When BD's Privacy Policy — Your data, our responsibility

1 Introduction — Why This Privacy Policy?

Welcome to the When BD platform. We believe your personal data belongs to you — not to us. This Privacy Policy ("Policy") clearly explains what data When BD collects, why we collect it, where it is stored, and how it is kept secure.

When you visit the When BD website, open an account, play games, or contact us — certain data is collected automatically or with your consent. This Policy explains that entire process.

2 What data do we collect?

When BD collects two types of data — information you provide directly and information collected automatically.

Information you provide directly:

• At registration — full name, date of birth, mobile number, and email address.
• During KYC verification — national ID or passport details.
• At the time of payment — mobile banking number (bKash, Nagad, Rocket).
• When you contact support — your messages and related account details.

Automatically Collected Information:

• IP address and browser information.
• Device type — mobile, tablet, or computer.
• Time spent on the site and which pages you visited.
• Login time and location (country level only).
• Gaming Activity — betting history and win/loss records.

3 How is your data used?

When BD uses your information only for the following purposes:

4 Is Your Information Shared With Others?

When BD does not sell your personal data. However, in certain situations, data may be shared to ensure the service runs properly:

• Payment Providers: bKash, Nagad, Rocket — only the data necessary to process transactions.
• Technology Partners: Hosting and cloud service providers, bound by strict confidentiality agreements.
• Law enforcement agencies: Where required by a court order or legal obligation.
• Fraud Investigation: To the relevant authorities in cases involving money laundering or fraud investigations.

5 Cookie Policy — What Are Cookies and Why Do We Use Them?

Cookies are small text files stored on your browser or device. When BD uses cookies for the following reasons:

• Essential cookies: Keeping login sessions active and ensuring account security.
• Performance Cookies: Analyzing which pages are most frequently visited.
• Preference Cookies: Remembering your language and theme preferences.
• Marketing Cookies: Showing relevant offers and promotions (with your consent only).

You can delete or disable cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of certain platform features.

6 What Measures Do We Take to Protect Your Data?

When BD has implemented industry-standard technical and administrative measures to protect your data:

• Across all data transfers 256-bit SSL/TLS Encryption Usage.
• Sensitive Data Stored AES-256 encryption Secured.
• Password bcrypt hashingSecured by -.
• Regular security audits and penetration testing.
• Restricted staff access — only team members who need it can view your data.
• Automated alerts for suspicious logins and unusual account activity.

7 Your data rights

As a When BD platform member, you have the following rights:

• Right to access: You may request to know what information we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or outdated information.
• Right to Erasure: Under certain circumstances, you may request that your data be deleted.
• Right to Restrict Processing: You may request that we stop using your data for specific purposes.
• Portability Rights: You may request a copy of your data in a readable format.
• Right to object: You may object to your data being used for marketing or profiling.

To exercise any of these rights, please contact our support team. We will respond to your request within 30 business days.

8 How long is your data retained?

When BD does not retain data longer than necessary. Retention periods vary depending on the type of data:

• Account information: For the duration the account is active, and a minimum of 5 years after closure.
• Transaction Records: Up to 7 years maximum, as required by law.
• KYC documents: Up to 5 years after account closure.
• Support Chat History: 2 years after last contact.
• Cookies and log data: Typically 90 days to 1 year.

Once the retention period expires, your data is securely deleted or anonymized so that you can no longer be identified.

9 Protection of Minors' Data

When BD is intended for users aged 18 and above only. We do not knowingly collect data from minors.

We verify age through KYC. If a minor has registered by mistake and we become aware of it, the account will be immediately closed and all associated data permanently deleted.

10 Third-Party Links & Services

When BD's platform uses certain third-party services — such as payment gateways and game software providers. These services operate under their own privacy policies, which are outside When BD's control.

All third-party partners are bound by strict data protection agreements. However, When BD cannot be held responsible for what occurs on their platforms. We recommend reading the privacy policy of any third-party service before using it.

11 Can this Privacy Policy change?

Yes, When BD may update this Privacy Policy as needed. After any changes, the "Last Updated" date at the top of the page will reflect the revision.

For significant changes — such as new purposes for using your data or new types of data being collected — we will notify you directly by email or through the platform. Continued use of the platform after any changes will be taken as acceptance of the updated policy.

12 Contact — Have a question about your privacy?

If you have any questions or concerns about this Privacy Policy, please get in touch with us. Our data protection team is always ready to assist you:

• Email: [email protected]
• Live Chat: Available 24/7 through the platform's support section.
• Response Time: Typically within 24 to 48 hours.