berbd Privacy Policy — Your Data, Your Rights

Information We Collect

berbd collects personal data through several means: information you provide directly during registration and account use, information generated automatically by your use of the platform, and information provided by third-party payment processors as part of transaction verification. The categories of personal data we collect include the following.

1. Registration data: full name, date of birth, email address, mobile phone number, and the account username you select at the time of registration.
2. Identity verification data: government-issued identification documents, selfie photographs or other documentary evidence submitted as part of Know Your Customer (KYC) verification.
3. Payment and transaction data: records of deposits, withdrawals, wager amounts, game session histories and the payment channel used (e.g. bKash mobile number, Nagad account reference, Rocket transaction ID).
4. Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, session timestamps, and clickstream data describing how you navigate the platform.
5. Communications data: the content of messages you send to our customer support team, including support tickets, email correspondence, and live chat transcripts, where applicable.

How We Use Your Information

The personal data we collect is used for the following purposes. berbd applies the principle of purpose limitation — data collected for one purpose will not be used for an unrelated purpose without your knowledge and, where required, your consent.

1. Account creation and management: to register your account, authenticate your identity at login, and maintain your account preferences, transaction history and communication records.
2. Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to maintain accurate financial records of all transactions.
3. Identity verification and fraud prevention: to verify that players meet age eligibility requirements (21+), confirm the authenticity of identity documents, and detect and prevent fraudulent activity, money laundering and the abuse of promotional offers.
4. Legal and regulatory compliance: to meet obligations under applicable anti-money-laundering regulations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by law.
5. Platform improvement: to analyse aggregated and anonymised usage data for the purpose of improving platform performance, game selection, user interface design and overall player experience.
6. Customer support: to respond to your queries, resolve disputes, process complaints and provide assistance with account or payment issues.

Legal Basis for Processing Your Data

berbd processes personal data only where there is a valid legal basis for doing so. The primary legal bases on which berbd relies are as follows.

1. Contractual necessity: processing your registration data, payment data and account activity records is necessary to provide you with the berbd platform service that you contracted for when you created your account.
2. Legal obligation: processing identity verification data, transaction records and certain communications data is required by applicable anti-money-laundering, know-your-customer and financial services regulations.
3. Legitimate interests: processing technical and device data for fraud prevention, platform security and improving the quality of the berbd service, where these interests are not overridden by your data protection rights.
4. Consent: where berbd sends you optional marketing communications or uses non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

Sharing of Your Information

berbd does not sell, rent or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose.

1. Payment processors: transaction data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to process the deposit or withdrawal you have requested. berbd does not store full payment card numbers.
2. Game providers: where a third-party game provider (e.g. Pragmatic Play, Evolution Gaming, Spribe) requires a player session token or minimal identifier to launch a game, berbd passes a pseudonymous session reference. No personally identifiable information beyond what is operationally necessary is shared with game providers.
3. Legal and regulatory authorities: berbd will disclose personal data to law enforcement agencies, regulators or other competent authorities where required to do so by applicable law, court order or lawful request. berbd will, where legally permitted, notify you of such a disclosure.
4. Service providers: berbd may engage third-party technical service providers (e.g. hosting, analytics, fraud screening) who process data on berbd's behalf under contractual data processing agreements that restrict use to the agreed purposes only.

Payment Data and Financial Information

All financial transactions on berbd are processed through trusted payment partners including bKash, Nagad, Rocket, Upay, Visa and Mastercard. When you make a deposit or request a withdrawal, berbd captures sufficient transaction metadata — such as the sending mobile number for a bKash transfer or the last four digits of a card — to reconcile the transaction on our ledger and to verify that the payment source matches the account holder's registered details. berbd does not store raw card numbers or full mobile banking credentials. Payment data is processed using SSL-encrypted connections at all times.

berbd applies anti-money-laundering controls as required by applicable regulations. Where a player's transaction pattern triggers a compliance review, berbd may request additional documentation and may temporarily hold a withdrawal pending the outcome of that review. This is a standard industry procedure and is not an indication of wrongdoing on the part of the player.

Cookies and Tracking Technologies

berbd uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how players interact with our interface. We use three categories of cookies.

1. Essential cookies: these are strictly necessary for the platform to function. They maintain your login session, remember language preferences and enable security features. These cookies cannot be disabled without breaking core platform functionality.
2. Analytical cookies: these allow berbd to measure aggregate platform usage, identify popular games and pages, and diagnose performance issues. Data collected via analytical cookies is anonymised before analysis and is never linked back to individual player accounts.
3. Functional cookies: these store your platform preferences such as game display settings or notification options to improve your experience on return visits. These cookies are optional and can be disabled in your browser settings.

berbd does not use third-party advertising cookies, cross-site tracking pixels or social media retargeting technologies. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the platform.

Data Retention

berbd retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account data and transaction records are retained for the period during which your account is active and for a minimum of five years following account closure, in order to meet anti-money-laundering and financial record-keeping obligations. Identity verification documents are retained for the same minimum period.

Communications data such as customer support tickets is retained for two years from the date of the last interaction, after which it is deleted or anonymised. Technical and device data collected for analytics and fraud prevention is retained for twelve months in identifiable form, after which it is anonymised or deleted. Where a legal hold is in place — for example, pending litigation or a regulatory investigation — data may be retained beyond these standard periods until the hold is lifted.

Data Security

berbd implements a range of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction. All data transmitted between your device and the berbd platform is encrypted using SSL (Secure Sockets Layer) technology. Sensitive data at rest, including identity documents and financial records, is stored in encrypted form on access-controlled servers. Access to personal data within berbd is restricted to personnel who have a legitimate operational need to access it, and all such personnel are bound by confidentiality obligations.

Despite these measures, no data transmission over the internet and no storage system can be guaranteed to be completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, berbd will take prompt action to contain the breach and will notify affected players in accordance with applicable legal requirements. You can help protect your account by using a strong, unique password and by never sharing your login credentials with any third party.

Your Data Protection Rights

Subject to applicable law, you have the following rights with respect to your personal data held by berbd. To exercise any of these rights, please contact our support team using the email address published on the berbd website.

1. Right of access: you may request a copy of the personal data berbd holds about you, together with information about how it is being used.
2. Right to rectification: if any personal data berbd holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
3. Right to erasure: in certain circumstances you may request that berbd delete your personal data. This right is subject to berbd's legal obligations to retain certain data (e.g. for anti-money-laundering compliance) and will be assessed on a case-by-case basis.
4. Right to restriction of processing: you may request that berbd restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
5. Right to withdraw consent: where berbd processes data on the basis of your consent (e.g. optional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

berbd will respond to all valid data rights requests within a reasonable timeframe and in accordance with applicable law. We may ask you to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised party.

Children and Minors

The berbd platform is strictly intended for adults aged 21 and above. berbd does not knowingly collect personal data from individuals under the age of 21. If berbd discovers or has reason to believe that a player is under 21, their account will be suspended immediately, all associated personal data will be reviewed in accordance with berbd's legal obligations, and any real-money balance resulting from underage play will be withheld pending further review. If you are a parent or guardian and believe that a minor has accessed or registered a berbd account without your knowledge, please contact our support team immediately so that the account can be closed and personal data handled appropriately.

Third-Party Links and Services

The berbd platform may contain references to or integrations with third-party game providers and payment processors. These third parties operate under their own privacy policies, which berbd does not control. berbd is not responsible for the privacy practices of third-party providers. When you interact with a third-party game (for example, a live casino game provided by Evolution Gaming or a slot provided by Pragmatic Play), that provider may collect certain technical session data as part of delivering the game. berbd contractually requires all third-party providers to handle any data they receive in accordance with applicable data protection standards.

Changes to This Privacy Policy

berbd may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform functionality. When material changes are made, the "Last Updated" date at the top of this page will be revised. For significant changes that materially affect how we use your personal data, berbd will endeavour to notify active players via the platform or by email. Your continued use of the berbd platform following the publication of an updated Policy constitutes acceptance of the revised terms. We encourage all players to review this Policy periodically to stay informed about how berbd protects their data.

Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how berbd handles your personal information, please contact our support team. Our support contact email is published on the berbd website at berbd.org. Our support team is available 24 hours a day, seven days a week, and we aim to respond to all privacy-related enquiries within five business days. Where your request concerns the erasure or export of a significant volume of personal data, we may require up to thirty calendar days to fulfil the request, and we will inform you of the expected timeframe upon receipt of your enquiry.