bd56 Privacy Policy

What This Policy Covers and Who It Applies To

This Privacy Policy ("Policy") applies to all individuals who access or use the bd56 platform at bd56.onl, including visitors who browse the site without registering, players who register and hold an active account, and former account holders whose data bd56 retains for legal or compliance purposes. The Policy describes in plain language what personal data bd56 collects from you, how that data is used, who it may be shared with, how long it is retained, and what rights you have in relation to your personal data.

bd56 acts as the data controller for all personal data collected through the Platform. By registering an account or using the Platform in any way, you acknowledge that you have read and understood this Policy and agree to the collection and use of your data as described here. If you do not agree with any part of this Policy, you should not use the Platform and should contact bd56 support to discuss the closure of your account.

Six Things to Know About How bd56 Handles Your Data

What Personal Data bd56 Collects From You

bd56 collects personal data from you in two ways: directly, when you provide it during registration, verification, or support interactions; and automatically, when you use the Platform and technical data is generated as a by-product of that use. The categories of personal data bd56 collects are listed below:

• Identity and contact information: full name, date of birth, gender, registered mobile number (used for OTP, account recovery, and support), and email address where provided.
• Identity verification documents: national ID (NID), passport, or driving licence — collected only when KYC verification is triggered under bd56's standard verification policy, typically on first withdrawal or where there is a reason to verify identity for compliance purposes.
• Payment and transaction data: the mobile wallet number (bKash, Nagad, Rocket, or Upay) or bank account details used for deposits and withdrawals, deposit amounts, withdrawal amounts, transaction timestamps, and transaction reference numbers. bd56 does not store full card numbers for Visa or Mastercard transactions — card payments are tokenised by the payment processor.
• Gaming activity data: game session records, bet amounts, win and loss history, game provider logs, and session durations. This data is required to settle bets accurately, to investigate disputes, and to monitor for responsible gaming concerns such as problematic play patterns.
• Technical and device data: IP address, device type, operating system, browser type and version, mobile carrier, screen resolution, and session timestamps. This data is collected automatically when you access the Platform and is used for fraud detection, security monitoring, and platform performance optimisation.
• Customer support data: the content of any chat messages, emails, or other communications you send to bd56 support, including any documents or screenshots you attach. This data is retained to maintain a support history, to resolve ongoing disputes, and to improve the quality of bd56's support service.

How bd56 Uses the Personal Data We Collect

The personal data bd56 collects is used exclusively for the following purposes. bd56 does not use your personal data for any purpose that is not listed here without first obtaining your explicit consent:

• 1Account creation and management: to register your bd56 account, verify your identity, maintain your account settings and preferences, process password resets and OTP verifications, and manage account status changes including suspensions and closures.
• 2Transaction processing: to process your deposits from bKash, Nagad, Rocket, Upay, or bank transfers, to credit winnings to your account, to process withdrawal requests to your verified payment method, and to maintain an accurate record of all financial transactions on your account.
• 3Legal and regulatory compliance: to fulfil bd56's obligations under applicable anti-money laundering (AML) law, know your customer (KYC) regulations, and any other legal obligation that requires bd56 to collect, retain, or disclose personal data. Compliance-related data use cannot be restricted or opted out of by users.
• 4Fraud detection and platform security: to monitor account activity for signs of fraud, money laundering, bonus abuse, bot usage, collusion, or any other activity that violates bd56's Terms and Conditions or constitutes a criminal offence. Technical data including IP addresses and device fingerprints is used for this purpose.
• 5Customer support: to respond to your support enquiries, investigate and resolve complaints and disputes, maintain a history of your support interactions for reference in future enquiries, and improve the quality of bd56's customer service over time.
• 6Platform improvement: to analyse aggregated, anonymised usage data — such as which games are most played, what times of day are busiest, and which payment methods are most used — to improve the Platform's performance, content, and user experience. This analysis uses anonymised data and does not reference individual player identities.

The Legal Basis on Which bd56 Processes Your Personal Data

bd56 processes personal data only where there is a valid legal basis for doing so. The legal bases on which bd56 relies are:

• 1Contractual necessity: processing that is necessary for bd56 to fulfil its obligations under the Terms and Conditions you accepted when registering your account. This includes processing your deposits, settling your bets, processing your withdrawals, and maintaining your account. Without this processing, bd56 cannot provide its services to you.
• 2Legal obligation: processing that bd56 is required to carry out by applicable law, including AML obligations, KYC requirements, and any requirement to report suspicious activity to relevant authorities. You cannot opt out of data processing that is required by law.
• 3Legitimate interests: processing carried out for fraud prevention, platform security, and the protection of bd56's legal rights and the rights of other players on the Platform. Before relying on legitimate interests as a legal basis, bd56 conducts a balancing assessment to ensure that the processing does not override your interests or fundamental rights.
• 4Consent: where bd56 wishes to use your personal data for a purpose that is not covered by contractual necessity, legal obligation, or legitimate interests — for example, sending you optional promotional communications — bd56 will ask for your explicit consent before doing so. You may withdraw your consent at any time by contacting bd56 support.

Who bd56 May Share Your Personal Data With

bd56 does not sell your personal data. We share your personal data only with the following categories of recipients, and only to the extent necessary for the specific purpose described:

• 1Payment processors and mobile money operators: bd56 shares your payment reference data with bKash, Nagad, Rocket, Upay, and other payment partners solely to process deposit and withdrawal transactions you initiate. These partners are independently responsible for the security of data held within their own systems and are governed by their own privacy policies.
• 2Game content providers: bd56 shares a session token and anonymised player identifier with game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi to authenticate your game sessions and enable the real-time game feed. These providers do not receive your full name, mobile number, or payment details.
• 3Fraud prevention and security services: bd56 may share technical data — including IP addresses, device fingerprints, and transaction patterns — with specialist fraud detection and identity verification service providers engaged by bd56 to protect the Platform and its players from fraud and financial crime.
• 4Law enforcement and regulatory authorities: where bd56 is required by applicable law, court order, or regulatory direction to disclose personal data to a law enforcement agency or regulatory body, bd56 will comply with that requirement. Where legally permitted to do so, bd56 will notify the affected account holder of the disclosure.

How bd56 Handles Your Mobile Wallet and Payment Data

bd56 understands that the mobile wallet numbers players use for bKash, Nagad, Rocket, and Upay transactions are closely linked to personal identity in Bangladesh, where a mobile number is often tied to a national ID. bd56 therefore treats mobile wallet numbers with the same level of care and protection as other identity documents. Your mobile wallet number is stored in encrypted form in bd56's secure database and is never displayed in full in any bd56 interface or shared with any party other than the relevant mobile money operator for the purpose of processing your transaction.

For USDT cryptocurrency transactions, bd56 records the wallet address used for the transaction but does not link that wallet address to any on-chain identity or share it with any blockchain analytics provider without a specific legal requirement to do so. Crypto transaction hashes are retained as part of the transaction record for dispute resolution purposes only.

How bd56 Uses Cookies and Device Tracking Technologies

bd56 uses a minimal cookie footprint. The Platform operates using the following categories of cookies:

• 1Essential session cookies: these are strictly necessary cookies that enable core Platform functionality, including maintaining your login session between page loads, remembering your language preference, and keeping your active game session alive while you play. Without these cookies, the Platform cannot function. These cookies are deleted automatically when you close your browser session.
• 2Security cookies: used to detect and prevent fraudulent account access, including cookies that store a device fingerprint to identify unusual login attempts from unrecognised devices and cookies that support OTP verification flows. These cookies are a security control and cannot be disabled without disabling the security features they support.
• 3Performance cookies: anonymised cookies that record which Platform pages are visited most frequently and how players navigate between sections. This data is processed in aggregate form only and is not linked to individual player accounts. These cookies help bd56 identify pages that load slowly or sections that players find confusing, so that the Platform experience can be improved.

bd56 does not use third-party advertising cookies, social media tracking pixels, or retargeting tags on any page of the Platform. If you browse bd56.onl without an account, no personal data is collected beyond the essential session cookie and anonymised technical data described above.

How Long bd56 Retains Your Personal Data

bd56 retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply: active account data is retained for the full duration of the account's active lifecycle. Closed account data — including identity documents, transaction records, and gaming history — is retained for a minimum of 5 years from the date of account closure, in compliance with standard AML record-keeping obligations. Support interaction records are retained for 3 years from the date of the interaction. Anonymised platform usage analytics are retained indefinitely, as they contain no personal data.

Where a player requests deletion of their account and personal data, bd56 will delete or anonymise all data that is not subject to a legal retention obligation within 30 days of receiving the verified deletion request. Data that is subject to a legal retention obligation — such as transaction records required by AML regulations — will be retained for the required period and then securely deleted. bd56 will confirm in writing to the requesting player which categories of data have been deleted and which are being retained under a legal obligation, and for how long.

Your Data Rights as a bd56 Player

You have the following rights in relation to your personal data held by bd56. To exercise any of these rights, please contact bd56 support via live chat or by email at [email protected]. bd56 will respond to all rights requests within 5 business days and will complete the request within 30 days:

• Right of access: you have the right to request a copy of all personal data bd56 holds about you, together with information about how it is processed, who it has been shared with, and how long it is retained. bd56 will provide this information in a clear and readable format within 30 days of a verified access request.
• Right to rectification: if any personal data bd56 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. bd56 will action rectification requests within 5 business days. Note that where the inaccuracy relates to identity documents, updated documentation may be required.
• Right to erasure: you have the right to request that bd56 delete your personal data, subject to bd56's legal retention obligations. Where erasure is not possible for legal reasons, bd56 will inform you of this, explain the legal basis for retention, and confirm when the data will be deleted at the end of the retention period.
• Right to restrict processing: you have the right to request that bd56 restrict the processing of your personal data in certain circumstances — for example, where you have contested the accuracy of the data and bd56 is verifying it, or where you have objected to processing based on legitimate interests and bd56 is conducting the balancing assessment. During a restriction period, bd56 will not carry out any processing of your data beyond storing it securely.
• Right to object: you have the right to object to bd56's processing of your personal data where that processing is based on legitimate interests. If you object, bd56 will cease the processing unless bd56 can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. You also have the right to object at any time to the use of your data for direct marketing purposes.

How bd56 Keeps Your Personal Data Secure

bd56 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include: 256-bit SSL/TLS encryption for all data in transit between your device and bd56's servers; AES-256 encryption at rest for all sensitive personal data stored in bd56's database; role-based access controls ensuring that bd56 staff can only access personal data that is necessary for their specific job function; regular security assessments and penetration testing of the Platform's infrastructure; and automated intrusion detection systems that monitor for unusual access patterns in real time.

Despite bd56's security measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bd56 will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach. You should immediately contact bd56 support if you notice any suspicious activity on your account, such as unrecognised logins, unexplained balance changes, or unexpected password reset messages.

How bd56 Notifies You of Changes to This Privacy Policy

bd56 reviews this Privacy Policy at least once per year and updates it whenever there is a material change to how personal data is collected, used, shared, or retained. A material change is one that meaningfully affects your rights or the way bd56 handles your personal data. When a material change is made, bd56 will update the "Last updated" date at the top of this Policy and will notify registered account holders via a notice on the Platform or via their registered mobile number. The updated Policy takes effect on the date stated in the notice. Your continued use of the Platform after that date constitutes acceptance of the updated Policy.