bdgems Privacy Policy

bdgems collects personal information from you in two primary ways: information you provide directly when registering or using our services, and information collected automatically as you interact with the platform. We are transparent about every category of data we hold and why we hold it.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and country of residence provided when you create your bdgems account.
• Identity verification (KYC) documents: Government-issued photo identification (National ID card, passport, or driving licence), proof of address (utility bill or bank statement dated within 90 days), and proof of payment method as required to comply with anti-money laundering obligations.
• Payment information: bKash wallet number, Nagad wallet number, Rocket account reference, bank account details, or card details (last four digits only — full card numbers are never stored on bdgems servers) provided when making deposits or requesting withdrawals.
• Account preferences: Language preferences, notification settings, responsible gaming limits, and any other profile configuration data you choose to set within your bdgems account.
• Support communications: The content of any messages, emails, or chat transcripts exchanged with the bdgems support team, including any attachments or screenshots you submit.

Information collected automatically:

• Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution, and unique device identifiers.
• Usage and behavioural data: Pages visited, games played, bet amounts and outcomes, session duration, click paths, and navigation patterns within the bdgems platform.
• Transaction data: A complete record of all deposits, withdrawals, bonus activations, wagers placed, and winnings credited to your bdgems account.
• Geolocation data: Approximate location derived from your IP address, used solely to verify eligibility and comply with jurisdictional access controls. bdgems does not collect precise GPS-level location data.
• Cookie and tracking data: Session identifiers, preference tokens, and analytics data collected via cookies and similar technologies as described in Section 4 of this Policy.

bdgems processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The following table summarises our primary processing activities and their legal basis.

Where bdgems relies on your consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time by updating your notification preferences within your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

bdgems does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in order to operate the platform and comply with our legal obligations, we share certain data with carefully selected third-party service providers and, where legally required, with regulatory authorities. All third-party data processors engaged by bdgems are bound by data processing agreements that require them to handle your data securely and only for the purposes specified by bdgems.

The categories of third parties with whom bdgems may share your personal data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive the minimum data necessary to authenticate and process your deposit and withdrawal transactions. Payment providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC and document verification services that assist bdgems in confirming the identity and eligibility of registered players in accordance with AML obligations.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised gameplay identifiers necessary to deliver their games. They do not receive your full personal profile.
• Cloud hosting and infrastructure providers: bdgems operates on secure cloud infrastructure. Hosting providers have access to server-level data solely for the purposes of maintaining platform availability and security.
• Analytics and fraud prevention tools: Anonymised or pseudonymised usage data may be shared with analytics service providers to help us understand platform performance and detect fraudulent activity patterns.
• Legal and regulatory authorities: bdgems will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.

bdgems does not transfer your personal data to recipients located outside of secure, recognised jurisdictions without appropriate data transfer safeguards in place. Where international transfers are unavoidable, we rely on standard contractual clauses or equivalent mechanisms to protect your data.

The bdgems platform uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to ensure the platform functions correctly, to remember your preferences, and to help us understand how players use our services so that we can continue to improve them.

The following categories of cookies are used on the bdgems platform:

You can manage or delete cookies at any time through your browser's privacy or settings menu. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the bdgems platform. Disabling functional or analytics cookies will not prevent you from accessing the platform but may affect your experience.

bdgems employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security posture is reviewed and updated on an ongoing basis to reflect evolving threats and industry best practice.

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or mobile device and the bdgems platform is encrypted in transit using a minimum of TLS 1.2 protocol. Our SSL certificate is maintained with an A-grade security rating.
• Encryption at rest: Sensitive personal data — including KYC documents, payment references, and account credentials — is stored in encrypted form using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal player data within bdgems is strictly limited on a need-to-know basis. Internal systems use role-based access controls, and all staff access to player records is logged and audited.
• Password security: Player passwords are stored as salted cryptographic hashes. bdgems staff cannot view your plaintext password under any circumstances.
• Fraud monitoring: Automated systems continuously monitor account activity, login patterns, and transaction behaviour for signs of unauthorised access or fraudulent activity. Suspicious events trigger immediate alerts and account protection measures.
• Penetration testing: The bdgems platform undergoes periodic security assessments by independent specialists to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdgems will notify affected players without undue delay via the email address registered to their account, and will take all reasonable steps to contain and mitigate the breach.

bdgems retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to maintain an accurate record of the player relationship, or as required by applicable legal, regulatory, tax, and anti-money laundering obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the player's active bdgems account relationship plus a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of verification or from account closure, whichever is later, to comply with financial crime prevention legislation.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five years from the transaction date for AML compliance and dispute resolution purposes.
• Support communications: Retained for three years from the date of the last communication, unless a longer period is required by an ongoing dispute or legal proceeding.
• Analytics and usage data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data. Pseudonymised session data is retained for up to 24 months.
• Marketing preferences: Retained until you withdraw consent or close your account, after which your marketing opt-out status is retained indefinitely to ensure we do not inadvertently contact you again.

When personal data is no longer required and its retention period has expired, bdgems will either securely delete the data using industry-standard data destruction methods, or anonymise it such that it can no longer be attributed to any individual player.

As a registered player on the bdgems platform, you hold a number of rights in relation to your personal data. bdgems is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with your registered username and a clear description of your request. We will acknowledge your request within five business days and provide a full response within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data that bdgems holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain data (such as email address or mobile number) directly within your bdgems account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we may be unable to delete certain records that we are required by law to keep.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data — for example while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of bdgems's legitimate interests, including profiling for responsible gaming purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdgems reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, changes to applicable law, or improvements to our privacy practices. The date at the top of this document indicates when the Policy was most recently revised. We will notify registered players of material changes to this Policy via the email address associated with their bdgems account at least 14 days before those changes take effect.

Your continued use of the bdgems platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised Policy, you must cease using the platform and contact our support team to request account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bdgems handles your personal data, you are encouraged to contact us directly in the first instance. We take all privacy-related enquiries seriously and will respond in a timely and transparent manner.

This Privacy Policy was last reviewed and updated in January 2026.