bdwim Privacy Policy

This Privacy Policy applies to all users of the bdwim platform, including visitors who browse without registering and registered players who deposit, wager, and withdraw funds. By accessing bdwim.net or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This policy was last reviewed and updated on 1 January 2026.

bdwim is committed to protecting the personal information of all players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We collect only the data that is genuinely necessary to provide our services, verify identities, prevent fraud, and comply with applicable standards. We do not sell personal data to third parties for marketing purposes.

1 Data Collection

bdwim collects personal data through several channels: directly from you when you register or interact with our platform, automatically through technical systems as you browse, and occasionally from trusted third-party verification partners during the KYC process. We are transparent about every category of data we collect and the purpose behind each.

1.1 Registration Data

When you create a bdwim account, we collect the following information:

• Full legal name — used for KYC identity verification and account ownership confirmation.
• Date of birth — used to verify that you are aged 18 or above, as required by our strict 18+ policy.
• Mobile number — your primary account identifier, used for OTP two-factor authentication and support communications.
• Residential address — collected to confirm your location within Bangladesh and to satisfy address-verification requirements.
• Password (hashed) — stored in an irreversible hashed format; bdwim staff cannot access your plaintext password at any time.
• Email address (optional) — used for account notifications and promotional communications if you opt in.

1.2 KYC Verification Data

Before processing your first withdrawal, bdwim requires documentary proof of identity. The documents we accept — and the data extracted from them — include:

1.3 Transaction Data

Every deposit and withdrawal on the bdwim platform generates a transaction record. This record includes the amount in BDT (৳), the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer), the timestamp in Bangladesh Standard Time (BST, UTC+6), and the transaction status. Transaction records are retained for audit and fraud-prevention purposes as described in Section 5 (Data Retention).

1.4 Gaming Activity Data

bdwim records all gaming and betting activity associated with your account, including game titles played, bet amounts, win/loss outcomes, session durations, and device identifiers. This data is used to personalise your experience, to operate our responsible gaming tools (such as deposit limit monitoring and session-time alerts), and to detect unusual patterns that may indicate problem gambling or fraudulent behaviour.

1.5 Technical & Device Data

When you visit bdwim.net, our servers automatically collect certain technical information, including:

• IP address and approximate geolocation (country/region level)
• Browser type, version, and language settings
• Operating system and device type (mobile, tablet, desktop)
• Pages visited, time spent on each page, and referring URL
• Session identifiers and cookie data (see Section 3)

2 How We Use Your Data

bdwim uses your personal data only for specific, defined purposes. We do not process personal data in ways that are incompatible with the original collection purpose. The table below maps each data category to its primary usage on the bdwim platform.

2.1 Service Delivery

The primary purpose for collecting your data is to deliver the bdwim platform services: processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers; running the games and betting markets you engage with; and maintaining the security and integrity of your account. Without this data, the core service cannot function.

2.2 Responsible Gaming Monitoring

bdwim uses gaming activity and transaction data to power its responsible gaming tools. If our systems detect patterns that are consistent with problem gambling behaviour — such as rapid increases in deposit frequency, session durations that exceed self-set limits, or repeated failed self-exclusion attempts — our responsible gaming team may reach out proactively. Data used for this purpose is processed in the interests of player wellbeing and is never shared externally for commercial gain.

2.3 Marketing Communications

If you have opted in to receive promotional communications from bdwim, we may use your email address or mobile number to send you information about new games, seasonal promotions (such as BPL, IPL, Eid, and Pohela Boishakh offers), and account-specific bonus offers. You may withdraw your marketing consent at any time by updating your account notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect our ability to send you transactional or security-related communications.

2.4 Fraud Prevention and Security

bdwim processes technical, device, and transaction data as part of its real-time fraud detection system. This includes identifying multi-account behaviour, detecting logins from unusual IP addresses or devices, flagging atypical withdrawal patterns, and monitoring for payment method mismatches. Fraud prevention is a legitimate interest that protects all bdwim players from financial harm.

3 Cookies & Tracking

bdwim.net uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and protect session security. A cookie is a small text file placed on your device by a web server. Cookies set by bdwim do not contain your password or full payment details.

3.1 Cookie Categories

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. They cannot be disabled without breaking core functionality.
• Performance & Analytics Cookies: Used to understand how players navigate bdwim.net — which pages are visited most, where users exit, and how long sessions last. Data is aggregated and anonymised. We use self-hosted analytics to minimise data exposure to third parties.
• Functional Cookies: Remember your preferences such as language settings, game history display options, and responsible gaming limit configurations.
• Security Cookies: Used to detect suspicious login attempts, enforce OTP verification on new devices, and flag sessions that deviate from your normal usage pattern.

3.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear cookies on exit, or receive notifications before a cookie is placed. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bdwim platform. Disabling functional cookies may cause your preferences (such as game display settings) to reset on each visit.

4 Third-Party Sharing

bdwim does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data with external parties only in limited, clearly defined circumstances, and only to the extent necessary for the specific purpose. Every third-party processor that handles bdwim player data is bound by contractual data protection obligations.

4.1 Payment Processors

To complete deposit and withdrawal transactions, bdwim shares the minimum necessary payment data with the relevant payment processor — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. The data shared is limited to the transaction amount, your registered mobile/account number, and a transaction reference ID. bdwim does not share your full name, date of birth, or NID details with payment processors.

4.2 Identity Verification Partners

KYC document verification may be processed by a trusted third-party identity verification service. In this case, your submitted documents are transmitted securely using TLS encryption and are processed solely for the purpose of verifying your identity and age. Verification partners are prohibited from using your data for any other purpose under their service agreements with bdwim.

4.3 Game Technology Providers

bdwim's game library is powered by established studio and platform providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. To deliver live dealer games, RNG-based casino games, and sports betting markets, these providers receive a session token associated with your account. Your full personal details are not transmitted to game providers; only anonymous session and bet-history data necessary for game operation is exchanged.

4.4 Legal and Regulatory Disclosure

bdwim may be required to disclose personal data in response to a lawful request from a competent authority, including law enforcement agencies, financial intelligence units, or court orders. In such cases, bdwim will disclose only the data that is legally required and will notify the affected player where permitted by law to do so.

5 Data Retention

bdwim retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable data retention standards. The retention periods below apply from the date of the last relevant activity on your account.

After the applicable retention period, personal data is permanently deleted from active databases and securely destroyed from any backup systems during the next scheduled backup cycle. Data that has been fully anonymised and aggregated (for platform analytics purposes) is not subject to deletion schedules as it can no longer be linked to any individual player.

6 Your Rights

As a bdwim player, you hold several rights over your personal data. bdwim is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights described below, contact the bdwim support team via 24/7 Live Chat on site or by emailing [email protected] with the subject line "Data Rights Request" and your registered mobile number.

6.1 Right of Access

You have the right to request a copy of all personal data that bdwim holds about you. We will provide this in a structured, machine-readable format within 30 days of a verified request. The copy will include your registration data, KYC verification status, transaction history, gaming activity summary, and any support correspondence.

6.2 Right to Rectification

If any personal data bdwim holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most profile details, you can update this yourself in your account settings. For registered name corrections or date-of-birth amendments — which require documentary evidence — please contact our support team directly.

6.3 Right to Erasure

You may request that bdwim delete your personal data. This right applies where: the data is no longer necessary for its original purpose; you withdraw consent and no other legal basis applies; or you object to processing and there are no overriding legitimate interests. Please note that bdwim cannot erase data that it is legally required to retain — for example, transaction records and KYC documents are subject to minimum retention periods as described in Section 5. Where full erasure is not possible, bdwim will restrict processing and inform you of what data must be retained and why.

6.4 Right to Restrict Processing

You may request that bdwim restrict the processing of your personal data in circumstances where: you contest the accuracy of the data; the processing is unlawful but you prefer restriction to erasure; or you have objected to processing and a determination is pending. During a restriction period, bdwim will store but not actively process the affected data.

6.5 Right to Data Portability

For data that you provided to bdwim directly (such as registration information and gaming preferences) and that is processed on the basis of your consent or a contract with you, you have the right to receive that data in a portable, machine-readable format (such as CSV or JSON) that you can transfer to another service provider.

6.6 Right to Object to Marketing

You may opt out of receiving promotional communications from bdwim at any time — either through your account's notification preferences or by contacting [email protected]. Opting out of marketing does not affect service-critical communications such as withdrawal confirmations, security alerts, or responsible gaming notifications.

7 Data Security

bdwim applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Security is not an afterthought at bdwim — it is a foundational requirement built into every layer of our platform infrastructure.

7.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the bdwim platform is encrypted using 256-bit SSL/TLS. The padlock icon in your browser confirms that your connection is secure.
• Password Hashing: Passwords are stored using a modern one-way hashing algorithm with individual salts. bdwim staff cannot retrieve your plaintext password under any circumstances.
• OTP Two-Factor Authentication: Every new device login triggers an OTP sent to your registered mobile number. This prevents unauthorised access even if your password is compromised.
• Encrypted KYC Storage: Identity documents uploaded for KYC are stored in an encrypted document vault with strict access controls. Only authorised compliance personnel can access verification documents.
• Intrusion Detection: bdwim's infrastructure is monitored 24/7 by automated intrusion detection systems that flag and isolate anomalous traffic patterns in real time.

7.2 Organisational Safeguards

• Access to personal data is restricted on a need-to-know basis. Only staff whose roles require access to specific data categories are granted permission.
• All bdwim staff who handle personal data receive training on data protection responsibilities and acceptable use policies.
• Third-party vendors are subject to security due diligence and are contractually required to maintain equivalent security standards.

7.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your personal data, bdwim will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of what data was affected, the likely consequences, and the steps bdwim has taken or will take to address the breach. Notification will be sent to your registered mobile number or email address.

8 Policy Updates

bdwim reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable standards, or platform features. When a material change is made, bdwim will notify registered players via their registered mobile number or email address (if provided) and will update the effective date at the top of this page. The most current version of the bdwim Privacy Policy is always available at bdwim.net/privacy-policy.

We recommend that all registered players review this Privacy Policy periodically — particularly before engaging with new features or promotions on the bdwim platform. Continued use of the bdwim platform following a policy update constitutes acceptance of the revised Privacy Policy.

For questions, concerns, or formal data rights requests regarding this Privacy Policy or bdwim's data practices, please contact our dedicated privacy support channel at [email protected] with the subject line "Privacy Enquiry". Our team operates in Bangladesh Standard Time (BST, UTC+6) and targets a 3-business-day acknowledgement for all privacy-related enquiries.