Privacy Policy — bd100 Platform
At bd100, your privacy is treated as a first-class obligation, not an afterthought. This Privacy Policy explains exactly what personal data we collect from players across Bangladesh, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own information. We encourage you to read this document in full before creating your account.
Our Commitment
How bd100 Protects Your Data
These six principles guide every data decision we make at bd100. They are not aspirational — they are operational standards built into our systems and processes.
256-bit SSL Encryption
Every byte of data transmitted between your device and the bd100 platform is protected with industry-standard TLS 1.3 encryption. Your login credentials, payment details, and personal information are never exposed in transit.
No Data Selling
bd100 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your information is used solely to operate your account, process payments, verify identity, and improve your experience on the platform.
Your Rights Are Respected
As a bd100 account holder, you retain meaningful rights over your data — including the right to access, correct, and request deletion of your personal information. We respond to all verified data requests within 30 calendar days.
Secure Data Storage
Personal data at rest is stored in encrypted, access-controlled environments. Passwords are stored exclusively in hashed form using modern cryptographic algorithms. bd100 does not store unencrypted payment card numbers or CVV codes.
Defined Retention Periods
bd100 retains personal data only for as long as necessary for the purposes it was collected, or as required by applicable law. Account data for closed accounts is retained for a legally mandated minimum period and then securely deleted.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights, bd100 will notify affected players without undue delay. We maintain an internal incident response protocol to detect, contain, and communicate security events efficiently.
1. Data Controller
bd100 ("we", "us", "our") is the data controller responsible for the personal information collected through the bd100 platform, accessible at bd100.io and any associated mobile or subdomain properties ("the Platform"). As data controller, bd100 determines the purposes and means by which your personal data is processed.
This Privacy Policy applies to all individuals who interact with the Platform, including registered account holders, prospective players who browse the Platform without registering, and former account holders whose data is retained in accordance with applicable legal obligations.
This Privacy Policy should be read alongside bd100's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and another document, this Privacy Policy shall take precedence with respect to data protection matters.
2. Personal Data We Collect
bd100 collects personal data through multiple touchpoints during your use of the Platform. The categories of data collected are described below:
2.1 Registration & Identity Data
When you create a bd100 account, we collect your full legal name, date of birth, gender, nationality, residential address (including city, district, and postal code), email address, and primary mobile number. This information is required to open your account and to comply with our Know Your Customer (KYC) obligations.
2.2 Identity Verification Documents
To fulfill KYC and anti-money laundering (AML) requirements, bd100 may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents such as utility bills or bank statements dated within the preceding three months.
2.3 Financial Data
bd100 collects the details necessary to process deposits and withdrawals via supported payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. This includes mobile wallet numbers, bank account references, and partial card details. Full card numbers and CVV codes are not stored by bd100 — these are handled by our PCI-DSS compliant payment processing partners.
2.4 Transactional Data
We maintain records of all deposits, withdrawals, game sessions, wagers placed, outcomes, bonus claims, and account balance changes. These records are kept as part of our operational and regulatory obligations and may be used in the event of a dispute.
2.5 Technical & Device Data
When you access the Platform, bd100 automatically collects certain technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, time zone setting, and connection type. This data is used for fraud prevention, security monitoring, and platform optimisation.
2.6 Usage & Behavioural Data
bd100 collects data on how you interact with the Platform, including pages visited, games played, features used, session duration, click patterns, and search queries entered. This data helps us improve game recommendations, personalise your experience, and identify responsible gaming concerns at an early stage.
2.7 Communication Data
If you contact bd100's support team via live chat or email, we retain records of those communications. This includes chat transcripts, email correspondence, and any attachments or documents you share with our support staff.
bd100 collects only the minimum data necessary to provide the services described in our Terms & Conditions. We do not collect sensitive categories of data (such as health data, political opinions, or religious beliefs) except where you voluntarily disclose such information in the context of a responsible gaming request or support interaction.
2.8 Data Collected in Tabular Form
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity | Full name, date of birth, NID/passport number | Registration, KYC verification |
| Contact | Email address, mobile number, residential address | Registration, account settings |
| Financial | bKash/Nagad number, bank account reference, partial card details | Cashier / payments |
| Transactional | Deposit history, withdrawal records, bet history, game logs | Platform activity |
| Technical | IP address, device ID, browser type, OS version | Automatic (session) |
| Behavioural | Pages visited, games played, session duration, click data | Automatic (cookies/analytics) |
| Communications | Live chat transcripts, support emails, complaint records | Support interactions |
| Verification Documents | NID scan, passport copy, utility bill, bank statement | KYC / withdrawal review |
3. Lawful Basis for Processing
bd100 processes personal data only where a valid lawful basis exists. The lawful bases we rely on are described below:
- Contractual Necessity: The majority of personal data processing at bd100 is necessary to perform the contract between bd100 and you as an account holder. This includes processing data to open and manage your account, process deposits and withdrawals, record game activity, and enforce the Terms & Conditions.
- Legal Obligation: bd100 is required to process certain categories of data — particularly identity and financial records — to comply with anti-money laundering obligations, KYC requirements, and any applicable reporting obligations. This processing is mandatory and cannot be opted out of.
- Legitimate Interests: bd100 processes technical and behavioural data on the basis of its legitimate interest in operating a secure, fraud-free platform and improving the quality of services offered to players. Where legitimate interests are relied upon, bd100 conducts a balancing assessment to ensure that your fundamental rights and interests are not overridden.
- Consent: Where bd100 sends you direct marketing communications by email or SMS, we do so on the basis of your consent. You may withdraw consent at any time using the unsubscribe mechanism in any marketing message or by contacting our support team.
- Vital Interests: In exceptional circumstances, bd100 may process data to protect your vital interests or those of another person — for example, where a responsible gaming concern requires urgent intervention.
4. How We Use Your Personal Data
bd100 uses the personal data it collects for the following specific purposes:
- Creating, maintaining, and managing your bd100 account.
- Processing deposits and withdrawals via bKash, Nagad, Rocket, bank transfer, and card payment.
- Verifying your identity and age in accordance with our KYC and 21+ age verification obligations.
- Detecting and preventing fraudulent transactions, bonus abuse, money laundering, and multi-accounting.
- Providing customer support via live chat and email and maintaining records of those interactions.
- Personalising your gaming experience, including game recommendations and bonus offer targeting.
- Monitoring for responsible gaming indicators and proactively intervening where problem gambling behaviour is identified.
- Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
- Sending promotional and marketing communications where you have consented to receive them.
- Complying with applicable legal and regulatory obligations including record-keeping requirements.
- Defending bd100's legal rights in the event of a dispute, chargeback, or regulatory investigation.
- Analysing platform usage patterns to improve the bd100 product and user experience.
bd100 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players, except where such processing is required for fraud prevention or AML compliance. Where automated fraud decisions are made, you have the right to request human review.
5. Data Sharing & Third Parties
bd100 does not sell your personal data. We share personal data only in the specific, limited circumstances described below:
5.1 Payment Processors
To process deposits and withdrawals, bd100 shares the minimum necessary financial data with our payment processing partners. These include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card scheme processors. All payment partners are required to handle data securely and are subject to their own regulatory obligations.
5.2 Identity Verification Providers
bd100 uses third-party KYC and identity verification service providers to validate the documents you submit during the account verification process. These providers receive the document images and identity data necessary to perform the verification check and are contractually prohibited from using that data for any other purpose.
5.3 Game Studios
When you play games on the bd100 platform provided by third-party studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi, limited technical data (such as a pseudonymous player session token) is transmitted to the studio's game servers to enable gameplay. Game studios do not receive your full name, payment details, or contact information.
5.4 Fraud Prevention & Security
bd100 may share device fingerprint data, IP address information, and behavioural signals with specialist fraud prevention and cybersecurity service providers. This sharing is conducted on the basis of legitimate interests and is subject to strict contractual data protection safeguards.
5.5 Legal & Regulatory Disclosure
bd100 will disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law or by a valid legal order. bd100 will, where legally permitted to do so, inform the affected player of such a disclosure.
5.6 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bd100's business, player data may be transferred to the acquiring or successor entity. In such circumstances, bd100 will ensure that appropriate data protection obligations are carried forward and will notify affected players of any material change in the identity of the data controller.
6. Cookies & Tracking Technologies
bd100 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate and improve the Platform. The categories of cookies used are as follows:
6.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, account security, and the prevention of fraudulent login attempts. Strictly necessary cookies cannot be disabled without impairing the core functionality of the Platform.
6.2 Functional Cookies
Functional cookies allow the Platform to remember your preferences and settings — such as your chosen language, preferred game categories, and display settings — so that you do not need to re-enter these each time you visit. Disabling functional cookies may affect your personalised experience.
6.3 Analytical Cookies
bd100 uses analytical cookies to collect aggregated, anonymised data on how players interact with the Platform. This data helps us understand which pages are most visited, how players navigate between sections, and where technical issues may be arising. Analytical cookies do not identify you as an individual.
6.4 Marketing Cookies
Where you have consented to receive marketing communications, bd100 may use marketing cookies to track whether you have opened or interacted with promotional emails or in-app notifications. This data is used to improve the relevance of promotional content shown to you. You may withdraw consent for marketing cookies at any time.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. However, please note that blocking strictly necessary cookies will prevent you from logging in to your bd100 account. bd100 does not use third-party advertising networks or social media tracking pixels.
7. Data Retention
bd100 retains personal data for the periods set out below. Where multiple retention periods could apply to the same data, we apply the longer period:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AML / KYC legal obligation |
| Financial Transaction Records | 7 years after transaction date | Financial record-keeping requirements |
| Game Session Logs | 3 years after session date | Dispute resolution, RNG audit trail |
| Support Communications | 3 years after last interaction | Complaint handling, legal defence |
| KYC Documents | 5 years after account closure | AML legal obligation |
| Marketing Consent Records | 3 years after consent withdrawal | Demonstrating lawful basis for marketing |
| Technical / Device Logs | 12 months from collection | Fraud detection, security monitoring |
When data reaches the end of its retention period, bd100 securely deletes or anonymises it so that it can no longer be associated with an identified individual.
8. Security Measures
bd100 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include:
- Transport Security: All data transmitted between your device and bd100 servers is encrypted using TLS 1.3 with 256-bit AES encryption. Connections using deprecated TLS versions are rejected.
- Password Security: Account passwords are never stored in plain text. bd100 uses industry-standard cryptographic hashing with salting to protect password data at rest.
- Access Controls: Access to player personal data within bd100's internal systems is restricted to authorised personnel on a need-to-know basis. All internal data access is logged and audited.
- Two-Factor Authentication: bd100 offers optional two-factor authentication (2FA) for account login. We strongly recommend that all players enable 2FA to add an additional layer of protection to their account.
- Intrusion Detection: bd100 operates continuous network monitoring and intrusion detection systems. Anomalous access patterns trigger automated alerts and manual review by our security team.
- Payment Data Handling: bd100 does not store full card numbers or CVV codes on its own systems. Payment card data is tokenised by our PCI-DSS compliant payment partners at the point of entry.
- Penetration Testing: bd100 commissions periodic independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
While bd100 takes all reasonable and industry-standard precautions to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for using a strong, unique password. If you believe your account has been compromised, contact our 24/7 support team immediately.
9. Your Data Rights
As a player whose personal data is processed by bd100, you have the following rights with respect to your information:
9.1 Right of Access
You have the right to request a copy of the personal data bd100 holds about you. Upon receiving a verified request, bd100 will provide a structured summary of your data within 30 calendar days. This is sometimes referred to as a Subject Access Request (SAR).
9.2 Right to Rectification
If any personal data bd100 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details — such as email address and phone number — can be updated directly from your account settings. For changes to core identity data (name, date of birth), you will need to contact our support team and provide supporting documentation.
9.3 Right to Erasure
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that bd100 may be required to retain certain data to fulfil legal obligations (such as AML record-keeping) even after a deletion request is made. Where erasure is not possible in full, bd100 will explain which categories of data must be retained and for how long.
9.4 Right to Restrict Processing
You have the right to request that bd100 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending. During a restriction period, bd100 will continue to store the data but will not process it beyond what is strictly necessary.
9.5 Right to Data Portability
Where processing is carried out on the basis of your consent or contractual necessity, you have the right to receive the personal data you have provided to bd100 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transferred directly to another data controller where technically feasible.
9.6 Right to Object
You have the right to object to the processing of your personal data where bd100 relies on legitimate interests as the lawful basis. You also have an absolute right to object to the use of your personal data for direct marketing purposes. Upon receipt of an objection to marketing, bd100 will cease all marketing communications immediately.
9.7 Rights Related to Automated Decision-Making
Where bd100 uses automated processes to make decisions that significantly affect you (for example, automated fraud detection resulting in account suspension), you have the right to request that the decision be reviewed by a qualified human representative of bd100.
To exercise any of the rights described above, please contact bd100's support team via live chat or by emailing . bd100 will verify your identity before processing any data rights request. We respond to all verified requests within 30 calendar days. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or may be refused, in which case bd100 will explain its reasons in writing.
10. Minors & Age Restriction
The bd100 platform is strictly for adults aged 21 and above. bd100 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not attempt to register an account or interact with any real-money feature of the Platform.
bd100 applies age verification checks during the account registration process. Where there is reason to believe that a registered account is held by a person under 21, bd100 will immediately suspend the account, void any transactions, and delete the personal data collected in connection with that account.
If you are a parent or guardian and believe that a minor under your care has registered an account with bd100, please contact our support team immediately at . We will investigate promptly and take appropriate action including account closure and data deletion.
21+ Only. bd100 enforces a strict minimum age policy with no exceptions. Age verification is a prerequisite for withdrawal processing on all accounts.
11. International Data Transfers
bd100 is primarily operated for the Bangladesh market and stores the majority of player data on servers located in the Asia-Pacific region. However, some of our third-party service providers — including game studio infrastructure providers, fraud prevention platforms, and identity verification services — may process data in other jurisdictions.
Where personal data is transferred outside of Bangladesh, bd100 ensures that appropriate safeguards are in place to protect your information. These safeguards include contractual clauses that require recipient parties to process your data to a standard equivalent to the protections described in this Privacy Policy.
By registering an account with bd100 and accepting our Terms & Conditions, you acknowledge that your personal data may be transferred and processed in jurisdictions outside of Bangladesh as described in this section.
12. Marketing Communications
bd100 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new game launches, seasonal promotions, and special events — but only where you have provided explicit consent to receive such communications during registration or through your account settings.
Marketing communications from bd100 may include information about:
- Welcome bonuses and deposit match promotions available to bd100 players.
- New game releases from studios including Pragmatic Play, Evolution Gaming, Spribe, and Microgaming.
- Cricket betting promotions tied to BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures.
- Seasonal offers aligned with Eid, Pohela Boishakh, Victory Day (December 16), and other culturally significant periods in Bangladesh.
- VIP programme updates, tier upgrades, and exclusive invitation-only events.
- Responsible gaming reminders and self-assessment tools.
You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link included in any marketing email from bd100.
- Replying STOP to any marketing SMS message sent by bd100.
- Updating your communication preferences in your bd100 account settings.
- Contacting our support team via live chat and requesting removal from all marketing lists.
Please allow up to 5 business days for opt-out requests to take full effect across all communication channels. Opting out of marketing communications does not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests, which are sent on the basis of contractual necessity rather than consent.
13. Third-Party Links & Integrations
The bd100 platform may contain references to third-party game studios, payment providers, and service integrations. While bd100 takes care to work only with reputable and security-conscious partners, we are not responsible for the privacy practices of third-party websites or services that operate independently of the bd100 platform.
This Privacy Policy applies exclusively to personal data collected and processed by bd100 in connection with the operation of the Platform. If you navigate to a third-party website — for example, a payment provider's own web portal to manage your bKash or Nagad account — you do so subject to that party's own privacy policy and terms of service.
bd100 recommends that you review the privacy policies of any third-party services you interact with in connection with your bd100 account, particularly those of your chosen payment method providers.
14. Changes to This Privacy Policy
bd100 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, bd100 will:
- Update the "Effective Date" and "Last Reviewed" fields at the top of this Privacy Policy.
- Display a prominent notice on the Platform informing players that the Privacy Policy has been updated.
- Where the change materially affects how we use your data, send a direct notification to the email address registered to your account.
Your continued use of the bd100 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an updated Privacy Policy, you may close your account by contacting our support team. Account closure does not affect our right to retain data in accordance with the retention periods described in Section 7 of this Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how bd100 protects your personal information. The current version of this Privacy Policy supersedes all prior versions.
15. Contact & Data Requests
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd100 processes your personal data, please contact our Data Protection team using the details below. All enquiries are handled in English and responses will be provided within 30 calendar days of receipt of a verified request.
Support & Data Requests
- Email: (plain text — not a clickable link)
- Live Chat: Available 24/7 via the chat widget on the Platform
- Response Time: Live chat responses within 2 minutes; email responses within 48 hours for general queries; up to 30 calendar days for formal data rights requests
- Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
When submitting a data rights request, please include your registered bd100 username and the email address associated with your account so that we can verify your identity before processing your request. bd100 will not action data rights requests received from unverified individuals.
If you are dissatisfied with bd100's response to a data rights request or with our handling of your personal data more generally, you have the right to raise a formal complaint with the appropriate data protection authority in your jurisdiction. bd100 will cooperate fully with any such investigation.
Explore bd100
Ready to Continue?
Now that you have reviewed our Privacy Policy, explore everything bd100 has to offer — from live cricket betting to hundreds of premium slots and live casino games.
21+ Only Play responsibly. See our Responsible Gaming page for self-exclusion and support tools.