bdbig Privacy Policy — How We Handle Your Personal Data

1 Introduction

bdbig is committed to safeguarding the privacy and personal data of every individual who interacts with our platform. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this Policy carefully to understand our practices regarding your personal data.

This Policy applies to all users of the bdbig platform, including registered players, unregistered visitors browsing the website, and individuals who contact our support team. It covers all data processing activities carried out by bdbig in connection with the operation of the platform.

This Policy should be read alongside the bdbig Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your use of the bdbig platform.

2 Who We Are

In this Policy, "bdbig", "we", "us", and "our" refer to the bdbig platform and its operating entity, accessible at https://bdbig.io. bdbig is the data controller in respect of personal data collected from players and visitors in connection with the platform.

bdbig operates as an online betting and casino platform serving the Bangladesh market. All player-facing services — including sports betting on cricket (BPL, T20 World Cup, IPL), live casino, slots, crash games, and payment processing via bKash, Nagad, Rocket, Upay, Visa, and Mastercard — are delivered through the bdbig platform.

For all privacy-related enquiries, data subject requests, and formal complaints regarding data processing, players and visitors may contact the bdbig data protection contact point at [email protected]. This email address is provided as plain text and is not a clickable link.

3 Personal Data We Collect

bdbig collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Registration Data

When you create a bdbig account, we collect: full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This data is required to establish your account and is used to verify your identity and communicate with you.

3.2 Identity Verification (KYC) Data

For Know Your Customer (KYC) compliance purposes, bdbig may collect: scanned or photographed copies of government-issued photographic identification (National ID Card, passport, or driving licence), proof of residential address, and in some cases, source-of-funds documentation. KYC documents are processed through a secure verification portal and are stored under strict access controls.

3.3 Financial Data

When you make deposits or request withdrawals, bdbig collects transaction data including payment method identifiers (for example, the mobile wallet number associated with your bKash or Nagad account, or the last four digits and expiry date of a Visa or Mastercard used), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. bdbig does not store full card numbers — card payment data is processed by PCI-DSS compliant payment processors.

3.4 Transactional & Gaming Data

bdbig records all account activity, including: bet placement history, casino game sessions, deposit and withdrawal records, bonus claims and wagering progress, account balance history, login timestamps, and session duration data. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

3.5 Technical & Device Data

When you access the bdbig platform, our servers automatically log certain technical data, including: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited within bdbig, and time spent on each page. This data is collected via server logs and cookies (see Section 8).

3.6 Communications Data

If you contact bdbig via live chat, email, or any other support channel, we retain records of that communication, including the content of your messages and any attachments, your contact details as provided in the message, the date and time of the communication, and the resolution or outcome. Communications data is retained for quality assurance, staff training, and dispute resolution purposes.

3.7 Data Summary Table

4 How We Collect Your Data

bdbig collects personal data through the following channels and mechanisms:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, place a bet, interact with a casino game, or contact our support team.
• Automatically — through server logs, cookies, and similar tracking technologies when you visit or interact with the bdbig website (see Section 8 for full cookie details).
• From payment providers — bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data with bdbig as part of payment processing and fraud prevention workflows.
• From identity verification partners — where bdbig uses a third-party KYC service provider to verify identity documents, that provider may share verification outcome data and flagging information with bdbig.
• From fraud prevention and AML screening services — bdbig may receive data signals from third-party risk-scoring and sanctions-screening services to assist in detecting and preventing financial crime.

5 How We Use Your Personal Data

bdbig uses the personal data it collects for the following specific purposes:

• Account administration: Creating, maintaining, and managing your bdbig account, including password resets, communication preferences, and account closure requests.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that the identity details you have provided are accurate and verifiable.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, including reconciliation of transactions and resolution of payment disputes.
• Responsible gaming compliance: Monitoring account activity to identify potential indicators of problem gambling, applying player-requested limits, and fulfilling our duty of care obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraud, money laundering, account takeover, and other prohibited activities on the platform.
• Regulatory and legal compliance: Meeting our obligations under applicable law, including anti-money laundering (AML) requirements, responding to lawful requests from law enforcement or regulatory bodies, and maintaining records as required by law.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance via live chat and email.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, functionality, and user experience of the bdbig platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and event-related communications (such as BPL season promotions or Eid special offers) where you have consented to receive such communications. You may withdraw this consent at any time.

6 Legal Basis for Processing

bdbig processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bdbig — including account management, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: Processing conducted to pursue bdbig's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing conducted on the basis of your freely given, informed, specific consent — in particular, the sending of direct marketing communications. You may withdraw consent at any time by contacting [email protected] without detriment to any other aspect of your bdbig account.

7 Sharing Your Personal Data

bdbig does not sell your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa network processors, and Mastercard network processors receive transaction data as necessary to process deposits and withdrawals. Each payment partner operates under its own privacy policy and applicable data protection obligations.
• Identity verification providers: Third-party KYC service providers receive document images and personal data to conduct identity verification checks. These providers are contractually bound to process data only for the stated verification purpose and to maintain appropriate security standards.
• Fraud and AML screening services: Risk-scoring and sanctions-screening services may receive limited personal data (such as name, date of birth, and country) to perform financial crime screening. These services are bound by strict data processing agreements.
• Game providers: Game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — may receive session data (such as a player identifier and stake amount) as part of the technical integration required to deliver their games on the bdbig platform. No directly identifying data such as full name, address, or payment details is shared with game providers.
• Law enforcement and regulatory bodies: bdbig will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, court order, or other binding legal process. Where legally permitted, bdbig will notify the affected player of such disclosure.
• Professional advisers: Legal advisers, auditors, and insurers may access limited personal data in the course of providing professional services to bdbig, under strict confidentiality obligations.

8 Cookies & Tracking Technologies

bdbig uses cookies and similar tracking technologies to enhance platform functionality, maintain session security, and gather analytics data. The following categories of cookies are used on the bdbig platform:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function securely. You may manage your preferences for functional and analytics cookies through your account settings. Note that disabling certain functional cookies may affect your experience on the platform.

9 Data Retention

bdbig retains personal data for the periods set out in the Data Retention Schedule below. These periods reflect the purposes for which data is held and any applicable legal or regulatory minimum retention requirements.

Upon expiry of the applicable retention period, personal data is either securely deleted (for digital records) or securely destroyed (for physical document copies), unless a legal hold or ongoing dispute requires the data to be preserved for a longer period. bdbig will notify affected players of any exceptional extension of the standard retention period where practicably possible.

10 Your Data Rights

As a data subject whose personal data is processed by bdbig, you hold the following rights, which bdbig will honour within the timeframes stated:

• Right of Access: You have the right to request a copy of the personal data bdbig holds about you, together with information about how it is processed. bdbig will provide a Data Subject Access response within 10 business days of receiving a valid request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by bdbig. Where possible, corrections should be made directly within the account dashboard. Where account-level correction is not available, contact support at [email protected].
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you object to processing and there are no overriding legitimate grounds. Note that bdbig's legal and regulatory obligations (including AML record-keeping) may require retention of certain data beyond an erasure request, and bdbig will explain this clearly in its response.
• Right to Restriction: You may request that bdbig restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is contested, or while an objection is under consideration.
• Right to Object: You have the right to object to processing of your personal data where it is conducted on the basis of legitimate interests. bdbig will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (in particular, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

To exercise any of the above rights, please contact bdbig at [email protected] with the subject line "Data Subject Request" and a description of your request. bdbig will verify your identity before processing any data subject request. We aim to respond to all requests within 10 business days.

11 Children & Minors

The bdbig platform is strictly for use by individuals aged 21 years and above. bdbig does not knowingly collect personal data from any individual under the age of 21. If bdbig discovers or has reasonable grounds to suspect that personal data belonging to a person under 21 has been collected — whether as a result of a failed age verification, a complaint from a parent or guardian, or any other trigger — bdbig will:

• Immediately suspend the account associated with that data.
• Initiate an investigation to confirm the individual's age.
• Where the individual is confirmed to be under 21, permanently close the account, void all pending and historical bets, and return any deposited funds (net of any withdrawals already made) to the payment method originally used.
• Securely delete all personal data associated with that account within 30 days of the confirmed underage finding, unless a legal retention obligation applies.

Parents and guardians who believe that a minor in their care has registered a bdbig account should contact support immediately at [email protected]. bdbig treats all such notifications with the highest priority and will respond within 24 hours.

12 Security Measures

bdbig implements a multi-layered security programme to protect the personal data it holds against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key technical and organisational measures include:

• Encryption in transit: All data exchanged between your browser or app and the bdbig platform is encrypted using 256-bit SSL/TLS protocols. Any attempt to intercept data in transit will yield only unreadable ciphertext.
• Encryption at rest: Sensitive personal data and financial records stored on bdbig's servers are encrypted at rest using AES-256 encryption. Database encryption keys are managed under a separate, hardware-secured key management system.
• Access controls: Access to player personal data within bdbig is restricted on a strict need-to-know basis. All internal access to sensitive data is logged, and access logs are reviewed periodically by the security team. Two-factor authentication is required for all bdbig staff accessing production systems.
• Intrusion detection: bdbig operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous access patterns in real time.
• Vulnerability management: bdbig conducts regular security assessments of the platform, including automated vulnerability scanning and periodic penetration testing by independent security specialists.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected individuals, bdbig will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. Players are responsible for keeping their own login credentials secure and for notifying bdbig immediately at [email protected] if they suspect that their account has been compromised.

13 Third-Party Links

The bdbig platform may, from time to time, contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where such references involve navigating away from the bdbig platform to a third-party website or application, bdbig has no control over the data practices of those third parties.

bdbig strongly recommends that you review the privacy policy of any third-party service before providing your personal data to that service. bdbig accepts no responsibility or liability for the privacy practices, data security standards, or content of any third-party website or service, even where that third party is a named partner of bdbig for payment or game delivery purposes.

This Privacy Policy applies solely to the bdbig platform at https://bdbig.io. It does not extend to any third-party platform, mobile application, or website, even if accessed via a link or referral from the bdbig platform.

14 Updates to This Privacy Policy

bdbig reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the features and services offered on the platform. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this document to reflect the date on which the revised Policy takes effect.
• Display a prominent notice on the bdbig platform for a period of at least 14 days following publication of the revised Policy, informing registered players that the Policy has been updated.
• Where the changes are particularly significant — such as a change to the categories of data we collect, the purposes for which we process data, or the third parties with whom we share data — send a direct notification to the email address registered to your bdbig account, providing a summary of the key changes and a link to the full revised Policy.

Your continued use of the bdbig platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you should discontinue use of the platform and request account closure by contacting support at [email protected] before the effective date of the changes.

bdbig recommends that you revisit this Privacy Policy periodically to stay informed of how we are protecting your personal data. The current version of the Privacy Policy is always available at https://bdbig.io/privacy-policy.

15 Contact Us

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or formal complaints regarding bdbig's data processing practices, please contact our data protection contact point using the details below. All correspondence should clearly state "Privacy Enquiry" or "Data Subject Request" in the subject line to ensure prompt routing to the appropriate team member.

bdbig takes all privacy complaints seriously. If you are not satisfied with bdbig's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bdbig will cooperate fully with any such authority in the resolution of a formal complaint.