87bd1 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Data We Collect

87bd1 collects personal data from Members through several channels: account registration, ongoing platform use, payment transactions, and voluntary communications with our support team. The categories of personal data we collect, and the circumstances in which we collect them, are set out in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. Where identity documents submitted for KYC purposes incidentally contain such information (e.g., religion field on a Bangladeshi NID), that information is not recorded, processed, or stored separately in any 87bd1 system.

2 How We Use Your Data

87bd1 processes personal data only for specified, legitimate purposes. We do not sell your personal data to third parties for their own marketing purposes. The primary purposes for which 87bd1 uses your data are listed below, together with the legal basis for each processing activity.

• Account administration: Creating and managing your 87bd1 account, verifying your identity at registration and during the account lifecycle, and communicating account-related information (e.g., password resets, security alerts, withdrawal confirmations).
• Payment processing: Facilitating BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks; reconciling transactions; detecting and preventing payment fraud.
• Platform delivery: Providing access to cricket betting markets (BPL, IPL, T20), live casino games, slots, and all other 87bd1 services; personalising your experience based on your betting history and preferences.
• Regulatory compliance: Fulfilling anti-money laundering (AML) obligations; conducting Know Your Customer (KYC) checks; maintaining records required by applicable law; responding to requests from lawfully authorised authorities.
• Responsible gaming: Monitoring account activity for signs of problem gambling; enforcing self-exclusion and deposit limit requests; suppressing marketing to Members who have opted out or self-excluded.
• Marketing communications: Sending promotional emails and in-platform notifications about bonuses, seasonal offers (BPL season, Eid promotions, Pohela Boishakh specials), and new features — only to Members who have not opted out of marketing communications.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other breaches of the 87bd1 Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, user interface design, betting market coverage, and customer support quality.

87bd1 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, seeking your explicit consent.

3 Data Sharing & Third Parties

87bd1 shares your personal data with third parties only where strictly necessary for platform operations, regulatory compliance, or fraud prevention. All third-party data processors engaged by 87bd1 are required to handle your data in accordance with applicable data protection standards and may not use your data for any purpose beyond the specific service they provide to 87bd1.

The categories of third parties with whom 87bd1 may share your personal data include:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — shared for the sole purpose of processing your deposit and withdrawal transactions in BDT.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — limited technical data (e.g., session token, game round ID) is shared to facilitate game delivery. These providers do not receive your full identity or financial data.
• Identity verification services: Third-party KYC providers that assist in verifying the authenticity of identity documents submitted by Members during the verification process.
• Fraud detection and AML screening tools: Automated systems that analyse transaction patterns and account behaviour to identify and prevent money laundering, fraud, and other financial crimes.
• Hosting and infrastructure providers: Cloud hosting and content delivery network (CDN) providers that store platform data in secure, encrypted environments.
• Legal and regulatory authorities: Where 87bd1 is legally compelled to disclose personal data in response to a lawfully issued order, court directive, or official investigation request from a competent authority.

4 Cookies & Tracking

87bd1 uses cookies and similar tracking technologies to operate the platform effectively, remember your session and preferences, analyse platform performance, and deliver relevant promotional content to Members who have opted into marketing communications. A cookie is a small text file placed on your device by your browser when you visit 87bd1.org.

The types of cookies used by 87bd1 are as follows:

You may configure your browser settings to refuse cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will impair the functionality of the 87bd1 platform, including your ability to log in and complete transactions. Instructions for managing cookies are available in the help documentation of all major browsers. 87bd1 does not respond to browser "Do Not Track" signals at this time, as no universally agreed standard for interpreting such signals currently exists.

5 Data Retention

87bd1 retains your personal data for as long as your account remains active and for a defined period thereafter, as required by applicable anti-money laundering regulations, financial record-keeping obligations, and fraud prevention requirements. The following retention periods apply to the principal categories of personal data held by 87bd1:

• Account and identity data: Retained for the full duration of your account membership plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial compliance obligations.
• KYC verification documents: Retained for the duration of account membership plus five (5) years, subject to any extended retention required by a regulatory or legal investigation.
• Betting and gaming history: Retained for a minimum of three (3) years from the date of the relevant activity for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for a minimum of two (2) years from the date of the most recent communication in each support case.
• Analytics data: Retained in anonymised, aggregated form for up to twenty-four (24) months; individual session-level data is anonymised or deleted within ninety (90) days.
• Marketing preferences: Retained until you update your preferences or close your account, after which suppression records are kept for three (3) years to honour opt-out requests.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. Where data is required for an ongoing legal or regulatory proceeding, retention is extended until the conclusion of that proceeding.

6 Your Rights

As a Member of the 87bd1 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our data team by emailing [email protected] with the subject line "Data Rights Request" along with your registered account username and a description of the right you wish to exercise. We will acknowledge all requests within forty-eight (48) hours and aim to resolve them within thirty (30) calendar days.

• Right of Access: You may request a copy of all personal data that 87bd1 holds about you, together with an explanation of how it is used and with whom it is shared.
• Right to Rectification: You may request that 87bd1 correct any inaccurate or incomplete personal data held on your account. For basic details such as email address or phone number, you may update these directly in your account settings without contacting support.
• Right to Erasure: You may request that 87bd1 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to 87bd1's legal obligations to retain certain records (see Section 5 — Data Retention).
• Right to Restrict Processing: You may request that 87bd1 suspend the processing of your personal data in specific circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that 87bd1 provide your personal data in a structured, commonly used, machine-readable format so that it may be transferred to another service provider.
• Right to Object to Marketing: You may opt out of marketing communications at any time by updating your preferences in your account settings or by following the unsubscribe link in any marketing email. Once opted out, you will receive only essential transactional communications.
• Right to Withdraw Consent: Where 87bd1 processes your personal data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Security

87bd1 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security is treated as a continuous operational priority, not a one-time implementation exercise.

• Encryption in transit: All data transmitted between your device and the 87bd1 platform is encrypted using 256-bit SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that your session is encrypted.
• Encryption at rest: Sensitive personal data — including identity documents, payment method details, and account credentials — is stored in an encrypted format in 87bd1's secure server environment.
• Access controls: Access to personal data within 87bd1's internal systems is granted on a strict need-to-know basis. Staff who handle Member data are required to complete data protection training and are subject to confidentiality obligations.
• Password security: Member passwords are stored as salted cryptographic hashes — 87bd1 staff cannot view your password in plain text. You are responsible for choosing a strong, unique password and keeping it confidential.
• Fraud and intrusion detection: 87bd1 operates automated monitoring systems that flag unusual login patterns, transaction anomalies, and other indicators of potential account compromise or fraud. Flagged activity triggers immediate investigation and, where necessary, temporary account security holds.
• Regular security assessments: The 87bd1 platform undergoes periodic security reviews to identify and remediate vulnerabilities. Critical patches are applied as a priority within defined response timeframes.

Despite these measures, no digital platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a material risk to Members' rights and interests, 87bd1 will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach. If you suspect that your 87bd1 account has been accessed without your authorisation, please contact [email protected] immediately.

8 Changes to This Policy

87bd1 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, evolving data protection best practices, platform feature developments, or changes in our data processing activities. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Where a proposed change to this Policy is material — meaning it significantly affects how we collect, use, or share your personal data — 87bd1 will notify registered Members in advance via the email address registered to their account or via a prominent notice displayed on the platform. Continued use of the 87bd1 platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

Members are encouraged to review this Privacy Policy periodically to stay informed about how 87bd1 protects their personal data. If you have any questions about this Policy, or about how 87bd1 handles your personal data generally, please contact the 87bd1 support team at any time by emailing [email protected]. Our support team operates around the clock, every day of the year, including Bangladesh public holidays such as Victory Day, Independence Day, Eid, and Pohela Boishakh.