Privacy Policy — How bdpopo Collects, Uses, and Protects Your Personal Data

When you use bdpopo, we collect certain categories of personal information that are necessary for us to operate the platform safely, process your transactions, and comply with our anti-fraud and responsible gaming obligations. We only collect information that serves a clear, legitimate purpose. Below is a breakdown of the categories of data we collect and how they arise.

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by law or to fulfil a responsible gaming obligation (for example, medical documentation in connection with a self-exclusion request). Where such data is collected, it is handled with additional care and is strictly limited to the stated purpose.

bdpopo processes your personal information for specific, documented purposes only. We do not use your data in ways that are incompatible with those stated purposes. The following list sets out the key purposes for which we use your personal information and the legal basis for each use:

• Account creation and management: We use your registration data to create and maintain your player account, verify your identity, and ensure only one account exists per individual.
• Transaction processing: We use your payment data and account details to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Age and identity verification (KYC): We use identity documents to confirm that you are aged 18 or above and that your account details match your verified identity, as required by our responsible gaming obligations.
• Customer support: We use your contact information and communications history to respond to your queries, complaints, and support requests efficiently.
• Fraud prevention and security: We analyse technical data, usage patterns, and payment behaviour to detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Responsible gaming monitoring: We monitor gameplay frequency, session length, and deposit patterns to identify players who may be experiencing gambling-related difficulties, enabling us to offer appropriate support tools.
• Platform improvement: We use aggregated, anonymised usage data to improve the bdpopo platform, optimise game selection, and enhance the overall player experience.
• Marketing communications: With your prior consent, we may send you promotional emails about bdpopo offers, seasonal promotions, and new games. You may withdraw this consent at any time by contacting us at [email protected].
• Legal compliance: We process and retain certain data to comply with applicable legal obligations, including anti-money-laundering (AML) regulations, tax reporting requirements, and responses to lawful requests from authorities.

bdpopo will not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you without first providing you with appropriate information and, where required, obtaining your consent.

bdpopo does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. However, to operate the platform effectively and meet our legal obligations, we may share your data with the following categories of trusted third parties under strict contractual controls:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (BRAC Bank, City Bank, Islami Bank, Sonali Bank) receive the minimum necessary transaction data required to process your deposits and withdrawals. These providers operate under their own privacy frameworks.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to facilitate game delivery and resolve technical disputes. They do not receive your full personal profile.
• Identity verification services: KYC and age-verification service providers may process your identity documents on our behalf as data processors, subject to strict confidentiality agreements.
• Fraud prevention and analytics platforms: We may share technical and usage data with fraud detection and analytics providers to protect the platform against abuse. All such sharing is subject to data processing agreements.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law, a valid court order, or a lawful governmental request. We will notify you of any such disclosure where legally permitted to do so.

Where data is transferred to service providers outside of Bangladesh, bdpopo takes appropriate steps to ensure that adequate data protection safeguards are in place before any such transfer occurs.

bdpopo uses cookies and similar tracking technologies (such as web beacons and local storage) to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with the site. A cookie is a small text file placed on your device by your web browser when you visit bdpopo.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as secure login sessions, account authentication, and bet placement. Without these cookies, bdpopo cannot operate. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences such as your language setting, display preferences, and last visited game category. They improve convenience but are not essential to platform operation.
• Analytics Cookies: We use analytics tools to collect aggregated, anonymised data about how players navigate bdpopo — including which pages are most visited, how long sessions last, and which game categories are most popular. This data helps us improve the platform. No personally identifiable information is included in analytics reports.
• Security Cookies: These cookies assist in fraud detection by flagging unusual patterns of platform access, such as logins from multiple geographic locations within a short timeframe.

bdpopo does not use advertising cookies or third-party tracking cookies designed to build cross-site advertising profiles of our players. We do not participate in any advertising networks that track your browsing behaviour across other websites.

By continuing to use bdpopo after being made aware of our cookie use, you consent to the placement of cookies as described in this section. If you do not consent to non-essential cookies, please adjust your browser settings accordingly before continuing.

bdpopo takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encrypted storage for sensitive data at rest, including identity documents and payment method details.
• Access controls: Personal data is accessible only to authorised bdpopo personnel who need it to perform their job functions. All staff access to personal data is logged.
• Regular security audits and vulnerability assessments conducted on the platform infrastructure.
• Two-factor authentication options available for player accounts to add an additional layer of protection at login.
• Incident response procedures: bdpopo maintains documented procedures for detecting, reporting, and responding to personal data breaches. In the event of a breach affecting your data, we will notify you without undue delay where required by applicable law.

While bdpopo takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security against all possible threats. You also have a role to play in keeping your account secure — use a strong, unique password, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect any unauthorised access to your account.

Player data is stored on servers located in secure data centre facilities. Data may be processed by our authorised service providers in other countries, provided appropriate safeguards are in place as described in the Data Sharing section above.

As a registered player on bdpopo, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data bdpopo holds about you. We will provide this information within 10 business days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings, or contact support for assistance.
• Right to Erasure: You may request that bdpopo delete your personal data. We will honour this request where deletion is not prevented by a legal obligation (for example, financial transaction records that must be retained under anti-money-laundering regulations). Where we cannot delete certain data, we will explain why and specify the retention period that applies.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your data while a dispute or correction request is resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process personal data (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to our processing of your personal data for direct marketing purposes at any time, and we will cease such processing immediately upon receipt of your objection.

bdpopo retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Personal data associated with your active bdpopo account is retained for the full duration of your account's existence and for a period after account closure as set out below.
• Transaction records: Financial transaction data (deposit and withdrawal records) is retained for a minimum of 5 years following the date of the transaction, in compliance with anti-money-laundering (AML) obligations. This data cannot be deleted on request during the mandatory retention period.
• Identity verification documents: KYC documents (NID scans, passport copies) are retained for the period your account is active and for 5 years following permanent account closure, in line with AML and fraud prevention requirements.
• Communication records: Support correspondence and chat transcripts are retained for up to 3 years following the closure of the relevant support case, to assist with any subsequent disputes or regulatory enquiries.
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify individual players.
• Inactive accounts: Where an account has been inactive for 12 consecutive months, bdpopo may contact you to confirm whether you wish to keep the account open. If no response is received, the account may be closed and personal data subject to the retention periods above.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. If you have any questions about the specific retention period that applies to your data, please contact us at [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about how bdpopo handles your personal data, we encourage you to contact us directly. We are committed to resolving privacy concerns promptly and transparently.

You can reach our support team by email at [email protected]. Please use the subject line "Privacy Enquiry" so your message is directed to the appropriate team member. We aim to respond to all privacy-related communications within 10 business days.

If you are submitting a formal data rights request (such as a request for access, rectification, or erasure), please include your registered email address and a clear description of the request in your message. We may need to verify your identity before processing certain types of requests.

This Privacy Policy was last updated in January 2026 and applies to all players using the bdpopo platform at https://bdpopo.net. For information about your rights under our Terms & Conditions or our Responsible Gaming Policy, please visit the relevant pages.