bdfast Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information bdfast collects from players in Bangladesh, how that information is used, who it may be shared with, and what rights you hold over your own data. We are committed to handling your information with transparency, care, and security.
SSL Encryption
All data transmitted between your device and the bdfast platform is protected by industry-standard 256-bit SSL encryption, ensuring that your personal and financial information cannot be intercepted in transit.
No Data Selling
bdfast does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate and improve our platform and fulfil legal obligations applicable to our operations.
Minimal Data Principle
We only collect data that is genuinely necessary to provide our services, process your transactions, verify your identity, and comply with applicable anti-money laundering and responsible gaming obligations.
Your Rights Respected
bdfast respects your right to access, correct, and request deletion of your personal data. Requests can be submitted at any time via our customer support team and will be actioned within a reasonable timeframe.
1. Data We Collect
bdfast collects personal data in several ways — directly from you during registration and account use, automatically through your interaction with our platform, and occasionally from trusted third-party service providers who assist us in verifying your identity or processing your payments. The categories of personal data we collect are detailed below.
Data We Do Not Collect
bdfast does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, biometric data (beyond document photographs used solely for KYC purposes), or criminal conviction records except where required by applicable anti-money laundering regulations. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has submitted personal data to our platform, we will promptly delete it and close the associated account.
2. How We Use Your Data
bdfast processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: (a) the performance of our contract with you as a registered player; (b) compliance with legal obligations under applicable anti-money laundering, age verification, and responsible gaming regulations; (c) our legitimate business interests in operating, securing, and improving the bdfast platform; and (d) your explicit consent, where required (particularly for direct marketing communications). The following table sets out the specific purposes for which we use your data.
Account Management
To create, manage, and maintain your bdfast player account, process your registration, authenticate your identity on login, and communicate account-related updates including security alerts and balance notifications.
Payment Processing
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank; to verify that payment methods are registered in your name; and to maintain accurate transaction records in BDT.
KYC & Verification
To verify your age (18+ requirement), confirm your identity before processing withdrawals, and comply with internationally recognised Know Your Customer obligations that protect both players and the platform from fraud.
Fraud Prevention & AML
To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, bonus abuse, and other financial crimes. This is a legal obligation that bdfast takes seriously and cannot be opted out of.
Responsible Gaming
To monitor gambling activity for indicators of harmful behaviour, apply deposit limits and cooling-off periods you have set, enforce self-exclusions, and provide targeted responsible gaming support consistent with our Responsible Gaming Policy.
Marketing & Promotions
To send you personalised promotional offers, BPL and IPL cricket betting alerts, bonus notifications, and seasonal promotions (e.g., Eid, Pohela Boishakh) — but only where you have given your consent or where a legitimate interest applies. You may opt out at any time.
3. Data Sharing & Third Parties
bdfast does not sell, lease, or trade your personal data to third-party advertisers or data brokers under any circumstances. However, in order to operate the platform and fulfil our legal obligations, we share limited personal data with carefully selected third-party service providers and, in certain circumstances, with regulatory or law enforcement bodies. All third parties with whom we share data are required by contract to handle your information in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.
Payment Providers
We share necessary financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank — to facilitate the processing of deposits and withdrawals in BDT. These providers operate under their own privacy policies and are subject to applicable Bangladesh financial regulations.
Game Providers
Certain technical and session data may be shared with our certified game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver their games on the bdfast platform, manage fairness controls, and resolve game-related disputes.
KYC & Identity Verification Partners
To fulfil our age and identity verification obligations, we may share identity documents and data points with specialist third-party KYC service providers. These providers are contractually bound to use your data solely for verification purposes and to delete it once the verification process is complete.
Analytics & Platform Improvement
We use anonymised and aggregated usage data with analytics service providers to understand how players interact with the bdfast platform, identify technical issues, improve game recommendations, and optimise the overall user experience. No personally identifiable data is used in this context.
5. Data Retention
bdfast retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting obligations. The retention periods we apply to different categories of data are set out below. When personal data is no longer required, bdfast applies secure deletion or irreversible anonymisation procedures so that the data can no longer be associated with you.
Account & Identity Data
Retained for 5 years from the date of account closure to comply with anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
Financial Transaction Records
All deposit, withdrawal, and bet transaction records in BDT are retained for 7 years from the date of the transaction, consistent with international financial record-keeping standards.
Support Communications
Live chat transcripts, email correspondence, and support ticket records are retained for 3 years from the date of closure of each support interaction for quality assurance and dispute resolution purposes.
Analytics Data
Anonymised and aggregated usage analytics are retained for up to 24 months for platform improvement purposes. This data is not linked to any identifiable individual after anonymisation.
6. Your Privacy Rights
bdfast recognises and respects the privacy rights that players hold in relation to their personal data. The following rights are available to all registered bdfast players. To exercise any of these rights, please contact our support team at the email address listed in the footer of this page, clearly identifying the right you wish to exercise and your registered account details. We will respond to all valid requests within 30 days.
Right of Access
You have the right to request a copy of all personal data that bdfast holds about you, along with information about how that data is used, with whom it is shared, and for how long it is retained.
Right to Rectification
If any personal data bdfast holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Some corrections may require supporting documentation.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing. This right is subject to our legal retention obligations.
Right to Restrict Processing
You have the right to request that bdfast temporarily restricts the processing of your personal data while the accuracy of the data or the legitimacy of the processing is being investigated or contested.
Right to Data Portability
Where processing is based on your consent or on a contractual basis, you may request that bdfast provides you with a structured, commonly used, machine-readable copy of the personal data you have provided to us.
Right to Object
You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, subject to bdfast demonstrating compelling grounds that override your interests.
7. Data Security Measures
bdfast implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme is reviewed and updated on a regular basis to account for evolving threats and industry best practices.
256-Bit SSL Encryption
All data transmitted between your browser or device and the bdfast platform is encrypted using TLS 1.3 / 256-bit SSL technology. This ensures that your login credentials, personal information, and financial data cannot be intercepted during transit.
Encrypted Data Storage
Personal data stored in bdfast's databases — including identity documents, financial records, and contact information — is encrypted at rest using AES-256 encryption. Access to the underlying database is restricted to authorised personnel only via multi-factor authentication.
Staff Access Controls
Access to player personal data within bdfast is granted on a strict need-to-know basis. Customer support agents, compliance officers, and other staff are granted access only to the data categories necessary for their specific roles, and all access is logged and audited.
Intrusion Detection
bdfast operates continuous network monitoring and intrusion detection systems to identify and respond to suspicious activity, attempted breaches, or abnormal access patterns in real time. Our security team operates on a 24/7 basis aligned with Bangladesh Standard Time (UTC+6).
Regular Security Audits
The bdfast platform undergoes periodic third-party security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses before they can be exploited. Findings from these audits are actioned on a priority basis.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bdfast will notify affected players without undue delay via the registered email address on their account, and will take all necessary steps to contain and remediate the breach.
8. Policy Updates & Contact
Updates to This Privacy Policy
bdfast reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or platform functionality. When material changes are made, we will notify registered players via the email address associated with their account and by posting a prominent notice on the bdfast platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
We encourage you to review this Privacy Policy periodically. Your continued use of the bdfast platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should cease using the platform and request account closure via our support team.
Children's Privacy
The bdfast platform is strictly for adults aged 18 and above. We do not knowingly collect, store, or process personal data belonging to children under the age of 18. If a parent or guardian believes that a minor has registered on bdfast or submitted personal data to us, they should contact our support team immediately. We will investigate and, where confirmed, promptly close the account and securely delete all associated personal data.
Cross-Border Data Transfers
bdfast primarily processes and stores player data within secure server infrastructure. Where data is transferred to service providers located outside Bangladesh — for example, internationally headquartered game providers or KYC verification services — such transfers are governed by contractual safeguards designed to ensure that your personal data receives an equivalent standard of protection to that described in this Privacy Policy.
How to Contact bdfast About Privacy
If you have any questions, concerns, or requests in relation to this Privacy Policy or the way bdfast handles your personal data, please contact our Data Protection team using the support email address displayed in the footer of this page. Please include "Privacy Request" in the subject line of your message, along with your registered account username and a clear description of your query or request. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 days.
Data Protection Enquiries
Send privacy requests and data subject access requests to:
Include "Privacy Request" in your message subject. Responses within 30 days.
Related Policies
This Privacy Policy should be read alongside the following bdfast policy documents, which together form the complete agreement between you and bdfast:
Support Hours
Our support team is available 24/7, 365 days a year to assist with privacy-related queries, data requests, and account security concerns. Typical live chat response time is under 15 minutes.
Ready to Play at bdfast?
Now that you understand exactly how bdfast protects your personal data, explore our full range of cricket betting markets, casino games, slots, and exclusive promotions — all on a safe, SSL-secured platform built for Bangladeshi players.