bdwin Privacy Policy — How We Handle Your Personal Data

About This Privacy Policy

This Privacy Policy describes how bdwin ("bdwin", "we", "us", "our") collects, uses, stores, and discloses personal data when you use the bdwin website at bdwin.bar (the "Platform"). This policy applies to all users of the Platform, including visitors who browse without registering and registered players who hold an active bdwin account.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this policy, please discontinue use of the Platform. We encourage you to review this policy periodically, as it may be updated from time to time to reflect changes in our data practices or applicable law.

What Personal Data We Collect

bdwin collects personal data in several categories depending on how you interact with the Platform. The following cards summarise the main types of data we may hold about you.

How We Use Your Personal Data

bdwin uses personal data collected from you for specific, defined purposes. We do not use your personal data for any purpose that is incompatible with the purposes listed below, and we do not use it for general advertising targeting beyond the bdwin Platform itself.

• To create and manage your account, verify your identity, and fulfil our obligations under applicable know-your-customer regulations.
• To process your deposits and withdrawals via your chosen payment method and to maintain accurate records of all financial transactions on your account.
• To provide you with access to games, betting markets, live casino, and all other features of the Platform, and to personalise your experience based on your usage patterns.
• To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct that violates bdwin's Terms and Conditions.
• To comply with our legal and regulatory obligations, including anti-money laundering requirements, responsible gaming obligations, and any lawful request from a competent authority.
• To send you account-related communications, including deposit confirmations, withdrawal notifications, security alerts, and — where you have not opted out — promotional offers relating to bdwin.

bdwin does not use your personal data to build profiles for sale to third-party advertisers, and we do not monetise your data in any way outside the operational purposes described in this section.

Legal Basis for Processing

bdwin processes your personal data on the following legal bases. At least one legal basis applies to each data processing activity carried out by bdwin.

• Contract performance: Processing that is necessary to fulfil the contract between bdwin and you as a player, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable anti-money laundering law, KYC regulations, responsible gaming requirements, and any lawful order from a regulator or law enforcement authority.
• Legitimate interests: Processing carried out in bdwin's legitimate operational interests, including fraud detection, platform security monitoring, and internal analytics used to improve the Platform.
• Consent: Processing based on your explicit consent, including the sending of promotional and marketing communications. You may withdraw consent at any time by contacting bdwin support.

How We Share Your Data

bdwin does not sell personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers

• Payment processors (including the technical operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations) receive the minimum data necessary to process your transaction.
• Game providers (including Pragmatic Play, Evolution Gaming, and other software studios) receive technical session data necessary to deliver their games via the bdwin Platform.
• Identity verification and fraud prevention providers receive identity documents and biographic data submitted during KYC, solely for the purpose of verifying your identity and screening against sanctions and watchlists.
• Analytics and security service providers receive aggregated, pseudonymised technical data to help bdwin monitor Platform performance, detect anomalies, and prevent technical abuse.

Legal Disclosure

bdwin may disclose personal data to law enforcement agencies, regulators, courts, or other public authorities where required to do so by applicable law, court order, or regulatory direction. In such cases bdwin will disclose only the data specifically requested and will, where legally permissible, notify you that such a request has been received.

Cookies and Tracking Technologies

bdwin uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to remember your preferences and session state. The following types of cookies are used on bdwin.

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without breaking the Platform.
• Functional cookies: Used to remember your language preference, display settings, and other preferences so you do not have to reset them on every visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This information helps bdwin identify areas for improvement and measure the performance of site features.

You can control cookie settings through your mobile browser's privacy controls. Disabling functional or analytics cookies will not prevent you from using the core features of the Platform, but some personalisation features may not work as expected.

Your Data Protection Rights

As a user of the bdwin Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact the bdwin support team using the email address in the footer of this page.

How Long We Keep Your Data

bdwin retains personal data for as long as is necessary for the purposes for which it was collected. For active accounts, personal data is retained for the duration of the account relationship and for a defined period afterward as required by applicable law. Transaction records, identity documentation, and KYC records are retained for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements.

When personal data is no longer required, bdwin deletes or anonymises it securely so that it can no longer be used to identify you. Where full deletion is not immediately possible — for example, because data is stored in backup archives — bdwin will isolate the data from further active processing until deletion is possible.

Data Security Measures

bdwin implements technical and organisational security measures appropriate to the nature of the personal data we hold and the risks associated with its processing. These measures include SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the Platform, access controls that restrict which bdwin personnel can access personal data, and regular security assessments of the Platform's infrastructure.

While bdwin takes reasonable steps to protect your personal data, no internet-based system is completely immune from security threats. In the event of a data security incident that poses a risk to your rights and freedoms, bdwin will notify you and any relevant authority as required by applicable law.

Minors and Age Restrictions

bdwin is strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If bdwin becomes aware that personal data has been collected from a person under the age of 21, we will delete that data immediately and close the associated account. If you believe that a minor has registered on bdwin, please contact our support team immediately so we can take appropriate action.

Third-Party Links and Services

The bdwin Platform integrates games and services provided by third-party studios and technology providers. When you launch a game from a third-party provider, that provider may collect certain technical session data directly. bdwin is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policies of game studios whose games you play if you have concerns about how they handle your data. bdwin does not link to external websites for commercial or promotional purposes.

Changes to This Privacy Policy

bdwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. When we make a material change to this policy — one that meaningfully affects how we handle your personal data — we will notify you by displaying a notice on the Platform or by sending a message to your registered mobile number at least 7 days before the change takes effect.

The most current version of this Privacy Policy is always available at bdwin.bar/privacy-policy. The "Last updated" date at the top of this page indicates when this version of the policy was published. Your continued use of the Platform after the effective date of any change constitutes your acceptance of the updated policy.

Contact Us About Your Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a concern about how bdwin has handled your personal data, please contact our support team using the email address displayed in the footer of this page. We aim to respond to all privacy-related enquiries within 5 business days.

bdwin is committed to resolving all data protection complaints promptly and fairly. If you are not satisfied with our response to a privacy complaint, you may seek further recourse through the appropriate legal channels available in your jurisdiction.