Privacy Policy for 458bd

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 458bd, the operator of the online gaming platform accessible at https://458bd.app and all associated sub-domains and mobile interfaces (collectively, "the Platform", "we", "us", "our").

All questions, requests, and complaints relating to privacy and data protection should be directed to our dedicated data protection contact:

• Email: [email protected]
• Subject line: Privacy / Data Protection Request
• Response time: Within 30 calendar days of receipt
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy applies to all personal data collected through the Platform, including data collected via account registration, deposits and withdrawals, gameplay activity, customer support interactions, and any marketing communications you have opted into.

2. Data We Collect

458bd collects personal data through several channels and for several distinct purposes. We collect only the minimum data necessary for each purpose ("data minimisation"). The categories of data we collect are set out below.

2.1 Account Registration Data

When you create a 458bd account, we collect:

• Full legal name
• Date of birth (to verify you are 18 or older)
• Email address
• Phone number (used for account security and 2FA)
• Username and hashed password (passwords are never stored in plain text)
• Preferred currency (BDT)
• Country of residence (Bangladesh)

2.2 Identity Verification (KYC) Data

In accordance with responsible gaming and anti-money-laundering best practices, we may collect the following during the KYC verification process:

• Government-issued photo identification (National ID Card, passport, or driver's licence)
• Proof of address (utility bill or bank statement dated within three months)
• Selfie or facial verification image (used solely for identity matching)
• Source of funds declaration (for large deposits or withdrawals)

2.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer)
• Transaction reference numbers provided by your payment provider
• Transaction amounts and timestamps
• Wallet or account identifiers associated with your payment method (e.g., bKash mobile number, bank account last four digits)

458bd does not store full card numbers, CVV codes, or full bank account numbers. Card and banking data is tokenised and handled by PCI-DSS compliant payment processors.

2.4 Gameplay & Activity Data

We automatically record gameplay activity for security, responsible gaming monitoring, and platform improvement purposes:

• Game sessions (game title, provider, start/end time, stakes, outcomes)
• Sportsbook bets (event, market, odds, stake, settlement)
• Bonus usage and wagering progress
• Session duration and login/logout timestamps
• In-platform chat and support communications

2.5 Technical & Device Data

We collect certain technical data automatically when you use the Platform:

• IP address (used for geolocation, fraud detection, and security)
• Device type, operating system, and browser type and version
• Screen resolution and language settings
• Referring URL and navigation path within the Platform
• Cookie identifiers (see the Cookies section below)

2.6 Data Types at a Glance

Data Category	Examples	Collection Method
Identity	Name, date of birth, NID	Registration & KYC form
Contact	Email, phone number	Registration form
Financial	Payment method, transaction references	Deposit / withdrawal flow
Gameplay	Bets, stakes, game sessions	Automated platform logging
Technical	IP address, device type, browser	Automatic on site visit
Communications	Support chat logs, email replies	Customer support interactions

3. Legal Basis for Processing

458bd processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are set out below:

• Contractual necessity: Processing your registration data, KYC data, financial transaction data, and gameplay data is necessary to provide the services you have contracted for when you created your account. Without this processing, we cannot operate your account, accept deposits, settle bets, or pay out withdrawals.
• Legal obligation: Processing KYC documents, transaction records, and certain gameplay logs is necessary to comply with anti-money-laundering (AML) obligations, age verification requirements, and responsible gaming standards. These obligations require us to retain certain records for specified periods regardless of your preferences.
• Legitimate interests: We process technical and device data, and analyse aggregated gameplay activity, on the basis of our legitimate interest in operating a secure, fair, and commercially viable platform. When relying on legitimate interests, we conduct a balancing assessment to ensure our interests do not override your fundamental rights.
• Consent: Where we send you optional marketing communications (promotional emails, bonus notifications, or seasonal offers), we do so only with your prior opt-in consent. You may withdraw this consent at any time by contacting [email protected] or by following the unsubscribe link in any marketing email.

4. How We Use Your Data

458bd uses your personal data exclusively for the following purposes. We do not process your data in any manner incompatible with these stated purposes without first obtaining your separate consent.

4.1 Account Management

Your registration and contact data is used to create and maintain your player account, send you account-related communications (password resets, security alerts, KYC requests), and provide personalised support via our 24/7 customer service team.

4.2 Identity Verification & Fraud Prevention

KYC data is used to verify that you are 18 or older, to confirm your identity before processing significant withdrawals, and to detect and prevent fraudulent activity, account takeovers, and the use of stolen payment instruments. We may use automated screening tools to cross-reference your identity against known fraud and sanctions databases.

4.3 Payment Processing

Financial transaction data is used to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), to reconcile your account balance, and to provide transaction history within your account dashboard.

4.4 Responsible Gaming Monitoring

Gameplay and session data is analysed to identify patterns that may indicate problem gambling behaviour, such as rapid increases in stake size, extended unbroken play sessions, or repeated failed deposit attempts. Where such patterns are detected, our responsible gaming team may reach out to you proactively. See our Responsible Gaming page for more information.

4.5 Security & Platform Integrity

Technical and device data, including IP addresses, is used to detect and block cheating software, collusion, bonus abuse, and other conduct that breaches our Terms & Conditions. We may use IP geolocation to identify access from jurisdictions where the Platform is unavailable.

4.6 Platform Improvement & Analytics

Aggregated and anonymised gameplay and navigation data is used to improve the Platform's user experience, optimise game loading performance, identify popular content categories, and inform decisions about new features. Analytics are conducted on aggregated data sets that cannot be used to re-identify individual players.

4.7 Marketing Communications (Consent-Based)

With your prior opt-in consent, we may contact you by email or push notification to inform you of promotions, bonus offers, new games, and seasonal events relevant to Bangladeshi players (including Eid, Pohela Boishakh, and BPL cricket season promotions). You may opt out at any time as described in section 3 above.

5. Cookies & Tracking Technologies

458bd uses cookies and similar tracking technologies (local storage, session storage, and pixel tags) on the Platform. Cookies are small text files stored on your device that allow us to recognise your browser across sessions and improve your experience.

5.1 Cookie Categories

Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, remember your account preferences, and ensure platform security (CSRF protection). These cookies are essential; the Platform cannot function without them.	No — essential for operation
Analytics	Collect anonymised data about page views, session duration, and navigation paths to help us understand how the Platform is used and where improvements can be made.	Yes — opt out via support
Functional	Remember your language preference, preferred game lobby view, and other personalisation settings to provide a consistent experience across visits.	Yes — opt out via support
Security	Detect and mitigate bot activity, automated credential-stuffing attacks, and suspicious login patterns. These cookies contribute to the overall security of your account.	No — essential for security

5.2 Third-Party Cookies

Some game content delivered through third-party providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may set their own cookies to track game sessions and ensure game integrity. These cookies are governed by the respective provider's privacy policies and are used solely for game delivery purposes. 458bd does not permit third-party providers to use these cookies for advertising profiling or cross-site tracking unrelated to game operation.

5.3 Managing Cookies

You can control and delete cookies through your browser settings. Deleting or blocking strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or accessing game content. For analytics and functional cookies, you may submit an opt-out request to [email protected].

6. Data Sharing & Third Parties

458bd does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

6.1 Payment Processors

To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, or your designated bank (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank). Each payment provider operates under its own privacy policy and PCI-DSS security standards. 458bd is not responsible for the data practices of payment providers once data leaves our systems.

6.2 Game Content Providers

To deliver live casino and RNG game content, we share your player session token and anonymised player identifier with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the technical identifiers needed to load game sessions; they do not receive your full name, NID, financial account details, or email address.

6.3 KYC Verification Services

Where automated identity document verification is used as part of the KYC process, your identity document images and selfie may be processed by a third-party KYC technology provider. Such providers act as data processors under instructions from 458bd and are contractually prohibited from using your data for any purpose other than identity verification on our behalf.

6.4 Legal & Regulatory Disclosure

458bd may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies in response to a lawful request, court order, or applicable legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of 458bd's assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify registered players by email before any such transfer takes effect and will ensure the acquiring entity commits to honouring this Privacy Policy or providing equivalent protections.

7. Data Retention

458bd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The retention periods applicable to each data category are set out below.

Data Category	Retention Period	Basis
Account registration data	Duration of account plus 5 years after closure	AML / legal obligation
KYC identity documents	Duration of account plus 5 years after closure	AML / legal obligation
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Gameplay logs	2 years from session date	Responsible gaming & dispute resolution
Customer support communications	3 years from last interaction	Dispute resolution / legitimate interest
Marketing consent records	Until consent is withdrawn plus 2 years	Legal obligation (consent evidence)
Technical / device logs	90 days on a rolling basis	Security / legitimate interest

Upon expiry of the applicable retention period, your data is securely deleted or anonymised so that it can no longer be associated with you. Where anonymisation is applied rather than deletion, the resulting anonymised data may be retained indefinitely for aggregated statistical and research purposes.

Early Deletion Requests

If you request deletion of your personal data before the end of the applicable retention period, 458bd will delete all data that we are not legally required to retain. Data subject to AML, financial record-keeping, or dispute resolution retention obligations will be kept for the minimum legally required period and then deleted. We will confirm the specific data deleted and the specific data retained (and the legal basis for retention) in writing within 30 days of your request.

8. Your Privacy Rights

As a data subject, you have the following rights in relation to your personal data held by 458bd. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy / Data Protection Request".

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) within 30 calendar days of receiving your verified request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may update certain account details (email address, phone number) directly within your account settings. For corrections to KYC data, please contact support.

Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. As noted in section 7, certain data categories must be retained for legal compliance reasons and cannot be deleted on request during the mandatory retention period.

Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of disputed data, or while we assess an objection you have raised to our processing activities. During a restriction, we will continue to store your data but will not actively process it for other purposes.

Right to Object

Where we rely on legitimate interests as our legal basis, you have the right to object to that processing. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent

Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected] or use the unsubscribe mechanism in any marketing communication.

Right to Lodge a Complaint

If you believe that 458bd has processed your personal data in a manner that violates applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. We encourage you to contact us first at [email protected] so we can attempt to resolve your concern directly before any formal escalation.

Updates to This Privacy Policy

458bd reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they affect how we use your data or the rights available to you — we will notify registered players by email at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of the overall agreement governing your use of 458bd.