popbd Privacy Policy

1 Data We Collect

popbd collects personal data through several channels: the registration form, the cashier and payment flow, your ongoing activity on the Platform, and communications you initiate with our support team. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a popbd account, we collect the following information:

• Full legal name as it appears on your national identity document.
• Date of birth (used to verify that you are 18 years of age or older).
• Mobile number registered with your bKash, Nagad, or other local payment account.
• Email address (used for account communications and security alerts).
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Username and encrypted password (we never store passwords in plain text).

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and age verification requirements, popbd may request:

• A copy of your National Identity Card (NID) or passport.
• Proof of address (utility bill, bank statement) dated within the past three months.
• Proof of payment method ownership (e.g., a screenshot of your bKash account registered in your name).
• Source of funds documentation for high-value transactions, if required.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal on popbd, we record:

• Transaction amount in BDT (৳).
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Transaction reference number and timestamp (Bangladesh Standard Time, UTC+6).
• Account balance before and after the transaction.

popbd does not store full card numbers or mobile banking PINs. Card data for Visa/Mastercard transactions is handled by a PCI-DSS compliant payment processor and is not retained on popbd's own servers.

1.4 Platform Activity Data

As you use the popbd Platform, we automatically collect certain technical and behavioural data, including:

1.5 Data You Provide Voluntarily

If you contact the popbd support team at [email protected], participate in a survey, or respond to a promotional communication, we collect the content of your message and any attachments you choose to include. You are not obligated to provide more information than is required to resolve your query.

2 How We Use Your Data

popbd uses the personal data we collect for the following purposes. We only process personal data where we have a lawful basis for doing so (see Section 3 for the legal bases).

2.1 Account Management

Your registration data is used to create and maintain your popbd account, authenticate your identity at login, and communicate account-critical information such as security alerts, password reset requests, and policy update notifications. Without this data, popbd cannot provide you with a functioning account.

2.2 Payment Processing

Transaction data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. popbd retains transaction records to produce accurate account statements, resolve payment disputes, and comply with financial record-keeping obligations. All BDT transaction amounts are recorded to the nearest taka.

2.3 Identity Verification & Compliance

KYC documentation and identity data are processed to verify your age (18+ requirement), confirm your identity, detect and prevent fraud, and meet anti-money-laundering (AML) obligations. This processing is a regulatory necessity and cannot be waived. Players who decline to complete KYC may have their withdrawal requests placed on hold until verification is complete.

2.4 Responsible Gaming

Session data, betting history, and deposit patterns are analysed by popbd's responsible gaming systems to detect signs of problem gambling. Where indicators of problematic behaviour are identified, popbd may proactively apply protective measures — including deposit limit suggestions, cooling-off prompts, or account restrictions — in accordance with our Responsible Gaming Policy, available at /responsible-gaming.

2.5 Platform Improvement & Security

Device, browser, IP, and session data are used to monitor Platform performance, diagnose technical issues, and detect unauthorised access attempts. This data helps popbd maintain a stable, secure, and fair gaming environment for all players in Bangladesh.

2.6 Customer Support

Communications you send to [email protected] are used to respond to your queries, resolve disputes, and improve the quality of our support service. Support communications are retained for a defined period (see Section 6) to enable follow-up and dispute resolution.

2.7 Marketing Communications

With your explicit consent at registration (or opt-in thereafter), popbd may send you promotional communications by email or SMS regarding new games, bonus offers, and seasonal promotions relevant to Bangladeshi players — including BPL season, Eid, Pohela Boishakh, and other events. You may withdraw consent for marketing communications at any time by emailing [email protected] with the subject line "Unsubscribe". Withdrawing marketing consent does not affect your right to receive essential account communications.

3 Legal Basis for Processing

popbd processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

4 Data Sharing & Third Parties

popbd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the specific, limited circumstances described below.

4.1 Payment Service Providers

To process deposits and withdrawals, popbd shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers act as independent data controllers in respect of payment data processed through their own systems. popbd shares only the data that is strictly necessary to execute the payment — typically your registered mobile number or masked card details, along with the transaction amount and reference.

4.2 Game Studio Providers

Games available on the popbd Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Ezugi, and Spribe. A pseudonymous player identifier and session token are shared with the relevant game studio each time you launch a game. popbd does not share your full name, NID, or payment details with game studios. Game studios are contractually obligated to use this data only for the purpose of delivering the game session.

4.3 Identity Verification Partners

popbd may use third-party KYC verification services to cross-check the identity documents you submit during the verification process. These partners process identity data solely for the purpose of KYC verification and are bound by strict data processing agreements with popbd. Verification data is not used by these partners for any other purpose.

4.4 Legal & Regulatory Disclosure

popbd may disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies if required to do so by applicable law, a court order, or a lawful request from a competent authority. popbd will notify you of any such disclosure where it is legally permissible to do so.

4.5 Business Transfers

In the event that popbd undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, popbd will ensure that the acquiring entity is bound by data protection obligations no less protective than those set out in this Policy, and will notify registered players of the transfer via their registered email address in advance where practicable.

5 Cookies & Tracking Technologies

The popbd Platform uses cookies and similar technologies to ensure the Platform functions correctly, to keep you securely logged in, and to help us understand how players interact with the site so that we can improve the experience over time.

5.1 What Are Cookies?

Cookies are small text files placed on your device by your browser when you visit a website. They allow the website to recognise your device on subsequent visits and recall certain preferences or session states. Cookies do not contain executable code and cannot access other files on your device.

5.2 Types of Cookies Used by popbd

popbd does not use advertising cookies, retargeting pixels, or third-party social media tracking cookies. The cookies deployed on popbd.net are limited to those categories described above.

5.3 Managing Cookies

You may control cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please be aware that disabling essential cookies will prevent you from logging into your popbd account and using core Platform features. Instructions for managing cookies in popular browsers are available through your browser's help documentation.

6 Data Retention & Storage

6.1 Retention Periods

popbd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods for key data categories are as follows:

• Account registration data: Retained for the lifetime of the account, plus 5 years after account closure — consistent with standard financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, in line with AML record-keeping requirements.
• Financial transaction records: Retained for 7 years from the date of each transaction.
• Betting and game history: Retained for 5 years from the date of each session.
• Customer support communications: Retained for 3 years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for the duration of your account, or until you withdraw consent, whichever is earlier.
• Analytics and session data: Anonymised within 24 months of collection; anonymised aggregates may be retained indefinitely for Platform improvement purposes.

6.2 Data Storage Location

popbd stores personal data on secure servers. All data is encrypted at rest using industry-standard encryption. popbd takes reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction.

6.3 Data Deletion Requests

If you close your popbd account and wish to request deletion of your personal data, you may do so by emailing [email protected]. popbd will action deletion requests to the extent permitted by law — note that certain data (particularly KYC documents and financial transaction records) must be retained for the statutory periods described above, regardless of a deletion request, and cannot be deleted early.

7 Your Privacy Rights

popbd respects your rights over your personal data. Depending on applicable data protection law, you may be entitled to exercise the following rights in relation to the personal data popbd holds about you:

7.1 Right of Access

You have the right to request a copy of the personal data popbd holds about you. popbd will provide this information in a structured, commonly used, and machine-readable format upon verified request. To submit an access request, email [email protected] with the subject line "Data Access Request" and verify your identity using your registered mobile number and email address.

7.2 Right to Rectification

If any personal data popbd holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most registration details directly within your popbd account settings. For changes to identity-critical information (e.g., legal name, date of birth), contact [email protected] and provide updated supporting documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

In certain circumstances, you have the right to request that popbd delete your personal data. This right is not absolute — popbd may be required to retain certain data to comply with legal obligations (see Section 6.3). popbd will process erasure requests promptly and inform you of what data can and cannot be deleted, along with the reasons for any retention.

7.4 Right to Restrict Processing

You have the right to request that popbd restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved, or while you are considering whether to exercise your right to erasure.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to popbd in a structured, commonly used, and machine-readable format, and to have that data transmitted to another data controller where technically feasible.

7.6 Right to Withdraw Consent

Where popbd processes your personal data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent for marketing, email [email protected].

7.7 How to Exercise Your Rights

To exercise any of the rights described above, contact the popbd data support team at [email protected]. popbd will respond to all verified data rights requests within 30 days. In complex cases, popbd may extend this period by a further 60 days — if an extension is required, we will notify you of the extension and the reason within the initial 30-day period.

8 Data Security Measures

popbd takes the security of your personal data seriously. We have implemented a combination of technical and organisational security measures designed to protect personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption: All data in transit between your device and the popbd Platform is encrypted using current TLS standards. The Platform enforces HTTPS on every page.
• Encryption at rest: Personal data stored on popbd's servers is encrypted using industry-standard algorithms. Database access is restricted to authorised systems only.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their popbd accounts. Internal staff access to production systems requires multi-factor authentication.
• Access controls: popbd staff access to personal data is granted on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly when no longer required.
• Security monitoring: popbd's systems are monitored continuously for unusual access patterns, login anomalies, and potential security incidents. Automated alerts are in place for suspicious activity.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, popbd will take immediate containment action and notify affected players via their registered email address without undue delay.
• Staff training: All popbd staff who handle personal data receive data protection training and are bound by confidentiality obligations.

Despite these measures, no online platform can guarantee absolute security. popbd strongly recommends that you use a strong, unique password for your popbd account, enable 2FA, and ensure that your registered email account is also protected with a strong password and two-factor authentication.

9 Children & Minors

popbd is a gambling platform intended exclusively for adults aged 18 and over. popbd does not knowingly collect personal data from any person under the age of 18. The registration process includes an age declaration, and popbd reserves the right to request documentary proof of age at any time via the KYC process.

If popbd becomes aware that personal data has been collected from a person under the age of 18, we will take the following steps immediately:

• Permanently close the underage account without notice.
• Void all bets placed and remove any bonus funds credited to the account.
• Delete the personal data of the underage individual to the extent permitted by applicable law.
• Retain only the minimum data necessary to document the incident for compliance purposes.

If you are a parent or guardian and believe that a person under your care may have registered an account on popbd, please contact us immediately at [email protected]. We will investigate and resolve the matter promptly. We also recommend the use of parental control software on shared devices to restrict access to online gambling platforms.

10 Changes to This Policy

popbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Policy — changes that significantly affect how we collect, use, or share your personal data — we will:

• Update the "Last Updated" date at the top of this Policy.
• Notify registered players via their registered email address at least 7 days before the changes take effect.
• Display a prominent notice on the popbd Platform for a period following the update.

For non-material changes — such as corrections of typographical errors, clarifications of existing practices that do not change the substance of the Policy, or updates to the list of payment providers — popbd may update the Policy without advance notice, subject to updating the "Last Updated" date.

The current and effective version of this Privacy Policy is always available at popbd.net/privacy-policy. Your continued use of the popbd Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must stop using the Platform and request account closure at [email protected].