Privacy Policy — How bdromi Protects Your Data

1. Introduction

bdromi ("we", "us", "our") operates the online casino and sports betting platform accessible at bdromi.net ("the Platform"). We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Privacy Policy describes how bdromi collects, processes, stores, and shares personal data belonging to registered players, prospective players, and visitors to the Platform.

This policy applies to all users of the bdromi Platform regardless of the device or method used to access it, including desktop browsers, mobile browsers, and any bdromi application. Please read this document carefully. If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform immediately.

2. Data Controller

For the purposes of applicable data protection law, bdromi acts as the data controller in respect of personal data collected through the Platform. This means bdromi determines the purposes for which your personal data is collected and the manner in which it is processed.

All data protection enquiries, access requests, and complaints should be directed to our support team using the contact details provided in Section 14 of this policy. bdromi will acknowledge all data-related requests within 5 business days and will endeavour to resolve them fully within 30 calendar days of receipt.

3. Personal Data We Collect

bdromi collects the following categories of personal data about you, depending on the nature of your interaction with the Platform:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Bangladeshi mobile phone number
• Username and encrypted password
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna)
• Email address (where provided)

3.2 Identity Verification (KYC) Documents

• National Identity Card (NID) number and image
• Bangladeshi passport number and image (where applicable)
• Driving licence details (where applicable)
• Utility bills or bank statements submitted as proof of address
• Payment method verification screenshots (e.g., bKash or Nagad account details)

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method identifiers (mobile wallet numbers, masked card numbers)
• Transaction reference numbers
• Account balance history
• Bonus and promotional credit records

3.4 Gaming and Betting Activity Data

• Games played, bet amounts, and outcomes
• Session start and end times
• Responsible gaming limit settings
• Self-exclusion history (where applicable)

3.5 Technical and Device Data

• IP address at the time of login and account creation
• Browser type and version
• Operating system and device type
• Pages visited, links clicked, and time spent on the Platform
• Cookie identifiers and session tokens

3.6 Communications Data

• Support messages, live chat transcripts, and WhatsApp correspondence
• Feedback and complaint records
• Marketing preference settings

4. How We Collect Your Data

bdromi collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account preferences.
• Automatically: through cookies, server logs, and tracking technologies as you navigate and interact with the Platform.
• From payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard may share transaction confirmation data with bdromi as part of processing your payments.
• From game providers: third-party providers such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi may share session and outcome data with bdromi for audit and dispute resolution purposes.
• From identity verification services: where bdromi uses a third-party KYC provider to verify the authenticity of your identity documents.

5. How We Use Your Personal Data

bdromi processes your personal data for the following purposes:

Purpose	Data Used
Creating and managing your bdromi account	Registration and identity data
Verifying your identity and age (18+ compliance)	KYC documents, date of birth
Processing deposits and withdrawals	Financial and transaction data
Delivering and improving casino and betting services	Gaming activity data, technical data
Fraud prevention and platform security	IP address, device data, transaction data
Responsible gaming monitoring and interventions	Gaming activity, session data, limit settings
Responding to support enquiries and complaints	Communications data, account data
Sending promotional offers and bonus notifications (where consented)	Contact details, marketing preferences
Complying with legal and regulatory obligations	All applicable categories

6. Legal Basis for Processing

bdromi relies on the following legal bases to process your personal data:

• Contract performance: Processing is necessary to provide you with the services described in our Terms & Conditions — including account creation, payment processing, and game delivery.
• Legal obligation: bdromi is required to verify player identities, maintain transaction records, and cooperate with law enforcement authorities in certain circumstances.
• Legitimate interests: We process certain data to detect and prevent fraud, ensure platform security, and improve our services — provided these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent — for example, for marketing communications or optional analytics cookies — we will obtain your explicit agreement and you may withdraw it at any time.

7. Sharing Your Personal Data

bdromi does not sell, rent, or trade your personal data with third parties for their own commercial purposes. We share data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your transactions securely.
• Game providers: Third-party casino and sports betting providers (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi) receive session identifiers and bet data to enable game delivery and results auditing.
• Identity verification providers: Where we use a third-party KYC service, your identity document images and personal details are shared with that provider solely for the purpose of verification.
• Legal and regulatory authorities: bdromi will disclose personal data to law enforcement, courts, or regulatory bodies where required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data held by bdromi may be transferred to the acquiring entity, subject to equivalent privacy protections.

8. Data Retention

bdromi retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and operational obligations. The following retention periods apply as general guidelines:

• Account and identity data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to comply with anti-money laundering and record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for the lifetime of your account plus 5 years, or longer if required by applicable law.
• Gaming activity logs: Retained for up to 3 years from the date of each session for dispute resolution and responsible gaming monitoring purposes.
• Support correspondence: Retained for up to 3 years from the date of the last communication.
• Marketing preference records: Retained until you withdraw consent, plus a reasonable period thereafter for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

9. Data Security

bdromi takes the security of your personal data seriously and implements a range of technical and organisational safeguards, including:

• SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data fields (including passwords and financial identifiers) at rest
• Access controls limiting data access to authorised bdromi personnel with a demonstrated operational need
• Regular security reviews and vulnerability assessments of the Platform infrastructure
• Secure data backup procedures to prevent accidental loss or destruction
• Staff training on data protection obligations and secure data handling practices

While bdromi makes every effort to protect your personal data, no method of transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account password and for logging out of your account after each session, particularly when using a shared or public device.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdromi will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

10. Cookies and Similar Technologies

bdromi uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform. A cookie is a small text file stored on your device when you visit the bdromi website. We use the following categories of cookies:

• Essential cookies: These are strictly necessary for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled.
• Functional cookies: These remember your preferences (such as language settings and game history) to provide a more personalised experience. They are active by default but you may disable them via your browser settings.
• Analytics cookies: These help us understand how players interact with the Platform — including which pages are most visited and how long sessions last. This data is aggregated and anonymised. Analytics cookies are used only where you have provided consent.
• Security cookies: These assist in detecting and preventing fraudulent activity, bot access, and other security threats. They are strictly necessary and cannot be disabled.

You may control or delete cookies through your browser settings at any time. Please be aware that disabling essential or functional cookies may affect the performance of the bdromi Platform and some features may not work as intended.

11. Your Data Protection Rights

As a user of the bdromi Platform, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data bdromi holds about you at any time.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure: In certain circumstances, you may request that bdromi delete your personal data. This right is subject to limitations where we are required to retain data by law (e.g., for AML compliance).
• Right to restriction of processing: You may ask bdromi to restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that bdromi provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. If you object to marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the bdromi support team using the details in Section 14. We will verify your identity before acting on any request and will respond within 30 calendar days. There is no charge for making a data rights request.

12. Minors and Age Restriction

The bdromi Platform is strictly intended for adults aged 18 years and above. bdromi does not knowingly collect personal data from individuals under the age of 18. During the registration process, all users are required to confirm that they meet the minimum age requirement, and this is subsequently verified through our KYC procedures.

If bdromi becomes aware that personal data has been collected from a minor — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant account, delete the data collected, and, where appropriate, report the matter to the relevant authorities. Any winnings or bonuses associated with an underage account will be forfeited in full.

Parents and guardians who believe that a minor in their care has registered on bdromi are encouraged to contact our support team immediately at the address provided in Section 14.

13. Changes to This Privacy Policy

bdromi reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will update the "Effective" date at the top of this page and, where reasonably practicable, notify registered players via their registered contact details. We encourage you to review this page periodically to stay informed about how bdromi protects your data.

Your continued use of the bdromi Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to raise a concern about how bdromi handles your personal data, please get in touch using the details below. All contact information is displayed as plain text only.

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

For data protection enquiries specifically, please include "Privacy Request" in your message subject so that our team can direct your query to the appropriate handler without delay. bdromi aims to acknowledge all privacy-related requests within 2 business days and to resolve them fully within 30 calendar days.

For further information on your rights and how to manage your account, you may also visit our FAQ page or review our Terms & Conditions.