95bdt Privacy Policy

When you register for and use the 95bdt platform, we collect personal data that is necessary to provide you with a safe, compliant, and fully functional gambling experience. The categories of personal data we collect are described below. We collect only what is necessary for the purposes identified in this Privacy Policy, and we do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance.

We do not collect data from third-party data brokers for marketing profiling purposes. Any third-party data we receive is limited to identity verification results returned by our KYC service providers during the account verification process.

95bdt processes your personal data for specific, identified purposes only. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected. The table below summarises the primary purposes for which we process personal data, the legal basis for each purpose, and the data categories involved.

• Account creation and authentication: We use your identity and contact data to create and manage your 95bdt account, verify your identity at registration, and authenticate you each time you log in. This processing is necessary to perform our contract with you as a registered player.
• Transaction processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. All amounts are processed in Bangladeshi Taka (৳). This processing is necessary to fulfil our contractual obligations to you.
• Identity verification and KYC compliance: We use identity data and verification documents to meet our Know Your Customer (KYC) obligations, including age verification (18+ enforcement), anti-money laundering (AML) screening, and fraud prevention. This processing is necessary for legal compliance.
• Customer support: We use your contact data and communications data to respond to support requests, resolve disputes, and investigate complaints. This processing is in our legitimate interests and in yours.
• Responsible gaming: We use account and activity data to monitor gambling patterns, detect signs of problem gambling, apply deposit limits and self-exclusion requests, and contact you if your activity raises responsible gaming concerns. This processing is in the legitimate interests of player welfare.
• Security and fraud prevention: We use technical data and account activity data to detect unauthorised access, automated betting software, multi-accounting, and other fraudulent behaviour. This processing is in our legitimate interests to protect the integrity of the platform.
• Platform improvement: We use aggregated, anonymised technical and activity data to analyse platform performance, optimise game loading speeds, and improve user experience. This data cannot be used to identify you individually.
• Marketing communications: With your explicit consent at registration or via your account preferences, we may send you promotional emails and SMS messages about bonuses, seasonal offers (Eid, Pohela Boishakh, BPL cricket season, Victory Day promotions), and new game launches. You may withdraw this consent at any time from your account settings or by contacting support.

95bdt does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment processors: When you make a deposit or withdrawal, your financial data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard) solely to process the transaction. Each payment provider operates under its own privacy policy and data-protection obligations.
• Identity verification providers: Your identity data and verification documents are shared with third-party KYC service providers engaged by 95bdt to perform age verification, document authentication, and AML screening. These providers process data under contractual agreements that restrict their use of the data to verification services only.
• Game providers: Some technical and account data (such as session tokens and player identifiers) is shared with game studios whose titles are hosted on the 95bdt platform — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — for the purpose of game session management and RTP reporting. No directly identifiable personal data (name, NID, mobile number) is shared with game providers.
• Analytics and platform services: Aggregated and pseudonymised technical data may be shared with analytics and infrastructure providers who help us maintain platform performance, conduct security monitoring, and improve service delivery. These providers are contractually prohibited from using the data for their own purposes.
• Legal and regulatory requirements: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, court order, or applicable law. We will notify you of such disclosures where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 95bdt's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via your registered email address prior to completion.

The 95bdt website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players interact with the site. A cookie is a small text file stored on your device by your browser when you visit a website.

The following categories of cookies are used on the 95bdt platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account authentication state, store your language and currency preferences (BDT), and enable the Cashier to process deposit and withdrawal requests. Without these cookies, core platform features cannot operate. These cookies cannot be disabled.
• Functional cookies: These cookies remember choices you make — such as your preferred game category (slots, live casino, cricket sportsbook), your responsible gaming limit settings, and whether you have previously acknowledged this Privacy Policy. They improve your experience by reducing the need to re-enter preferences on each visit.
• Analytics cookies: These cookies collect aggregated, anonymised data about how players navigate the 95bdt platform — including which pages are visited most frequently, how long sessions last, and which game categories generate the most engagement. This data helps us improve platform design and performance. Individual players cannot be identified from analytics cookie data.
• Security cookies: These cookies help detect and prevent fraudulent activity, multi-accounting attempts, and automated bot access. They record device fingerprint information and assign session identifiers that allow our fraud-detection systems to flag suspicious patterns.

95bdt does not use advertising cookies or cross-site tracking cookies. We do not permit third-party advertising networks to place cookies on the 95bdt platform. All tracking technologies in use on the site are operated by 95bdt or by service providers under direct contract with 95bdt for platform-operational purposes only.

95bdt retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The retention periods below apply to active accounts and accounts closed voluntarily or as a result of a breach of the 95bdt Terms & Conditions.

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data that cannot identify you may be retained indefinitely for aggregate statistical purposes.

95bdt takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, and destruction. The key security measures in place on the 95bdt platform are described below.

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 95bdt platform is encrypted using 256-bit SSL/TLS technology. This includes login credentials, deposit and withdrawal requests, personal data submissions, and live chat communications. The padlock icon in your browser's address bar confirms an active encrypted connection.
• Password hashing: Passwords are never stored in plain text. All account passwords are processed through a cryptographic hashing algorithm with a unique salt before being stored. Even 95bdt staff cannot view your password — only you know it.
• OTP two-factor authentication: Players are encouraged to enable OTP-based two-factor authentication (2FA), which sends a one-time passcode to your registered Bangladeshi mobile number (Grameenphone, Robi, Banglalink, Teletalk, or Airtel) each time a login is attempted from a new device or location. 2FA significantly reduces the risk of unauthorised account access.
• Access controls: Access to personal data within 95bdt's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific data categories are permitted to view that data. All internal access is logged and audited.
• Data storage security: Personal data and financial records are stored on secured servers with firewalls, intrusion detection systems, and regular penetration testing. Servers hosting personal data are not publicly accessible and are isolated from internet-facing infrastructure.
• Payment data security: 95bdt does not store full payment card numbers on its servers. Card transactions are processed via PCI-DSS-compliant payment gateways. bKash, Nagad, Rocket, and Upay wallet transactions are processed through the providers' own secure APIs. 95bdt retains only the minimum payment reference data needed for transaction reconciliation.

Despite these measures, no system is completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms as a data subject, 95bdt will notify affected players via their registered email address within a reasonable timeframe of becoming aware of the breach, and will take immediate steps to contain and investigate the incident.

As a data subject whose personal information is processed by 95bdt, you hold the following rights in relation to your personal data. These rights may be exercised by contacting the 95bdt privacy team at the contact details provided in Section 8 of this Policy.

• Right of access: You have the right to request a copy of the personal data that 95bdt holds about you. We will provide this information within 30 days of receiving your request. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly in your account settings. For changes to identity data (name, date of birth, National ID number), you will need to contact our support team and provide supporting documentation.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. However, this right is not absolute — we are unable to delete data that we are legally required to retain (such as transaction records, KYC documents, and self-exclusion records). Where deletion is possible within legal constraints, we will complete it within 30 days of your request.
• Right to restrict processing: In certain circumstances — for example, where you contest the accuracy of your data or where you have objected to processing while we assess your objection — you may request that we restrict our use of your data to storage only, pending resolution.
• Right to data portability: You have the right to receive a copy of the personal data you provided to 95bdt in a structured, commonly used, machine-readable format (such as CSV), and to transfer that data to another data controller.
• Right to object to marketing: You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. You may do so by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect your ability to use the platform.
• Right to withdraw consent: Where we process your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We aim to respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 95bdt processes your personal data, please contact our dedicated privacy support team using the details below. We take privacy concerns seriously and will respond to all enquiries within 5 business days at Bangladesh Standard Time (UTC+6).

• Privacy support email: [email protected] (plain text — not a clickable link)
• Subject line to use: Privacy Policy Enquiry — [Your Registered Email Address]
• Live chat: Available 24/7 via the 95bdt platform at Bangladesh Standard Time (UTC+6). Ask the support agent to escalate privacy-related queries to the data protection team.
• Response time: Privacy enquiries are acknowledged within 24 hours and substantively responded to within 5 business days (BST). Complex data rights requests may take up to 30 calendar days to fulfil.
• Languages: All privacy communications are handled in English.

If you are dissatisfied with our response to a privacy concern and wish to escalate the matter, you have the right to contact the relevant data protection authority or seek independent legal advice. 95bdt encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concern promptly and fairly.