bdrome Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bdrome ("bdrome", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("you", "your", "the Player") who visit, register on, or otherwise interact with the bdrome online gaming platform at bdrome.com. This Policy forms part of the broader contractual relationship between you and bdrome, alongside our Terms & Conditions and Responsible Gaming Policy.

bdrome operates as an English-language online gaming platform serving the Bangladesh market. All players access the platform in BDT, using local payment methods including bKash, Nagad, Rocket, and Upay. As part of delivering these services, bdrome necessarily collects and processes certain personal data. We are committed to handling that data responsibly, transparently, and securely — in accordance with internationally recognised data protection principles.

This Policy is written in English. In the event of any conflict between this English-language version and any translation, the English original shall prevail. bdrome may update this Policy from time to time; the date of the most recent revision is displayed at the top of this page. Material changes will be notified to registered players by email before taking effect.

This Policy applies to all bdrome players, visitors who browse the platform without registering, and individuals who contact bdrome support. It covers data collected through the bdrome website, through our customer support channels, and through the payment processing integrations we use for BDT transactions. It does not apply to third-party websites or services that may be linked from the platform, including game studio portals operated by providers such as Pragmatic Play, Evolution Gaming, NetEnt, or Spribe.

Data We Collect

bdrome collects personal data through several distinct channels: data you provide directly during registration and ongoing account use; data generated automatically through your interaction with the platform; and data received from trusted third parties such as payment processors and identity verification services. The categories of data we collect are described below.

bdrome does not collect sensitive personal data beyond what is strictly required for age verification and KYC compliance — for example, we do not collect data on racial or ethnic origin, political opinions, religious beliefs, or health conditions unless you voluntarily disclose such information in a support interaction. Any such incidental data disclosed via support channels is treated with the highest level of confidentiality and is not used for any purpose other than resolving your query.

We do not collect data from minors. The bdrome platform is strictly 18+ only and our registration process includes age verification steps to enforce this. If we discover that personal data has been collected from a person under 18 years of age, we will delete that data promptly and close the associated account in accordance with our Terms & Conditions.

How We Use Your Data

bdrome uses personal data for specific, defined purposes only. We rely on one or more of the following legal bases when processing your personal data: performance of the contract between us (delivering gaming services to you); compliance with legal obligations (KYC, anti-money laundering, age verification); your consent (marketing communications, optional analytics); and our legitimate interests (platform security, fraud prevention, service improvement), where those interests are not overridden by your rights and interests.

• Account management: Creating and maintaining your bdrome account, processing the bdrome login, managing your BDT balance, and delivering the gaming services you have contracted for.
• Identity and age verification: Confirming that you are aged 18 or above and that your identity matches the details provided at registration, as required before processing withdrawals.
• Payment processing: Facilitating BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts. Financial data is passed to our payment processing partners solely to execute transactions.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other violations of our Terms & Conditions. This includes automated pattern analysis of gaming and payment behaviour.
• Customer support: Responding to your queries, resolving complaints, and providing assistance via our 24/7 support service operating on Bangladesh Standard Time (BST, UTC+6).
• Responsible gaming compliance: Monitoring gaming patterns to identify potential problem gambling behaviour, applying self-exclusion restrictions, enforcing deposit limits, and providing you with the responsible gaming tools available after completing the bdrome login.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, layout, and game selection on the bdrome platform.
• Promotional communications: Sending you information about bdrome bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL season, T20 World Cup offers), and VIP Programme updates — but only where you have consented to receive such communications. You may withdraw this consent at any time.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering standards and responding to lawful requests from competent authorities.

Data Sharing & Disclosure

bdrome does not share your personal data with third parties except in the circumstances described below. Where data is shared, we ensure that appropriate contractual and technical safeguards are in place to protect it.

• Payment service providers: BDT transaction data is shared with payment processors (including the operators of bKash, Nagad, Rocket, Upay integrations, and our banking partners such as Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank) strictly to execute deposit and withdrawal transactions on your behalf. These providers process your data under their own privacy policies and are not permitted to use it for any other purpose.
• Identity verification providers: During the KYC process, identity documents (NID, passport) and selfies may be shared with our trusted identity verification partners for automated or manual review. These partners operate under strict confidentiality obligations.
• Game content providers: Your player session data (anonymised player ID, bet values in ৳, game results) may be shared with game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of delivering game content and resolving game-round disputes. These providers do not receive your name, contact details, or payment information.
• Fraud prevention and security partners: Aggregated or pseudonymised technical and behavioural data may be shared with anti-fraud and cybersecurity service providers to protect the integrity of the bdrome platform and its players.
• Legal and regulatory disclosures: bdrome may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or to protect the legal rights of bdrome or its players. We will notify you of such disclosures where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of bdrome's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer before your data becomes subject to a different privacy policy.

Cookies & Tracking Technologies

bdrome uses cookies and similar tracking technologies to operate the platform effectively, to maintain your session after the bdrome login, and to improve the player experience. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the platform to recognise your device across visits and to remember your preferences and session state.

The categories of cookies used by bdrome are as follows:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling strictly necessary cookies will prevent the bdrome login from functioning correctly, as session authentication relies on these cookies. Disabling functional cookies may affect the quality of your experience on the platform.

bdrome does not use third-party advertising cookies or cross-site tracking pixels. Our analytics data is aggregated and anonymised before analysis; it cannot be used to identify individual players. We do not share analytics data with any external advertising platforms.

Data Retention

bdrome retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention periods we apply are detailed below.

• Account and identity data: Retained for the duration of your active bdrome account and for a minimum of five years following permanent account closure, in compliance with anti-money laundering record-keeping standards.
• Financial transaction records: BDT deposit and withdrawal records, including bKash, Nagad, and Rocket transaction references, are retained for a minimum of seven years from the date of the transaction, in line with financial record-keeping best practice.
• Gaming history: Individual game round records, bet amounts in ৳, and game outcomes are retained for a minimum of three years to support dispute resolution and fair-play auditing.
• KYC documentation: Copies of identity documents (NID, passport) submitted during verification are retained for a minimum of five years from the date of submission or from account closure, whichever is later.
• Support communications: Customer support chat logs and email correspondence are retained for three years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Self-exclusion records: Where a player has applied a self-exclusion, the exclusion record and associated account data are retained indefinitely to prevent re-registration in violation of the exclusion.
• Technical and usage data (cookies/logs): IP address logs and session data are retained for 13 months from collection. Aggregated analytics data (from which individuals cannot be identified) may be retained indefinitely.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Where anonymisation is not technically feasible (for example, for certain encrypted backup systems), data is quarantined from active use until it can be securely purged.

Your Privacy Rights

As a bdrome player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team at support@bdrome.com with the subject line "Privacy Rights Request", including your registered email address and a description of your request.

• Right of access: You have the right to request a copy of the personal data bdrome holds about you, along with information about how it is being used. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly through the My Account section after completing the bdrome login.
• Right to erasure ("right to be forgotten"): You may request that bdrome delete your personal data in certain circumstances — for example, if you believe the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to our legal obligations to retain certain data (particularly financial records and KYC documentation) for defined periods as described in Section 6.
• Right to restrict processing: You may request that we temporarily restrict our use of your personal data while the accuracy of the data is being verified, or while a complaint is being investigated.
• Right to data portability: Where data has been provided by you and is processed on the basis of your consent or to perform a contract, you may request that we provide it to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications about bdrome bonuses and BPL-season offers), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right not to be subject to automated decision-making: If bdrome makes a solely automated decision that significantly affects you (for example, an automated fraud detection decision that results in account suspension), you have the right to request human review of that decision.

Data Security

bdrome employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our approach to data security reflects the sensitivity of the financial and identity data we handle on behalf of our Bangladesh players.

• SSL/TLS encryption: All data transmitted between your device and the bdrome platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon displayed in your browser when visiting bdrome.com confirms that your connection is encrypted.
• Password security: bdrome login passwords are stored using strong one-way hashing algorithms. We do not store passwords in plain text and are unable to retrieve your password — only to reset it.
• Access controls: Access to personal data within bdrome's internal systems is restricted to authorised personnel on a need-to-know basis. All internal access is logged and audited.
• Payment data security: BDT payment transactions are processed through PCI-DSS-compliant payment partners. bdrome does not store full payment card numbers or mobile banking PINs on its own servers.
• Fraud monitoring: Our platform applies real-time fraud monitoring to detect unusual login patterns, suspicious transactions, and multi-account activity. Automated alerts are reviewed by our security team operating on BST (UTC+6).
• Penetration testing: bdrome's platform undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

While bdrome takes every reasonable precaution to protect your data, no online system is entirely immune to security threats. You also play an important role in keeping your account secure: use a strong, unique password for your bdrome login, do not share your credentials with anyone, and contact support at support@bdrome.com immediately if you suspect your account has been compromised.

Contact & Data Protection Officer

bdrome is committed to handling all privacy-related enquiries with promptness and care. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights (as described in Section 7), or wish to raise a concern about how bdrome handles your personal data, please contact us using the details below.

Our support team, operating 24/7 on Bangladesh Standard Time (BST, UTC+6), is available to handle privacy queries via email. Please use the subject line "Privacy Enquiry" or "Privacy Rights Request" so that your message is routed to the appropriate team promptly.

• Email: support@bdrome.com (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 days.
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)
• Platform: bdrome.com

If you are not satisfied with bdrome's response to a privacy complaint, you retain the right to escalate your concern by emailing support@bdrome.com with the subject line "Formal Privacy Complaint". bdrome's senior team will issue a final response to formal privacy complaints within 21 days of escalation.

This Privacy Policy was last revised on 1 January 2026. It supersedes all previous versions of the bdrome Privacy Policy.