bdluck Privacy
Policy

01 Data We Collect

bdluck collects personal data that is necessary to operate a safe, compliant, and high-quality online gaming platform. We do not collect data beyond what is genuinely needed for the purposes described in this Privacy Policy. The categories of personal data we may collect from you include:

Identity & Contact Data

• Full legal name as provided at registration or during KYC verification.
• Date of birth, used exclusively to verify that you meet the 18+ minimum age requirement.
• Email address, used for account communication, verification, and support correspondence.
• Mobile phone number, used for SMS-based two-factor authentication and account security alerts.
• Residential address, collected where required as part of the identity verification (KYC) process.
• Copies of government-issued identity documents (national ID card, passport, or driving licence), submitted during KYC verification only.

Financial Data

• Mobile wallet identifiers (bKash account number, Nagad account number, Rocket number, Upay number) linked to your bdluck account for the purpose of processing deposits and withdrawals.
• Bank account details (account name, account number, bank name) where bank transfer is selected as the preferred payment method.
• Transaction history, including deposit amounts, withdrawal requests, and bonus activity, stored for account management and fraud prevention purposes.

Technical & Usage Data

• IP address and approximate geolocation data, used to detect fraud, enforce jurisdictional restrictions, and comply with responsible gaming obligations.
• Device type, operating system, browser type and version, and screen resolution.
• Session logs including login timestamps, pages visited, games played, bet history, and session duration.
• Cookies and similar tracking data as described in the Cookies section of this policy.

Communications Data

• Records of all customer support interactions, including live chat transcripts, email correspondence, and support ticket history.
• Responses to surveys, promotions, or feedback requests where you have voluntarily participated.

02 How We Collect Your Data

bdluck collects personal data through a range of direct and automated channels. Understanding how your data reaches us helps you make informed choices about the information you share. The primary collection methods are as follows:

Direct Collection

The majority of the personal data bdluck holds about you is provided directly by you during the following interactions:

• Account registration: When you create a bdluck account, you provide your name, email address, phone number, date of birth, and a chosen password.
• KYC verification: When bdluck requests identity verification, you upload copies of identity documents and provide your residential address.
• Payment transactions: When you make a deposit or request a withdrawal, you provide your mobile wallet number or bank account details.
• Customer support: When you contact bdluck's support team by email or live chat, the content of that communication is recorded and stored.
• Promotion participation: When you opt in to a bonus offer or complete a survey, the responses and eligibility data you provide are collected.

Automated Collection

When you access and use the bdluck platform, certain technical data is collected automatically by our systems:

• Server logs: bdluck's web servers automatically record your IP address, the pages you request, timestamps, and HTTP response codes each time you access the platform.
• Cookies: Small text files placed on your browser or device that help bdluck maintain your logged-in session, remember your preferences, and analyse aggregate platform usage. Full details are provided in the Cookies section below.
• Analytics tools: bdluck uses privacy-respecting analytics to understand how users navigate the platform, which helps us improve the user experience. These tools collect anonymised or pseudonymised data and do not identify you personally.
• Fraud detection systems: Automated risk-assessment tools monitor transaction patterns, login behaviour, and device fingerprints to detect and prevent fraudulent activity.

03 Purpose of Data Processing

bdluck processes your personal data only for specific, documented purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises the key processing purposes and the legal basis on which bdluck relies for each:

Marketing Communications

bdluck will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers if you have actively opted in to receive such communications at the time of registration or through your account preferences. You may withdraw your marketing consent at any time by updating your notification settings in your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.

04 Data Sharing & Disclosure

In the course of operating the bdluck platform, we may share your personal data with the following categories of recipients:

Payment Service Providers

To process your deposits and withdrawals, bdluck shares the minimum necessary financial data (such as your mobile wallet number or bank account details) with verified payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers process your payment data under their own privacy policies and are required to maintain industry-standard security controls.

Game Technology Providers

bdluck's casino and slot games are supplied by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive limited session data (such as a pseudonymised player ID and bet amounts) necessary to operate game sessions and resolve outcome disputes. They do not receive your full personal profile.

Identity Verification Partners

Where bdluck uses a third-party KYC or identity verification service to process your submitted documents, that service will receive copies of the documents you provide. Such partners operate under strict data processing agreements with bdluck and are prohibited from using your data for any purpose other than identity verification.

Legal and Regulatory Authorities

bdluck may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or where bdluck reasonably believes disclosure is necessary to prevent fraud, money laundering, or other illegal activity. Such disclosures are made in good faith and in compliance with applicable legal requirements.

Business Transfers

In the event that bdluck undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified via the email address registered to your account before your data becomes subject to a different privacy policy as a result of any such transfer.

05 Cookies & Tracking Technologies

bdluck uses cookies and similar technologies (such as web beacons and local storage objects) to make the platform function correctly and to understand how members use the site. This section explains what cookies bdluck sets, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

A cookie is a small text file that is placed on your device (computer, smartphone, or tablet) by a website when you visit it. Cookies allow the website to recognise your device on subsequent visits, remember your preferences, and perform essential functions such as maintaining your login session.

Categories of Cookies Used by bdluck

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies already stored on your device. Please note that disabling strictly necessary or security cookies will impair your ability to use the bdluck platform — in particular, you will not be able to remain logged in across pages.

For guidance on managing cookies in your specific browser, please refer to your browser's help documentation. bdluck does not currently respond to browser "Do Not Track" signals, as there is no universally accepted standard for how such signals should be interpreted in the context of online gaming platforms.

06 Data Retention

bdluck retains personal data for the shortest period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention schedule applies to the main categories of data bdluck holds:

When the applicable retention period expires, bdluck securely deletes or anonymises your personal data so that it can no longer be associated with your identity. If you request early deletion of your data (see Your Privacy Rights below), bdluck will action that request subject to any overriding legal obligation to retain the data for a specified minimum period.

07 Your Privacy Rights

As a bdluck member, you hold a number of rights with respect to the personal data that bdluck holds about you. bdluck is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account email address. We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data bdluck holds about you, along with information about how that data is being processed. bdluck will provide this in a clear, structured format.
• Right to Rectification: If any personal data bdluck holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly from your account settings page.
• Right to Erasure: You have the right to request deletion of your personal data where bdluck no longer has a legitimate reason to retain it. Please note that bdluck may be legally obligated to retain certain data (e.g., financial transaction records) for a defined period even following an erasure request.
• Right to Restrict Processing: You have the right to request that bdluck restrict processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to bdluck in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.
• Right to Object: You have the right to object to bdluck processing your personal data for marketing purposes at any time. You also have the right to object to processing based on legitimate interests, though this right is subject to bdluck's overriding legitimate grounds.
• Right to Withdraw Consent: Where bdluck processes your data based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

08 Data Security

The technical and organisational security measures bdluck maintains to protect your personal data include:

• Encryption in transit: All data transmitted between your browser or app and bdluck's servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This ensures your login credentials, payment data, and personal information cannot be intercepted in transit.
• Encryption at rest: Sensitive data fields stored in bdluck's databases — including identity document copies, financial account numbers, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised bdluck staff on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-factor authentication: bdluck offers and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of protection beyond the password.
• Penetration testing: bdluck's platform undergoes regular security assessments and penetration tests conducted by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bdluck maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights, bdluck will notify affected users without undue delay and take all reasonable steps to contain and remediate the incident.

While bdluck maintains robust security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by using a strong, unique password, enabling 2FA, and never sharing your login credentials with any other person. If you suspect that your account has been compromised, please contact [email protected] immediately.

09 Third-Party Links

The bdluck platform may contain references to third-party game providers, payment partners, and sporting organisations. While bdluck exercises care in selecting its technology and payment partners, we do not control the privacy practices of third-party websites or services, and this Privacy Policy does not extend to any data processing carried out by those third parties on their own platforms.

If you follow a link from bdluck to a third-party website, we recommend that you review that website's privacy policy before providing any personal data. bdluck is not responsible for the privacy practices, content, or security of any external website.

In the context of third-party game providers such as Pragmatic Play, Evolution Gaming, and Spribe, these providers operate game engines that are embedded within the bdluck platform. When you play a game supplied by one of these providers, limited session data (pseudonymised player ID, bet amounts, and game outcome data) is transmitted to the provider for the purpose of running the game. This data sharing is governed by data processing agreements between bdluck and each provider, and providers are contractually prohibited from using this data for their own commercial purposes.

10 Updates to This Policy

bdluck reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, bdluck will notify registered members via the email address associated with their account and/or through a prominent notice displayed on the platform upon next login.

The effective date shown at the top of this Privacy Policy indicates when the current version entered into force. We encourage you to review this policy periodically so that you remain informed about how bdluck handles your personal data.

Your continued use of the bdluck platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any material change to this policy, you may request account closure by contacting [email protected] prior to the effective date of the change.