Privacy Policy for bdoc Players in Bangladesh

Data We Collect

bdoc collects the following categories of personal data in connection with your use of the platform:

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required to comply with an applicable legal obligation and only with your explicit consent where required.

How We Collect Your Data

bdoc collects personal data through the following channels:

• Direct Submission: Information you provide when registering your bdoc account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated Collection: Technical and usage data collected automatically when you access the bdoc platform, including data gathered through cookies, session tokens, and server logs.
• Payment Processors: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered banks in Bangladesh such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank.
• Identity Verification Services: Data received from third-party KYC and fraud prevention providers engaged by bdoc to verify player identities and detect suspicious activity.
• Game Studios: Anonymised gameplay metrics and session data received from certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and BGaming, used for platform performance and responsible gaming analysis.

Purposes of Processing

bdoc processes your personal data for the following specific purposes:

• Account Management: To register, maintain, and administer your bdoc player account, including verifying your identity, managing your BDT wallet, and processing your betting and gaming activity.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, reconcile transaction records, and investigate any disputed transactions.
• KYC and Fraud Prevention: To verify that you meet the minimum age requirement of 21 years, confirm your identity, detect and prevent fraudulent activity, money laundering, and abuse of the bdoc platform.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling and to administer the responsible gaming tools available on your bdoc account, including deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver 24/7 English-language support to players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
• Platform Security: To protect the integrity and security of the bdoc platform, including detecting unauthorised account access, bot activity, and collusion between players.
• Marketing and Promotions: Where you have given your consent, to send you promotional communications about bdoc bonuses, seasonal offers (such as Eid, Pohela Boishakh, and BPL season promotions), and new game launches. You may withdraw this consent at any time by contacting [email protected].
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records required for audit and compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and game library of the bdoc platform.

Legal Bases for Processing

bdoc processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bdoc — including account management, payment processing, and game delivery — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws — including age verification, anti-money laundering checks, and record-keeping obligations — is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is conducted on the basis of bdoc's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and the use of non-essential cookies is conducted on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

5.1 Third-Party Service Providers. bdoc shares personal data with carefully selected third-party service providers who assist in delivering the platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered banks), identity verification providers, game studios, cloud infrastructure providers, and customer support software vendors. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the service they provide to bdoc.

5.2 No Sale of Data. bdoc does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is not used to build advertising profiles for third-party marketers.

5.3 Legal Disclosure. bdoc may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or valid legal process. In such cases, bdoc will disclose only the minimum data necessary to comply with the legal requirement.

5.4 Business Transfers. In the event that bdoc undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms prior to your data being transferred.

5.5 Aggregate Analytics. bdoc may share aggregated, anonymised statistical data about platform usage with game studio partners and analytics providers. Such data cannot be used to identify you as an individual.

Cookies and Tracking Technologies

6.1 What Are Cookies. Cookies are small text files placed on your device when you visit the bdoc website. bdoc uses cookies and similar tracking technologies to operate essential platform functions, analyse usage patterns, and (where you have consented) deliver personalised content.

6.2 Types of Cookies Used by bdoc.

• Essential Cookies: Required for the bdoc platform to function correctly. These include session authentication tokens, login state cookies, and security cookies. Essential cookies cannot be disabled without impairing core platform functionality.
• Analytical Cookies: Used to collect anonymised data about how players navigate and use the bdoc platform, which pages are visited most frequently, and where technical errors occur. This data helps bdoc improve the platform experience.
• Functional Cookies: Used to remember your preferences such as your selected language, preferred payment method display, and responsible gaming settings.
• Marketing Cookies: Used, where you have consented, to track your engagement with bdoc promotional campaigns and to ensure that promotional communications are relevant to your activity on the platform.

6.3 Managing Cookies. You may control cookie preferences through your browser settings. Disabling certain categories of cookies may affect your ability to use some features of the bdoc platform. For essential cookies, no opt-out is available as they are necessary for platform operation.

Data Security

7.1 Technical Safeguards. bdoc employs a range of technical security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls that restrict employee access to personal data on a need-to-know basis, regular security audits and penetration testing of the bdoc platform infrastructure, and multi-factor authentication for internal administrative systems.

7.2 Organisational Safeguards. All bdoc personnel who handle personal data are subject to confidentiality obligations. Staff with access to player data receive regular training on data protection best practices and the requirements of this Privacy Policy.

7.3 Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, bdoc will take immediate steps to contain the breach, assess its scope, and notify affected players and relevant authorities in accordance with applicable data protection obligations. Notification will be sent to the email address registered on your bdoc account without undue delay.

7.4 Limitation of Liability. While bdoc implements robust security measures, no online platform can guarantee absolute security. bdoc is not liable for any loss or damage arising from a security breach that occurs despite reasonable safeguards being in place, including breaches resulting from actions taken by you (such as sharing your login credentials with a third party).

Data Retention

8.1 Retention Periods. bdoc retains your personal data for as long as your bdoc account remains active and for such further period as may be required by applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of seven years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five years following the completion of the KYC verification process or the closure of your account, whichever is later.
• Customer Support Records: Retained for three years from the date of the last support interaction, or longer where a dispute remains unresolved.
• Marketing Consent Records: Retained for the duration of your active consent and for one year following withdrawal of consent, as evidence of the consent record.
• Usage and Technical Data: Retained in aggregated or anonymised form indefinitely for platform analytics purposes; individually identifiable usage logs are retained for twelve months.

8.2 Secure Deletion. When personal data is no longer required and no legal obligation requires its retention, bdoc securely deletes or anonymises it in accordance with our internal data destruction procedures.

Your Privacy Rights

As a bdoc player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". bdoc will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data that bdoc holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data that bdoc holds about you that is inaccurate or incomplete. You may also update certain account details directly through your bdoc account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to bdoc's legal obligations to retain certain records.
• Right to Restriction: You have the right to request that bdoc restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on bdoc's legitimate interests, including profiling for responsible gaming monitoring. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children and Minors

10.1 Minimum Age. The bdoc platform is strictly for individuals aged 21 years and above. bdoc does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the bdoc platform in any capacity.

10.2 Underage Accounts. If bdoc discovers or reasonably suspects that personal data has been collected from a player who is under 21 years of age, the relevant account will be immediately suspended, all data associated with the account will be securely deleted (subject to any legal retention obligations), and all deposits will be returned to the verified source payment method.

10.3 Parental Awareness. bdoc encourages parents and guardians in Bangladesh to maintain awareness of their children's online activity and to make use of available parental control tools to prevent minors from accessing gambling platforms.

Third-Party Links

The bdoc platform may contain references to or integrations with third-party service providers such as payment processors and game studio content. Where third-party services are accessed through bdoc, those third parties operate under their own privacy policies. bdoc is not responsible for the privacy practices of third-party services. Players are encouraged to review the privacy policies of any third-party provider with whom they share personal data in connection with their bdoc account, including bKash, Nagad, Rocket, and Upay.

Amendments to This Privacy Policy

12.1 Right to Amend. bdoc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this Policy will always be available at https://bdoc.pro/privacy-policy.

12.2 Notification of Changes. Where changes to this Policy are material — such as changes to the categories of data we collect, the purposes for which we process data, or the third parties with whom we share data — bdoc will notify registered players by email to the address on their bdoc account prior to the updated Policy taking effect.

12.3 Continued Use. Your continued use of the bdoc platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

Contact and Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data bdoc holds about you, please contact the bdoc data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Response Time: bdoc aims to respond to all privacy-related enquiries within 30 calendar days of receipt, measured in Bangladesh Standard Time (UTC+6)
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Language: English

Where a data rights request is complex or where bdoc receives a high volume of requests simultaneously, we may extend the response period by a further 30 days. In such cases, you will be notified of the extension and the reason for it within the initial 30-day period.

bdoc takes all privacy enquiries seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.