bd890 Privacy Policy

bd890 is committed to protecting the privacy and personal data of every player who uses its online casino and sports betting platform. We operate exclusively in the English language and serve the Bangladesh market, with all transactions processed in Bangladeshi Taka (BDT ৳) via trusted local and international payment partners including bKash, Nagad, Rocket, and Upay.

This Policy applies to all personal data processed by bd890 in connection with your use of the platform, including data collected when you register an account, make a deposit or withdrawal, place a wager, interact with customer support, or browse the bd890 website. It applies regardless of the device or method used to access the platform.

We take a privacy-by-design approach to data handling. This means we collect only the minimum data necessary for each purpose, apply appropriate safeguards from the outset, and regularly review our practices to ensure ongoing compliance with applicable data protection principles.

For the purposes of applicable data protection law, bd890 acts as the data controller in respect of all personal data collected through the bd890 platform. As the data controller, bd890 determines the purposes and means by which your personal data is processed.

All data protection queries, subject access requests, and complaints relating to bd890's data handling practices should be directed to our dedicated privacy contact:

• Email: [email protected] (General privacy enquiries)
• Subject line: Please use "Privacy / Data Request" in the subject line of any data-related correspondence so that it can be routed to the appropriate team without delay.

bd890 will acknowledge all data protection correspondence within 48 hours of receipt and provide a substantive response within 30 calendar days, in accordance with standard data subject rights timelines.

bd890 collects personal data across several categories depending on how you interact with the platform. The table below summarises the key data categories and the specific types of information within each:

bd890 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless explicitly required by law or with your clear, informed consent.

bd890 collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide when completing the registration form, submitting KYC documents, entering payment details, or contacting customer support.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies each time you visit or interact with the bd890 platform.
• Transaction processing: Financial data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) as part of the deposit and withdrawal confirmation process.
• Third-party Game Providers: Session and gameplay data returned by Game Provider APIs (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) to record bet outcomes and update your account wallet accordingly.
• Identity verification services: Where bd890 employs a third-party KYC provider to verify the authenticity of identity documents submitted during account registration or withdrawal requests, that provider may return verification status data to bd890.

bd890 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the bd890 Terms & Conditions — including account management, transaction processing, and game delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and age verification duties.
• Legitimate interests: Processing undertaken in pursuit of bd890's legitimate business interests, including fraud prevention, platform security, and improving the quality and performance of our services, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given, and withdrawable consent — principally for optional marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bd890 uses the personal data it collects for clearly defined, lawful purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without obtaining your prior consent. The primary uses of your personal data are as follows:

• Account management: Creating, maintaining, verifying, and securing your bd890 player account, including processing password reset requests and two-factor authentication events.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka (BDT ৳) via your chosen payment method, verifying transaction authenticity, and preventing payment fraud.
• KYC & age verification: Confirming that you meet the minimum age requirement of 21 years and that your identity documents are genuine, in compliance with our responsible gaming and anti-fraud obligations.
• Game delivery & personalisation: Providing access to casino games, cricket betting markets, slots, and live dealer tables; personalising game recommendations based on your historical preferences and activity.
• Responsible gaming: Monitoring gameplay patterns for indicators of potential problem gambling; enforcing self-imposed deposit limits, loss limits, and self-exclusion periods; sending responsible gaming communications where appropriate.
• Customer support: Processing and responding to support tickets, complaints, and general enquiries submitted by email or live chat.
• Security & fraud prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Legal compliance: Retaining records as required by applicable AML and regulatory frameworks; responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, identify technical issues, and enhance the overall player experience.
• Marketing (with consent only): Sending promotional communications about bd890 bonuses, seasonal offers (e.g., Eid promotions, Pohela Boishakh special events, BPL season offers), and new game launches — only where you have opted in and have not subsequently withdrawn consent.

bd890 does not sell, rent, trade, or otherwise transfer your personal data to unaffiliated third parties for their independent commercial or marketing purposes. Personal data is shared with third parties only in the following specific and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data required to authenticate and complete financial transactions. Each processor is bound by its own regulatory obligations and contractual data protection commitments.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios receive session tokens and game-relevant data to deliver game content and return outcome data. Game Providers do not receive your identity or payment data beyond what is strictly necessary for game delivery.
• KYC & identity verification providers: Where a specialist third-party provider is used to verify identity documents, that provider receives the relevant document data solely for the purpose of verification and is contractually prohibited from using it for any other purpose.
• IT infrastructure and security providers: Cloud hosting, server management, and cybersecurity partners who process data on bd890's behalf under strict data processing agreements and are prohibited from accessing data for their own purposes.
• Legal and regulatory authorities: Competent government bodies, law enforcement agencies, and regulators where bd890 is legally required to disclose data — for example, in connection with an AML investigation or a court order. bd890 will inform you of such disclosure where legally permitted to do so.
• Fraud prevention networks: Shared fraud intelligence services where aggregated, pseudonymised signals are used to detect cross-platform fraud patterns. No individually identifiable data is shared beyond what is strictly required.

The bd890 website uses cookies and similar tracking technologies to provide core platform functionality, remember your preferences, and analyse platform performance. Below is a summary of the cookie types used:

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of certain platform features. Please note that strictly necessary cookies cannot be disabled without preventing core platform functionality from operating correctly.

bd890 does not use cookies to collect information about your browsing activity on third-party websites outside of bd890.io.

bd890 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account lifecycle — from registration until account closure.
• Post-closure account data: Following account closure, identity, transaction, and KYC records are retained for a minimum of five (5) years in compliance with standard anti-money laundering record-keeping requirements.
• Transaction records: Individual deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Support ticket content and live chat transcripts are retained for a minimum of two (2) years from the date of the last interaction in the relevant ticket thread.
• Responsible gaming records: Self-exclusion records and deposit limit histories are retained for the statutory minimum period required to demonstrate compliance with responsible gaming obligations, typically five (5) years post-exclusion.
• Marketing consent records: Records of marketing opt-in and opt-out actions are retained for the full period of your account lifecycle plus two (2) years post-closure, to demonstrate compliance with consent obligations.
• Technical / log data: Server logs and IP address records are retained for a maximum of twelve (12) months unless a longer retention period is required for an ongoing security investigation.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

bd890 applies a layered approach to data security, combining technical, procedural, and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• 256-bit SSL/TLS encryption: All data in transit between your device and bd890 servers is encrypted using industry-standard TLS protocols. The bd890 website is served exclusively over HTTPS.
• Encryption at rest: Sensitive data fields including National ID numbers, financial account references, and password hashes are encrypted at the database level using AES-256 encryption.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required for their role, and all access events are logged and audited.
• Two-factor authentication: 2FA is available to all players for account login and is mandatory for all internal staff accounts with access to player data systems.
• Regular security audits: bd890 conducts periodic penetration testing and vulnerability assessments of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident response: bd890 maintains a documented data breach response plan. In the event of a data breach that is likely to result in risk to the rights and freedoms of affected players, bd890 will notify affected individuals promptly and take immediate remediation steps.

As a data subject, you hold a number of rights in relation to the personal data bd890 holds about you. bd890 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:

• Right of access: You have the right to request a copy of the personal data bd890 holds about you, along with information about how it is used and shared. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update some of your information directly through the Account Settings area of your bd890 account.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. Note that this right is subject to any overriding legal retention obligations, such as AML record-keeping requirements.
• Right to restriction of processing: You may request that bd890 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being considered.
• Right to data portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where bd890 relies on legitimate interests as the legal basis, including objecting to the use of your data for direct marketing purposes. An objection to direct marketing will always be honoured without question.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". Please include sufficient information to identify your account and specify clearly which right(s) you wish to exercise. bd890 will respond within 30 calendar days.

The bd890 platform is strictly intended for adults aged 21 years and above. bd890 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification steps, and accounts where the player's age cannot be confirmed to meet the 21+ requirement are suspended pending documentary proof of age.

If bd890 becomes aware that personal data has been collected from an individual who is below the minimum age of 21, that data will be deleted promptly and the associated account will be permanently closed. Any balance associated with a verified underage account will be handled in accordance with our Terms & Conditions and applicable legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on bd890, please contact us immediately at [email protected] so that we can take appropriate action without delay.

bd890 may send promotional communications to players who have opted in to receive them. Marketing communications may include information about welcome bonuses, reload offers, free spins, cashback promotions, and seasonal campaigns linked to events such as Eid, Pohela Boishakh, BPL season, IPL, and T20 World Cup fixtures.

bd890 will never send marketing communications without a valid, recorded opt-in from the player. The opt-in mechanism is presented clearly during the registration process and can also be accessed at any time through the Account Settings area of your bd890 account.

Opting out: You may unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by bd890.
• Updating your communication preferences in the Account Settings area of your bd890 account.
• Sending a written unsubscribe request to [email protected] with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications will not affect your ability to receive transactional and account management communications (such as deposit confirmations, withdrawal notifications, password reset emails, and responsible gaming messages), which are necessary for the proper operation of your account and cannot be disabled.

The bd890 platform may contain references to third-party Game Providers' content, whose game interfaces are embedded within the bd890 platform under licensing agreements. While bd890 takes reasonable steps to ensure that Game Providers maintain appropriate data protection standards, once you interact directly with a third-party game interface, any data collected by that interface is subject to the Game Provider's own privacy practices.

bd890 is not responsible for the privacy practices or content of any third-party services that operate independently outside the bd890.io domain. If you follow any external link that takes you away from bd890.io, we recommend reviewing the privacy policy of the destination website before providing any personal information.

bd890 reserves the right to update, revise, or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform functionality, or our internal data handling practices. All amendments will be reflected in an updated version of this Policy published at bd890.io/privacy-policy.

Where changes are material — meaning they significantly affect the way your personal data is collected, used, or shared — bd890 will provide advance notice of at least 14 calendar days before the amended Policy takes effect. Notice will be delivered via the email address registered to your bd890 account and via a prominent on-site notice displayed upon login.

For minor or administrative amendments that do not materially affect your rights (such as correcting typographical errors, clarifying existing language, or updating contact details), the updated Policy will be published without prior notice, and the "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the bd890 platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you must discontinue use of the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or bd890's data handling practices, please contact us using the details below. Our support team operates on a 24/7 basis, Bangladesh Standard Time (BST, UTC+6), and we are committed to responding to all privacy-related enquiries promptly and thoroughly.

• General Privacy Enquiries: [email protected]
• Responsible Gaming & Data Requests: [email protected]
• Subject line format: Please use "Privacy Policy Query", "Data Rights Request", or "Data Complaint" as appropriate in the subject line of your email.

bd890 aims to resolve all privacy complaints internally in a fair, timely, and transparent manner. If you submit a complaint and are not satisfied with our response, or if we fail to respond within 30 calendar days of receipt, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Please note that email addresses on this page are displayed as plain text and are not clickable links. Copy the address manually and paste it into your email client to contact us. bd890 will never proactively request your password, full payment card details, or National ID number via email.