1. Who We Are
bd268 operates the online gaming platform at https://bd268.cam. When you create an account, make a deposit, or simply browse the site, bd268 acts as the data controller — meaning we decide how and why your personal information is processed.
This Privacy Policy applies to all players who access bd268 from Bangladesh or anywhere else. It covers every touchpoint: the website, the bd268 mobile app (Android APK), live chat, and any promotional communications we send.
If you have questions about anything written here, our 24/7 Live Chat support team can direct you to the right contact. We do not publish email addresses publicly — use Live Chat for the fastest response.
2. Data We Collect
We only collect information that serves a clear purpose. The table below lists exactly what we gather and why each category is needed.
| Category | Examples | When Collected |
|---|---|---|
| Identity | Full name, date of birth, NID / Passport / Driving Licence number | During KYC verification |
| Contact | Mobile number, country of residence | At registration |
| Financial | bKash / Nagad / Rocket / Upay account reference, transaction IDs | On deposit or withdrawal |
| Account Activity | Login times, game history, bet amounts, bonus usage | Continuously while your account is active |
| Device & Technical | IP address, device model, OS version, browser type | Automatically on each visit |
| Communications | Live chat transcripts, support ticket content | When you contact us |
We do not collect sensitive data such as religion, political opinion, or health records. We do not store your full payment credentials — payment references are tokenised by the respective payment provider (bKash, Nagad, Rocket, Bank Transfer, or Upay).
3. How We Use Your Data
Running your account
Your name, mobile number, and identity documents are used to open and verify your bd268 account, process deposits and withdrawals, and confirm your age (18+ requirement). Without this data, we cannot provide the service.
Processing payments
Transaction data is passed to our payment partners — bKash, Nagad, Rocket, Upay, and partner banks — solely to complete the transfer. Deposits typically clear within 5 minutes; withdrawals within 6 minutes once approved. We retain transaction records to resolve disputes and comply with financial regulations.
Responsible gaming
We monitor play patterns to identify signs of problem gambling. If your activity triggers our internal thresholds, our team may reach out via Live Chat. This monitoring is a legal and ethical obligation, not optional profiling.
Marketing (opt-in only)
We send bonus alerts and promotional updates only if you opt in during registration or through your account settings. You can unsubscribe at any time by contacting Live Chat or updating your notification preferences.
Fraud prevention and security
IP addresses, device fingerprints, and login records are analysed to detect unauthorised access, bonus abuse, and duplicate accounts. This protects every player on the platform, including you.
4. Legal Basis for Processing
Every processing activity at bd268 rests on one of the following grounds:
- Contract performance — processing your deposits, withdrawals, and game sessions.
- Legal obligation — KYC verification before your first withdrawal, anti-money-laundering checks, age verification.
- Legitimate interest — fraud detection, platform security, service improvement based on aggregated analytics.
- Consent — marketing messages; you can withdraw consent at any time without affecting your ability to play.
5. Who We Share Data With
bd268 does not sell your personal data. We share only what is necessary, with these categories of recipients:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Payment providers (bKash, Nagad, Rocket, Upay, banks) | Execute deposits and withdrawals | Transaction reference, amount, account token |
| Game providers (FA Chai, KA Gaming, Habanero, JDB, PG Soft) | Deliver game content and RTP audits | Anonymised player session ID and bet data |
| KYC verification service | Verify NID / Passport / Driving Licence | Identity document images and metadata |
| Hosting and cloud infrastructure | Store platform data securely | Encrypted account and log data |
| Regulatory or law enforcement bodies | Legal obligation only, upon valid request | Minimum necessary data as required by law |
All third-party partners are contractually required to handle your data in line with this policy and applicable data protection standards.
6. Cookies and Tracking
The bd268 website uses cookies and similar technologies to keep you logged in, remember your preferences, and measure how the site is used. Here is a plain breakdown:
- Essential cookies — required for login sessions and security tokens. You cannot disable these without breaking core site functions.
- Analytics cookies — anonymised page-view data to identify which parts of the site work well and which need improvement. No personal identifiers are shared with analytics providers.
- Marketing pixels — only active if you arrived via a tracked promotional link. These record which campaign brought you to bd268 so we can measure ad spend accurately. They do not track your behaviour off-site.
You can manage non-essential cookies through your browser settings at any time. Blocking essential cookies will log you out.
7. How Long We Keep Your Data
We retain your data only as long as necessary for the purpose it was collected, or as required by financial and gaming regulations.
Account data (identity, contact): Held for the life of your account plus 5 years after closure.
Transaction records: Kept for 7 years to satisfy anti-money-laundering requirements.
Game session logs: Stored for 2 years, then anonymised.
Live chat transcripts: Retained for 12 months, then deleted.
Marketing consent records: Kept until you withdraw consent, plus 1 year for audit purposes.
When a retention period ends, data is securely deleted or irreversibly anonymised. We do not archive personal data "just in case."
8. Your Rights
As a bd268 player, you have the following rights over your personal data. To exercise any of them, contact our 24/7 Live Chat team and state which right you are invoking. We will respond within 30 days.
- Access — Request a copy of the personal data we hold about you.
- Correction — Ask us to fix inaccurate or incomplete information on your account.
- Deletion — Request erasure of your data where there is no legal obligation to keep it. Note: active accounts and outstanding transaction records cannot be deleted until the relevant retention period expires.
- Restriction — Ask us to pause processing while a complaint or correction is being reviewed.
- Portability — Receive your account data in a machine-readable format so you can transfer it elsewhere.
- Objection — Object to processing based on legitimate interest, including direct marketing. We will stop unless we can demonstrate a compelling reason to continue.
- Withdraw consent — Cancel marketing opt-in at any time. This does not affect any processing already carried out.
9. Security Measures
bd268 uses SSL/TLS encryption on all pages and API calls so data travelling between your device and our servers cannot be read in transit. At rest, sensitive fields (identity documents, financial references) are encrypted using AES-256.
Access to player data inside bd268 is role-based: only staff with a direct operational need can view account details, and every access is logged. Payment credentials are never stored on bd268 servers — they live exclusively with bKash, Nagad, Rocket, Upay, or the relevant bank.
If a security incident affects your data, we will notify you through your registered mobile number within 72 hours of becoming aware of the breach, and we will tell you exactly what was affected and what you should do.
10. Players Under 18
bd268 is strictly for players aged 18 and over. We do not knowingly collect personal data from anyone under 18. Age is verified during the KYC process using a National ID Card, Passport, or Driving Licence.
If we discover that an account was opened by someone under 18, we will immediately close the account, refund any remaining balance to the payment source used, and permanently delete all data associated with that account. No winnings are paid out to underage players.
If you believe a minor has opened an account on bd268, contact our Live Chat team immediately with the account details.
11. Changes to This Policy
We review this Privacy Policy at least once a year and whenever a significant change to our data practices occurs. When we make material changes — for example, adding a new data category or a new third-party processor — we will notify active players via a Live Chat banner or in-app notification at least 7 days before the change takes effect.
The "Last Updated" date at the top of this page always reflects the most recent revision. Continuing to use bd268 after a policy update means you accept the revised terms. If you do not agree, you can close your account through Live Chat before the change takes effect.
Minor clarifications (fixing typos, improving plain-English phrasing without changing meaning) are made without prior notice.
12. Contact Us
For any question, correction request, or data subject rights request related to this Privacy Policy, reach our Data Support team via 24/7 Live Chat on the bd268 website or in the bd268 app. State your registered mobile number and the subject of your request so we can verify your identity and respond efficiently.
Response commitment: Data rights requests are acknowledged within 24 hours and resolved within 30 calendar days. Security-related reports are treated as urgent and escalated within 2 hours.
We do not publish a postal address or email address for privacy inquiries. All verified requests must go through Live Chat so we can confirm your identity before accessing or modifying your account data.
Read our full Terms & Conditions and Responsible Gaming policy for the complete picture of how bd268 operates.
Create Your Account