bdummy Privacy Policy

bdummy collects personal information from you at various points during your relationship with our platform. We only collect information that is genuinely necessary for the purposes described in this policy, and we do not collect information in excess of what those purposes require.

Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide us with information that may include:

• Identity information: Full legal name, date of birth, gender, nationality, and National Identity Card (NID) number or passport number.
• Contact information: Mobile phone number (including your bKash or Nagad-linked number), email address, and district or division of residence within Bangladesh.
• Financial information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (where bank transfer is used), transaction history, deposit and withdrawal amounts in Bangladeshi Taka.
• Verification documents: Copies or photographs of your NID, passport, or driver's licence submitted as part of the KYC process.
• Support correspondence: Chat transcripts, emails, and any information you share when contacting the bdummy support team via Live Chat or email.
• Responsible gaming declarations: Self-exclusion requests, deposit limit preferences, cooling-off period instructions, and any problem-gambling disclosures you voluntarily share with our support team.

Information We Collect Automatically

When you visit and interact with the bdummy platform, certain technical information is collected automatically through cookies, log files, and similar technologies:

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet amounts, game session duration, bonus activations, time and date of each interaction, click paths, and feature usage patterns.
• Geolocation data: Approximate location derived from your IP address, used to validate that you are accessing bdummy from Bangladesh and not from a restricted jurisdiction.
• Session data: Login timestamps, session length, authentication events, and logout timestamps used for account security monitoring.

Information from Third Parties

In limited circumstances, bdummy may receive information about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, and banking partners) who confirm the status and ownership of a transaction or payment method as part of our fraud prevention and AML processes.
• Identity verification service providers who assist with KYC document authentication.
• Fraud prevention and AML screening databases that flag accounts or transactions for review based on known risk indicators.
• Game content providers (such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe) who may share anonymised session data for game integrity and technical support purposes.

bdummy uses personal data collected from Bangladesh players for specific, legitimate purposes. We do not use your data for purposes that are incompatible with the reasons it was originally collected. The table below summarises our primary data uses and the corresponding purpose.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated screening (for example, fraud detection) flags your account for review, a member of the bdummy compliance team will assess the situation before any account action is taken.

bdummy processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted when registering your account — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and age verification duties.
• Legitimate interests: Processing carried out to further bdummy's legitimate business interests, provided those interests are not overridden by your own rights and interests. This includes fraud prevention, platform security, responsible gambling monitoring, and general service improvement activities.
• Consent: Where you have given explicit, freely given, and informed consent to a specific processing activity — for example, opting in to receive promotional emails or SMS notifications about new offers and bonuses. You may withdraw consent for marketing communications at any time by contacting our support team.

Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of any processing that took place prior to the withdrawal.

bdummy does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners who facilitate your deposits and withdrawals in BDT. These providers receive only the financial and identity data necessary to process a specific transaction.
• KYC and identity verification providers: Specialist providers who verify the authenticity of identity documents submitted during your KYC process. Document data is transmitted over encrypted channels and is not retained by these providers beyond the verification workflow.
• Game content providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and other licensed studios whose games are integrated into the bdummy platform. These providers may receive a pseudonymous player identifier and session data for the purposes of game delivery, technical support, and game integrity monitoring.
• Customer support platforms: The technology providers who power our Live Chat and support ticketing systems. These platforms process support correspondence on our behalf.
• Analytics providers: Anonymised or pseudonymised usage data may be shared with analytics platforms to support platform performance monitoring and improvement activities.

Legal and Regulatory Disclosure

bdummy may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other competent authorities where we are required to do so by applicable law, court order, or binding regulatory instruction. We will not disclose more data than is required by the specific legal obligation and will, where permitted by law, notify you of such a disclosure.

Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of the bdummy business, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any change to the data controller responsible for your data before the transfer takes effect.

bdummy uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, personalise your experience, and analyse usage patterns. Below is a summary of the cookie categories we use.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may prevent you from accessing certain parts of the bdummy platform. Most modern mobile browsers used by Bangladesh players (Chrome for Android, Samsung Internet, Firefox) allow you to clear cookies and control cookie permissions at the site level from within the browser's privacy settings menu.

bdummy does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place cookies on the bdummy platform.

bdummy retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account being active on the bdummy platform.
• KYC and identity documents: Retained for a minimum of five years from the date of the last transaction on your account, in line with standard AML record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Support correspondence: Chat logs and email records are retained for a minimum of two years from the date of the interaction.
• Self-exclusion records: Where a player has self-excluded, a record of the self-exclusion is retained indefinitely to prevent inadvertent re-registration.
• Analytics and usage data: Pseudonymised analytics data is retained for up to 24 months before being aggregated or deleted.
• Marketing consent records: Records of consent for marketing communications are retained for as long as your account is active, plus two years thereafter.

When personal data is no longer required, it is securely deleted or anonymised in a manner that makes re-identification impossible. Physical document copies, where held, are destroyed using approved secure disposal methods.

As a bdummy player, you have meaningful rights over your personal data. bdummy is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights below, contact our support team via Live Chat or send a written request to [email protected].

• Right of access: You may request a copy of the personal data bdummy holds about you, along with information about how it is being used. We will provide this within a reasonable timeframe at no charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity-sensitive fields (name, NID number, date of birth), corrections may require documentary evidence.
• Right to erasure: You may request that bdummy delete your personal data where it is no longer necessary for the original purpose, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that erasure requests may be declined where retention is required by law (for example, AML record-keeping obligations).
• Right to restrict processing: You may request that we restrict how we use your data while a complaint or correction request is being assessed, or where you have objected to processing pending our verification of whether our legitimate interests override yours.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to your data being used for direct marketing at any time.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another service.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

bdummy takes the security of your personal data seriously and implements technical and organisational measures appropriate to the sensitivity of the data we process. Our security framework includes the following safeguards:

• Encryption in transit: All data transmitted between your device and the bdummy platform is encrypted using TLS 1.2 or higher (HTTPS). This applies to all page loads, login events, form submissions, and API calls.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player data is restricted on a strict need-to-know basis. Staff who do not require access to personal data in order to perform their role do not have it. All staff with data access are subject to confidentiality obligations.
• Two-factor authentication: Optional 2FA is available to all bdummy players via Account Settings. We strongly recommend enabling 2FA to add an additional layer of protection to your account.
• Penetration testing and security audits: The bdummy platform undergoes periodic security testing to identify and address vulnerabilities before they can be exploited.
• Incident response: bdummy maintains a documented data breach response procedure. In the event of a security incident that affects your personal data and poses a risk to your rights, we will notify you promptly via your registered email address.

Despite these measures, no online platform can guarantee absolute security. You also play an important role in protecting your account by keeping your password confidential, using a strong and unique password, and enabling 2FA. If you suspect your account has been compromised, contact bdummy support immediately via Live Chat.

Age verification is a mandatory step in our KYC process. Every player must confirm their date of birth at the point of registration, and documentary proof of age is required before any withdrawal can be processed. Any account found to belong to a person under 18 years of age will be closed immediately, all funds will be handled in accordance with applicable legal requirements, and the matter may be escalated to relevant authorities.

If you are a parent or guardian and believe that a minor has registered an account on bdummy using false age information, please contact our support team immediately via Live Chat or at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

bdummy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, we will notify registered players via the email address on their account and will display a prominent notice on the bdummy platform for a period of at least 14 days following the change.

The updated Privacy Policy will display a revised "Effective Date" at the top of this page. Your continued use of the bdummy platform after the effective date of any revision constitutes your acknowledgment of the updated policy. If you do not agree with any change, you may close your account by contacting the 24/7 Live Chat support team.

Minor amendments — such as clarifications of existing provisions, corrections of typographical errors, or updates to contact details — may be made without specific individual notification, though the Effective Date will be updated accordingly. We recommend reviewing this page periodically to remain informed of the current policy.

If you have any questions about this Privacy Policy, about how bdummy handles your personal data, or if you wish to exercise any of your data rights, please contact our support team using the details below.

• Live Chat: Available 24 hours a day, 7 days a week via the bdummy platform.
• Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in your subject line.
• WhatsApp Support: Available 08:00–00:00 Bangladesh Standard Time (BST, UTC+6).

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full substantive response within 30 days. If you are not satisfied with our response to a complaint, you have the right to escalate the matter through appropriate legal channels available in Bangladesh.

All privacy correspondence and formal data rights requests should be directed to [email protected]. Please do not include your account password or full financial account numbers in any correspondence — bdummy will never ask for these details by email.