bdrome Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bdrome ("the Platform", "we", "us", or "our") collects, processes, stores, shares, and protects personal data belonging to registered players, site visitors, and prospective users (collectively "you" or "the user") in connection with your use of the bdrome website, mobile site, and all associated services.

bdrome is an online casino and sports betting platform serving adult players in Bangladesh. We take our obligations regarding personal data seriously. This Policy is intended to give you a clear and complete picture of exactly what data we hold about you and why, so you can make informed decisions about your use of the bdrome Platform.

By registering an account with bdrome or continuing to use the Platform after this Policy is published or updated, you acknowledge that you have read and understood the practices described herein. This Policy should be read alongside bdrome's Terms and Conditions, which together form the complete agreement governing your use of the Platform.

1. Personal Data We Collect

bdrome collects different categories of personal data depending on how you interact with the Platform. The following cards describe each category, the specific data points involved, and the primary reason we collect them.

2. How We Use Your Personal Data

bdrome processes your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The following list sets out our primary processing purposes and the legal basis on which each rests.

• Account Creation and Management: To register your bdrome account, verify your eligibility (including the 21+ age requirement), and maintain your account during the period you remain a registered player.
• Payment Processing: To accept deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your verified payment method. Transaction data is shared with payment processors solely for this purpose.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct outlined in our Terms and Conditions.
• Legal and Regulatory Compliance: To satisfy applicable anti-money laundering (AML) obligations, retain financial records for the legally required retention period, and respond to lawful requests from competent authorities.
• Platform Operation and Improvement: To deliver the games, sports betting, live casino, and other services that make up the bdrome Platform, and to analyse aggregated usage data to improve performance and user experience.
• Customer Support: To receive, investigate, and respond to support requests, complaints, and dispute submissions submitted by you.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, apply responsible gaming tools that you have requested (deposit limits, cooling-off periods, self-exclusion), and comply with responsible gaming obligations.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaigns (such as those tied to BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh) by email or SMS — but only where you have provided your explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

3. Cookies and Tracking Technologies

bdrome uses cookies and similar tracking technologies to operate the Platform, maintain your session state, and gather analytical data about how the site is used. Cookies are small text files stored on your device by your browser. They do not contain executable code and cannot be used to access other files on your device.

Strictly Necessary Cookies: These are essential to the operation of the bdrome Platform. They maintain your login session, protect against cross-site request forgery, and ensure that the Platform functions correctly. You cannot opt out of strictly necessary cookies while continuing to use the Platform.

Analytical Cookies: These allow bdrome to understand aggregate usage patterns — such as which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used in aggregate form and does not identify individual users. You may decline analytical cookies via your browser settings.

Preference Cookies: These remember your Platform preferences (such as language or display settings) between sessions to provide a more personalised experience. Clearing your browser cookies will remove these preferences.

4. Data Sharing and Third Parties

bdrome does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data with third parties only in the specific, limited circumstances described below.

• Payment Processors: We share the minimum necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, and card networks — solely to process deposits and withdrawals on your behalf.
• Game Providers: Casino game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive session and bet data to operate their games and provide technical support. These providers are bound by contractual data protection obligations.
• Identity Verification Services: Where KYC verification is required, we may share identity documents with approved third-party verification services to confirm the authenticity of your documents.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement — including AML reporting obligations.
• Technical Service Providers: We engage technology service providers (hosting, security monitoring, analytics infrastructure) who process data on our behalf under strict contractual data processing agreements. These providers do not use your data for their own purposes.

Any third party that receives personal data from bdrome is contractually required to process that data in accordance with applicable data protection standards and may not use it for any purpose other than the one for which it was shared.

5. Data Retention

bdrome retains your personal data for as long as your account remains active and for a further period following account closure as required by our legal and regulatory obligations. The specific retention periods are as follows:

• Account and identity data: Retained for a minimum of five years following the permanent closure of your bdrome account, to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulations.
• KYC verification documents: Retained for the duration of your account and for five years following closure. Documents are stored in encrypted form and accessible only to authorised compliance personnel.
• Customer support correspondence: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance purposes.
• Analytical and technical logs: Retained for up to 13 months on a rolling basis, after which they are deleted or anonymised.
• Marketing consent records: Retained from the date of consent until consent is withdrawn. Withdrawal of consent does not retroactively invalidate processing that occurred prior to withdrawal.

When retention periods expire, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised dataset is no longer subject to this Policy as it can no longer be associated with any individual.

6. Data Security

bdrome implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the bdrome Platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Regular security audits and vulnerability assessments of the bdrome infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised account access.
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach in a timely manner.

While bdrome takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You remain responsible for keeping your own account credentials confidential and for ensuring that the device and network you use to access bdrome are reasonably secure.

7. Your Privacy Rights

As a user of the bdrome Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within a reasonable timeframe, and in any event within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data bdrome holds about you, together with information about how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain information directly within your bdrome account settings.
• Right to Erasure: In certain circumstances, you have the right to request that bdrome delete your personal data. This right is subject to exceptions — for example, we cannot erase data that we are legally required to retain for AML or financial record-keeping purposes.
• Right to Restrict Processing: You have the right to request that bdrome restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where bdrome processes your data on the basis of your consent or the performance of a contract, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Object to Marketing: You may opt out of receiving promotional communications from bdrome at any time by contacting [email protected]. We will process your opt-out promptly.

8. Minors and Age Restrictions

bdrome is strictly an adults-only platform. The minimum age to register and use bdrome is 21 years. We do not knowingly collect personal data from any person under the age of 21. Registration by, or on behalf of, a person under 21 is a breach of our Terms and Conditions and any account found to belong to a minor will be immediately closed, with any deposited funds returned to the registered payment method following verification.

If you have reason to believe that a minor has registered on bdrome or is using an account registered in your name, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

9. Changes to This Privacy Policy

bdrome may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via the email address or mobile number associated with their bdrome account, and the "Last Updated" date at the top of this Policy will be revised accordingly.

We encourage you to review this Policy periodically. Continued use of the bdrome Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree to the changes, you should cease using bdrome and may request account closure by contacting our support team.

10. Contact and Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or bdrome's data handling practices, please contact our support team. We take all privacy enquiries seriously and aim to provide clear, helpful responses.

You may reach us at [email protected]. Please include "Privacy Enquiry" or "Privacy Request" in your subject line so that your message is directed to the appropriate team member. We aim to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 10 business days.

How bdrome Protects You

A quick summary of the key protections in place for every bdrome player's data.