bd1991 Privacy
Policy

1.1 Registration Data. When you create a bd1991 account, we collect your full name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is used to establish your account identity, verify that you meet the 18+ age requirement, and communicate with you about your account.

1.2 Identity Verification Data. To comply with our KYC obligations, bd1991 may request a copy of your national identity card (NID), passport, or other government-issued photo identification. We may also request proof of address (such as a recent utility bill or bank statement) and, in some cases, proof of source of funds. These documents are processed by our verification team and stored in encrypted form.

1.3 Financial Data. bd1991 collects the information necessary to process your deposits and withdrawals. This includes your bKash, Nagad, Rocket, or Upay mobile number (for mobile financial service transactions) and your bank account details (for bank transfer transactions). bd1991 does not store full card numbers or CVV codes. Payment data is handled in compliance with applicable financial data security standards.

1.4 Transaction and Gaming Data. We maintain a record of all financial transactions on your account (deposits, withdrawals, bonus credits, and adjustments) as well as your gaming activity (games played, bet amounts, results, and session durations). This data is used for account management, dispute resolution, responsible gaming monitoring, and compliance reporting.

1.5 Technical and Device Data. When you access bd1991, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, preferred language, and time zone. This data helps us deliver a consistent experience, detect suspicious access patterns, and diagnose technical issues.

1.6 Communications Data. If you contact bd1991 via email or live chat, we retain the content of those communications for support, quality assurance, and dispute resolution purposes. Communication records are stored for a maximum of 3 years from the date of the interaction.

2.1 Account Operations. The primary use of your personal data is to create, maintain, and manage your bd1991 account. This includes processing your registration, authenticating your identity when you log in, communicating essential account notifications (such as deposit confirmations, withdrawal updates, and security alerts), and providing customer support when you need it.

2.2 Payment Processing. Your financial data is used exclusively to process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer). bd1991 shares the minimum necessary financial data with payment processors solely to complete your requested transactions. Payment processors are contractually bound to use this data for no other purpose.

2.3 Regulatory Compliance. bd1991 uses your identity and transaction data to fulfil its obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements. This includes age verification to confirm that all players are 18 years of age or older, screening against relevant watchlists, and filing regulatory reports where legally required. These processing activities cannot be opted out of — they are mandatory for the operation of the platform.

2.4 Responsible Gaming Monitoring. bd1991 analyses your gaming activity data to identify patterns that may indicate problem gambling behaviour, such as significant increases in deposit frequency, extended session durations, or rapid loss of large amounts. Where such patterns are detected, our responsible gaming team may proactively reach out to offer support tools. This processing is carried out in your interest and forms part of our duty of care as an operator.

2.5 Fraud and Security. Technical data — including IP address, device fingerprint, and login patterns — is used to detect and prevent fraudulent activity, unauthorised access, and prohibited multi-account behaviour. bd1991 employs automated fraud-detection systems that flag anomalous patterns for human review. Where fraud is confirmed, the data may be retained beyond the normal retention period and shared with relevant authorities.

2.6 Marketing Communications. With your explicit consent, bd1991 may send you promotional communications about new games, bonuses, seasonal promotions (such as those tied to BPL, IPL, Eid, or Pohela Boishakh), and other platform news. You may withdraw your consent to receive marketing communications at any time by updating your account preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.7 Platform Improvement. Aggregated and anonymised usage data — in which no individual player can be identified — is used to analyse platform performance, identify popular features, and guide product development decisions. This processing involves no individual-level profiling and does not affect any decisions made about your account.

3.1 Payment Service Providers. To process your deposits and withdrawals, bd1991 shares the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, and our banking partners such as Dutch-Bangla Bank, City Bank, and BRAC Bank. Each payment partner acts as an independent data controller for their portion of the transaction and is subject to their own privacy policy and applicable financial regulation.

3.2 Game Providers. bd1991 integrates games from licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable your access to these games and to record your game history, certain account data (such as a unique player token) is shared with the relevant game provider's server. Game providers do not receive your full personal profile, payment details, or identity documents.

3.3 Identity Verification Services. To fulfil our KYC obligations, bd1991 may share your identity document images and personal details with a third-party identity verification service. These services are contractually restricted to using your data solely for the purpose of verification and are prohibited from retaining your data beyond the period required to complete the check.

3.4 Legal and Regulatory Disclosure. bd1991 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, where we believe disclosure is necessary to prevent serious harm, or where disclosure is required to protect bd1991's legal rights in a dispute. We will not disclose more data than is required for the stated legal purpose.

3.5 Business Transfers. In the event that bd1991 undergoes a merger, acquisition, restructuring, or sale of its assets, your personal data may be transferred as part of that transaction. You will be notified by email if a transfer results in a material change to how your data is processed, and you will be given the opportunity to delete your account before the transfer takes effect if you wish.

3.6 No Cross-Border Transfers Without Safeguards. bd1991 does not transfer your personal data to entities located outside of Bangladesh unless appropriate safeguards — such as contractual data protection clauses — are in place to ensure your data receives equivalent protection. Where such transfers are necessary (for example, to access certain game provider infrastructure), bd1991 ensures a data processing agreement is executed with the receiving party prior to transfer.

4.1 What Are Cookies. Cookies are small text files that are stored on your device when you visit the bd1991 website. They allow the platform to recognise your browser across pages and sessions, store your login state, and remember settings such as your preferred language and currency display. Cookies do not contain executable code and cannot access other data stored on your device.

4.2 Types of Cookies Used. bd1991 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function correctly. They manage your login session, maintain your account authentication state, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These store your preferences — such as your chosen deposit method, notification settings, and responsible gaming tool configurations — so that you do not need to re-enter them on every visit.
• Analytics Cookies: bd1991 uses anonymised analytics to understand how players navigate the platform, which pages are most visited, and where technical issues occur. Analytics data is aggregated and does not identify individual players.
• Security Cookies: These help bd1991 detect and prevent fraudulent login attempts by recording device and browser characteristics alongside your normal login pattern. They form part of our multi-layer fraud detection system.

4.3 Managing Cookies. You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or configure per-site cookie permissions. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the bd1991 platform. Disabling functional cookies will cause your preferences to reset on each visit.

4.4 No Third-Party Advertising Trackers. bd1991 does not embed third-party advertising tracking pixels or share your browsing data with advertising networks. We do not use your bd1991 activity data to serve you targeted advertisements on other websites or applications outside of the bd1991 platform.

5.1 Security Incident Response. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, bd1991 will notify affected players by email within 72 hours of becoming aware of the breach, to the extent technically possible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps bd1991 has taken or will take to address the breach.

5.2 Player Responsibility. While bd1991 takes extensive measures to protect your data, the security of your account also depends on you. You are responsible for keeping your login credentials confidential, logging out of your account when using a shared device, and notifying bd1991 immediately at [email protected] if you suspect any unauthorised access to your account. bd1991 cannot be held responsible for data breaches that result from the compromise of your own credentials.

5.3 Limitations. No security system is entirely infallible. While bd1991 employs industry-standard safeguards and continuously improves its security posture, it cannot guarantee absolute security against all possible threats. bd1991 will always act promptly and transparently in the event of any security incident affecting player data.

6.1 Active Account Data. While your bd1991 account is active, we retain all account data necessary for the ongoing operation of your account, including registration data, transaction history, gaming records, and communications. This data is available to you at any time through your account settings panel.

6.2 Post-Closure Retention. Following the closure of your bd1991 account — whether voluntary or initiated by bd1991 — we retain your personal data for a minimum of 5 years from the date of closure. This retention period is required to comply with our AML and KYC obligations, to handle any disputes or legal claims that may arise after closure, and to meet tax and financial record-keeping requirements.

6.3 Identity Document Retention. Copies of identity documents (NID, passport, proof of address) are retained for the duration of your account plus 5 years following account closure. After this period, document images are permanently deleted from our systems and cannot be recovered.

6.4 Marketing Data Retention. If you have consented to receive marketing communications, your marketing preferences and contact details for marketing purposes are retained until you withdraw consent or request deletion. Upon withdrawal of marketing consent, you will be removed from all marketing lists within 7 days.

6.5 Anonymisation. Where bd1991 needs to retain data for statistical or analytical purposes beyond the retention periods described above, the data is anonymised — meaning all fields that could identify an individual are permanently removed or obfuscated — before retention. Anonymised data is no longer personal data and is not subject to the restrictions in this Privacy Policy.

8.1 Notification of Changes. When bd1991 makes a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — we will notify registered players by email at least 14 days before the change takes effect. The notification will clearly describe what has changed and why. For minor, non-material changes (such as formatting corrections or clarifications that do not alter the substance of the policy), we will update the "Last Updated" date at the top of this page without individual notification.

8.2 Continued Use After Changes. Your continued use of the bd1991 platform after a material policy change takes effect constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date by contacting our support team at [email protected].

8.3 Governing Version. The version of this Privacy Policy published on the bd1991 website at any given time is the governing version. Archived versions of previous policies are available on request by contacting our Data team. In the event of any conflict between a translated or cached version and the version published on bd1991.app, the published version takes precedence.

8.4 Contact Details. All privacy-related enquiries, data rights requests, and complaints should be directed to the bd1991 Data team. You can reach us by email at [email protected]. Please include "Privacy" or "Data Rights" in the subject line so that your message is routed to the correct team. We aim to respond to all privacy enquiries within 5 business days.

8.5 Children and Minors. The bd1991 platform is strictly intended for adults aged 18 years and above. bd1991 does not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been collected from a minor, that data will be deleted immediately and the account will be permanently closed. If you believe a minor has registered on bd1991, please notify us immediately at [email protected].