bdxx Privacy Policy – How We Keep Your Data Safe

This Privacy Policy applies to bdxx (https://bdxx.ws) and all associated applications, services, and products. By using bdxx, you agree to this Privacy Policy.

We believe transparency is the best policy. That's why this document clearly outlines: what data is collected, why it's collected, how it's used and stored, and what rights you have.

Bdxx complies with international data protection law (GDPR) and applicable local regulations.

Bdxx collects two types of data — information you provide directly and information collected automatically.

Information you provide (at registration):

Automatically collected data:

• Device information (model, operating system, screen resolution)
• IP address and approximate location (city level)
• Browser type and version
• Platform activity logs (login times, game history)
• Cookies & Session Data

Bdxx uses your data only for specific, legitimate, and transparent purposes. The reason for each use is outlined below:

• Account Management: For registration, login, and account security
• Payment Processing: To process deposits and withdrawals
• KYC Verification: To verify identity and prevent fraud
• Customer Support: With support team assistance to resolve your issues
• Security Monitoring: To prevent account hacking and fraudulent activity
• Legal Obligation: To comply with AML (Anti-Money Laundering) regulations
• Service Improvement: To improve the platform experience (via anonymous analytics)
• Relevant Communications: Important updates, transaction notifications, and (with your consent) promotions

We never use your data for any purpose that hasn't been disclosed to you in advance.

Bdxx does not generally share your data with anyone. Sharing may occur only in the limited circumstances outlined below:

• Payment Processor: Only the information necessary to verify transactions with bKash, Nagad, or your bank
• KYC service provider: With contracted service providers for identity verification purposes
• Technology Partners: Hosting, cybersecurity — all partners are bound by confidentiality agreements
• Legal Authorities: When required by court order or government investigation

Whenever data is shared, only the minimum necessary information is disclosed (in accordance with the Data Minimization principle).

Bdxx employs best-in-class technology to keep your data secure:

• SSL/TLS 1.3 Encryption: Across all data transmissions
• AES-256 Encryption: For sensitive data stored in the database
• Two-Factor Authentication (2FA): Additional account security
• AI Security Monitoring: On detection of unusual logins or transactions
• Server Security: Firewall, DDoS protection, regular penetration testing
• Staff Training: Only authorised staff have access to data on a need-to-know basis

That said, no one can guarantee 100% security on the internet. Please keep your password strong and never share it with anyone.

As a bdxx user, you have the following privacy rights. To exercise any of them, contact us at support@bdxx.ws:

1. Right to Know: You can find out exactly what personal information we hold about you.
2. Right to Access: You can request a copy of your personal data.
3. Right to Rectification: You may request that incorrect information be corrected.
4. Right to Erasure: In certain circumstances, you may request that your data be deleted.
5. Right to Restrict Processing: You can request that certain data processing be stopped.
6. Right to Portability: You may download a copy of your personal data.
7. Right to Object: You can object to certain types of data processing.

Bdxx uses cookies on its website and app. Cookies are small text files stored in your browser. We use the following types of cookies:

You can disable cookies in your browser settings, though this may affect some platform functionality. We do not use third-party tracking or advertising cookies.

Bdxx does not retain data longer than necessary. Retention periods by data type:

• Account Information: For the duration of active account + 5 years (for legal purposes)
• Transaction History: 7 years (as per AML regulations)
• KYC documents: Retained for 5 years
• Support conversations: 3 years
• Marketing Consent Records: 3 years after opt-out
• Activity Logs: 1 Year

Bdxx strictly does not collect data from anyone under the age of 18. Our services are intended for adults only.

Date of birth is verified at registration. Should we receive information belonging to a minor, it will be deleted immediately and the associated account will be closed.

The bdxx platform may occasionally reference third-party services (such as payment gateways and game providers). These third parties have their own privacy policies.

Bdxx is not responsible for the privacy practices of third parties. When you access a third-party service, their policies apply.

• Game providers (Evolution, Pragmatic) operate under their own policies
• Payment processors (bKash, Nagad) operate under their own data policies
• Bdxx is not responsible for third-party privacy practices, though a privacy agreement is required for all our partnerships

Bdxx may update this Privacy Policy at any time. For significant changes:

1. Notice will be given at least 30 days before any changes take effect
2. Full details of changes will be sent to your registered email
3. You will be notified of changes at login and asked for your consent
4. A comparison of the old and new versions will be provided

If you do not agree with the updated policy after receiving notice, you may close your account before the new policy takes effect.

For any privacy-related questions, rights requests, or complaints, please contact our Data Protection Officer:

• Email: support@bdxx.ws (Subject: Privacy / Privacy Request)
• Live Chat: 24/7 support available in Bangla
• Request processing time: Typically 7–30 business days