bde3 Privacy Policy — How We Handle Your Data

Data Controller

bde3 is the data controller for all personal data collected and processed through the bde3 platform. As data controller, bde3 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with this Policy and any applicable data protection law.

If you have any questions about how bde3 handles your personal data, or wish to exercise any of your data rights described in this Policy, please contact our support team at [email protected]. All privacy-related requests will be handled by a designated member of the bde3 team.

What Personal Data We Collect

bde3 collects the following categories of personal data from users of the platform. Data may be collected directly from you at the time of registration, during the use of the platform, or through automated means such as cookies and device fingerprinting:

• Identity data: full name, date of birth, gender, nationality, and a copy of an identity document where requested for KYC purposes.
• Contact data: email address, mobile phone number, and residential address.
• Financial data: payment method details (e.g. bKash account number, Nagad account number, card details), deposit history, withdrawal history, and account balance records.
• Technical data: IP address, browser type and version, device type, operating system, and session data including login timestamps and pages visited.
• Gameplay data: game history, bet amounts, win/loss records, bonus usage, and responsible gaming tool settings.

How We Use Your Personal Data

bde3 processes personal data only for the purposes for which it was collected. The primary purposes for which bde3 uses your data are as follows:

• Account management: to create, maintain, and administer your bde3 account, including verifying your identity and age at registration and during periodic KYC reviews.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records for each account.
• Platform improvement: to analyse usage patterns, diagnose technical issues, and improve the performance, security, and user experience of the bde3 platform.
• Responsible gaming compliance: to monitor gameplay patterns that may indicate problematic gambling behaviour and to apply responsible gaming tools, including deposit limits and self-exclusion, in accordance with our Responsible Gaming policy.

Legal Basis for Processing

bde3 processes personal data on the following legal grounds: (a) Contract performance — processing necessary to fulfil our obligations to you as a registered user of bde3, including account management, payment processing, and the delivery of gaming services; (b) Legal obligation — processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and financial record-keeping; (c) Legitimate interests — processing carried out for bde3's legitimate business interests, including platform security, fraud prevention, and service improvement, where such interests are not overridden by your rights.

Where bde3 relies on your consent as the legal basis for processing (for example, for optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

Data Sharing and Third Parties

bde3 does not sell, rent, or trade your personal data to any third party. bde3 may share your personal data with the following categories of third party strictly where necessary to operate the platform and comply with applicable obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, for the purpose of processing deposits and withdrawals. These providers are subject to their own privacy policies and data protection obligations.
• Identity verification providers: third-party KYC service providers used to verify user identity and age in compliance with applicable anti-money laundering requirements.
• Technology and infrastructure partners: cloud hosting and platform infrastructure providers used to operate and maintain the bde3 platform. These providers process data only on bde3's instructions and are bound by data processing agreements.
• Regulatory and law enforcement authorities: where bde3 is required by applicable law or a valid legal order to disclose user data to a government authority, law enforcement body, or regulatory body.

Data Security

bde3 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and the bde3 platform, encrypted storage of sensitive account and financial data, access controls limiting which members of the bde3 team can access personal data, and regular security audits and vulnerability assessments of the platform's infrastructure.

While bde3 uses all reasonable efforts to protect your personal data, no internet transmission or electronic storage system is completely secure. In the event of a data security incident that materially affects your personal data, bde3 will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

Cookies and Tracking Technologies

bde3 uses cookies and similar technologies to operate the platform, remember your preferences, and analyse how the platform is used. The following categories of cookies are used:

• Essential cookies: required for the platform to function correctly. These include session cookies that maintain your login state and security cookies that help protect against cross-site request forgery. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytical cookies: used to collect aggregated, anonymised data about how users interact with the platform — such as which pages are most visited, how long sessions last, and where users encounter errors. This data is used solely to improve the platform and is not linked to individual user identities.
• Functional cookies: used to remember user preferences and settings, such as language selection, to provide a more personalised experience on return visits.
• You can manage or disable non-essential cookies at any time through your browser's settings. Note that disabling certain cookies may affect the functionality of the bde3 platform. bde3 does not use third-party advertising or tracking cookies.
• bde3 does not use pixel tracking, cross-site tracking, or any form of behavioural advertising targeting based on your browsing activity outside of the bde3 platform.

Data Retention

bde3 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data for active registered users is retained for the duration of the account's active status and for a period after account closure as required by applicable financial record-keeping and anti-money laundering obligations, which may require retention of certain categories of data for up to seven years following account closure.

Where data is no longer required for operational or legal purposes, bde3 will securely delete or anonymise it in accordance with industry-standard data disposal practices. Users who request deletion of their account data will have that data deleted or anonymised to the extent permitted by applicable law, with any legally required records retained in a restricted-access environment for the minimum period required by law.

Your Data Rights

As a user of bde3, you have the following rights with respect to your personal data. To exercise any of these rights, please contact bde3 support at [email protected]:

(a) Right of access: you may request a copy of all personal data bde3 holds about you. (b) Right to rectification: you may request correction of any inaccurate or incomplete personal data. (c) Right to erasure: you may request deletion of your personal data, subject to any legal retention obligations. (d) Right to restriction: you may request that bde3 restrict processing of your data in certain circumstances. (e) Right to data portability: you may request a machine-readable copy of your personal data where technically feasible. (f) Right to object: you may object to processing carried out on the basis of bde3's legitimate interests.

Children and Minors

The bde3 platform is strictly intended for adults aged 21 and above. bde3 does not knowingly collect personal data from any individual under the age of 21. If you believe that a person under 21 has registered an account or provided personal data to bde3, please notify us immediately at [email protected]. Upon receiving such notification, bde3 will promptly investigate and, where confirmed, close the account and delete all associated personal data.

• bde3 uses age verification checks at the point of registration and may request additional identity documentation at any time to confirm a user's age.
• Any account found to belong to a user under the age of 21 will be suspended immediately, all funds will be returned to the payment method on record, and all personal data will be securely deleted.
• Parents and guardians who are concerned about a minor's access to online gambling platforms are encouraged to use parental control software and to contact bde3 support if they have any concerns.
• bde3 does not direct any marketing, promotional, or informational content towards individuals who are or may be under the age of 21.

Changes to This Privacy Policy

bde3 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, bde3 will make reasonable efforts to notify registered users by posting a prominent notice on the platform. The date of the most recent revision is displayed at the top of this Policy. Continued use of the bde3 platform following any update to this Policy constitutes your acceptance of the revised Policy.

If you do not agree to a revised version of this Policy, you should stop using the bde3 platform and may request account closure in accordance with our Terms and Conditions. bde3 recommends reviewing this Policy periodically to stay informed of any updates.

International Data Transfers

bde3 primarily processes and stores personal data within secure data centres serving the Bangladesh and South Asia region. In certain circumstances, personal data may be transferred to or processed by service providers located in other countries — for example, cloud infrastructure providers or identity verification services operating internationally. Where such transfers occur, bde3 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection obligations imposed on the receiving party equivalent to those applicable under this Policy.

Contact and Data Requests

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or want to raise a concern about how bde3 processes your personal data, please contact our support team. We aim to acknowledge all privacy-related requests within 2 business days and to provide a full response within 20 business days.

bde3 does not operate a telephone support line. All privacy and data-related requests must be submitted in writing via email. Requests submitted through other channels (e.g. in-platform chat) will be acknowledged and redirected to the formal email process.