bd91 Privacy Policy

1. Data We Collect

bd91 collects personal data in several ways — directly from you when you register or use our services, automatically through your interaction with our platform, and in some cases from trusted third-party verification providers. The categories of data we collect are described below.

1.1 Registration and Account Data

When you create a bd91 account, we collect the following information:

• Full legal name — as it appears on your official identity document
• Date of birth — to verify you are 18 years of age or older
• Bangladeshi mobile phone number — used for account authentication and OTP verification
• Email address — used for account communications, transaction receipts, and promotional messages (where opted in)
• Username and encrypted password — passwords are hashed using bcrypt and are never stored in plain text
• Preferred currency — Bangladeshi Taka (BDT) by default

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — required before withdrawals above applicable thresholds — bd91 collects:

• Copy of your Bangladesh National Identity Card (NID) or Passport
• A selfie photograph taken at the time of verification
• Proof of payment method ownership (e.g., screenshot of registered bKash or Nagad account in your name)
• Source of funds information where required for high-value transactions

1.3 Financial Transaction Data

bd91 records all financial activity on your account, including deposit amounts, withdrawal requests, bet histories, bonus credits, and the payment methods used. We store partial payment identifiers (e.g., the last four digits of a card number, or a masked mobile wallet number) but we do not store full card numbers or mobile banking PINs.

1.4 Technical and Usage Data

When you visit bd91.club or use our platform, we automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, session duration, click-path data, and time spent on each section
• Game sessions initiated, bets placed, and outcomes recorded
• Referring URL (if you arrived at bd91 from another website)

1.5 Communications Data

When you contact bd91 support via email at [email protected] or through any in-platform messaging feature, we retain a record of the communication, including your query, our response, and any attachments or supporting documents you provide. This data is used to resolve your issue and to improve our support quality.

2. How We Use Your Data

bd91 uses the personal data we collect for the specific purposes described below. We do not use your data for any purpose that is incompatible with those stated here.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, contact details	Contract performance
Identity and age verification (KYC)	KYC documents, selfie, DOB	Legal obligation / Contract
Processing deposits and withdrawals	Financial transaction data, payment identifiers	Contract performance
Fraud detection and prevention	Technical data, transaction data, device fingerprint	Legitimate interest
Responsible gaming monitoring	Bet history, session data, deposit frequency	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance
Promotional communications (opted-in)	Email address, mobile number, game preferences	Consent
Platform analytics and improvement	Technical data, usage data (anonymised)	Legitimate interest

2.1 Marketing Communications

bd91 will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or subsequently through your account preferences. You may withdraw your consent to marketing communications at any time by updating your account notification settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any communications sent before your opt-out request was processed.

2.2 Automated Decision-Making

bd91 uses automated systems for fraud detection, responsible gaming monitoring, and bonus eligibility assessment. These automated processes may result in account restrictions being applied without prior manual review in time-sensitive situations (for example, where real-time fraud signals are detected). Where an automated decision has materially affected your account, you have the right to request a manual review by contacting [email protected].

3. Data Sharing

bd91 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below.

3.1 Payment Service Providers

To process your deposits and withdrawals, bd91 shares relevant transaction data with our payment partners, which currently include bKash, Nagad, Rocket, Upay, Visa, and Mastercard. The data shared is limited to what is necessary to complete the transaction — typically your registered name, mobile number or card identifier, and transaction amount. Each payment provider operates under its own privacy policy and data security standards.

3.2 Game Technology Providers

bd91's platform integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game powered by one of these providers, certain gameplay data (such as your player session token, bet amounts, and game outcomes) is shared with the relevant provider solely for the purpose of delivering and auditing the game. These providers are contractually prohibited from using your data for any other purpose.

3.3 Identity Verification Partners

bd91 may use trusted third-party identity verification services to assist with KYC document review and age verification. Any data shared with these providers is subject to strict contractual data processing agreements and is used exclusively for verification purposes.

3.4 Legal and Regulatory Disclosure

bd91 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, bd91 will disclose the minimum data necessary to comply with the legal requirement and will, where legally permitted, notify the affected player of the disclosure.

4. Cookies & Tracking

bd91 uses cookies and similar tracking technologies on bd91.club to ensure the platform functions correctly, to maintain your logged-in session, to detect fraudulent access patterns, and to understand how players use our site so that we can improve it.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, store your preferences, and enable secure payment flows. The platform cannot operate without these cookies and they cannot be disabled.
• Analytics cookies: We use anonymised analytics data to understand page performance, session lengths, and feature usage. This data does not identify you personally and is used solely to improve the bd91 platform experience.
• Security cookies: These help bd91 detect and prevent fraudulent login attempts, bot activity, and suspicious transaction patterns. They are active at all times for all users.
• Preference cookies: These remember your platform settings — such as game category preferences or notification choices — so you do not have to reconfigure them on each visit.

4.2 Managing Cookies

You can manage or delete cookies through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to log in, make deposits, or use core platform features. bd91 does not use third-party advertising cookies or cross-site tracking cookies of any kind.

5. Data Security

The security of your personal data is a top priority for bd91. We implement a layered approach to data protection that includes both technical controls and organisational safeguards.

5.1 Technical Security Measures

• Encryption in transit: All data exchanged between your browser and bd91 servers is encrypted using TLS 1.3, indicated by the HTTPS padlock in your browser address bar.
• Encryption at rest: Stored personal data — including KYC documents and financial records — is encrypted using AES-256 encryption.
• Password security: Account passwords are hashed using bcrypt with a per-user salt. Even bd91 staff cannot view your password in plain text.
• Two-factor authentication (2FA): bd91 offers 2FA for all player accounts and strongly recommends enabling it. 2FA significantly reduces the risk of unauthorised account access.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous access patterns, with automated alerts and response protocols in place.

5.2 Organisational Security Measures

Access to player personal data within bd91 is restricted to staff members who require it to perform their job functions. All staff with data access undergo background checks and receive regular data protection training. Privileged access to production data systems requires multi-factor authentication and is logged for audit purposes.

5.3 Data Breach Response

In the unlikely event of a data security incident that poses a risk to player data, bd91 has an incident response plan in place. We will notify affected players promptly via their registered email address and will take immediate remedial action. bd91 will co-operate fully with any regulatory investigation arising from a data breach.

6. Your Privacy Rights

As a bd91 player, you have the following rights with respect to your personal data. These rights can be exercised by contacting [email protected] with the subject line "Data Rights Request".

6.1 Right of Access

You have the right to request a copy of the personal data bd91 holds about you. We will provide this in a structured, machine-readable format (such as JSON or CSV) within a reasonable timeframe following your verified request.

6.2 Right to Rectification

If any personal data held by bd91 about you is inaccurate or incomplete, you have the right to request that we correct it. For certain data fields (such as your registered name or date of birth), correction may require submission of updated identity documentation.

6.3 Right to Erasure

You may request that bd91 delete your personal data. Where erasure is possible and no legal obligation requires us to retain your data, we will delete it and confirm in writing. Note that certain data — particularly transaction records and KYC documents — may need to be retained for defined periods to comply with anti-money-laundering and financial record-keeping obligations, even following account closure.

6.4 Right to Data Portability

You have the right to receive your personal data in a portable format so that it can be transferred to another service provider of your choice. This right applies to data you provided to us directly (such as account registration data) and to data generated through your use of our platform (such as bet history).

6.5 Right to Withdraw Consent

Where bd91 processes your data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on bd91's legitimate interests. If you raise an objection, bd91 will assess whether our legitimate interests are overridden by your privacy interests and will respond accordingly.

7. Data Retention

bd91 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal obligation / dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	Anti-money-laundering compliance
Financial transaction records	Duration of account + 7 years post-closure	Financial record-keeping obligations
Bet history and game logs	Duration of account + 3 years post-closure	Responsible gaming / dispute resolution
Customer support communications	3 years from date of communication	Quality assurance / dispute resolution
Analytics data (anonymised)	Up to 26 months from collection	Platform improvement
Marketing consent records	Until consent is withdrawn + 2 years	Proof of consent / regulatory compliance

When a retention period expires, the relevant data is permanently deleted from bd91 systems or anonymised in a manner that prevents re-identification. Backup systems are purged of expired data on a defined schedule.

8. Policy Updates & Contact

8.1 Updates to This Policy

bd91 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When a material change is made, we will notify registered players via their registered email address and update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of bd91 services after a policy update constitutes acceptance of the revised Privacy Policy.

8.2 Children's Privacy

bd91 services are strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If bd91 becomes aware that personal data has been collected from a minor, the account will be closed immediately, the data securely deleted, and any deposits returned. If you believe a minor has registered on bd91, please notify us immediately at [email protected].

8.3 International Data Transfers

bd91 primarily processes and stores player data on servers serving the Bangladesh region. Where data is transferred to third-party service providers — such as game studios or identity verification partners — who may process data in other jurisdictions, bd91 ensures that appropriate contractual data protection safeguards are in place, consistent with recognised data protection standards.

8.4 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the bd91 data team using the details below. We aim to respond to all data rights requests within 10 business days during Bangladesh Standard Time (BST, UTC+6) working hours.