Privacy Policy — 98bdt

This Privacy Policy applies to all personal data collected by 98bdt in connection with the services available at 98bdt.app, including account registration, identity verification, deposits, withdrawals, gameplay, customer support interactions, and any other activity conducted on the platform. By creating an account and using our services, you consent to the collection and processing of your personal data as described in this policy.

98bdt collects personal information only when there is a clear, legitimate purpose for doing so. The categories of personal data we collect are outlined in the table below:

Where you provide personal data relating to a third party (for example, when reporting a concern on behalf of another person), you confirm that you have obtained the necessary consent from that individual to share their information with us.

98bdt processes your personal data only for purposes that are necessary, proportionate, and clearly grounded in a legitimate legal basis. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we process personal data are as follows:

• Account management: Creating and maintaining your player account, verifying your identity through KYC checks, and enabling you to access all features of the platform.
• Transaction processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining accurate financial records of all transactions associated with your account.
• Service delivery: Providing access to sports betting markets (including BPL, IPL, T20 World Cup, and international cricket), live casino games, slots, and card game products available on the platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and any other activity that violates our Terms and Conditions or applicable law.
• Responsible gaming compliance: Monitoring gameplay patterns to identify potential problem gambling behaviour, administering self-exclusion requests, and enforcing deposit limits or cooling-off periods requested by players.
• Customer support: Responding to queries, resolving complaints, and maintaining records of support interactions to ensure a consistent, high-quality service experience.
• Legal and regulatory obligations: Complying with anti-money laundering (AML) requirements, responding to lawful requests from law enforcement or regulatory bodies, and maintaining records required under applicable financial and gaming regulations.
• Platform improvement: Analysing aggregated, anonymised usage data to identify trends, improve product features, and optimise the player experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing communications. You may opt out at any time by contacting support.

98bdt will not use your personal data for automated decision-making processes that produce significant legal or similarly significant effects on you without first obtaining your explicit consent or ensuring an appropriate legal basis is in place.

98bdt does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners solely to process deposits and withdrawals requested by you. Each payment partner operates under its own privacy policy and data protection obligations.
• Game providers: Where games are supplied by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical and session data may be shared with those providers to facilitate game delivery and integrity monitoring. Game providers do not receive your full identity or financial data.
• Identity verification services: During KYC processing, your identity documents and related data may be shared with a third-party document verification service. All such providers are bound by strict data processing agreements and confidentiality obligations.
• Law enforcement and regulatory bodies: 98bdt may disclose personal data to relevant authorities where required by law, in response to a court order, or where disclosure is necessary to prevent or report suspected criminal activity including fraud or money laundering.
• Business successors: In the event of a merger, acquisition, or sale of the platform's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third-party data processors engaged by 98bdt are required to implement appropriate technical and organisational measures to protect the personal data they process on our behalf, and are prohibited from using that data for any purpose other than the specific service they provide to us.

98bdt uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your session while you are logged in, and analyse how the platform is used. By continuing to use 98bdt.app, you consent to our use of cookies as described below.

The following categories of cookies are used on the 98bdt platform:

• Strictly necessary cookies: These cookies are required for the platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security tokens, and load balancing cookies. No personally identifiable information is stored in these cookies beyond what is technically necessary.
• Functional cookies: These cookies remember your preferences such as language settings and display options, allowing us to provide a more personalised experience on return visits.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where usability improvements can be made. This data is aggregated and cannot be used to identify individual players.
• Security cookies: These cookies help detect fraudulent activity, bot traffic, and suspicious login attempts, contributing to the overall security and integrity of the platform.

You can control or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from logging into your account or completing transactions. Most modern browsers allow you to configure cookie preferences via their privacy or settings menus.

98bdt applies a layered security approach to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 98bdt platform, ensuring communications cannot be intercepted or read by third parties.
• Encrypted data storage for all sensitive personal information, including identity documents and financial data, held on 98bdt servers.
• Access controls: Personal data is accessible only to 98bdt staff who require it to perform their specific job functions. All staff with access to personal data are subject to confidentiality obligations.
• Regular security audits and penetration testing conducted to identify and remediate vulnerabilities in the platform's infrastructure.
• Intrusion detection and monitoring systems that flag unusual access patterns or suspicious activity in real time.
• Two-factor authentication options available to players for additional account security.

While 98bdt takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is completely immune to risk. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 98bdt will notify affected individuals as promptly as practicable and take all necessary remediation steps.

Players also share responsibility for account security. You are strongly advised to use a strong, unique password for your 98bdt account, to enable two-factor authentication where available, and to log out from shared or public devices after each session. Do not share your login credentials with anyone, including people representing themselves as 98bdt staff — our team will never ask for your password.

As a registered player on 98bdt, you hold a number of rights in relation to the personal data we hold about you. 98bdt is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and may request verification of your identity before processing the request.

Please note that certain rights — in particular the right to erasure — may be limited where 98bdt is required by law to retain specific data for a defined period. For example, financial transaction records may be retained for compliance with anti-money laundering obligations regardless of an erasure request. Where a right cannot be fulfilled in full, we will explain the specific legal basis for the limitation in our response to your request.

98bdt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following general retention principles apply to each category of data:

• Account and identity data: Retained for the duration of the account's active status plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping standards applicable to payment service operations.
• KYC documentation: Identity documents submitted during verification are retained for five years following account closure or the last recorded transaction on the account, whichever is later.
• Gaming history: Retained for the lifetime of the active account and for a minimum of two years following account closure for audit and dispute resolution purposes.
• Support correspondence: Chat transcripts and email records are retained for two years from the date of the interaction to allow for follow-up and quality assurance purposes.
• Marketing data: Retained until you opt out of marketing communications, at which point your details are removed from active marketing lists. Suppression records confirming your opt-out are retained indefinitely to prevent re-addition to mailing lists.
• Technical and log data: Server access logs and security event logs are retained for up to 12 months and then securely deleted or anonymised.

When personal data is no longer required and no legal retention obligation applies, 98bdt securely deletes or anonymises the data in a manner that prevents reconstruction or re-identification. Anonymised, aggregated data derived from player activity may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked back to any individual.

98bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where material changes are made — changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email to their registered address or through a prominent notice on the platform prior to the changes taking effect.

The effective date of this policy is displayed at the top of this page and in the page header. We encourage you to review this Privacy Policy periodically to stay informed about how 98bdt protects your information. Your continued use of the platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

We take all privacy-related correspondence seriously and aim to respond to all formal requests within a reasonable period. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction.

This Privacy Policy is written in English and governs the use of the 98bdt platform by players in Bangladesh. All communications relating to data rights should be submitted in English to ensure accurate and efficient handling by our compliance team.