bd15 Privacy Policy — How We Protect Your Personal Data

Introduction

bd15 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://bd15.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered player, a visitor, or a prospective customer.

This Privacy Policy sets out in clear, plain English how bd15 collects, uses, stores, shares, and protects personal data. It also explains your rights as a data subject and how you can exercise them. This policy should be read alongside our Terms and Conditions, which govern the contractual relationship between you and bd15.

This policy applies to all personal data collected via the bd15 website, mobile-optimised browser experience, customer support channels, and any other interaction you may have with the bd15 brand. It does not apply to third-party websites or services that may be linked to or from the Platform — those services operate under their own independent privacy notices.

The Platform is operated for players located in Bangladesh and its surrounding region. All data processing activities described in this policy are conducted with the privacy expectations of Bangladeshi players in mind, including respect for the confidentiality of financial transactions conducted via bKash, Nagad, Rocket, and other local payment methods.

Data We Collect

bd15 collects only the personal data that is genuinely necessary to provide our services, comply with our legal obligations, and protect the integrity of the Platform. The categories of personal data we collect are described in detail below.

We do not intentionally collect sensitive categories of personal data such as health information, political opinions, religious beliefs, or biometric data, except where expressly required for identity verification purposes (e.g., a photograph on a government-issued ID document submitted for KYC).

How We Collect Your Data

bd15 collects personal data through several distinct channels. Understanding these collection points helps you make informed decisions about the information you share with us.

• Direct interactions: You provide data directly when you complete our registration form, submit identity verification documents, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies: When you browse or use the Platform, our systems automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies. See Section 7 for more detail on cookies.
• Payment providers: When you initiate a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider shares transaction confirmation data with bd15 to enable us to credit or debit your account accordingly.
• Identity verification partners: Where we engage a third-party identity verification service to assist with KYC checks, that provider may share verification outcomes and associated data flags with us.
• Fraud prevention services: We may receive data about your device or behavioural patterns from fraud detection partners, which we cross-reference against our own records to protect the integrity of the Platform.
• Publicly available sources: In limited cases relating to fraud investigation or AML compliance, we may consult publicly available databases or registers.

How We Use Your Data

bd15 uses the personal data we collect for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your consent or identifying a separate lawful basis for doing so.

• Account management: To create, maintain, and administer your bd15 player account, including processing login requests, managing account balances, and applying bonuses.
• Service delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and all other features of the Platform.
• Payment processing: To process your deposit and withdrawal requests via your chosen payment method, and to maintain an accurate record of your financial transactions on the Platform.
• Identity and age verification: To verify that you meet the eligibility requirements set out in our Terms and Conditions, including the 21+ age requirement, and to comply with our obligations under applicable anti-money laundering and fraud prevention frameworks.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to apply deposit limits and self-exclusion orders you have requested, and to send responsible gaming reminders where appropriate.
• Customer support: To respond to your queries, complaints, and disputes promptly and accurately.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised account access, fraudulent transactions, bonus abuse, and other activities that may harm you or the Platform.
• Legal compliance: To fulfil our obligations under applicable law, including retaining transaction records and responding to lawful requests from competent authorities.
• Platform improvement: To analyse usage patterns and player feedback in order to improve the quality, reliability, and range of services available on the Platform.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus announcements, and relevant updates about the Platform via email or SMS. You may withdraw your consent to marketing communications at any time by contacting our support team.

Legal Basis for Processing

Every data processing activity carried out by bd15 rests on one or more lawful grounds. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to enter into and perform our contract with you as a registered player — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing required to comply with applicable legal requirements — including age verification, anti-money laundering checks, and the retention of financial transaction records — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is based on bd15's legitimate interest in operating a secure, fair, and sustainable platform. We have assessed that these legitimate interests are not overridden by your privacy interests or fundamental rights.
• Consent: Processing for marketing communications and for the use of non-essential cookies is carried out on the basis of your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

bd15 does not sell your personal data to any third party. We share your personal data only where it is necessary to deliver our services, comply with legal requirements, or protect the integrity of the Platform. The categories of recipients with whom we share data are described below.

• Payment service providers: We share transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard solely to the extent necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and data protection obligations.
• Game providers: We share your player account identifier with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in order to enable you to access their games within the Platform. These providers act as independent data controllers for the purposes of their own game integrity and audit obligations.
• Identity verification providers: Where we engage a third-party KYC provider to assist with age and identity verification, we share the identity documents and associated data you have submitted with that provider for the sole purpose of verification.
• Fraud and AML service providers: We may share Technical Data and transaction data with fraud detection and anti-money laundering analytics providers who assist us in protecting the Platform.
• IT and infrastructure providers: Our hosting, database, and content delivery infrastructure providers have limited, access-controlled exposure to personal data as a function of providing their services to us. These providers are contractually bound to process data only on our instructions.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulators, or other competent authorities where we are required to do so by law, court order, or in response to a valid legal process.

Cookies & Tracking Technologies

bd15 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and gather analytical data that helps us improve the user experience. This section explains what cookies we use and how you can control them.

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core functions such as session management, authentication, and security. They cannot be disabled without breaking the Platform's core functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language display, session timeout settings, and responsible gaming tool configurations — so you do not have to re-enter them on each visit.
• Analytical cookies: These cookies collect anonymised or pseudonymised data about how you use the Platform, including which pages you visit most frequently and how long you spend on each section. This data is used to improve Platform performance and navigation.
• Security and fraud detection cookies: These cookies help us identify and prevent fraudulent activity by analysing patterns of behaviour that may indicate automated or malicious access attempts.

You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or security settings menu. Please note that disabling certain cookies may impair your experience on the Platform, particularly functional cookies that store your preferences.

Data Retention

bd15 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active account data: Personal data associated with your active bd15 account is retained for the full duration of your account's existence on the Platform.
• Closed account data: Following the closure of your account — whether at your request or by bd15 — we retain your identity and transaction records for a minimum period of five years from the date of closure. This retention is required to satisfy our obligations under anti-money laundering regulations and to enable us to resolve any disputes or regulatory enquiries that may arise after closure.
• KYC documents: Identity verification documents submitted for KYC purposes are retained for a minimum of five years following the end of the business relationship.
• Customer support communications: Live chat transcripts and email support records are retained for a period of three years from the date of the communication, to enable us to reference prior interactions when handling follow-up queries or disputes.
• Marketing data: If you have opted in to marketing communications and subsequently withdraw your consent, we will retain a record of your opt-out preference indefinitely to ensure we do not inadvertently contact you again. All other marketing profile data will be deleted or anonymised within 90 days of your opt-out request.
• Technical and usage data: Anonymised analytical data derived from usage logs may be retained indefinitely as it can no longer be linked back to you as an individual.

When personal data is no longer required for any retention purpose, bd15 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

Data Security

bd15 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to reflect the evolving threat landscape.

• Encryption in transit: All data transmitted between your device and the bd15 Platform is encrypted using 256-bit SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted by third parties during transmission.
• Encryption at rest: Sensitive data fields — including passwords (stored as salted hashes), payment method identifiers, and KYC document images — are encrypted at rest using industry-standard symmetric encryption.
• Access controls: Access to personal data within bd15's internal systems is governed by a strict need-to-know access control policy. Only personnel with a legitimate operational need to access your data are authorised to do so, and all access is logged and auditable.
• Network security: The bd15 Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation measures.
• Security monitoring: Our systems are monitored continuously for anomalous activity. Any potential security incident is escalated immediately to our security team for investigation and response.
• Vendor security: All third-party service providers who handle personal data on our behalf are contractually required to maintain security standards consistent with those described in this policy and to notify us promptly in the event of any data security incident affecting our players' data.

Your Rights

As a data subject, you have a number of rights in relation to the personal data that bd15 holds about you. These rights are described below. To exercise any of these rights, please contact our support team using the details in Section 14. We will respond to all verified requests within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data bd15 holds about you. We will provide this information in a structured, accessible format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that bd15 delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. Please note that this right is subject to our legal obligations to retain certain data categories (see Section 8).
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on bd15's legitimate interests. If you object, we will assess whether our legitimate interests are overridden by your rights and freedoms in the specific circumstances.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces significant effects on you, without meaningful human review.

Children's Privacy

The bd15 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, use, or store personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21 — whether through fraudulent registration or any other means — we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor under your care has registered an account or submitted personal data to bd15, please contact our support team immediately at [email protected]. We will investigate your report promptly and take appropriate action.

Third-Party Services

The bd15 Platform integrates third-party game engines, payment gateways, and analytics tools in order to deliver a complete, fully-featured gaming experience. When you interact with these third-party components — for example, by loading a Pragmatic Play or Evolution Gaming game within the Platform — those providers may independently collect certain Technical Data about your device and session for their own game integrity and audit purposes.

bd15 is not responsible for the privacy practices of these third-party providers. Each provider operates under its own independent privacy notice. We encourage you to review the privacy policies of the game studios, payment providers, and other third parties whose services you use in connection with the bd15 Platform.

The bd15 website may contain links to informational pages or resources. bd15 is not responsible for the content or privacy practices of any external website. The inclusion of a link on the Platform does not imply endorsement of the linked site by bd15.

Updates to This Policy

bd15 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. When a material change is made to this policy, we will notify registered players via their registered email address or by displaying a prominent notice on the Platform prior to the change taking effect.

The effective date at the top of this document indicates when the current version of the policy came into force. We encourage you to review this policy periodically to stay informed about how bd15 is protecting your personal data. The most current version of this policy will always be accessible at https://bd15.io/privacy-policy.

Your continued use of the Platform following notification of a policy update constitutes your acknowledgement of the revised policy. If you do not agree to any updated version of this policy, you should cease using the Platform and contact our support team to arrange account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bd15 holds about you, please contact our Data Privacy team using the details below. Our team is available 24 hours a day, 7 days a week.

When submitting a data subject rights request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise or the concern you wish to raise. This will help us locate your records and respond to your request as efficiently as possible.