Your Privacy Matters at bdgil

1. Introduction

bdgil ("bdgil", "we", "us", "our") operates the online betting and casino platform accessible at bdgil.io. This Privacy Policy explains how we handle the personal data of all users ("you", "your", "the Player") who interact with our platform, including those who browse without registering, registered account holders, and players who deposit funds and engage in wagering activities.

bdgil is committed to protecting personal data with the highest standards of care. Our data practices are designed to be transparent, proportionate, and consistent with internationally recognised privacy principles, including those reflected in the General Data Protection Regulation (GDPR) framework, adapted to the context of Bangladesh's digital landscape and applicable local laws.

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with bdgil.

If you have any questions about this policy or wish to exercise any of your data rights, please contact our Data Protection team at [email protected]. We aim to respond to all data-related enquiries within 5 business days.

2. Data We Collect

bdgil collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and in limited cases from third-party verification providers. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, and national identification details (e.g., National ID card number, passport number) collected during registration and KYC (Know Your Customer) verification.
• Contact Data: Mobile phone number, email address, and residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other locations).
• Account Data: Username, encrypted password hash, account preferences, communication opt-in status, and account activity history.
• Financial Data: Mobile wallet account identifiers (bKash, Nagad, Rocket, Upay) and bank account details where applicable, transaction history, deposit and withdrawal records, and account balances. Full card numbers and wallet PINs are never stored on bdgil systems.
• Gameplay Data: Betting history, game session records, wager amounts, win/loss outcomes, bonus redemption activity, and session duration logs.
• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Usage Data: Pages visited, features used, time spent on platform, click patterns, and navigation paths within the bdgil interface.
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts, emails, and support ticket history.
• Verification Documents: Copies of identity documents (national ID, passport, utility bills) provided during KYC or enhanced due diligence checks.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by law or compliance obligations, in which case we will notify you separately.

3. How We Use Your Data

bdgil uses your personal data only for specified, legitimate purposes. The table below summarises our primary data processing activities and the legal basis on which each rests:

bdgil does not use your personal data for automated decision-making that produces significant legal effects on you without human review. Responsible gaming alerts and risk flags are generated by automated systems but are always reviewed by a member of our player welfare team before any account action is taken.

If you have opted in to receive marketing communications, you may withdraw your consent at any time by updating your notification preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that took place before the withdrawal.

4. Sharing Your Data

bdgil does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners to process deposits and withdrawals. These providers are bound by their own privacy and security obligations and process your data solely to facilitate your transaction.
• Identity Verification Providers: We may use third-party KYC service providers to assist in verifying your identity documents. These providers process only the specific data required for verification and are contractually prohibited from using it for any other purpose.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to facilitate the delivery of their games within the bdgil platform. These providers do not receive your full personal profile.
• Legal and Regulatory Authorities: bdgil will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or to protect the safety and integrity of the platform and its users.
• Anti-Fraud and AML Networks: In cases of suspected fraud or money laundering, bdgil may share relevant data with industry anti-fraud networks and financial intelligence units as permitted or required by applicable law.
• Platform Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers may process personal data as part of delivering and securing our infrastructure. All such providers are engaged under data processing agreements that restrict how they may handle your data.

Any third party receiving personal data from bdgil is required to implement appropriate technical and organisational security measures and to process that data only for the purposes for which it was shared. bdgil remains responsible for ensuring that these arrangements are properly maintained.

5. Payment Data

bdgil places a particularly high standard of care on the handling of payment-related personal data, given its sensitivity. The following specific protections apply to financial data processed on the bdgil platform:

• Full mobile wallet account numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form. Only masked versions (e.g., ending in the last four digits) are displayed within the platform interface.
• Bank account details provided for wire transfer withdrawals are encrypted at rest and in transit. They are accessible only to the payment operations team and only for the purpose of processing your withdrawal.
• Visa and Mastercard transactions, where supported, are handled through PCI-DSS compliant payment gateways. Full card numbers are not stored on bdgil servers at any stage of the transaction process.
• Payment data is retained for the minimum period required to comply with anti-money laundering record-keeping obligations under applicable Bangladesh financial regulations, after which it is securely deleted.
• bdgil monitors all deposit and withdrawal activity for signs of fraudulent behaviour, including unusual transaction volumes, mismatched identities, and rapid cycling of funds. Suspicious activity is escalated to our compliance team immediately.

6. Cookies & Tracking Technologies

bdgil uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and understand how players interact with the site. The categories of cookies we use are as follows:

• Essential Cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help detect suspicious activity. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and odds display format, so that you do not need to reset them on every visit.
• Analytics Cookies: Collect anonymised or aggregated data about how players navigate the bdgil interface — such as which pages are most visited and where players exit the site. This data helps us improve the platform experience. We use first-party analytics only; we do not use Google Analytics or similar third-party tracking scripts that would share your browsing data with external parties.
• Security & Fraud Prevention Cookies: Help identify automated bots, credential-stuffing attempts, and other malicious activity by tracking behavioural signals across sessions.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use core platform features, including maintaining a logged-in session. Disabling functional and analytics cookies will not prevent you from using the platform but may affect the quality of your experience.

bdgil does not use cross-site tracking cookies that follow your activity on other websites. Our tracking technologies are confined to activity within the bdgil platform itself.

7. Data Retention

bdgil retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to meet applicable legal, regulatory, and compliance obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account being open and active on the platform.
• Closed account data (identity and KYC records): Retained for a minimum of 5 years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 3 years from the date of the interaction, unless part of an ongoing dispute or legal proceeding.
• Session and gameplay logs: Retained for 2 years, after which they are either deleted or aggregated into anonymised statistical records.
• Marketing consent records: Retained for as long as you remain opted-in, plus 1 year following any withdrawal of consent, to document our compliance.

When data reaches the end of its retention period and there is no legal basis for continued storage, bdgil securely deletes or irreversibly anonymises it. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

bdgil implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key measures include:

• Encryption in Transit: All data transmitted between your device and the bdgil platform is encrypted using 256-bit TLS (Transport Layer Security). Connections using outdated or insecure protocols are rejected.
• Encryption at Rest: Sensitive data fields — including identity document data, payment identifiers, and passwords — are encrypted at the database level. Passwords are stored as one-way cryptographic hashes and are never accessible to staff in readable form.
• Access Controls: Access to personal data within the bdgil organisation is governed by a strict role-based access control policy. Staff members access only the data necessary for their specific job function. All access is logged and audited.
• Two-Factor Authentication: bdgil offers two-factor authentication (2FA) for player accounts and enforces it for all internal administrative access to systems containing personal data.
• Intrusion Detection: bdgil employs real-time intrusion detection and monitoring systems to identify and respond to suspicious activity on our infrastructure.
• Security Audits: The platform undergoes regular security assessments, including vulnerability scanning and penetration testing, conducted by independent security professionals.
• Incident Response: In the event of a personal data breach that is likely to result in significant harm, bdgil will notify affected players and relevant authorities as quickly as possible and in accordance with applicable legal requirements.

While bdgil takes every reasonable precaution to protect your personal data, no internet-based system can guarantee absolute security. You play an important role in keeping your account secure — please use a strong, unique password, enable 2FA, and contact us immediately if you suspect any unauthorised access to your account.

9. Your Data Rights

As a bdgil player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our team at [email protected] with your account username and a description of your request. We will respond within 5 business days.

Please note that some of these rights are subject to limitations. For example, the right to erasure cannot override our legal obligations to retain transaction records for a defined period under applicable anti-money laundering regulations. Where we are unable to fulfil a request in full, we will explain the specific reason in our response.

10. Protection of Minors

bdgil strictly prohibits the use of the platform by anyone under the age of 21 years. We do not knowingly collect personal data from individuals under 21. Our registration process includes age verification steps, and additional KYC checks may be triggered where there is reasonable suspicion that a player may be underage.

If bdgil becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will immediately suspend the relevant account, investigate the circumstances, delete the data in question to the extent permitted by applicable law, and take appropriate steps to prevent recurrence.

Parents or guardians who believe that a minor may have created an account on bdgil using false age information are encouraged to contact us immediately at [email protected]. We treat all such reports seriously and will act promptly to investigate and resolve the matter.

11. International Data Transfers

The bdgil platform primarily processes and stores personal data within secure data centre infrastructure. In some cases, the use of third-party service providers — such as cloud hosting partners, game studios, or KYC verification services — may involve the transfer of personal data to servers located outside Bangladesh.

Where such transfers occur, bdgil takes appropriate steps to ensure that your personal data receives a level of protection consistent with the standards described in this Privacy Policy. This may include the use of contractual safeguards, data processing agreements, or equivalent protective mechanisms with the receiving party.

bdgil does not transfer personal data to jurisdictions that are known to present significant data protection risks without first assessing and mitigating those risks through appropriate contractual or technical safeguards.

12. Changes to This Privacy Policy

bdgil reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify you via a prominent notice on the platform interface or by email to your registered address, with a minimum of 7 days' advance notice before the updated policy takes effect.

The effective date at the top of this document indicates when the current version was last updated. We encourage you to review this Privacy Policy periodically to stay informed of how bdgil is protecting your data. Your continued use of the platform after the effective date of any revised policy constitutes your acknowledgement of the changes.

Archived versions of previous privacy policies are available on request from our support team.

13. Contact & Complaints

If you have any questions, concerns, or complaints about how bdgil handles your personal data, or if you wish to exercise any of your data rights, please reach out using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request — [Your Username]" for all data rights enquiries
• Response Time: We aim to acknowledge all privacy-related communications within 48 hours and provide a substantive response within 5 business days
• Language: All communications handled in English

bdgil takes all privacy complaints seriously and will investigate each one thoroughly. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice.

We are committed to resolving privacy concerns fairly and transparently. Our goal is to ensure every bdgil player in Bangladesh feels confident that their personal information is handled with integrity, discretion, and the highest possible standard of care.