🔒 Data Protection
bdgog Privacy Policy
At bdgog, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains precisely what personal data we collect, how we use it, who we share it with, how long we keep it, and what rights you hold over your own information. We encourage you to read this document in full before creating your account.
Our Pledge
How bdgog Protects Your Privacy
End-to-End SSL Encryption
All data transmitted between your device and bdgog's servers is protected by 256-bit SSL/TLS encryption. This applies to login sessions, deposit flows, withdrawal requests, and support conversations — your data is never sent in plain text.
We Never Sell Your Data
bdgog does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely to deliver the services you have requested, comply with legal obligations, and improve your experience on the platform.
You Control Your Data
As a bdgog member, you have the right to access, correct, and request the deletion of your personal data at any time. Our support team responds to all data subject requests within 30 days of receipt, as detailed in the Your Privacy Rights section below.
Minimal Data Collection
bdgog operates on a data minimisation principle — we only collect personal information that is strictly necessary to deliver the service, verify your identity, process payments, and comply with responsible gaming requirements. We do not collect data speculatively.
Clear Retention Periods
We define specific retention periods for every category of personal data we hold. Account data is retained for the duration of your membership plus a post-closure period required for legal and audit purposes. We do not hold data indefinitely without a lawful basis.
Responsible Gaming Compliance
Some of the data we collect — including gameplay patterns, deposit frequency, and session duration — is used to power bdgog's responsible gaming monitoring tools. This data helps us identify members who may be showing signs of problem gambling and offer appropriate support in accordance with our Responsible Gaming obligations.
Transparency
Data We Collect — Full Disclosure
bdgog collects personal data through several channels: directly from you when you register and use the platform, automatically as you interact with the site, and occasionally from third-party identity verification and payment processing partners. Below is a full account of every category of personal data we process.
Purpose & Legal Basis
How We Use Your Data
bdgog processes your personal data only where a clear lawful basis exists. The primary lawful bases applicable to our processing activities are: contractual necessity (processing required to deliver the services set out in our Terms & Conditions), legal obligation (processing required to comply with applicable law), and legitimate interests (processing that serves bdgog's reasonable business purposes without overriding your rights). The table below maps each processing purpose to its lawful basis.
| Processing Purpose | Data Categories Used | Lawful Basis |
|---|---|---|
| Account registration & management | Identity, Contact, Financial | Contractual necessity |
| Identity & age verification (KYC) | Identity, KYC Documents | Legal obligation; Contractual necessity |
| Deposit & withdrawal processing | Financial, Identity | Contractual necessity |
| Bet settlement & game result delivery | Gaming Activity, Financial | Contractual necessity |
| Fraud detection & security monitoring | Technical, Financial, Gaming Activity | Legitimate interests; Legal obligation |
| Responsible gaming monitoring | Gaming Activity, Financial, Communication | Legal obligation; Legitimate interests |
| Customer support & dispute resolution | Identity, Communication, Gaming Activity | Contractual necessity; Legitimate interests |
| Promotional offers & bonus crediting | Identity, Financial, Gaming Activity | Contractual necessity |
| Service improvement & analytics | Usage & Analytics (aggregated) | Legitimate interests |
| Legal & regulatory compliance | All categories as required | Legal obligation |
Marketing Communications
bdgog may send you promotional communications — such as bonus offer alerts, BPL season specials, Eid promotions, and new game launch announcements — via SMS, email, or in-platform notification. These communications are sent on the basis of your consent, which you provide during registration by opting in to marketing. You may withdraw your marketing consent at any time by updating your Account preferences or contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and does not affect communications that are essential to the operation of your Account (such as transaction confirmations, security alerts, and KYC requests).
Third Parties
Data Sharing & Disclosure
bdgog does not sell your personal data. We share data with third parties only in the circumstances described below, and only to the extent strictly necessary for each purpose. All third-party processors engaged by bdgog are contractually required to apply appropriate technical and organisational security measures and to process data only on bdgog's documented instructions.
Payment Processors
To facilitate deposits and withdrawals, bdgog shares relevant transaction data — including your registered mobile banking number, transaction amount, and account reference — with the relevant payment provider: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and select Visa/Mastercard gateway processors. These providers receive only the data necessary to complete the specific transaction and are bound by their own published privacy commitments. bdgog does not store full card numbers — card transactions are tokenised at the payment gateway level.
Identity Verification Partners
Where automated KYC verification is used, bdgog may share your identity documents and personal details with a certified identity verification service provider operating in Bangladesh. These providers verify the authenticity of documents against government databases and return a pass/fail result to bdgog. They do not retain your identity documents beyond the period required for the verification check.
Game Technology Providers
Live casino and slot games on bdgog are powered by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, PG Soft, Spribe, and Playtech. When you play a game from one of these providers, your username, account token, bet amounts, and game result data are transmitted to that provider's platform for game logic processing. These providers operate independently audited, certified gaming platforms and are contractually bound not to use game session data for any purpose other than game delivery and fraud prevention.
Sports Data Providers
bdgog uses certified sports data feed services to receive live match data, odds, and settlement results for cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), football, kabaddi, and other supported sports. No personal member data is shared with sports data providers — these are one-way data feeds into bdgog.
Legal & Regulatory Disclosure
bdgog may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, valid legal process, or in response to a lawful request. Where bdgog is legally permitted to do so, it will inform you of such a disclosure request prior to complying. In cases involving active fraud investigations, money laundering suspicions, or underage gambling, bdgog may be legally required to report and share data without prior notice to the data subject.
How Long We Keep It
Data Retention Policy
bdgog retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. The specific retention periods applicable to each data category are set out below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years post-closure | Legal obligation; Audit trail; Dispute resolution |
| KYC Documents | 5 years from date of submission | Anti-money laundering compliance |
| Financial Transaction Records | 7 years from transaction date | Tax and financial regulatory requirements |
| Gaming Activity & Bet History | 5 years from the date of each wager | Responsible gaming audit; Dispute resolution |
| Support Communication Logs | 3 years from the date of each interaction | Quality assurance; Dispute evidence |
| Analytics Data (anonymised) | 26 months on a rolling basis | Platform improvement analysis |
| Marketing Consent Records | Duration of consent + 3 years post-withdrawal | Evidence of consent and opt-out compliance |
| Security & Fraud Logs | 2 years from the logged event | Security incident investigation |
At the end of each applicable retention period, personal data is either permanently deleted from bdgog's systems or, where deletion is technically impractical in the short term (e.g., data held in encrypted backup archives), the data is rendered inaccessible and scheduled for deletion at the next backup rotation cycle.
How We Protect It
Security Measures in Place
bdgog implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, and unlawful destruction. The following technical and organisational measures are maintained across all platform systems.
Technical Security Controls
- 256-bit SSL/TLS encryption on all data in transit between your browser or app and bdgog's servers.
- AES-256 encryption for sensitive data fields — including passwords (hashed, never stored in plain text), KYC document stores, and financial records — at rest.
- Multi-factor authentication for all internal bdgog staff systems that have access to member data. Staff cannot access member accounts without two-step verification.
- Intrusion detection and prevention systems (IDS/IPS) monitoring all inbound and outbound network traffic for anomalous patterns.
- Web Application Firewall (WAF) protecting the public-facing bdgog.org platform from SQL injection, cross-site scripting (XSS), and other common web vulnerabilities.
- Regular penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
- Secure backup and disaster recovery procedures ensuring that member data can be restored in the event of a system failure, without compromising data integrity.
Organisational Security Controls
- Access to personal data is restricted to bdgog staff on a strict need-to-know basis. Role-based access controls ensure that a customer support agent, for example, can see the information necessary to help you without having access to your KYC documents or full financial history.
- All bdgog staff with access to personal data undergo data protection training as part of their onboarding and receive refresher training annually.
- bdgog maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, you will be notified without undue delay, as required by applicable data protection obligations.
Your Responsibility
While bdgog takes extensive measures to secure your data on our side, the security of your Account also depends on the strength and confidentiality of your password. bdgog recommends using a password of at least 12 characters combining upper and lower case letters, numbers, and symbols, and enabling the two-step device verification feature available in your Account Settings. Never share your bdgog password with anyone — bdgog staff will never ask for it.
Member Rights
Your Privacy Rights
As a bdgog member, you hold a set of rights with respect to the personal data we process about you. These rights are summarised in the table below. To exercise any of these rights, contact the bdgog data protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days (BST) and respond in full within 30 days.
| Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all personal data bdgog holds about you, together with an explanation of how it is being used. This is commonly known as a Subject Access Request (SAR). |
| Right to Rectification | If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For identity data, corrections may require updated KYC documentation. |
| Right to Erasure | You may request that bdgog delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. This right is subject to bdgog's legal data retention obligations, which may override an erasure request for specific data categories. |
| Right to Restriction | You may ask bdgog to restrict processing of your data — for example, while a rectification request is under review — so that the data is stored but not actively used. |
| Right to Data Portability | Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format (e.g., JSON or CSV). |
| Right to Object | You have the right to object to processing carried out on the basis of legitimate interests — including marketing profiling. Where you object, bdgog will cease the processing unless it can demonstrate compelling legitimate grounds that override your rights. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal. |
Get In Touch
Contact & Data Protection
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bdgog handles your personal data, you are encouraged to contact us directly. Our data protection team monitors the support inbox around the clock and will provide a substantive response to privacy-related enquiries within 4 business hours during Bangladesh Standard Time (BST, UTC+6) business hours, or within 24 hours for enquiries received outside those hours.
How to Reach Us
All data protection enquiries, Subject Access Requests, rectification requests, erasure requests, and general privacy questions should be directed to:
Email (plain text — not a link): [email protected] Subject line: "Data Rights Request" or "Privacy Enquiry" Response time: Within 4 hours (BST) — 24/7 Live Chat also available on the platform.
Updates to This Privacy Policy
bdgog reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered members by email or via a prominent in-platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect when the most recent revision was published. Your continued use of bdgog following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how bdgog protects your data.
Children & Minors
bdgog is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered on the platform or submitted personal data, we will immediately suspend the relevant account, delete all associated personal data, and — where legally required — report the incident to the appropriate authorities. Parents or guardians who believe a minor has registered on bdgog are urged to contact us immediately at [email protected] so that we can take prompt corrective action.
Ready to Explore bdgog?
Your privacy is protected every step of the way. Browse our cricket markets, discover top slots, or visit our live casino — all secured by the data protections described in this policy.