Privacy Policy — bd17

1. Information We Collect

1.1 Information You Provide Directly

When you register an account on bd17, complete your KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with personal information. This includes:

• Registration data: Full legal name, date of birth, email address, and chosen username.
• Identity verification documents: Copies of your National ID card, passport, or other government-issued photo identification submitted during the KYC process.
• Payment information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to fund your account or receive withdrawals. Full card numbers are not stored on bd17 servers; they are processed and tokenised by the respective payment providers.
• Communication records: Messages sent to and received from the bd17 support team via live chat, email, or any other written channel.
• Responsible gaming declarations: Any self-exclusion requests, deposit limit settings, or other responsible gaming instructions you submit through your account settings or via the support team.

1.2 Information Collected Automatically

When you access and use the bd17 platform, certain technical and usage data is collected automatically. This includes:

• Device and browser data: Device type, operating system version, browser type and version, screen resolution, and language preferences.
• Network data: IP address, approximate geographic location derived from IP, and internet service provider name.
• Usage and behavioural data: Pages visited, games played, betting markets accessed, session duration, click-through patterns, and navigation paths within the platform.
• Transaction logs: A complete record of all deposits, withdrawals, wagers placed, and casino game rounds played, including timestamps, amounts in BDT (৳), and outcomes.
• Cookie and session data: Information stored in cookies or session tokens on your device during an active session. See Section 4 for full details.

1.3 Information from Third Parties

In certain circumstances, bd17 may receive personal data about you from third parties. This arises where:

• An identity verification or KYC service provider returns the results of a document check or liveness verification against the information you submitted.
• A payment provider confirms or flags a transaction against your registered payment method.
• A responsible gaming support organisation or a legal authority notifies bd17 of a self-exclusion or account restriction obligation applicable to you.

In each case, bd17 uses such third-party data only to fulfil its legal and regulatory obligations, or to protect the integrity and security of the platform.

2. How We Use Your Information

bd17 uses the personal data it collects for the following specific purposes. We process your data only where we have a lawful basis for doing so, as described against each purpose below.

Purpose	Data Used	Lawful Basis
Creating and managing your account	Registration data, device data	Contract performance
Processing deposits and withdrawals	Payment information, transaction logs	Contract performance
Identity and age verification (KYC)	ID documents, date of birth	Legal obligation
Fraud prevention and security monitoring	IP address, device data, transaction logs	Legitimate interests
Responsible gaming compliance	Behavioural data, transaction logs, RG declarations	Legal obligation / Legitimate interests
Platform improvement and analytics	Usage data, aggregated behavioural data	Legitimate interests
Customer support communications	Communication records, account data	Contract performance
Promotional communications (where consented)	Email address, betting preferences	Consent

bd17 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review. Responsible gaming alerts and fraud risk flags are reviewed by a member of the bd17 compliance team before any account action is taken.

3. Data Sharing & Disclosure

3.1 Service Partners

bd17 works with a limited number of trusted service partners to operate the platform. These partners access your personal data only to the extent necessary to perform their specific function and are contractually prohibited from using your data for any other purpose. Current categories of service partners include:

• Payment processors: bKash, Nagad, Rocket, Upay, and the card networks (Visa, Mastercard) and their underlying acquiring banks, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC services that verify the authenticity of identity documents submitted during account registration or upon withdrawal request.
• Game studios and content providers: Studios such as Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive the technical session data necessary to deliver and record the outcomes of games played on the bd17 platform.
• Cloud infrastructure providers: The hosting and cloud services used to operate bd17's servers and databases. These providers store data in secure, access-controlled environments and do not have the right to access personal data for their own purposes.

3.2 Legal and Regulatory Disclosures

bd17 may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, bd17 will disclose the minimum data required to satisfy the legal obligation and will notify the affected player where it is legally permissible to do so.

3.3 No Sale of Personal Data

bd17 does not sell, rent, or exchange your personal data with third parties for their independent marketing, advertising, or commercial use. Any data-sharing arrangement outside of the service-partner categories listed above requires your explicit prior consent.

4. Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to remember information about your visit — for example, your preferred language, login session status, or items in a cart. bd17 uses cookies and similar technologies (such as local storage and session tokens) to provide core platform functionality and to understand how the platform is being used.

4.2 Categories of Cookies Used by bd17

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain the security of your account during a browsing session, and remember your preferences between pages. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and where users drop off. This data is used exclusively to improve the platform experience and is not linked to your individual identity.
• Functional cookies: These remember choices you make on the platform, such as your preferred language or display settings, so you do not have to reset them on each visit.

4.3 Managing Cookies

You can control and manage cookies through your browser's settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will impair the functionality of the bd17 platform and may prevent you from logging in or using certain features. Detailed instructions for managing cookies in common browsers are available in each browser's help documentation.

bd17 does not use third-party advertising cookies or cross-site tracking pixels. Your browsing activity on bd17 is not shared with advertising networks.

5. Data Retention & Storage

bd17 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of your account relationship with bd17, plus a minimum of five (5) years following account closure, in accordance with international gaming and anti-money laundering record-keeping requirements.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity documents: Retained for the duration of the account relationship plus five (5) years, or for such longer period as may be required by applicable law.
• Customer support communications: Retained for three (3) years from the date of the final communication in a support thread, unless the content relates to an ongoing dispute or regulatory investigation.
• Aggregated analytics data: Retained indefinitely in anonymised, aggregated form, as it no longer constitutes personal data and cannot be linked back to any individual player.

All personal data held by bd17 is stored on secured servers with access restricted to authorised personnel only. Data in transit between your device and bd17's servers is encrypted using TLS. At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

6. Your Data Rights

As a player on the bd17 platform, you have the following rights in relation to the personal data we hold about you. These rights may be exercised by contacting the bd17 support team via live chat or by writing to [email protected].

bd17 will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case bd17 will notify you of the extension and the reason for it. Requests that are manifestly unfounded or repetitive may be refused or subject to a reasonable administrative fee.

Please note that certain rights — in particular the right to erasure — are subject to overriding obligations. bd17 is required to retain certain categories of data (including KYC records and transaction logs) for defined minimum periods under applicable gaming and financial regulations. Where erasure is not possible for this reason, bd17 will explain the basis for retention and restrict the use of your data to the minimum necessary.

7. Data Security Measures

bd17 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• Transport Layer Security (TLS): All data in transit between your browser or device and bd17's servers is encrypted. The bd17 platform operates exclusively over HTTPS.
• Access controls: Access to systems holding personal data is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to periodic audit.
• Password security: Player account passwords are stored in hashed form using a strong one-way hashing algorithm. bd17 never stores plain-text passwords and support staff cannot retrieve your password — only reset it.
• Payment data tokenisation: Full card numbers and mobile banking credentials are tokenised by the respective payment providers. bd17 stores only payment tokens, not the underlying account or card numbers.
• Incident response: bd17 maintains a documented data breach response procedure. In the event of a security incident that creates a risk to your personal data, bd17 will notify affected players without undue delay and will take all steps necessary to contain the incident and prevent recurrence.

Whilst bd17 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also have a responsibility to protect your own account — use a strong, unique password for your bd17 account, enable any available two-factor authentication, and notify us immediately if you suspect unauthorised access.

8. Policy Updates & Contact

8.1 Changes to This Policy

bd17 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make a material change to this policy, we will notify registered players by email and will update the "Effective Date" shown at the top of this document. Continued use of the bd17 platform after the effective date of an updated policy constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how bd17 handles your personal data. The current version of this policy is always available at https://bd17.club/privacy-policy.

8.2 Contact for Privacy Matters

If you have any question about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how your personal data has been handled by bd17, please contact our support team. The preferred channel for written privacy enquiries is email:

You may also raise a concern with the relevant data protection authority in your jurisdiction if you are not satisfied with bd17's response to a privacy complaint. bd17 will always endeavour to resolve privacy concerns directly before any escalation becomes necessary.