bdbig Privacy Policy

1 Introduction

bdbig ("we", "us", "our") operates the online casino and sports betting platform accessible at https://bdbig.bid (the "Platform"). This Privacy Policy describes how bdbig collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use any part of the Platform, including registered account holders and unregistered visitors.

bdbig is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read in conjunction with the bdbig Terms & Conditions, which are available at /terms-conditions.

By accessing the Platform, creating an account, or placing a wager, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2 Data We Collect

bdbig collects personal data through multiple channels, including the account registration process, ongoing use of the Platform, payment transactions, and customer support interactions. The categories of personal data we collect are detailed in the table below.

bdbig does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health information, except where such data is voluntarily provided by the Player in the context of a responsible gaming self-assessment or self-exclusion request, in which case it is processed solely for the purpose of player protection.

3 How We Use Your Data

bdbig uses the personal data it collects for the following purposes. We process data only where we have a valid legal basis for doing so (see Section 4).

• Account management: To create, maintain, and secure your bdbig account, including verifying your identity and age (18+ compliance) at registration and at any subsequent point we deem necessary.
• Service delivery: To provide access to casino games, sports betting markets, crash games, live dealer tables, and all other features of the Platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and any other approved payment method, and to maintain accurate transaction records.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) frameworks, and to respond to lawful requests from competent authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, cheating, collusion, money laundering, and other prohibited conduct as described in the bdbig Terms & Conditions.
• Responsible gaming: To monitor gambling behaviour for indicators of problem gambling, to apply and enforce player-requested limits and self-exclusion decisions, and to contact players where there is genuine concern for their wellbeing.
• Customer support: To respond to enquiries, complaints, and feedback submitted via live chat, email, or WhatsApp, and to maintain a record of support interactions for quality assurance.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the Platform, identify technical issues, and develop new features and improvements.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates by email or in-platform message — but only where you have given your consent or where we have a legitimate interest, and always with a clear opt-out mechanism.

4 Legal Basis for Processing

bdbig processes personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual necessity: Processing that is necessary to provide the services you have requested — including account creation, payment processing, game access, and customer support — is carried out on the basis that it is required to fulfil our contract with you.
• Legal obligation: Processing carried out to comply with applicable laws and regulatory requirements — including KYC identity verification, AML transaction monitoring, and responding to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and the placement of non-essential cookies is carried out only on the basis of your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.

5 Sharing Your Data

bdbig does not sell, rent, or transfer your personal data to unaffiliated third parties for their independent commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment service providers: We share relevant financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other approved payment processors solely to execute deposit and withdrawal transactions you have initiated.
• Game software providers: Certain usage data (such as game session data and bet records) is processed by our third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver game outcomes and maintain fair play integrity. These providers are contractually bound to process data only for this purpose.
• Identity verification providers: We may share identity document data with third-party KYC and AML compliance service providers for the purpose of verifying your identity and age as required by applicable regulations.
• Legal authorities: We may disclose personal data to law enforcement agencies, courts, regulators, or other competent authorities where we are legally required or permitted to do so, including in response to a court order, subpoena, or lawful regulatory request.
• Business transfers: In the event of a merger, acquisition, asset sale, or restructuring of bdbig's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers who receive personal data from bdbig are subject to appropriate data processing agreements that require them to implement adequate technical and organisational security measures and to process data only in accordance with bdbig's instructions.

6 Cookies & Tracking Technologies

bdbig uses cookies and similar tracking technologies (including web beacons and session tokens) on the Platform. These technologies help us operate the Platform effectively, remember your preferences, analyse usage patterns, and maintain session security.

The types of cookies we use are:

• Strictly necessary cookies: These are essential for the Platform to function and cannot be switched off. They include session authentication tokens, security cookies, and load-balancing cookies. No consent is required for these cookies.
• Functional cookies: These remember your preferences (such as language settings and display options) to provide a more personalised experience. They are set only with your consent.
• Analytical cookies: These collect anonymised or aggregated data about how visitors use the Platform — such as which pages are visited most frequently and where errors occur — to help us improve the service. They are set only with your consent.

You may manage or withdraw your consent to non-essential cookies at any time via your browser settings. Most modern browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform.

7 Data Security

bdbig implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bdbig's servers.
• Encryption at rest for sensitive data stored in bdbig's databases, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel with a demonstrable business need can access personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Secure deletion protocols applied to personal data that is no longer required to be retained.

While bdbig takes all reasonable precautions to protect your data, no system of transmission or storage over the internet can be guaranteed to be completely secure. You acknowledge that you transmit personal data to the Platform at your own risk and are responsible for maintaining the security of your own device and bdbig account credentials.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdbig will notify affected players without undue delay and will take all appropriate remedial action.

8 Data Retention

bdbig retains personal data for only as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as required by applicable legal, regulatory, accounting, or reporting obligations. The retention periods we apply are summarised below:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with standard AML and KYC record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• Communications and support records: Retained for three (3) years from the date of the last interaction, to facilitate ongoing support and to resolve any disputes that may arise.
• Usage and technical data: Retained in identifiable form for up to twenty-four (24) months, after which it is anonymised or deleted. Anonymised aggregated data may be retained indefinitely for analytical purposes.
• Responsible gaming records: Self-exclusion decisions and problem gambling flags are retained for the duration of the exclusion period plus five (5) years to prevent re-registration in circumvention of a self-exclusion.

When personal data is no longer required for any of the purposes described above, it is securely deleted or irreversibly anonymised using industry-standard methods.

9 Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data bdbig holds about you. To exercise any of these rights, please contact the bdbig support team via live chat or email (see Section 13).

• Right of access: You may request a copy of the personal data bdbig holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data we hold about you. Certain data (such as your registered name and date of birth) can be corrected only upon submission of supporting identity documents.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to legal retention obligations that may require us to retain certain data.
• Right to restriction: You may request that bdbig restrict the processing of your personal data in certain circumstances, such as while a query about its accuracy is being resolved.
• Right to data portability: Where processing is carried out by automated means on the basis of contract or consent, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though bdbig may override such an objection where there are compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bdbig will respond to all valid data rights requests within thirty (30) calendar days of receipt. We may request that you provide proof of identity before processing a request to ensure that personal data is not disclosed to an unauthorised party.

10 Third-Party Links

The bdbig Platform does not contain links to third-party websites that are not part of the bdbig service. In the event that any third-party links are incorporated into the Platform in the future, bdbig will not be responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policy of any external website you visit independently of the bdbig Platform.

Game software embedded in the Platform from third-party providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) is delivered via secure iframes and dedicated APIs. These providers may process limited technical and session data to deliver game outcomes; such processing is governed by data processing agreements between bdbig and each provider.

11 Children's Privacy

The bdbig Platform is strictly intended for adults aged 18 years and above. bdbig does not knowingly collect, process, or store personal data relating to individuals under the age of 18. If bdbig discovers or has reasonable grounds to believe that a registered player is under 18 years of age, the account will be immediately suspended, all funds will be frozen pending investigation, and any winnings accumulated during the period of underage use will be forfeited.

If you are a parent or guardian and believe that your child has registered on the bdbig Platform or has provided personal data to bdbig without your knowledge, please contact the support team immediately via live chat or email. bdbig will take prompt action to investigate and, if confirmed, to delete the minor's data and close the account.

12 Changes to This Privacy Policy

bdbig reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, bdbig will notify registered players by displaying a prominent notice on the Platform and, where practicable, by sending a notification to the email address registered to your account.

The updated Privacy Policy will take effect from the date specified in the notice. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. The date of the most recent revision is displayed in the Table of Contents on this page. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the bdbig Terms & Conditions.

bdbig recommends that you review this Privacy Policy periodically, particularly before providing any new personal data to the Platform.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bdbig holds about you, please contact the bdbig Data Support team through any of the following channels. All privacy-related enquiries are treated with the highest level of confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget accessible after login
• WhatsApp: Available 08:00–23:00 Bangladesh Standard Time (BST, UTC+6); number shown in the account dashboard
• Response time: Data rights requests are acknowledged within one (1) business day and responded to in full within thirty (30) calendar days

When submitting a data rights request, please state clearly the nature of your request (e.g., access, erasure, rectification), the email address associated with your bdbig account, and any other information that will help us locate and process your request accurately and efficiently.