Privacy Policy for bdvegas

1 Data We Collect

bdvegas collects personal data from you through several channels: directly when you register and use the Platform, automatically when you browse the site, and from trusted third-party partners where this is necessary for verification or payment processing. We collect only the minimum data required to operate the Platform safely and legally, and we never collect data for purposes unrelated to your use of bdvegas.

1.1 Registration Data

When you create a bdvegas account, we collect the following information:

• Full legal name as it appears on your Bangladesh National Identity Card (NID) or passport
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh, including division (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)
• Mobile phone number registered in Bangladesh
• Email address
• Username and encrypted password

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawals above defined thresholds, we may ask you to provide copies of identity documents including your Bangladesh NID, passport, driving licence, or a recent utility bill or bank statement showing your residential address. These documents are used solely for identity verification and anti-fraud purposes.

1.3 Financial & Transaction Data

When you make a deposit or withdrawal, we record transaction details including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard), the transaction amount in Bangladeshi Taka (BDT), the transaction timestamp, and a reference number. We do not store full card numbers or full mobile banking PINs — only partial identifiers needed to identify your payment method.

1.4 Gameplay & Betting Data

bdvegas logs your betting and gaming activity on the Platform. This includes games played, bet amounts, results, session durations, and responsible gaming tool activations. This data is retained to resolve disputes, detect problem gambling patterns, enforce promotional terms, and improve the Platform experience.

1.5 Technical & Device Data

When you visit bdvegas, our servers automatically record the following technical data:

• IP address
• Browser type and version
• Device type (mobile, tablet, desktop) and operating system
• Referring URL (the page you visited before arriving at bdvegas)
• Pages visited on bdvegas, time spent on each page, and click patterns
• Session start and end timestamps in Bangladesh Standard Time (UTC+6)

This technical data is used for security monitoring, fraud detection, platform performance optimisation, and to ensure our site renders correctly across the range of devices used by players across Bangladesh.

2 How We Use Your Data

bdvegas processes your personal data only for clearly defined, lawful purposes. We do not sell your personal data to any third party, and we do not use your data for any purpose unrelated to the operation of the bdvegas Platform. The table below summarises each processing purpose alongside the lawful basis we rely upon.

2.1 Marketing Communications

bdvegas will only send you promotional emails or SMS messages about bonuses, seasonal offers (such as BPL promotions, Eid specials, or Pohela Boishakh campaigns), and platform news if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent and unsubscribe from all marketing communications at any time by contacting support@bdvegas or by updating your notification preferences in your account dashboard.

2.2 Automated Decision-Making

Some decisions at bdvegas — such as real-time fraud flags, bonus eligibility checks, and responsible gaming alerts — are made or assisted by automated systems. Where an automated decision has a significant effect on your account (for example, a temporary account suspension triggered by a fraud alert), you have the right to request a manual review by a member of the bdvegas compliance team. Contact support@bdvegas to initiate such a review.

3 Data Sharing & Third Parties

bdvegas does not sell, rent, or trade your personal data with any third party for commercial purposes. We share your data only in the specific circumstances listed below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, bdvegas shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or the relevant Bangladeshi bank. Each payment provider operates under their own privacy policy and data protection obligations. bdvegas is not responsible for how payment providers handle data once it has been transmitted to them for transaction processing.

3.2 Game Software Providers

bdvegas integrates casino and betting software from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers and game interaction data to power their live and RNG game streams. No directly identifiable personal data (such as your full name or NID number) is shared with game software providers.

3.3 Legal and Regulatory Disclosure

bdvegas may be required to disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies in Bangladesh or other relevant jurisdictions where we are legally compelled to do so — for example, in the course of an anti-money laundering investigation or a court order. We will notify you of any such disclosure where we are legally permitted to do so.

3.4 Business Transfers

In the event that bdvegas undergoes a merger, acquisition, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and the privacy commitments in this Policy will continue to apply to your data under the new entity's ownership.

4 Cookies & Tracking Technologies

bdvegas uses cookies and similar technologies to operate core platform functionality, maintain your session while you play, and understand how players use the Platform so we can improve it. We do not use tracking technologies to serve third-party advertisements.

4.1 Types of Cookies Used

• Essential cookies: Required for core Platform functionality — logging you in, maintaining your session, remembering your language preference, and securing your account. These cannot be disabled without preventing the Platform from functioning correctly.
• Analytics cookies: Used to collect anonymised data about how players navigate the Platform — which pages are visited most, where players drop off, and how long sessions last. This data helps us improve usability and game selection. Analytics data is not linked to your personal identity.
• Preference cookies: Remember your display settings, game filter preferences, and notification preferences so you do not have to reset them on each visit.
• Security cookies: Support fraud detection, account protection, and bot-prevention measures. These cookies are essential and cannot be disabled.

4.2 Managing Cookies

You can configure your browser to refuse non-essential cookies or to alert you before a cookie is stored. Please note that disabling essential cookies will prevent you from logging into bdvegas and using core Platform features. Refer to your browser's help documentation for instructions on managing cookie preferences on Chrome, Firefox, Safari, or your default mobile browser.

4.3 No Cross-Site Tracking

bdvegas does not deploy cross-site tracking pixels, third-party advertising cookies, or social media tracking scripts. The cookies placed on your device by bdvegas are first-party only and exist solely to support your experience on this Platform.

5 Data Retention & Storage

bdvegas retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with our legal obligations and legitimate business needs. The retention periods below represent the maximum duration we hold each category of data.

5.1 Data Storage Location

bdvegas stores player data on secure servers. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Access to stored personal data is restricted to authorised bdvegas personnel on a strict need-to-know basis, with all access events logged and audited.

5.2 Data Deletion After Retention Period

Once the applicable retention period has expired, bdvegas will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual. Anonymised aggregated data may be retained beyond this period for statistical analysis but will not contain any information capable of identifying you.

6 Your Privacy Rights

As a bdvegas player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to support@bdvegas. We will acknowledge your request within 3 business days and aim to resolve it fully within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that bdvegas holds about you. We will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. Please note that changes to core identity data (name, date of birth) must be supported by updated KYC documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right does not override our legal obligations to retain data for AML and financial compliance purposes.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your data in a portable format so you can transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

7 Data Security Measures

bdvegas takes the security of your personal data seriously. We implement a layered security architecture that combines technical, organisational, and procedural safeguards designed to protect your data against unauthorised access, loss, alteration, and disclosure.

7.1 Technical Safeguards

• All data transmitted between your browser or app and bdvegas servers is encrypted using TLS 1.3 with 256-bit SSL certificates.
• Stored data is encrypted at rest using AES-256 encryption on hardened servers with restricted network access.
• Passwords are never stored in plain text — they are hashed using bcrypt with a randomised salt before storage.
• Two-step verification (2SV) via your registered Bangladeshi mobile number is available and strongly recommended for all player accounts.
• Automated intrusion detection systems monitor for unusual access patterns and flag suspicious activity in real time.

7.2 Organisational Safeguards

• Access to personal data is restricted to authorised bdvegas staff on a strict need-to-know basis, using role-based access controls.
• All staff with access to personal data are trained in data protection obligations and sign confidentiality agreements.
• Internal access logs are reviewed regularly by our compliance team to detect and investigate any anomalies.

7.3 Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and interests, bdvegas will notify affected players at their registered email address as promptly as possible, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps bdvegas is taking to address it.

Despite our robust security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your bdvegas login credentials confidential and for ensuring your own device security. If you suspect your account has been compromised, contact support@bdvegas immediately.

8 Policy Updates & Contact

bdvegas reviews this Privacy Policy at least annually and whenever there is a material change to the way we collect or process personal data. When we make significant changes, we will notify registered players via their registered email address and update the "Last Reviewed" date at the top of this page. Continued use of bdvegas after a policy update constitutes your acceptance of the revised Policy.

8.1 Minor vs. Material Changes

Minor administrative updates — such as correcting a typographical error or updating a contact detail — may be made without direct notification. Material changes — such as introducing a new category of data collection, a new sharing arrangement with a third party, or a change in the legal basis for processing — will always be communicated directly to registered players before taking effect.

8.2 Contact Our Privacy Team

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints about how bdvegas handles your personal data, please contact us using the details below. Our privacy team will acknowledge your message within 3 business days.

• Email: support@bdvegas (plain text — not a clickable link)
• Response time: Within 3 business days for acknowledgement; full resolution within 30 calendar days
• Support hours: 24/7 in Bangladesh Standard Time (UTC+6)