bdt887 Privacy Policy

When you create a bdt887 account, we collect the following information:

• Full legal name as it appears on your national identity document
• Date of birth (used for mandatory 21+ age verification)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Mobile phone number linked to your account
• Email address for account communications
• Username and encrypted password (passwords are never stored in plain text)

This data is required to open and maintain your bdt887 account. Without it, we cannot provide you with our services.

To comply with our Know Your Customer (KYC) obligations, bdt887 may ask you to submit one or more of the following documents:

• National Identity Card (NID) or valid passport
• Proof of residential address (utility bill or bank statement dated within the last three months)
• Proof of payment method ownership — for example, a screenshot of your bKash, Nagad, or Rocket account showing the registered mobile number
• Selfie photograph or liveness check image for identity matching

KYC documents are stored in an encrypted document management system with access restricted to authorised compliance personnel only. Documents are not used for any purpose other than identity verification and fraud prevention.

bdt887 records all deposit and withdrawal transactions associated with your account. This includes transaction amounts in Bangladeshi Taka, transaction timestamps, payment method type (bKash, Nagad, Rocket, Upay, bank transfer), and transaction reference numbers provided by the payment provider. We do not store full mobile banking credentials or bank account numbers — payment authentication takes place entirely within the relevant mobile banking app or banking portal.

bdt887 retains a full record of your gaming and betting activity on the platform. This includes games played, bet amounts, game outcomes, session duration, and any bonuses claimed or wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and improving the bdt887 product. It is not shared with external parties for marketing purposes.

When you access bdt887, our systems automatically collect certain technical data including your IP address, device type and operating system, browser type and version, referring URL, pages visited on bdt887, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation. It is not linked to your personal profile for the purposes of targeted advertising.

If you contact bdt887 customer support via live chat or email, we retain a record of that correspondence. This includes the content of your messages, timestamps, and the resolution status of any support ticket raised. Communications records are used solely for support quality assurance and dispute resolution purposes.

To process your deposits and withdrawals, bdt887 shares necessary transaction data with licensed payment service providers including bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers receive only the minimum data required to complete the transaction and are contractually bound to use that data solely for payment processing purposes.

bdt887 integrates games and live casino streams from technology providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive a pseudonymous player session token and game-specific data (such as bet amounts and game outcomes) necessary to run the game. They do not receive your full name, address, or payment details. Each provider operates under its own data protection framework and is bound by contractual obligations with bdt887.

Where bdt887 uses a third-party KYC or identity verification service to assist with document review and fraud screening, the relevant identity documents and associated personal data will be shared with that provider exclusively for the purpose of completing the verification process. Identity verification partners are selected on the basis of their security certifications and data protection commitments.

bdt887 may be required by law to disclose personal data to competent authorities in response to a lawful legal request, court order, or regulatory investigation. In such cases, bdt887 will disclose only the specific data requested and only to the extent required by the applicable legal obligation. Where permitted by law, bdt887 will notify the affected player of any such disclosure.

Cookies are small text files stored on your device by your web browser when you visit a website. bdt887 uses cookies and similar tracking technologies (such as local storage and session tokens) to keep you logged in between visits, remember your preferences, detect suspicious login activity, and understand how players navigate and use the bdt887 platform.

• Essential cookies — Required for the platform to function. These include session authentication tokens that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Analytical cookies — Used to understand how players interact with bdt887, which pages are most visited, and where errors occur. Data from analytical cookies is aggregated and anonymised.
• Preference cookies — Store your display preferences such as language setting and notification choices so they persist between visits.
• Security cookies — Track login attempts and flag unusual access patterns as part of bdt887's fraud prevention system.

bdt887 does not use third-party advertising cookies or retargeting pixels from ad networks. You may manage browser-level cookie preferences through your device's browser settings, though disabling essential cookies will affect your ability to use the bdt887 platform normally.

bdt887 retains personal data for as long as your account is active and for a defined period thereafter, as required by our operational, legal, and regulatory obligations. The following general retention periods apply:

• Account registration data and KYC documents: retained for the duration of the account plus a minimum of five years following account closure, in accordance with standard anti-money laundering record-keeping requirements
• Transaction records: retained for a minimum of five years from the date of each transaction
• Gameplay and betting logs: retained for three years from the date of the activity
• Customer support communications: retained for two years from the date of the last message in the relevant thread
• Technical and device logs: retained for a maximum of 12 months, after which they are anonymised or deleted

If you close your bdt887 account, your personal data will be retained for the minimum periods outlined above before being securely deleted or anonymised. You may submit a formal data deletion request to the bdt887 support team at any time. Deletion requests will be processed within 30 days, subject to any overriding legal retention obligations. Note that data required for ongoing legal, regulatory, or dispute-resolution purposes cannot be deleted before the applicable retention period expires.

You have the right to request a copy of the personal data bdt887 holds about you. Upon a verified access request, bdt887 will provide a structured summary of your account data, transaction history, KYC status, and any other personal information held in your profile. We aim to fulfil access requests within 14 business days.

If any personal data held by bdt887 is inaccurate or out of date, you have the right to request that it be corrected. You can update most contact details directly within your bdt887 account settings. For corrections to KYC-related information (such as your legal name or date of birth), you will need to provide updated supporting documentation to the compliance team.

You may request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. As noted in Section 5.2, certain data must be retained for legal and regulatory reasons even after an erasure request is submitted.

Where bdt887 processes your data on the basis of your consent — for example, sending you promotional emails about bdt887 bonuses, seasonal offers for BPL or IPL season, or Eid promotions — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To opt out of promotional communications, contact bdt887 support or use the unsubscribe mechanism in any promotional email.

You have the right to object to bdt887 processing your personal data where that processing is based on legitimate interest. bdt887 will assess such objections on a case-by-case basis. Where your objection is upheld, bdt887 will cease the relevant processing unless compelling legitimate grounds override your objection, or the processing is required for the establishment, exercise, or defence of legal claims.

bdt887 implements a layered approach to data security, combining technical controls, access management, and operational procedures to protect player data against unauthorised access, loss, or disclosure. Security measures in place include:

• 256-bit TLS/SSL encryption on all data transmitted between your device and bdt887 servers
• Encrypted storage for all sensitive personal data at rest
• Bcrypt or equivalent one-way hashing for all stored passwords — bdt887 staff cannot view your password in plain text
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Continuous automated monitoring for unusual login patterns, including detection of credential-stuffing attempts
• Regular security assessments and penetration testing of the bdt887 platform infrastructure

In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bdt887 will take immediate containment steps and notify affected players as promptly as practicable, providing details of the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to address the breach.