48bd Privacy
Policy

1

Introduction

48bd ("we", "us", "our", or the "Platform") is committed to protecting the privacy and personal data of every player who registers and interacts with our platform. This Privacy Policy sets out, in clear and accessible terms, what personal data we collect from users in Bangladesh, the purposes for which that data is processed, the conditions under which it may be shared, and the rights available to you as a data subject.

This Privacy Policy applies to all services offered through the 48bd platform, including the sports betting sportsbook, live casino, slots, crash games, promotional features, and any communications you receive from 48bd by email, SMS, or in-platform notification.

By registering an account on 48bd, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not register an account or continue to use the platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and 48bd. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy shall prevail.

2

Data We Collect

48bd collects several categories of personal data in order to operate a safe, compliant, and high-quality betting and gaming platform. The categories we collect are as follows:

• Identity data: Your full legal name, date of birth, gender, and government-issued identification number (such as your National Identity Card number or passport number). This data is required for account registration and identity verification purposes.
• Contact data: Your email address, mobile phone number, and residential address. This data is used for account communications, security notifications, and customer support.
• Financial data: Mobile financial service wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and a complete record of all deposit and withdrawal transactions conducted through your 48bd account. Financial data is processed for payment facilitation and anti-money-laundering compliance.
• Technical data: Your IP address, device type and identifier, browser type and version, operating system, session tokens, and login timestamps. Technical data is used for fraud detection, account security, and platform performance monitoring.
• Usage data: Records of your activity on the platform, including games played, bets placed, bet outcomes, session durations, pages visited, and click-through patterns. Usage data supports responsible gaming monitoring and platform analytics.
• Marketing preference data: Your communication opt-in or opt-out status, your preferred content language, and any promotional interests you have indicated. This data is used to send you relevant promotional communications where you have provided consent.
• Compliance and responsible gaming data: Records of self-exclusion requests, deposit limit configurations, cooling-off periods, and any interactions with our responsible gaming support team. This data is retained to fulfil our player protection obligations.

48bd does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data (beyond responsible gaming interactions), or biometric data. If any such data is submitted to us inadvertently, we will delete it promptly upon becoming aware of its presence.

3

How We Collect Your Data

48bd collects personal data through the following channels and mechanisms:

• Direct submissions: Data you provide when completing the registration form, submitting identity verification documents, contacting customer support, or responding to a survey or promotion.
• Automated platform interactions: Technical and usage data that is collected automatically as you navigate and interact with the 48bd platform, including through cookies, server logs, and session tracking technologies.
• Payment processor integrations: Transaction reference data and payment confirmation status received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners when you make a deposit or request a withdrawal.
• Identity verification partners: Where 48bd uses a third-party identity verification service to validate the authenticity of documents you submit as part of the KYC process, that service may return verification results and risk scores to 48bd.
• Fraud and security monitoring tools: Automated systems that analyse technical data signals to detect potentially fraudulent, abusive, or suspicious account activity.
• Responsible gaming interactions: Records generated when you use responsible gaming tools such as deposit limit settings, cooling-off requests, or self-exclusion submissions.

48bd does not purchase personal data from data brokers or collect personal data from third-party social media platforms without your explicit consent.

4

How We Use Your Data

48bd processes your personal data for the following specific purposes:

• Account management: To create, maintain, and administer your 48bd player account, including processing your registration, verifying your identity, and managing your account preferences.
• Transaction processing: To facilitate deposits, withdrawals, and any other financial transactions conducted through your account, and to maintain an accurate financial ledger for your account.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct in accordance with our Terms & Conditions.
• Regulatory compliance: To fulfil our obligations under applicable anti-money-laundering, counter-terrorism financing, and responsible gaming regulations, including maintaining records as required by law.
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain a record of support interactions for quality assurance purposes.
• Platform improvement: To analyse aggregate usage patterns and technical performance data to improve the reliability, functionality, and user experience of the 48bd platform.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling and to facilitate the use of responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw consent at any time by contacting support.

48bd will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5

Legal Bases for Processing

48bd processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and 48bd — i.e., to operate your account, process bets, and facilitate transactions. Without this processing, 48bd cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, identity verification requirements, and responsible gaming mandates.
• Legitimate interest: Processing carried out for 48bd's legitimate business interests, including fraud prevention, platform security, and improving service quality, where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where 48bd relies on legitimate interest as a legal basis, we conduct a balancing test to ensure that our legitimate interests are not outweighed by your interests, rights, or freedoms. You may request information about any specific balancing test by contacting us at support@48bd.io.

6

Data Sharing & Disclosure

48bd does not sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. Personal data may be disclosed to the following categories of recipients solely to the extent necessary for the purposes described in this policy:

• Payment service providers: Mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners receive transaction reference data necessary to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC service providers who assist in verifying the authenticity of identity documents submitted during account registration or compliance reviews.
• IT infrastructure and hosting providers: Cloud hosting and managed infrastructure providers who store and process platform data on 48bd's behalf under strict data processing agreements.
• Analytics and monitoring providers: Fraud detection, cybersecurity, and platform analytics vendors who process technical and usage data to support platform security and performance.
• Game content providers: Third-party casino game suppliers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming may receive minimal session data necessary to deliver game content and record game outcomes.
• Legal and regulatory authorities: Competent authorities, law enforcement agencies, and regulatory bodies where 48bd is legally required to disclose information — for example, in connection with an anti-money-laundering investigation or court order.
• Professional advisers: Lawyers, auditors, and consultants operating under professional confidentiality obligations, in the context of legal proceedings or compliance reviews.

All third-party service providers engaged by 48bd are subject to contractual data processing obligations that require them to handle your personal data securely, use it only for the specified purpose, and comply with applicable data protection standards.

7

Cookies & Tracking Technologies

48bd uses cookies and similar tracking technologies (such as local storage objects and session tokens) on the platform. Cookies are small text files placed on your device when you visit the platform. They serve several important functions:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies: These remember your preferences such as language settings, display preferences, and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: These collect aggregated, anonymised data about how users interact with the platform — such as which pages are visited most frequently and where users encounter errors. This data is used exclusively to improve the platform experience.
• Security cookies: These support our fraud detection and account security monitoring systems by tracking anomalous login patterns and suspicious session behaviour.

48bd does not use third-party advertising cookies or behavioural tracking cookies that profile your activity across websites outside the 48bd platform. You may manage or disable non-essential cookies through your browser's privacy settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing some or all platform features.

8

Data Security

48bd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and 48bd's servers.
• Encryption at rest for sensitive personal and financial data stored in 48bd's databases.
• Role-based access controls ensuring that 48bd employees can access personal data only to the extent required by their specific job function.
• Multi-factor authentication required for all internal staff access to systems containing personal data.
• Regular security audits and penetration testing carried out by qualified information security professionals.
• Incident response procedures that define how 48bd detects, contains, and notifies affected parties in the event of a data breach.

While 48bd takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your 48bd login credentials confidential and for using a strong, unique password for your account. If you suspect that your account has been compromised, please contact support@48bd.io immediately.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, 48bd will notify affected users without undue delay, providing details of the nature of the breach, the data involved, and the steps being taken to mitigate its effects.

9

Data Retention

48bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with 48bd, and for a period of five (5) years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• Technical and usage data: Retained for up to twenty-four (24) months from the date of collection, after which it is aggregated and anonymised for long-term analytics purposes.
• Marketing preference data: Retained until you withdraw consent or request deletion. Opt-out records are retained indefinitely to ensure that previously withdrawn consent is not inadvertently reinstated.
• Responsible gaming and self-exclusion data: Retained for the duration of any self-exclusion period plus five (5) years, to prevent re-registration in breach of a self-exclusion commitment.
• Customer support records: Retained for three (3) years from the date of last interaction, for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted from 48bd's systems or irreversibly anonymised such that it can no longer be linked to an identifiable individual. You may request early deletion of your personal data, subject to the overriding requirements described in Section 10 below.

10

Your Rights

As a data subject, you have the following rights with respect to the personal data that 48bd holds about you. To exercise any of these rights, please contact us at support@48bd.io with a clear description of your request. 48bd will respond within a reasonable period, ordinarily within thirty (30) calendar days of receipt.

• Right of access: You may request a copy of the personal data that 48bd holds about you, together with information about how it is being processed.
• Right to rectification: You may request that 48bd corrects any inaccurate or incomplete personal data held in your account record. You may also update certain data directly through your account dashboard.
• Right to erasure: You may request that 48bd deletes your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Note that 48bd may be required to retain certain data for legal or compliance reasons even following an erasure request, in which case we will explain the applicable retention obligation.
• Right to restriction: You may request that 48bd restricts the processing of your personal data in certain circumstances, such as while a dispute regarding the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that 48bd provides your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling. 48bd will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

48bd will not discriminate against you for exercising any of your privacy rights. Exercise of these rights will not result in account suspension or any other adverse treatment, except where the exercise of a right (such as an erasure request) necessarily requires account closure.

11

Children & Minors

The 48bd platform is strictly intended for adults aged 21 years and above. 48bd does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the account registration process, and 48bd reserves the right to request documentary proof of age at any stage of the account lifecycle.

If 48bd discovers or has reason to believe that an account has been registered by a person under the age of 21, the account will be immediately suspended, all gaming activity associated with the account will be voided, and any deposited funds will be returned to the originating payment method following a compliance review.

If you are a parent or guardian and believe that a minor in your care has registered an account on 48bd without your knowledge, please contact us immediately at support@48bd.io. We will investigate and take appropriate action as a matter of priority.

12

Third-Party Links

The 48bd platform may, from time to time, contain references to or integrations with third-party services such as game content providers, payment processors, and identity verification partners. While 48bd takes care in selecting reputable service providers, this Privacy Policy applies solely to data processed by 48bd and does not extend to the privacy practices of third-party entities.

48bd is not responsible for the privacy policies, data handling practices, or security measures of any third party. You are encouraged to review the privacy policies of any third-party service with which you interact in connection with your use of the 48bd platform, including the privacy policies of your mobile financial service provider (such as bKash or Nagad) when making deposits or withdrawals.

13

Policy Updates

48bd reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes will be effective immediately upon publication on this page, and the "Last Updated" date at the top of this policy will be revised to reflect the date of the most recent change.

Where an amendment materially affects how 48bd processes your personal data or alters your rights as a data subject, 48bd will make reasonable efforts to notify you in advance via the contact details associated with your account. Your continued use of the 48bd platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised document.

It is your responsibility to review this Privacy Policy periodically to remain informed of how 48bd handles your personal data. If you have any concerns about a proposed or published amendment, please contact our support team at support@48bd.io before continuing to use the platform.

14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to 48bd's handling of your personal data, please contact our support team using the details below. All privacy-related enquiries will be handled with priority and in confidence.

Email: support@48bd.io

Support Hours: 24 hours a day, 7 days a week, 365 days a year

Languages: English and Bengali

When submitting a privacy request, please include your registered account username or email address and a clear description of your request so that we can locate your records and respond efficiently. 48bd may need to verify your identity before processing certain requests, such as data access or erasure requests, to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party.

48bd aims to resolve all privacy enquiries promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.