Privacy Policy

Your privacy matters to badbd. This policy explains exactly what data we collect, why we collect it, and how we keep it safe.

Introduction

This Privacy Policy ("Policy") describes how badbd ("we", "us", "our", "Platform") collects, uses, stores, shares and protects the personal information of individuals ("you", "Player", "User") who access or use the badbd website, mobile interface, games, sports betting markets, and any related services (collectively, the "Services"). This Policy applies to all users of the Platform, including visitors who browse without registering, registered players, and persons accessing any part of badbd's Services from within or outside Bangladesh.

By registering an account or using the badbd Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Platform immediately. For queries relating to this Policy, you may contact badbd using the email address displayed on the Platform.

Note: This Policy is written in English. The English version is the authoritative version for all purposes. The effective date of this version is 2026. badbd recommends reviewing this Policy periodically, as it may be updated from time to time.

Information We Collect

badbd collects two broad categories of information: information you provide to us directly, and information collected automatically when you use the Platform. The specific data collected in each category is set out below.

Information You Provide Directly

  • Registration data: full name, date of birth, mobile number, email address, residential address, and a username and password of your choosing. This data is collected at the time of account registration and is required to verify your identity and comply with age-verification obligations (21+ only).
  • KYC verification documents: national identity card (NID), passport, or other government-issued identity document; proof of address (utility bill, bank statement); and proof of ownership of the payment method used (e.g. screenshot of bKash or Nagad account showing your registered mobile number).
  • Financial data: deposit amounts, withdrawal requests, transaction histories, and records of payment method accounts used (bKash number, Nagad number, Rocket number, bank account details where applicable). badbd does not store full card numbers or CVV codes.
  • Communications: messages, emails and support tickets you send to badbd support, including any attachments (such as screenshots or identity documents submitted in connection with a dispute or verification request).
  • Preferences and settings: language preference, responsible gaming tool settings (deposit limits, session timers, self-exclusion status), and notification preferences.

Information Collected Automatically

  • Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers. This data is collected each time you access the Platform.
  • Usage data: pages visited, games played, bets placed, session duration, click paths, and interaction logs. This data helps badbd understand how the Platform is being used and identify areas for improvement.
  • Cookies and similar tracking technologies: session cookies, persistent cookies, and pixel tags. See Section 5 of this Policy for full details of how cookies are used on the badbd Platform.
  • Geolocation data: approximate geographic location derived from your IP address. badbd does not use GPS-level precise location tracking. IP-based location is used for fraud prevention and to assess jurisdictional eligibility.

How We Use Your Information

badbd uses the personal information it collects for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without obtaining your separate consent. The table below maps each purpose to the data used and the legal basis for processing.

Purpose Data Used
Account registration and managementRegistration data, device data
Identity verification (KYC) and age verificationKYC documents, registration data
Processing deposits, withdrawals and transactionsFinancial data, registration data
Fraud prevention and anti-money-laundering complianceFinancial data, device data, geolocation, usage data
Customer support and dispute resolutionCommunications, registration data, financial data
Platform improvement and analyticsUsage data, device data, cookies

Legal Basis for Processing

badbd processes your personal data on the following legal bases, which apply depending on the purpose for which the data is used.

  • Contractual necessity: processing your registration data, financial data and KYC documents is necessary for badbd to provide the Services under the Terms and Conditions you agreed to when you created your account.
  • Legitimate interests: badbd has a legitimate interest in preventing fraud, detecting multi-accounting, ensuring platform security, and improving the quality of the Services. These interests do not override your fundamental privacy rights.
  • Legal obligation: badbd is required by applicable laws to collect and retain certain data for anti-money-laundering (AML) compliance, tax reporting, and regulatory cooperation. This processing is mandatory and cannot be avoided.
  • Consent: for optional communications such as promotional emails and SMS notifications, badbd relies on your specific, freely given consent. You may withdraw consent at any time by updating your communication preferences in your account settings.

Cookies and Tracking Technologies

badbd uses cookies and similar technologies to operate the Platform, ensure secure sessions, remember your preferences, and collect anonymised usage analytics. The following categories of cookies are used on the Platform.

  • Strictly necessary cookies: required for the Platform to function. These include session cookies that keep you logged in, security cookies that prevent cross-site request forgery (CSRF) attacks, and load-balancing cookies. These cannot be disabled without breaking the Platform.
  • Functional cookies: remember your preferences such as language choice, display settings and responsible gaming tool configurations. Disabling these may cause the Platform to revert to default settings on each visit.
  • Analytics cookies: collect anonymised data about how visitors use the Platform (pages visited, time spent, clicks). This data is aggregated and cannot be used to identify individual users. badbd uses this data to improve Platform performance and user experience.
  • Security cookies: used for fraud detection and to identify unusual patterns of activity that may indicate bot traffic, scripted account creation, or unauthorised access attempts.

You may control cookie settings through your browser's privacy settings. Note that disabling strictly necessary cookies will prevent you from using core Platform features including login, deposit and game play. badbd does not currently support a separate cookie preference centre within the Platform interface.

Sharing Your Information

badbd does not sell, rent or trade your personal information to any third party for marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

  • Payment service providers: badbd shares transaction reference data with payment processors (including bKash, Nagad, Rocket, Upay and bank partners) strictly to facilitate the processing of deposits and withdrawals. These providers are contractually obligated to handle your data securely and may not use it for their own marketing purposes.
  • Technology and infrastructure partners: companies that provide hosting, content delivery, database management, security monitoring and analytics services to badbd may process your data as data processors acting on badbd's instructions. These partners are bound by strict data processing agreements.
  • Law enforcement and regulatory authorities: where badbd is legally required to disclose personal data to a government authority, law enforcement body, financial regulator or court of competent jurisdiction, we will comply with that legal obligation. Where permitted by law, we will notify the affected player of such a disclosure.
  • Business transfers: in the event of a merger, acquisition, asset sale or corporate restructuring involving badbd, your personal data may be transferred to the successor entity as part of that transaction. You will be notified via the Platform or by email if this occurs and your data is subject to a materially different privacy policy.
badbd will never share your personal data with advertisers, data brokers, social media platforms, or unaffiliated third parties for the purpose of targeting you with advertisements or marketing communications without your explicit consent.

Data Security

badbd takes the security of your personal and financial data seriously. The Platform implements a layered security architecture designed to protect data at rest and in transit. The key security measures in place are described below.

  • SSL/TLS encryption: all data transmitted between your device and the badbd Platform is encrypted using SSL/TLS. This ensures that your login credentials, financial details, and personal information cannot be intercepted during transmission.
  • Access controls: access to player personal data within badbd's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific data categories are permitted to access that data.
  • Password storage: user passwords are never stored in plain text. badbd uses industry-standard one-way hashing with salting to store password credentials. Even badbd's own technical staff cannot retrieve your original password.
  • Fraud detection systems: automated systems continuously monitor transactions and account behaviour for patterns indicative of fraud, bonus abuse, multi-accounting, money laundering and unauthorised access. Suspicious activity triggers a review by badbd's security team.

Despite these measures, no internet-based platform can guarantee absolute security. badbd commits to responding to any confirmed data security incident promptly, taking remedial action, and notifying affected players within a reasonable timeframe where the incident is likely to result in a risk to their rights or interests.

Data Retention

badbd retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply to the main categories of data held by badbd.

  • Account and registration data: retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with anti-money-laundering record-keeping requirements applicable in Bangladesh.
  • Financial transaction records: retained for a minimum of 5 years from the date of each transaction. This period may be extended to 7 years where required by tax or regulatory reporting obligations.
  • Support and communication records: retained for 2 years from the date of the last communication, unless the communication relates to a dispute or investigation, in which case retention follows the relevant legal obligation timeline.

Your Rights Over Your Personal Data

badbd respects your rights over your personal data. Subject to applicable law and certain exceptions (for example, where retaining data is a legal obligation), you have the following rights in relation to the personal data badbd holds about you.

  • Right of access: you may request a copy of the personal data badbd holds about you. We will respond to verified access requests within 30 days.
  • Right to rectification: if you believe personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Corrections to identity data require supporting documentation.
  • Right to erasure: in certain circumstances (for example, where data is no longer needed for the purpose it was collected and there is no overriding legal obligation to retain it), you may request that we delete your personal data. We will assess each erasure request individually.
  • Right to restriction of processing: you may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to our processing it on the basis of legitimate interests.
  • Right to data portability: where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
  • Right to withdraw consent: where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
To exercise your rights: Contact badbd using the support email address displayed on the Platform. To protect your privacy, we will require identity verification before processing any data rights request. We aim to respond to all requests within 30 days. Complex requests may take up to 60 days, in which case we will notify you of the extension.

Payments and Financial Data Privacy

badbd handles financial data with heightened care given the sensitivity of payment information. When you make a deposit via bKash, Nagad, Rocket or any other supported payment method, the transaction is processed through the payment provider's own secure infrastructure. badbd receives a transaction confirmation reference and the associated account identifier (e.g. your bKash mobile number) but does not receive or store your bKash PIN, Nagad PIN, or any equivalent authentication credential for third-party payment systems.

All withdrawal requests on badbd are processed manually by the payments team after identity and account verification checks. Your financial data is never used for any purpose other than processing your transactions, complying with legal obligations (such as AML reporting), and resolving disputes or chargebacks where they arise.

badbd does not share your bKash number, Nagad number, bank account details, or any financial account identifiers with advertisers, analytics companies, or unaffiliated third parties. Your payment data stays within badbd's internal systems and with the relevant payment processing partners only.

Protection of Minors

badbd is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a registered account belongs to a person under 21, we will immediately close the account, delete the associated personal data to the extent permitted by law, and handle any associated funds in accordance with applicable underage gambling regulations. Parents and guardians in Bangladesh who believe their child may have registered on badbd are encouraged to contact us immediately using the support email address on the Platform. We will investigate and act on all such reports promptly.

Changes to This Privacy Policy

badbd may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or Platform features. When we make material changes to this Policy, we will post a notice on the Platform and, where practicable, send a notification to your registered contact details. The updated Policy will display a revised effective date at the top of the document.

Your continued use of the badbd Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. We recommend reviewing this Policy at least once every six months, or whenever you receive a notification of an update from badbd.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data badbd holds about you, please contact the badbd support team in writing. We aim to acknowledge all privacy-related enquiries within 5 business days and provide a substantive response within 30 days.

Contact email: [email protected]

Our Privacy Commitments at a Glance

Five practical commitments that underpin how badbd handles every player's data every day.

SSL on Every Connection

Every page, login, deposit and withdrawal on badbd runs over an SSL-encrypted connection. Your data is never sent in plain text across the internet.

We Never Sell Your Data

badbd does not sell, rent or trade your personal information to any third party for marketing. Your data exists to run your account — nothing else.

Transparent Data Use

Every purpose for which badbd uses your data is documented in this Policy. We do not use your data for undisclosed purposes. If our data practices change materially, we will notify you before the change takes effect.

Right to Delete

You can request deletion of your personal data at any time. Where no legal obligation requires us to retain it, we will erase it promptly and confirm deletion to you in writing.

bKash and Nagad Data Protected

Your bKash number, Nagad number and financial identifiers are never shared with advertisers or data brokers. Payment data stays within badbd's systems and licensed payment partners only.

Ready to Play on badbd?

Your data is protected. Now explore everything badbd has to offer — cricket betting, live casino, slots, and instant bKash payments. 21+ only. Play responsibly.

Explore badbd Casino Read Our FAQ Terms & Conditions