omgbdt Privacy Policy – How We Protect Your Data

This Privacy Policy ("Policy") describes how omgbdt ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "the Player", "the User") who access or use the services available at omgbdt.bet. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein.

omgbdt is committed to handling personal data responsibly. We collect only the information that is necessary for operating a safe, fair, and compliant gaming platform for players in Bangladesh. This Policy should be read alongside the omgbdt Terms and Conditions. Capitalised terms used but not defined in this Policy carry the meanings given to them in the Terms and Conditions.

We may update this Policy periodically to reflect changes in our data practices or legal obligations. When material changes are made, we will notify registered players by way of an in-platform notice at the time of next login. The "Last Updated" date at the top of this document will always reflect the most recent revision. Continued use of the Platform after any such revision constitutes your acceptance of the updated Policy.

1. Information We Collect

We collect information in two broad categories: information you provide directly and information gathered automatically during your use of the Platform.

1.1 Information You Provide Directly

When you register an account, make a deposit or withdrawal, contact our support team, or participate in promotions, you may provide us with the following categories of personal information:

Identity documents may include a copy of your National Identity Card (NID), passport, or driver's licence, together with a utility bill or bank statement confirming your address. These documents are requested as part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance obligations. Submission of identity documents is required before any withdrawal request can be processed for the first time, and may be requested again at any subsequent stage at omgbdt's discretion.

1.2 Information Collected Automatically

When you access the Platform, our systems automatically record certain technical data. This information is collected to maintain platform security, prevent fraud, and improve the quality of our services. It includes:

• IP address and approximate geographic location derived from IP data
• Device type, operating system version, and browser or app version
• Session timestamps, login and logout times, and session duration
• Pages visited, game titles launched, bet amounts, and game round results
• Referral source (the URL or channel through which you arrived at omgbdt)
• Cookies and similar tracking technologies as described in Section 6 of this Policy

1.3 Payment and Transaction Data

When you make a deposit or request a withdrawal, we receive transaction confirmation data from payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. We do not store full payment card numbers or mobile banking PINs on our servers. Payment credentials are handled directly by the respective payment provider and are subject to that provider's own security and privacy standards. omgbdt receives only the confirmation reference, the transaction amount in BDT, and the registered mobile number or masked card number associated with the transaction.

2. How We Use Your Information

The personal information we hold about you is used for the following purposes:

• Creating and managing your omgbdt player account, including verifying your identity and age eligibility (21+)
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment channels
• Providing access to casino games, sports betting markets including BPL and T20 cricket, slots, and crash games
• Detecting and preventing fraud, money laundering, match-fixing, and other prohibited activities
• Meeting our legal and regulatory obligations including AML checks and responsible gaming requirements
• Communicating with you about your account, including transaction notifications, security alerts, and policy updates
• Sending promotional communications where you have opted in, including bonus offers and seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL season, and IPL
• Resolving disputes, responding to support enquiries, and conducting internal investigations
• Improving and maintaining the technical performance, security, and user experience of the Platform
• Complying with any court order, legal process, or lawful request from a public authority

Where omgbdt sends you marketing communications by SMS, push notification, or email, you may opt out at any time by contacting [email protected] with the subject line "Marketing Opt-Out" and your registered account username. Opting out of marketing communications does not affect transactional messages, which are sent as a necessary part of your account service.

3. Legal Basis for Processing

omgbdt processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for processing that is also required by law or contractual necessity may affect your ability to use certain features of the Platform.

4. Sharing Your Information

omgbdt may share your personal information with the following categories of third parties in the circumstances described:

4.1 Game and Platform Service Providers

Third-party game studios and technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive session data and player identifiers necessary to deliver their games within the omgbdt platform. These providers operate under data processing agreements that restrict their use of player data to the provision of their services only.

4.2 Payment Processors

To process your deposits and withdrawals, we transmit the minimum necessary transaction data to your chosen payment provider (for example, bKash, Nagad, Rocket, Upay, or your card issuer via Visa or Mastercard networks). Each payment provider handles this data in accordance with their own privacy policy and applicable financial regulations.

4.3 Identity Verification and AML Partners

omgbdt may use third-party identity verification services to validate the documents you submit during KYC checks. These services receive only the specific data required to perform identity matching and sanctions screening. Results are returned to omgbdt and the raw document images are not retained by the verification provider beyond the period required by applicable law.

4.4 Legal and Regulatory Disclosure

omgbdt may disclose your personal information to law enforcement agencies, regulators, or other government bodies where required to do so by applicable law, court order, or in response to a lawful and properly served legal process. We will, where legally permitted, endeavour to notify you of any such disclosure request before complying.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of omgbdt's business, your personal information may be transferred to the acquiring entity as part of that transaction. You will be notified by way of a Platform notice if such a transfer results in a material change to how your data is processed, and you will be given the opportunity to close your account if you do not wish your data to be transferred under the new ownership.

5. Data Retention

omgbdt retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention periods apply:

• Account registration and identity verification data: retained for the full duration of the account and for a minimum of five years following permanent account closure, in line with AML obligations
• Transaction records including deposits, withdrawals, and bet history: retained for a minimum of five years from the date of each transaction
• Support correspondence and complaint records: retained for three years from the date of resolution
• Technical logs including IP address records and session data: retained for up to twelve months, after which they are anonymised or deleted
• Marketing consent records: retained for the duration of the marketing relationship and for one year following opt-out, as evidence of consent status

When personal data is no longer required, omgbdt deletes or irreversibly anonymises it. Anonymised data — from which no individual can reasonably be identified — may be retained indefinitely for statistical and analytical purposes.

6. Cookies and Tracking Technologies

omgbdt uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your authenticated session, and gather aggregate analytics data. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language selection, device type, and the last game category you visited, so that your session feels consistent across visits.
• Analytics cookies: Help us understand how players navigate the Platform — which pages are visited most, where drop-offs occur, and how long players spend on individual game pages. This data is aggregated and does not identify individual players.
• Referral tracking cookies: Record the source through which you arrived at omgbdt, used solely for internal attribution of player acquisition channels. This data is not shared with external advertising platforms.

You may manage or disable cookies through your device browser settings. Please be aware that disabling strictly necessary cookies will prevent you from logging in or maintaining a session on the Platform. omgbdt does not use third-party advertising cookies or cross-site tracking technologies that share your behavioural data with external advertisers.

7. Your Data Rights

Registered players have the following rights with respect to their personal data held by omgbdt:

• Right of access: You may request a copy of the personal data omgbdt holds about you, together with information about how it is being processed.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: In certain circumstances you may request that your personal data be deleted. This right is subject to exceptions where retention is required by law (for example, AML record-keeping obligations).
• Right to restriction: You may ask omgbdt to restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: You may request a copy of the personal data you have provided to omgbdt in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior processing.
• Right to object to marketing: You may object to your data being used for direct marketing purposes at any time by emailing [email protected].

To exercise any of the above rights, please contact our support team at [email protected], providing your registered username and a clear description of the right you wish to exercise. We may need to verify your identity before fulfilling the request to ensure that data is only released or modified in response to legitimate requests. omgbdt will not charge a fee for reasonable data rights requests but reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive.

8. Data Security

omgbdt employs a range of technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include industry-standard SSL/TLS encryption for all data transmitted between your device and our servers, access controls that limit internal data access to authorised personnel on a need-to-know basis, encrypted storage of sensitive account data including passwords (which are stored as salted cryptographic hashes, never in plain text), regular security assessments and vulnerability testing of our platform infrastructure, and incident response procedures to detect, contain, and report any personal data breach in a timely manner.

While omgbdt takes reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your omgbdt account credentials secure and for notifying us immediately if you suspect any unauthorised access to your account. Please see Section 2 of the Terms and Conditions for your account security obligations.

9. Minors and Age Restrictions

Parents and guardians who believe that a minor has registered an account on omgbdt should contact us immediately at [email protected]. We will investigate the matter as a priority and take appropriate action, including account closure and data deletion, without undue delay.

10. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to make a complaint about how omgbdt has handled your personal information, please contact our support team in writing at [email protected]. Please include your registered account username, a clear description of your query or complaint, and any relevant supporting information.

omgbdt will acknowledge receipt of your privacy-related enquiry within two business days (Bangladesh Standard Time, UTC+6) and will aim to provide a substantive response within 30 calendar days. If you are not satisfied with omgbdt's handling of your privacy complaint after the internal process has been completed, you may seek independent legal advice regarding further options available to you under applicable law.