Privacy Policy — Your Data at bdpop1

bdpop1 collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the Platform, and through third-party payment providers such as bKash, Nagad, Rocket, and Upay when you conduct financial transactions.

Account Registration Data

When you create a bdpop1 account, we collect the following information:

• Full legal name — as it appears on your Bangladesh National ID (NID) or passport;
• Date of birth — to verify you meet the minimum age requirement of 18 years;
• Mobile number — a valid Bangladeshi mobile number registered in your name;
• Email address — used for account communications and security notifications;
• Account password — stored in encrypted form; bdpop1 staff cannot read your password in plain text.

Identity Verification (KYC) Data

When you submit a Know Your Customer (KYC) verification request — which may be required before processing withdrawals or following certain account activity — we collect:

• Government-issued ID document — Bangladesh National ID (NID) or passport image;
• Proof of address — where required, a utility bill or bank statement issued within the last three months;
• Selfie or live photograph — for identity confirmation against the submitted ID document.

Transaction Data

Every deposit and withdrawal conducted on bdpop1 generates a transaction record that includes the payment method used (bKash, Nagad, Rocket, or Upay), the amount in Bangladeshi Taka (৳), the date and time in Bangladesh Standard Time (BST, UTC+6), and the transaction reference number provided by your MFS provider. This data is retained for financial record-keeping, fraud prevention, and AML compliance purposes.

Usage and Technical Data

When you browse or use the bdpop1 Platform, we automatically collect certain technical information including your IP address, device type, operating system, browser version, screen resolution, referring URL, pages visited, session duration, and click patterns. This data is collected through server logs and analytics tools and is used to improve platform performance, detect fraud, and personalise your experience.

Communications Data

If you contact bdpop1 through live chat, email, or any other support channel, we retain records of that communication — including message content, timestamps, and any attachments submitted — for the purpose of resolving your query, training our support team, and maintaining an audit trail of customer service interactions.

bdpop1 processes your personal data only for specific, legitimate purposes. We do not sell your personal information to third parties, and we do not use it for purposes beyond those described in this Privacy Policy without first obtaining your consent.

Account Management

Your registration data is used to create and maintain your bdpop1 account, authenticate your identity each time you log in, and enable you to access the Platform's full range of features including sports betting, casino games, deposit and withdrawal services, and responsible gaming tools. Without this data, we cannot provide you with a functional account.

Identity Verification and Fraud Prevention

KYC data is processed to verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that your payment methods are registered in your own name. This process protects you against identity theft and unauthorised account access, and it protects bdpop1 against fraud and money laundering. KYC data is reviewed by trained bdpop1 staff and is not shared with third parties except where required by applicable law.

Payment Processing

Transaction data is shared with the relevant MFS provider (bKash, Nagad, Rocket, or Upay) only to the extent necessary to process your requested deposit or withdrawal. bdpop1 does not store your full bKash or Nagad PIN or account password. Payment-related data is retained for the period required by applicable financial record-keeping regulations.

Platform Improvement and Analytics

Aggregated, anonymised usage data helps bdpop1 understand how players interact with the Platform — which games are most popular, where players encounter difficulty, and how the site performs across different devices and connection speeds common in Dhaka, Chittagong, Sylhet, and other regions of Bangladesh. This data informs product improvements and content decisions. It is analysed in aggregate form and is not used to make individual-level decisions about your account.

Responsible Gaming

bdpop1 may use your gameplay data — including session lengths, betting frequency, deposit patterns, and loss trajectories — to identify signs of problem gambling behaviour. Where such indicators are detected, our responsible gaming team may reach out proactively to offer support resources or encourage the use of deposit limits and self-exclusion tools. This processing is conducted in your direct interest and forms part of bdpop1's commitment to player welfare.

Marketing Communications

With your consent, bdpop1 may send you promotional communications about bonuses, new games, seasonal promotions (such as BPL cricket season offers or Eid bonus events), and platform updates. You may withdraw your consent and opt out of marketing communications at any time through your account dashboard or by contacting support at [email protected]. Opting out of marketing does not affect your ability to use the Platform or receive service-related communications.

bdpop1 does not sell, rent, or trade your personal information to any third party for commercial purposes. We share data only in the limited circumstances described below, and always with appropriate safeguards in place.

Payment Service Providers

To process your deposits and withdrawals, bdpop1 shares the minimum necessary transaction data with your chosen MFS provider — bKash, Nagad, Rocket, or Upay. These providers process your data under their own privacy policies and terms of service. bdpop1 is not responsible for the data practices of these independent providers, and we encourage you to review their respective privacy policies.

Game Studio Providers

When you play games powered by third-party studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your player session data (including game results and bet amounts) is processed by the relevant studio's game servers. These studios operate under data processing agreements with bdpop1 and are contractually prohibited from using your data for purposes other than delivering the game service.

Legal and Regulatory Disclosure

bdpop1 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so — for example, in connection with an investigation into suspected fraud, money laundering, or other criminal activity. In such cases, disclosure is limited to the specific data requested and is documented by bdpop1's compliance team.

Business Transfers

In the event that bdpop1 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new entity via the email address registered on your account before the transfer takes effect.

No Sale of Personal Data

bdpop1 does not sell your personal information to data brokers, advertising networks, or any other third party for their independent commercial use. Your data is not used to create advertising profiles that are shared or sold externally.

bdpop1 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and gather anonymised analytics data that helps us improve the site. This section explains what cookies we use and how you can control them.

What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on return visits, maintain your session state across page loads, and store certain preferences. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These maintain your login session, protect against cross-site request forgery (CSRF), and ensure secure transmission of data between your browser and bdpop1's servers. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings and responsible gaming notification dismissals. These improve your experience but are not strictly necessary for the Platform to operate.
• Analytics cookies: Collect anonymised data about how players use the Platform — including pages visited, session duration, and navigation paths. This data is processed in aggregate form and does not identify individual users. bdpop1 uses this data solely to improve Platform performance and content.
• Security cookies: Used by bdpop1's fraud detection systems to identify unusual login patterns, multiple account attempts, and other security anomalies that may indicate account compromise or Terms violations.

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific sites. Please note that disabling essential cookies will prevent you from logging in to your bdpop1 account and using the Platform's core features. Instructions for managing cookies in popular browsers are available through your browser's help documentation.

bdpop1 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. While no online system can guarantee absolute security, bdpop1 takes the following measures to maintain a robust data protection environment.

Encryption in Transit

All data transmitted between your browser or device and bdpop1's servers is protected by Transport Layer Security (TLS) encryption — the technology behind the padlock icon you see in your browser's address bar. This ensures that your login credentials, personal details, and payment data cannot be intercepted by a third party during transmission.

Encryption at Rest

Sensitive personal data stored in bdpop1's databases — including passwords, KYC documents, and payment references — is encrypted at rest using AES-256 encryption. Account passwords are stored using a one-way cryptographic hash function; bdpop1 staff cannot retrieve your password in plain text under any circumstances.

Access Controls

Access to personal data within bdpop1's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data necessary to perform their specific job function. All internal access to sensitive player data is logged and subject to regular audit review. Access credentials for internal systems are subject to multi-factor authentication requirements.

Incident Response

In the event of a data security incident that poses a risk to your personal data, bdpop1 will notify affected players via the email address registered on their account as promptly as possible, and in any case within the timeframe required by applicable data protection obligations. The notification will describe the nature of the incident, the data affected, the steps bdpop1 has taken in response, and recommended actions for affected players.

bdpop1 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, financial, and regulatory obligations. The following general retention periods apply.

When your data reaches the end of its applicable retention period, bdpop1 will securely delete or anonymise it. Anonymised data — from which individual identity cannot be reconstructed — may be retained indefinitely for aggregate statistical and analytical purposes.

If you request account closure, bdpop1 will deactivate your account promptly. However, transaction records and KYC data will be retained for the periods specified above regardless of account closure, as these retention obligations exist independently of the active account relationship.

As a bdpop1 account holder, you hold certain rights with respect to your personal data. bdpop1 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. The following rights apply to the personal data bdpop1 holds about you.

Right of Access

You have the right to request a copy of the personal data bdpop1 holds about you. This includes your registration data, KYC submission records, transaction history, and support communications. Access requests can be submitted by contacting [email protected] with the subject line "Data Access Request". bdpop1 will respond within a reasonable timeframe and will verify your identity before releasing any data.

Right to Rectification

If any personal data bdpop1 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information — such as your email address or contact details — directly through your account dashboard. For corrections to identity data (name, date of birth), please contact support with supporting documentation.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Please note that transaction records, KYC data, and financial records are subject to mandatory retention periods as described in Section 6, and cannot be deleted on request during those periods. Outside of those periods, bdpop1 will action erasure requests within a reasonable timeframe.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data bdpop1 holds, or where you have objected to processing and we are reviewing that objection — you may request that bdpop1 restrict the processing of your data. Restricted data will not be actively processed beyond secure storage while the restriction is in effect.

Right to Object to Marketing

You have the absolute right to object to the use of your personal data for direct marketing purposes at any time. You can opt out of marketing communications through your account dashboard settings or by contacting [email protected]. Opting out will take effect promptly and will not affect your ability to use the Platform or receive essential service notifications.

Exercising Your Rights

To exercise any of the rights described above, please contact the bdpop1 support team at [email protected] with the subject line corresponding to your request (e.g., "Data Access Request", "Data Erasure Request", "Marketing Opt-Out"). bdpop1 will verify your identity before processing any rights request and will respond within a reasonable period.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdpop1 handles your personal data, please do not hesitate to get in touch. Our support team handles privacy inquiries in addition to general account support and is available around the clock.

How to Contact Us

Privacy-related inquiries can be submitted through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Inquiry" for faster routing to the relevant team member;
• Live Chat: Available 24/7 via your bdpop1 account dashboard after login;
• WhatsApp: The bdpop1 support WhatsApp number is displayed inside your account dashboard after login.

Updates to This Privacy Policy

bdpop1 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, applicable law, or regulatory guidance. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via the email address on file. We recommend reviewing this Privacy Policy periodically to stay informed of how bdpop1 protects your data.

Your continued use of the bdpop1 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an updated Privacy Policy, you should discontinue use of the Platform and contact support to close your account.