Privacy Policy — bdspin Data Protection Commitment

Section 1

Information We Collect

bdspin collects personal information from players through several channels: during account registration, during the KYC (Know Your Customer) verification process, through your use of the platform, and through your communications with bdspin support. We collect only the information that is necessary to provide, maintain, and improve our services and to comply with our legal and regulatory obligations.

1.1 Registration Data

When you create a bdspin account, we collect the following information: your full legal name, date of birth, mobile phone number, email address, and residential address (including city and district within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar). This registration data is used to create and maintain your bdspin account and to verify your identity as required.

1.2 Identity Verification (KYC) Data

Before bdspin processes your first withdrawal, we are required to verify your identity. KYC verification may require you to submit one or more of the following documents: National Identity Card (NID), passport, birth certificate, or driving licence. We may also request a selfie or a photograph of you holding your identity document. KYC documents are stored securely, reviewed by authorised personnel only, and retained for the period required by our compliance obligations.

1.3 Financial and Payment Data

When you make a deposit or withdrawal, bdspin records the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in Bangladeshi Taka (৳), the transaction reference number, and the timestamp of the transaction. bdspin does not store full mobile banking PINs, bank account passwords, or raw card numbers. Payment references are stored in tokenised or masked form.

1.4 Technical and Usage Data

bdspin automatically collects certain technical data when you access the platform. This includes your IP address, device type, operating system, browser type and version, session timestamps, pages visited, games played, bets placed, and any error logs generated during your session. This data is used for platform security, fraud detection, performance optimisation, and to understand how players use bdspin so we can improve the overall experience.

1.5 Communications Data

If you contact bdspin support via live chat or email, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments submitted. This data is used to resolve your query, to train our support team, and to maintain a record of commitments made to you by bdspin.

Data Category	Examples	Collection Method	Required?
Registration Data	Name, date of birth, email, mobile, address	Account sign-up form	Mandatory
KYC / Identity Data	NID, passport, selfie photograph	KYC submission portal	Mandatory (for withdrawals)
Financial Data	bKash / Nagad reference, transaction amount	Payment gateway	Mandatory (for transactions)
Technical Data	IP address, device, browser, session logs	Automatic collection	Automatic
Communications Data	Support chat transcripts, emails	Support channels	Where applicable

Section 2

How We Use Your Data

bdspin uses the personal information we collect strictly for the purposes described below. We do not use your data for purposes that are incompatible with the reason it was originally collected without first notifying you and, where required, obtaining your consent.

Account Management. We use your registration data to create, maintain, and administer your bdspin player account, including processing login requests, sending account notifications, and managing account settings changes.

Identity Verification and KYC Compliance. We use identity documents and personal details to verify that you meet the minimum age requirement of 18 years and to confirm that you are who you claim to be, in line with responsible gaming and anti-fraud obligations.

Payment Processing. Financial data is used to process your deposits and withdrawals accurately and securely, to reconcile transactions, and to investigate and resolve any payment disputes that may arise.

Platform Improvement. Usage and technical data helps us understand which games, features, and content are most valued by bdspin players, enabling us to prioritise product improvements and fix issues faster.

Marketing and Promotions. With your consent, we may use your email address and mobile number to send you information about bdspin promotions, bonuses, seasonal offers (such as Eid and BPL special events), and platform updates. You may withdraw consent at any time via your Account Settings or by contacting support.

Fraud Detection and Security. Technical and financial data is used by our security systems to detect unusual account activity, prevent unauthorised access, identify multi-accounting, and protect the integrity of bdspin's games and payment systems.

Responsible Gaming Monitoring. bdspin uses player activity data — including session duration, deposit frequency, and betting patterns — to identify signs of problem gambling behaviour and to fulfil our responsible gaming obligations. This monitoring is conducted in the interest of player welfare.

Legal and Regulatory Compliance. We are required to retain certain data for compliance purposes, including anti-money laundering (AML) record-keeping. We may also be required to disclose data to law enforcement or regulatory authorities when lawfully compelled to do so.

Section 3

Data Sharing & Third Parties

bdspin does not sell, rent, or trade your personal data to third parties for their own commercial use. However, to operate the bdspin platform effectively, we work with a carefully selected group of third-party service providers who may process your data on our behalf. In each case, we take steps to ensure that data is shared only to the extent necessary and that third parties are contractually bound to handle your information with the same level of care that bdspin applies.

3.1 Service Providers

bdspin shares data with third-party service providers who assist us in running the platform. These include: game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who may receive anonymised session data to deliver game content; payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) who receive the transaction data necessary to execute deposits and withdrawals; and IT infrastructure and hosting providers who store platform data on secure servers.

3.2 Legal Disclosure

bdspin may disclose your personal data to government authorities, law enforcement agencies, or other authorised bodies when we are legally required to do so, or when disclosure is necessary to protect the safety and security of our players, staff, or platform. We will, wherever permitted by law, notify you of such a disclosure request before complying.

3.3 Business Transfers

In the event that bdspin undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, bdspin will ensure that appropriate contractual safeguards are in place to protect your data and will notify affected players in advance of any such transfer.

No Cross-Border Transfers Without Safeguards: Where any data processing by a third-party provider takes place outside Bangladesh, bdspin ensures that appropriate data transfer safeguards are in place before sharing any personal information with that provider.

Section 4

Cookies & Tracking

bdspin uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and gather analytical data that helps us improve bdspin for all players. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to remember information about your visit, such as your preferred language, login status, and settings. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies We Use

Cookie Type	Purpose	Duration	Required?
Strictly Necessary	Maintain login session, load balancing, security tokens	Session	Yes — cannot be disabled
Functional	Remember language preference, game display settings	30 days	Optional
Analytical	Aggregate usage statistics, page performance measurement	90 days	Optional
Security	Fraud detection signals, device fingerprinting for account protection	Session / 7 days	Yes — security-critical

4.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are set. Please note that disabling strictly necessary or security cookies may prevent you from logging into your bdspin account or may impair platform functionality. Instructions for managing cookies in popular browsers are available via the help section of your browser of choice. If you are accessing bdspin on a mobile device in Bangladesh, the same cookie controls are available within your mobile browser's settings menu.

4.4 No Third-Party Advertising Cookies

bdspin does not deploy third-party advertising or retargeting cookies. We do not work with ad networks that track your activity across other websites for the purpose of serving you targeted advertising on external platforms.

Section 5

Data Retention

bdspin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying our legal, compliance, accounting, and reporting obligations. The following retention periods apply to different categories of data held by bdspin.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML compliance and audit trail
KYC identity documents	Duration of account + 5 years after closure	Regulatory record-keeping requirements
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Support communications	3 years from last interaction	Dispute resolution and quality assurance
Technical / usage logs	90 days from collection	Security monitoring and platform diagnostics
Marketing consent records	Until consent is withdrawn + 2 years	Proof of consent for compliance purposes

When the applicable retention period expires, bdspin securely deletes or anonymises your personal data so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical analysis, since it no longer constitutes personal data in any meaningful sense.

If you request deletion of your account and personal data before the retention period has expired, bdspin will delete all data that we are not legally required to retain. Any data subject to a mandatory retention obligation will be securely isolated and will not be used for any further operational purpose during the remainder of the retention period.

Section 6

Data Security Measures

bdspin implements a multi-layered approach to data security, combining technical controls, operational procedures, and personnel training to protect player data from unauthorised access, loss, theft, alteration, or disclosure. No digital platform can guarantee absolute security, but bdspin takes every reasonable precaution to minimise risk and to respond swiftly in the event of a security incident.

SSL / TLS Encryption in Transit

All data transmitted between your device and bdspin's servers is encrypted using current Transport Layer Security (TLS) protocols. This prevents interception of your personal or financial information during transmission.

Encryption at Rest

Sensitive personal data — including identity documents and payment references — is stored in encrypted form on bdspin's servers. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.

Access Controls

Access to player personal data within bdspin is restricted on a strict need-to-know basis. All access events are logged, monitored, and periodically reviewed. Former employees have all access credentials revoked immediately upon departure.

Vulnerability Management

bdspin regularly reviews platform code and infrastructure for security vulnerabilities. Critical patches are applied as a priority. Our security team monitors for emerging threats relevant to the online gaming and payment processing sectors.

6.1 Security Incident Response

In the event of a data security incident that affects your personal data, bdspin will assess the nature and severity of the incident promptly. Where the incident poses a risk to your rights and freedoms, bdspin will notify you directly via the email address registered on your account without undue delay. The notification will describe the nature of the incident, the categories of data affected, the likely consequences, and the steps bdspin has taken or proposes to take to address it.

6.2 Your Role in Account Security

While bdspin takes extensive measures to protect your data on our end, you also play an important part in keeping your account secure. We strongly recommend that you use a strong, unique password for your bdspin account, enable two-factor authentication (2FA) via Account Settings, and never share your login credentials with another person. If you suspect that your account has been accessed by an unauthorised party, contact bdspin support at [email protected] immediately.

Section 7

Your Privacy Rights

As a bdspin player, you have a number of rights in relation to the personal data we hold about you. bdspin is committed to honouring these rights and to handling all data-related requests in a timely and transparent manner. To exercise any of the rights described below, please contact bdspin support at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise.

Right of Access. You have the right to request a copy of the personal data that bdspin holds about you, along with information about how it is being used, where it came from, and who it has been shared with. bdspin will provide this information within 30 days of receiving a valid request.

Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly via Account Settings. For KYC-related corrections, contact support with supporting documentation.

Right to Erasure. You may request that bdspin delete your personal data. We will honour erasure requests to the fullest extent permitted by our legal obligations. Data that must be retained under AML or financial record-keeping rules cannot be deleted before the mandatory retention period expires, but will be isolated and not used operationally during that period.

Right to Restriction of Processing. In certain circumstances — for example, where you contest the accuracy of your data or object to its processing — you may request that bdspin restrict how your data is used while the matter is being resolved. During a restriction, we will store your data but not actively process it for operational purposes.

Right to Data Portability. You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that bdspin transmit that data directly to another service provider where technically feasible.

Right to Object to Marketing. You have the right to object to the use of your personal data for direct marketing purposes at any time. You can opt out of marketing communications via Account Settings or by contacting support. We will process your opt-out request within 5 business days.

Response Timeframe: bdspin aims to acknowledge all privacy rights requests within 48 hours and to provide a full substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Section 8

Policy Updates & Contact

bdspin reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable legal requirements, or the introduction of new platform features. When we make material changes to this Policy, we will notify registered players via the email address associated with their bdspin account and will update the "Effective" date at the top of this page.

Minor, non-material updates — such as corrections of typographical errors or clarifications that do not change the substance of any provision — may be made without direct notification. We encourage all bdspin players to review this Privacy Policy periodically so that they remain fully informed about how their personal data is being handled.

Your continued use of the bdspin platform after the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material change to this Policy, you have the right to close your bdspin account and request deletion of your personal data as described in Section 7 above.

8.1 How to Contact bdspin About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdspin handles your personal data, please contact our support team directly. We are available 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

Privacy Contact: Send your privacy-related enquiries to [email protected] with the subject line "Privacy Policy Enquiry". Our team will acknowledge your message within 48 hours and provide a full response within 30 calendar days.

bdspin is committed to resolving all privacy-related concerns directly and fairly. If after contacting us you feel that your concern has not been adequately addressed, you are entitled to seek further redress through appropriate legal channels available in your jurisdiction.

bdspin Privacy Policy

End-to-End Encryption

We Never Sell Your Data

Full Player Control

Secure Data Storage

Payment Data Protection

Transparent Practices