with, or transacts on the bd4447 platform. This Privacy Policy explains in plain terms how we handle your personal information from the moment you first access our site through every subsequent interaction.

By accessing and using the bd4447 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data in the manner described herein. If you do not agree with any aspect of this policy, you should discontinue use of the platform and contact us at [email protected] to request account closure.

This Policy should be read together with the bd4447 Terms & Conditions, which govern the overall contractual relationship between you and bd4447. Where any aspect of this Policy relates to responsible gaming, additional detail can be found in the Responsible Gaming policy page.

bd4447 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the primary categories of personal data we process:

bd4447 does not intentionally collect any special-category (sensitive) personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is inherent in identity documents submitted for KYC purposes.

bd4447 collects personal data through the following primary channels:

• Direct Provision: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or submitting a complaint.
• Automated Technical Collection: Data collected automatically when you access the bd4447 platform, including IP address, device identifiers, browser fingerprint, and session data gathered through server logs and first-party cookies.
• Payment Processors: Transaction confirmation data received from payment service providers such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard. bd4447 receives only transaction references and confirmation statuses — full payment credentials remain with the payment provider.
• Identity Verification Partners: Where bd4447 uses a third-party KYC or identity verification service, that service may return a verified status and a risk score to bd4447. The underlying document images are processed in accordance with that provider's own data protection policies.
• Analytics Services: Aggregated and anonymised usage analytics generated from your interaction with the platform interface, used to improve platform performance and user experience.

bd4447 processes your personal data only for specific, legitimate purposes. The primary purposes for which your data is used are set out below:

• Account Registration and Management: To create and maintain your bd4447 player account, authenticate your identity at login, and manage account settings and preferences.
• KYC and Age Verification: To confirm that you meet the minimum age requirement of 18 years and to verify your identity in compliance with internal due-diligence standards before approving withdrawals.
• Payment Processing: To facilitate deposits and withdrawals in BDT (৳) through your chosen payment method, and to maintain accurate financial records of all transactions associated with your account.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets, crash games, and all other features of the bd4447 platform in accordance with your account status and applicable wagering rules.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other forms of prohibited conduct that may harm bd4447 or other players on the platform.
• Responsible Gaming Compliance: To monitor gaming patterns and identify indicators of problem gambling, enforce self-exclusion decisions, apply deposit and loss limits at a player's request, and comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, process your complaints, and maintain records of all support interactions for quality assurance and dispute resolution purposes.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal approvals, bonus credits), service updates (scheduled maintenance, policy changes), and, where you have opted in, promotional communications about offers and events relevant to your interests.
• Platform Improvement: To analyse anonymised and aggregated usage data to improve platform performance, navigation, game selection, and overall user experience.
• Legal and Regulatory Compliance: To retain records as required by applicable financial, anti-money-laundering, or gaming-related laws, and to respond to lawful requests from regulatory or law enforcement authorities.

bd4447 processes personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and bd4447 as established when you register an account and accept the Terms & Conditions. This covers account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including KYC obligations, anti-money-laundering regulations, and record-keeping duties imposed by financial compliance frameworks.
• Legitimate Interests: Processing is carried out in pursuit of bd4447's legitimate business interests, including fraud prevention, platform security, detection of multi-accounting, and improvement of the platform through aggregated analytics. In each case, bd4447 has assessed that its legitimate interests are not overridden by the fundamental rights and freedoms of the individuals concerned.
• Consent: Where processing is not justified by any of the above grounds — in particular, for optional marketing communications and the use of non-essential cookies — bd4447 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bd4447 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by bd4447 to validate player identity documents and confirm age eligibility.
• IT Infrastructure and Hosting Providers: Cloud hosting, content delivery, and database service providers who process data on bd4447's behalf under binding data processing agreements that require them to implement equivalent security standards.
• Game Content Providers: Software studios and game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session identifiers necessary for game delivery. These providers do not receive your identity or financial data.
• Fraud and Risk Management Services: Third-party services that assist in detecting suspicious activity, automated bot usage, or patterns associated with money laundering or bonus abuse.
• Legal and Regulatory Authorities: Competent law enforcement agencies, courts, or regulatory bodies where disclosure is required by law, court order, or in connection with the investigation or prevention of a serious crime.
• Professional Advisers: Legal counsel, auditors, and compliance consultants retained by bd4447, subject to professional confidentiality obligations.

Where bd4447 transfers data to a third-party service provider, it does so under a written agreement that requires the recipient to process the data only for the stated purpose, to maintain appropriate security measures, and to comply with applicable data protection obligations.

bd4447 uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your preferences, and to gather analytics data that helps us improve the service. The following categories of cookies may be set when you use the platform:

Strictly necessary cookies are essential to platform operation and cannot be disabled without severely impairing your ability to use the service. All other cookie categories are set only with your consent, which you may manage through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies — please consult your browser's help documentation for instructions.

Please note that disabling analytics or functional cookies may affect the quality of your experience on the bd4447 platform, including the retention of personalised settings between sessions.

bd4447 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your registered account plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping practices.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of last interaction, or longer if the record is relevant to an ongoing dispute or complaint.
• Marketing Consent Records: Retained for the duration of the consent period plus two (2) years following withdrawal of consent, as evidence that consent was properly obtained.
• Server and Technical Logs: Retained for a maximum of ninety (90) days unless a specific log entry is flagged in connection with a fraud or security investigation, in which case it may be retained for the duration of that investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it irrecoverable and no longer attributable to any identified individual.

The specific security measures implemented by bd4447 include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the bd4447 platform is encrypted using 256-bit SSL/TLS protocols. This applies to every page of the platform, not merely the login and payment pages.
• Password Security: Account passwords are processed through a one-way cryptographic hashing algorithm and are never stored or transmitted in plain text. bd4447 staff cannot retrieve your password — only a reset can be issued.
• Access Controls: Access to personal data held in bd4447's systems is restricted to authorised personnel who require it to perform their specific job function. All internal access is logged and subject to periodic audit.
• Intrusion Detection: bd4447's infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and signs of compromise. Automated alerting and response procedures are in place.
• Data Minimisation: bd4447 collects only the personal data it genuinely needs for the stated purpose. Data no longer required is deleted on the schedule described in Section 8.
• Third-Party Security Obligations: All third-party service providers who handle personal data on bd4447's behalf are required by contract to implement security measures that meet or exceed bd4447's own standards.

While bd4447 applies rigorous security measures, no internet-based platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their bd4447 account and to notify bd4447 immediately at [email protected] if they suspect any unauthorised use of their account.

As a user of the bd4447 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your account:

• Right of Access: You may request a copy of the personal data bd4447 holds about you, along with information about how it is being processed. bd4447 will respond within 30 days of a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account. Minor account details (such as contact address) may be updated directly within the account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that this right is subject to bd4447's legal obligation to retain certain records for a minimum period as described in Section 8.
• Right to Restriction: You may request that bd4447 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is disputed or while an objection to processing is being assessed.
• Right to Data Portability: You may request a copy of personal data you have provided to bd4447 in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to Object: You may object at any time to the processing of your personal data on the basis of legitimate interests, including profiling for marketing purposes. bd4447 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bd4447 will respond to all valid rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, of which bd4447 will notify you in advance. All responses will be provided free of charge, except in cases of manifestly unfounded or excessive requests.

Age verification is a mandatory step in the bd4447 KYC process. bd4447 employs identity document checks, date-of-birth cross-referencing, and, where appropriate, third-party age verification technology to confirm that all registered players are at least 18 years of age at the time of registration and at the time of any withdrawal request.

If bd4447 discovers or is notified that personal data has been collected from a player who is, or was at the time of registration, under the age of 18, the following actions will be taken without delay:

• The account will be immediately and permanently closed.
• Any real-money balance remaining in the account (after deduction of any void bonus funds) will be returned via the registered payment method, subject to identity confirmation of the account holder's parent or legal guardian.
• All personal data associated with the underage account will be deleted from bd4447's systems as soon as any legally required retention periods permit.
• The incident will be recorded in bd4447's internal compliance log and reviewed as part of its ongoing age-verification improvement process.

If you are a parent or guardian and believe that your child has registered an account with bd4447, please contact us immediately at [email protected].

bd4447 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform functionality, or internal data processing practices. When a material change is made, bd4447 will provide notice to active registered players via the email address associated with their account, or via a prominent notice published on the platform, at least fourteen (14) days before the change takes effect.

The revised Policy will display an updated "Last Updated" date at the top of this page. Continued use of the bd4447 platform following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must cease using the platform and submit an account closure request to [email protected] before the effective date.

Previous versions of this Policy are available on request by contacting bd4447 support. bd4447 maintains an internal version log of all Privacy Policy amendments.

For all privacy-related enquiries, data subject rights requests, or concerns about how bd4447 handles your personal data, please contact the bd4447 Data Protection team using the following details:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Response Target: Within 1 business day for initial acknowledgement; substantive response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

bd4447 takes all privacy complaints seriously. If you submit a formal complaint, you will receive a written acknowledgement within 24 hours and a full substantive response within 30 calendar days. Where a complaint cannot be resolved within that period, bd4447 will provide an interim response explaining the reason for the delay and a revised target date.