Privacy Policy — How 48bd Collects, Uses, and Protects Your Data

• Registration form: You provide your name, date of birth, and mobile number when creating your 48bd account.
• KYC submission: You upload identity documents (NID or passport) when completing the identity verification process before your first withdrawal.
• Payment transactions: Your mobile wallet number or bank reference is captured when you initiate a deposit or withdrawal through bKash, Nagad, Rocket, Upay, or a supported bank.
• Support contact: Information you share in support tickets, emails, or live chat sessions is recorded to allow resolution of your query and for quality assurance.
• Account settings: Responsible gaming preferences, deposit limits, and self-exclusion requests that you configure within your player account dashboard.

• Session data: Login times, session duration, and navigation patterns are logged automatically by our platform systems each time you use 48bd.
• Technical identifiers: Your IP address, device type, browser, and operating system are recorded automatically when your browser connects to 48bd.vip.
• Cookies and local storage: Session management cookies and analytics identifiers are set in your browser when you visit the platform. See the Cookies section below for full details.
• Game and bet logs: Every game round, bet placement, outcome, and balance movement on your account is recorded automatically as part of the platform's operational transaction log.
• Fraud detection signals: Behavioural patterns and anomaly signals (e.g., unusual login locations, rapid stake escalation) are recorded by automated monitoring systems.

• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own regulated security frameworks.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other providers may receive a player session token and anonymised player identifier to load and authenticate game sessions. They do not receive your full personal profile.
• Identity verification services: Where automated KYC tools are used to verify NID or passport documents, data is passed to our verification technology partner under a data processing agreement.
• Fraud prevention providers: Our fraud detection infrastructure may use specialist third-party risk scoring services that process technical identifiers (IP address, device fingerprint) to generate fraud risk scores.

In limited circumstances, 48bd may be required to disclose personal data to external parties without your prior consent, where such disclosure is required by law, court order, or a legitimate request from a law enforcement or regulatory authority. Examples include:

• Responses to valid law enforcement investigations where a court order or equivalent legal instrument has been issued.
• Reporting obligations under anti-money laundering frameworks where a suspicious transaction report (STR) is filed.
• Disclosures to payment processors or financial institutions in connection with chargeback disputes or payment fraud investigations.
• Sharing with successor entities in the event of a business restructure, merger, or acquisition — subject to equivalent privacy protections being maintained.

• Right to access: Request a copy of all personal data 48bd holds about you, including account details, transaction history, and KYC records.
• Right to rectification: Request correction of any inaccurate or incomplete personal data held on your account. You can update most contact details directly in your account dashboard.
• Right to erasure: Request deletion of your personal data after account closure, subject to legal retention obligations that may require us to retain certain records for up to 5 years.
• Right to data portability: Request a structured, machine-readable export of your personal data (identity data, transaction history) in a commonly used format.
• Right to object to processing: Object to processing based on legitimate interest — including fraud monitoring profiling — where you believe your individual circumstances warrant an exception.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), withdraw that consent at any time without affecting the lawfulness of prior processing.

1. Send your request to [email protected] with the subject line: "Privacy Rights Request".
2. Include your registered mobile number and account username so we can verify your identity before acting on the request.
3. Describe the specific right you wish to exercise and, where applicable, the specific data or processing activity your request relates to.
4. We will acknowledge your request within 3 business days and provide a substantive response within 15 business days.
5. We may need to request additional identity verification before acting on certain requests (particularly erasure and portability requests) to ensure data is not released to or deleted on behalf of an unauthorised individual.
6. If you are dissatisfied with our response to a privacy rights request, you may escalate the matter to the relevant data protection authority in your jurisdiction.

Encryption in Transit

All data exchanged between your browser or app and 48bd.vip is encrypted using TLS 1.2 or higher with 256-bit encryption. This prot ects your login credentials, payment details, and personal data from interception during transmission.

Encryption at Rest

Personal data stored on 48bd servers — including KYC documents, identity records, and transaction logs — is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the data they protect.

Access Controls

Access to personal data within 48bd's internal systems is governed by role-based access controls. Staff are granted access only to the specific data categories required for their job function. All internal access is logged and periodically audited.

Intrusion Detection

48bd operates continuous intrusion detection and anomaly monitoring systems that flag unusual access patterns, brute-force login attempts, and other threat signals in real time, triggering automatic protective responses where appropriate.

Regular Security Audits

The 48bd platform and its data infrastructure undergo periodic security reviews and vulnerability assessments. Findings are remediated in accordance with a prioritised patching schedule to maintain a strong security posture.

Breach Notification

In the unlikely event of a personal data breach that poses a risk to affected players, 48bd will notify impacted players via their registered contact details as promptly as practicable and will take immediate steps to contain and remediate the breach.

• All players must confirm they are 18 years of age or older during the account registration process. Providing a false date of birth to circumvent this requirement is a violation of our Terms & Conditions and will result in immediate account closure and forfeiture of any balance.
• The KYC verification process — which requires submission of a valid National Identity Card or passport — provides a second layer of age verification before any withdrawal is processed. Bangladesh NID cards are issued only to individuals aged 18 and above, providing a reliable verification mechanism.
• If 48bd becomes aware or reasonably suspects that a registered account is held by an individual under 18 years of age, the account will be suspended immediately, all deposits returned to the original payment method, and any winnings forfeited pending investigation.
• If you are a parent or guardian and believe a minor in your household has accessed or registered on 48bd.vip, contact us immediately at [email protected]. We will investigate and take immediate action, including account closure and full deposit refund.
• 48bd recommends that parents and guardians install parental control software on shared devices to prevent minors from accessing gambling platforms. Tools such as GamBlock, Betfilter, and similar filtering services can restrict access to gambling websites at the device or network level.