mybdx Privacy Policy

When you interact with mybdx — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal information. The specific data we collect depends on how you use the platform. Below is a full account of the categories of personal data mybdx may hold about you.

Data Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, national ID number, passport number	Registration form, KYC verification submission
Contact Data	Email address, phone number, residential address (city, district, division)	Registration form, account settings updates
Financial Data	bKash / Nagad / Rocket mobile number, bank account reference, transaction amounts	Deposit and withdrawal processing
Technical Data	IP address, device type, browser type and version, operating system, screen resolution	Automated collection via platform access logs
Usage Data	Pages visited, games played, bet history, session duration, click patterns	Automated collection via analytics tools
Communications Data	Support ticket content, live chat transcripts, email correspondence	Direct submission by the player
Verification Documents	Scanned NID, passport photo page, utility bill, bank statement	KYC document upload process

mybdx does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If any such data is incidentally submitted to our support team, it will not be processed or stored beyond the immediate context in which it was shared.

We do not collect personal data from individuals who have not actively engaged with the mybdx registration or payment process. Browsing the public-facing mybdx website without registering an account results only in the collection of anonymised Technical Data as described in the table above.

mybdx processes your personal data only for specific, documented purposes and only where we have an appropriate lawful basis to do so. We do not use your data for any purpose that is incompatible with the purposes set out below. The following table describes our primary processing activities.

• Account Creation and Management: We use your Identity Data and Contact Data to create and maintain your mybdx account, verify your identity, and communicate essential account information to you. Lawful basis: contractual necessity.
• Transaction Processing: We use your Financial Data and Identity Data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and affiliated banking partners. Lawful basis: contractual necessity.
• Age Verification and KYC Compliance: We use Identity Data and Verification Documents to confirm that players meet the 18+ age requirement and to satisfy our anti-money laundering obligations. Lawful basis: legal obligation.
• Fraud Prevention and Security: We use Technical Data and Usage Data to detect, investigate, and prevent fraudulent activity, account takeovers, and other security threats. Lawful basis: legitimate interest.
• Customer Support: We use Communications Data, Identity Data, and Usage Data to respond to your support queries and resolve account-related issues. Lawful basis: contractual necessity and legitimate interest.
• Responsible Gaming Monitoring: We analyse Usage Data and Financial Data to identify player behaviour patterns that may indicate problematic gambling and to administer responsible gaming interventions such as deposit limits or cooling-off periods. Lawful basis: legal obligation and legitimate interest.
• Platform Improvement and Analytics: We use aggregated, anonymised Usage Data and Technical Data to measure platform performance, improve navigation, and develop new features. Lawful basis: legitimate interest.
• Promotional Communications: Where you have provided explicit consent, we may use your Contact Data to send you information about bonuses, promotions, and seasonal offers relevant to your play preferences. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

mybdx uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform effectively, remember your preferences, and understand how players use our services. The following categories of cookies may be present on your device when you use mybdx.

• Strictly Necessary Cookies: These cookies are essential for the mybdx platform to function. They enable you to log in to your account, maintain your session, and complete transactions securely. These cookies cannot be disabled without breaking core platform functionality. No consent is required for strictly necessary cookies as they are required for the provision of the service you have requested.
• Functional Cookies: These cookies remember your preferences — such as your chosen display language, notification settings, and last visited game category — so that you do not need to re-enter them each visit. Disabling functional cookies may reduce the personalisation of your mybdx experience.
• Analytics Cookies: We use anonymised analytics cookies to measure aggregate traffic patterns, identify popular content, and monitor platform performance. Analytics data does not identify you personally and is used solely to improve mybdx. You may opt out of analytics cookies via your account settings.
• Security Cookies: These cookies help mybdx detect and prevent fraudulent login attempts, bot activity, and account sharing. They store a short-term device fingerprint that is compared against your registered login profile each session.

mybdx does not use advertising cookies, retargeting cookies, or third-party social media tracking pixels. We do not share cookie data with advertising networks. The cookies we use are limited to those necessary to deliver a secure, functional, and personalised gaming experience on the mybdx platform.

Most web browsers allow you to control cookies through their settings preferences. You can set your browser to refuse all cookies or to alert you when cookies are being sent. Please note that if you disable strictly necessary cookies, certain parts of the mybdx platform — including account login and transactions — may not function correctly.

mybdx does not sell or rent your personal data to any third party. We may, however, share specific categories of your personal data with carefully selected third parties where necessary to deliver our services or comply with legal obligations. All third parties with whom we share data are contractually obligated to handle your information in accordance with this Privacy Policy and applicable data protection standards.

• Payment Processing Partners: We share the minimum Financial Data and Identity Data necessary to process your deposits and withdrawals with our certified payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. Each of these partners operates under its own privacy and security framework.
• Game Software Providers: To deliver casino games on our platform, we integrate with certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Hacksaw Gaming, Spribe, and Ezugi. These providers may receive anonymised session data (e.g., game round IDs, bet amounts) necessary to operate game rounds and settle results. They do not receive your full identity data.
• Identity Verification Services: To fulfil our age verification and KYC obligations, we may share Identity Data and Verification Documents with third-party identity verification providers. These providers are contractually bound to use your data solely for the purpose of verification.
• Platform Analytics Providers: We use anonymised, aggregated analytics data with performance monitoring tools to measure platform uptime, page load times, and user journey patterns. No personally identifiable data is shared with analytics providers.
• Legal and Regulatory Disclosure: mybdx may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, safety, or property of mybdx, our players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.
• Anti-Fraud and AML Partners: As part of our anti-money laundering programme, we may share transaction data with specialist financial crime detection services. This sharing is conducted on a lawful basis of legal obligation and legitimate interest.

mybdx does not transfer your personal data to entities located outside of the territories covered by our operational infrastructure without ensuring that appropriate data transfer safeguards are in place. All data transfers are conducted over encrypted channels.

mybdx retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply to the main categories of data we hold.

Data Category	Retention Period	Basis
Account & Identity Data	Duration of account plus 5 years after closure	Legal obligation, AML compliance
Financial Transaction Records	7 years from transaction date	Financial record-keeping obligations
KYC Verification Documents	5 years after account closure	AML and age verification obligations
Game History & Bet Records	3 years from the date of the session	Dispute resolution, responsible gaming monitoring
Support Communications	2 years from the date of the last interaction	Legitimate interest, dispute resolution
Marketing Consent Records	Until consent is withdrawn, plus 1 year	Consent management obligation
Technical & Usage Logs	13 months on a rolling basis	Security and performance monitoring

When personal data reaches the end of its retention period, mybdx will securely delete or anonymise it. Anonymised data — from which you can no longer be identified — may be retained indefinitely for statistical and analytical purposes without restriction.

If you voluntarily close your mybdx account, we will delete your profile and preference data within 30 days of closure. However, financial transaction records, KYC documents, and other legally mandated records will be retained for the periods specified above, regardless of account closure, as required by law.

As a mybdx player, you hold a number of rights over your personal data. mybdx is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and respond in full within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that mybdx holds about you. We will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic profile details, you may also update your information directly through Account Settings.
• Right to Erasure: In certain circumstances — for example, where we no longer need your data for the purpose for which it was collected and no legal retention obligation applies — you may request that we delete your personal data. Please note that we may be unable to fully erase data where a legal retention obligation exists, such as AML transaction records.
• Right to Restriction of Processing: You may request that mybdx suspends the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data we hold.
• Right to Data Portability: You have the right to receive the personal data you provided to mybdx in a portable, structured format and to transmit it to another service provider where technically feasible.
• Right to Object: Where mybdx processes your data on the basis of legitimate interest, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where data processing is based on your consent — such as for receiving promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

mybdx implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to, the following:

• Transport Encryption: All data transmitted between your browser or app and the mybdx platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption. This ensures that your login credentials, financial details, and personal information cannot be intercepted in transit.
• At-Rest Encryption: Personal data stored on mybdx servers — including account records, KYC documents, and transaction histories — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within mybdx's internal systems is governed by role-based access controls. Only authorised personnel with a documented business need may access player data, and all such access is logged and periodically audited.
• Two-Factor Authentication: mybdx offers two-factor authentication (2FA) for player accounts as an additional layer of login security. We strongly encourage all players to enable 2FA in their Account Security settings.
• Intrusion Detection and Monitoring: mybdx operates 24/7 automated monitoring for anomalous access patterns, brute-force login attempts, and other indicators of account compromise. Suspicious activity triggers automated protective responses and human review.
• Third-Party Security Audits: Our platform infrastructure and data handling practices are subject to periodic security reviews by independent third-party assessors to identify and remediate vulnerabilities.

Despite these measures, no internet-connected platform can guarantee absolute security. If you believe your mybdx account has been compromised, contact [email protected] immediately. In the event of a data breach that is likely to result in a risk to your rights and freedoms, mybdx will notify affected players without undue delay and will take all steps necessary to contain and remedy the breach.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how mybdx handles your personal data, please get in touch with our support team using the contact details below.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Account Username]"
• Subject Line for Privacy Concerns: "Privacy Concern — [Your Account Username]"
• Response Time: We acknowledge all privacy-related emails within 3 business days (Bangladesh Standard Time, UTC+6). Full responses are provided within 30 calendar days.
• Support Availability: 24 hours a day, 7 days a week, including all Bangladeshi public holidays (Eid, Pohela Boishakh, Victory Day, Independence Day, and others).

If you are not satisfied with mybdx's response to a privacy concern, you have the right to escalate the matter. We take all complaints seriously and will conduct a fair, documented review of any escalated issue. Where a complaint relates to a potential data breach or serious privacy violation, we treat it as a priority and will escalate internally to our senior data protection team within 24 hours.

mybdx reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes, we will notify registered players via email and display a prominent notice on the mybdx platform for a minimum of 30 days before the changes take effect. The effective date at the top of this page will always reflect the date of the most recent revision. Continued use of the mybdx platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.