Privacy Policy — How bdgood Protects Your Data

bdgood collects personal information from you in several ways: directly when you register an account, indirect ly through your use of the platform, and automatically via technical systems when you visit bdgood.app. The categories of information we collect are described in detail below.

1.1 Information You Provide Directly

When you register a player account, make a deposit, request a withdrawal, contact our support team, or participate in any promotion, you may provide us with the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document.
• Contact data: Mobile phone number, email address, and residential address (district, city, and division within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Identity verification documents: Copies of your National Identity Card (NID), passport, or birth certificate submitted during the KYC verification process.
• Financial data: Your bKash, Nagad, Rocket, or Upay mobile wallet number; Visa or Mastercard card details (card number, expiry date); bank account details where applicable for withdrawals via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported institutions.
• Account credentials: Your chosen username and encrypted password hash. We never store your raw password in plain text.
• Support communications: Records of all messages, emails, and live chat conversations exchanged between you and bdgood's customer support team.
• Responsible gaming data: Any self-exclusion requests, deposit limit settings, cooling-off periods, or other responsible gaming preferences you configure on your account.

1.2 Information Collected Automatically

When you visit bdgood.app or use our platform, our servers and third-party analytics tools automatically collect certain technical information about your device and your interaction with the site:

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, time and duration of each session, games played, bets placed, features accessed, and navigation paths through the platform.
• Transaction logs: A complete timestamped record of all deposits, withdrawals, bonus credits, wager placements, and game results associated with your account.
• Location data: Approximate geolocation derived from your IP address, used to confirm that you are accessing the platform from a permitted location and to comply with geo-restriction obligations.
• Cookie and tracking data: Information gathered through cookies, web beacons, and similar tracking technologies as described in Section 4 of this Privacy Policy.

bdgood uses the personal information we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally gathered. The primary purposes for which we process your personal data are set out in the table below.

2.1 Marketing Communications

bdgood will send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, tournaments, and seasonal offers only if you have opted in to receive marketing communications during registration or subsequently through your account settings. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by updating your notification preferences in your account dashboard. Withdrawal of marketing consent will not affect the lawfulness of any processing that took place before your opt-out.

2.2 Automated Decision-Making

bdgood's fraud detection and responsible gaming systems make use of automated analysis of account activity to flag unusual patterns. Where an automated system flags your account for review, a human compliance officer will always review the case before any consequential action (such as account suspension) is taken. You have the right to request human review of any decision that materially affects your account.

bdgood does not sell your personal information to third parties. We share your data only in the limited circumstances described in this section, and only to the extent strictly necessary for the stated purpose.

3.1 Service Providers and Technology Partners

To deliver a fully functional gaming and betting platform, bdgood works with a number of third-party service providers who process personal data on our behalf as data processors. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay process your mobile wallet transactions. Visa and Mastercard networks process card-based deposits. These providers receive only the financial data necessary to complete the transaction.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studio partners receive anonymised or pseudonymised session data necessary to deliver game content and settle game outcomes. Game studios do not receive your full identity data.
• Identity verification providers: Third-party KYC and AML compliance platforms may process your identity documents to assist bdgood in meeting its verification obligations.
• Analytics providers: Aggregated and anonymised usage data may be processed by analytics platforms to help bdgood understand platform performance and improve the user experience.
• Cloud hosting and infrastructure providers: bdgood's platform data is stored on servers hosted by reputable cloud infrastructure providers operating under contractual data processing agreements.

All third-party service providers engaged by bdgood are required to process personal data only in accordance with our instructions, to implement appropriate technical and organisational security measures, and to refrain from using your data for any purpose beyond the contracted service.

3.2 Legal and Regulatory Disclosure

bdgood may disclose your personal information to law enforcement authorities, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or lawful regulatory demand. This includes disclosures required in connection with anti-money laundering investigations, fraud enquiries, or other matters of public interest. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that bdgood undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and of any material changes to the way your data is handled before the transfer takes effect.

bdgood uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, detect fraud, and gather anonymised usage statistics. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies cannot execute code or deliver viruses; they are used solely to store small amounts of data relevant to your interaction with the platform.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account state between page loads, and protect against cross-site request forgery attacks. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Functional cookies: These cookies remember your preferences such as your preferred language, display settings, and responsible gaming configurations. They improve your experience but are not strictly required for core functionality.
• Analytics cookies: We use anonymised analytics cookies to understand how players navigate bdgood.app — which pages are visited most frequently, where users encounter difficulty, and how platform performance can be improved. This data is aggregated and does not identify individual players.
• Security cookies: bdgood deploys security cookies to detect and prevent fraudulent login attempts, bot activity, and account takeover attacks. These cookies work in conjunction with our automated threat detection systems.

4.2 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that blocking functional or analytics cookies may affect your experience on bdgood.app but will not prevent you from accessing the platform's core features.

Detailed instructions for managing cookies are available in the help documentation for all major browsers including Google Chrome, Mozilla Firefox, Safari, Microsoft Edge, and Opera. Refer to your browser's settings menu under "Privacy", "Security", or "Cookies" for specific controls.

bdgood implements a layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to, the following:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial account numbers.
• Bcrypt hashing with salting for all stored account passwords — plain-text passwords are never retained.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access player data.
• Regular internal and third-party security audits of our platform infrastructure.
• Automated intrusion detection and real-time monitoring of server activity for anomalous behaviour.
• Secure, encrypted backups with geographically separated redundancy to protect against data loss.

5.1 Data Retention Periods

bdgood retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention schedule applies:

5.2 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, bdgood will notify impacted players without undue delay and will take immediate remedial action to contain the breach, assess its scope, and prevent recurrence. Notifications will be sent to the email address on record for your account and will include a description of the nature of the breach, the categories of data affected, and the steps we have taken or are taking in response.

As a player on bdgood, you have a number of rights in relation to the personal data we hold about you. bdgood is committed to honouring these rights and making it straightforward for you to exercise them. To submit any privacy-related request, contact our data team at [email protected] with the subject line "Privacy Request – [Your Request Type]". We will acknowledge your request within 5 business days and respond in full within 30 days.

• Right of access: You have the right to request a copy of all personal data that bdgood holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained. We will provide this information in a clear, structured format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Minor corrections (such as updating a phone number or email address) can be made directly through your account settings dashboard.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations — for example, transaction records required by AML law cannot be deleted on request.
• Right to restriction of processing: You may request that bdgood restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where it is based on bdgood's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects. As stated in Section 2.2, a human reviewer is always involved before consequential account decisions are finalised.

The bdgood platform integrates with a number of third-party services to deliver game content, process payments, and support platform operations. While bdgood takes care to partner only with reputable, security-conscious providers, we are not responsible for the privacy practices of third-party services that operate under their own privacy policies.

Game content on bdgood is delivered via iFrames and APIs provided by certified studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you load a game, a connection is established directly between your browser and the game studio's servers. The studio may log technical session data necessary to render the game and settle outcomes — this data is governed by the studio's own data practices and is subject to contractual data processing agreements with bdgood.

Payment transactions executed via bKash, Nagad, Rocket, Upay, Visa, or Mastercard are processed on the respective provider's infrastructure. Your payment credentials are handled directly by the payment provider and are not stored on bdgood's servers. bdgood receives only a transaction reference number and confirmation of success or failure — never your full card number or mobile wallet PIN.

bdgood.app does not contain links to external websites. All navigation on the platform stays within the bdgood domain. If you access bdgood through a link on an external website or through a search engine result, the privacy practices of that referring site are entirely outside bdgood's responsibility and control.

bdgood reviews and updates this Privacy Policy periodically to reflect changes in our data practices, updates to platform features, and developments in applicable law. The "Effective Date" shown at the top of this document and in the hero section above reflects the date on which the current version came into force.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal information — we will notify you by email to your registered address and/or by displaying a prominent notice on bdgood.app for a minimum of 14 days before the changes take effect. Minor clarifications or administrative updates may be made without prior notice.

Your continued use of the bdgood platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any material change to this Privacy Policy, you should contact [email protected] to discuss your options, which may include account closure and the return of any eligible account balance.

Previous versions of this Privacy Policy are available on request by contacting our support team. We maintain a version history of all Privacy Policy documents for a minimum of 5 years.