Your Privacy Matters to mybdix

This Privacy Policy ("Policy") is published by mybdix ("we", "us", "our", "the Platform") and applies to all users who access https://mybdix.vip, register a player account, or interact with any mybdix service or communication. It describes how mybdix collects, uses, stores, shares, and protects personal information in connection with the operation of the mybdix online casino and sports betting platform serving registered players across Bangladesh.

By registering an account on mybdix or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform and should contact [email protected] to close your account.

This Policy should be read alongside the mybdix Terms & Conditions and the Responsible Gaming guidelines, both of which are incorporated by reference. In the event of a conflict between this Policy and any other mybdix document regarding the handling of personal data, this Policy shall govern.

mybdix takes privacy seriously. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. This Policy is reviewed and updated periodically to reflect changes in our practices, technology, and applicable legal requirements. The current effective version is always available at https://mybdix.vip/privacy-policy.

mybdix collects personal data from you directly when you register, transact, or interact with the Platform, and indirectly through automated technologies when you browse or use our services. The categories of personal data we collect are set out below.

Registration & Identity Data

• Full legal name as it appears on your Bangladesh National Identity Card (NID) or passport.
• Date of birth (collected to verify that you meet the 18+ age requirement).
• Bangladesh mobile phone number registered to your bKash, Nagad, Rocket, or Upay account.
• Email address used for account communications and notifications.
• Username and encrypted password (passwords are stored using one-way hashing — we cannot retrieve your plain-text password).

Identity Verification Documents

• Copies of identity documents such as NID, passport, or driver's licence, when requested as part of our Know Your Customer (KYC) verification process.
• Selfie or liveness check images, where required to confirm that a document submission matches the account holder.

Financial & Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal requests, dates, and statuses.
• Account balance information.

Usage & Gameplay Data

• Game sessions, bet history, wager amounts, win and loss records, and bonus redemption history.
• Pages visited, features used, session duration, and navigation paths within the mybdix platform.

Technical & Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Unique device identifiers and session tokens.
• Referral source and traffic channel where applicable.

Communication Data

• Records of communications you send to mybdix support, including email content and timestamps.
• Responses to surveys or feedback forms where you choose to participate.

mybdix processes personal data only for specific, documented purposes and only to the extent necessary for those purposes. The legal bases on which mybdix relies to process your personal data are: (a) performance of a contract (operating your account and providing the services you have requested); (b) compliance with a legal obligation; (c) your consent where you have provided it; and (d) legitimate interests pursued by mybdix where those interests are not overridden by your rights.

The specific purposes for which mybdix uses your personal data are as follows:

• Account creation and management: To register your mybdix account, verify your identity, maintain your account settings, and communicate important account-related information to you.
• Age and identity verification: To confirm that you are at least 18 years of age and to comply with know-your-customer (KYC) obligations.
• Payment processing: To process your deposits via bKash, Nagad, Rocket, and Upay, to fulfil withdrawal requests to your registered mobile wallet, and to maintain accurate transaction records.
• Platform provision and gameplay: To deliver the mybdix casino and sports betting services, settle bets, apply bonuses, and maintain a complete record of your gameplay activity.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities. This includes automated screening of transactions and gameplay patterns.
• Legal and regulatory compliance: To meet our obligations under applicable law, respond to lawful requests from competent authorities, and maintain records required by law.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools such as deposit limits or self-exclusion at your request.
• Customer support: To respond to your queries, complaints, and requests submitted through our support channels.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve mybdix features, performance, and the overall player experience.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about mybdix events such as BPL cricket promotions or Eid special offers — but only where you have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].

mybdix will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your consent or establishing another lawful basis for the new processing activity.

mybdix does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Payment Service Providers: Your mobile wallet identifier and transaction data are shared with bKash, Nagad, Rocket, and Upay to the extent required to process your deposit or withdrawal. These providers operate under their own privacy policies and are contractually obligated to handle your data securely.

Game Providers: Certain gameplay data (such as session identifiers and bet records) may be shared with our certified game providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming, to the extent necessary to deliver and settle game outcomes. Game providers act as data processors under contract with mybdix.

Identity Verification Services: Where KYC verification is required, your identity documents and related data may be shared with a contracted identity verification service provider. That provider processes the data solely to perform the verification check and does not retain it for any other purpose.

Fraud Prevention and Security Services: mybdix may share technical data (such as IP addresses, device fingerprints, and transaction patterns) with specialist fraud prevention and cybersecurity partners to protect the platform and its players from fraudulent activity.

Legal and Regulatory Authorities: mybdix will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law or in response to a valid legal order. Where permitted, mybdix will notify you of such a disclosure.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of the mybdix business, personal data held by mybdix may be transferred to the successor entity. You will be notified of any such transfer and of any material changes to how your data is handled as a result.

mybdix uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and collect anonymous analytics data. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other files on your device.

The following categories of cookies are used on mybdix:

mybdix does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. Analytics data collected via cookies is anonymised before processing and is never linked back to your individual mybdix account.

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will prevent you from logging in to your mybdix account and using core platform features. Disabling functional or analytics cookies will not affect your ability to use the platform but may reduce personalisation features.

mybdix retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account, and to comply with legal and regulatory retention obligations. The specific retention periods that apply to the main categories of personal data are as follows:

• Account and identity data: Retained for the duration of your active account relationship with mybdix, plus a minimum of 5 years following account closure to meet anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC documents: Retained for the duration of the account relationship plus 5 years post-closure. Documents shared with identity verification service providers are deleted by those providers within 30 days of the verification decision.
• Gameplay and bet history: Retained for the duration of the active account plus 2 years post-closure, to support dispute resolution and responsible gaming monitoring obligations.
• Support communications: Retained for 2 years from the date of the most recent communication in a support thread.
• Technical and device logs: Retained for 12 months on a rolling basis for security and fraud prevention purposes.
• Marketing consent records: Retained for as long as the consent is active plus 1 year following withdrawal of consent, as evidence of the consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate analytics and platform improvement purposes.

Personal data held by mybdix is stored on servers located in secure data centre facilities. Where data is transferred to or accessed by third-party processors (such as game providers or payment services), mybdix ensures that appropriate contractual and technical safeguards are in place to protect the data during transfer and processing.

mybdix respects your rights in relation to your personal data. You may exercise the following rights by submitting a written request to [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of the personal data mybdix holds about you, together with information about how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request that mybdix delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. Note that this right is subject to our legal retention obligations — we may be required to retain certain data even after an erasure request.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as while a dispute over accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests, in which case mybdix will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please email [email protected] with the subject line "Privacy Rights Request", including your full name, registered email address, and a description of the right you wish to exercise. We may ask for additional information to verify your identity before processing the request.

mybdix implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. While no platform can guarantee absolute security, the following controls are in place across the mybdix infrastructure:

• Transport encryption: All data exchanged between your browser or device and the mybdix platform is encrypted using TLS 1.2 or higher (SSL). The padlock icon in your browser confirms that your connection to mybdix is secure.
• Password hashing: Your account password is stored as a one-way cryptographic hash. mybdix staff cannot retrieve or view your plain-text password at any time.
• Access controls: Access to systems holding personal data is restricted to mybdix employees and contractors who need it to perform their job functions. All access is logged and subject to regular review.
• Firewall and intrusion detection: The mybdix platform is protected by network firewalls and intrusion detection systems that monitor for suspicious traffic and alert the security team to potential threats in real time.
• Regular security testing: mybdix conducts periodic vulnerability assessments and works with security specialists to identify and remediate weaknesses before they can be exploited.
• Incident response: In the event of a confirmed data security incident that poses a risk to player data, mybdix will notify affected players by email and take all reasonable steps to contain the incident and prevent further harm.

Players also have an important role in keeping their accounts secure. We strongly recommend using a unique, strong password for your mybdix account, never sharing your login credentials with anyone, logging out of the platform when using a shared device, and contacting [email protected] immediately if you suspect unauthorised access to your account.

mybdix may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this Policy — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email to the address held on their mybdix account at least 7 days before the changes take effect.

Non-material changes (such as clarifications of existing language, corrections of typographical errors, or restructuring that does not alter the substance of the Policy) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Your continued use of the mybdix platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the platform and contact [email protected] to request account closure. The most current version of this Policy is always available at https://mybdix.vip/privacy-policy.

Questions, concerns, or requests relating to this Privacy Policy or to mybdix's handling of your personal data should be directed to our support team at [email protected]. Our 24/7 English-language support team covers all registered mybdix players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Response times are typically within 1 hour during Bangladesh Standard Time (BST, UTC+6) business hours.