Privacy Policy
nldbd Data Commitment

01 Information We Collect

nldbd collects personal information from players through several channels: directly via the registration and KYC process, automatically through platform usage, and in limited circumstances from third-party sources such as payment service providers. The categories of data we collect are described below.

Registration & Identity Data

When you create an nldbd account, we collect the following information as part of the standard onboarding process:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — collected and verified to enforce our 18+ age requirement.
• Email address — used as your primary account identifier and for transactional communications.
• Mobile phone number — used for account verification, two-factor authentication, and critical security alerts.
• Residential address — including division, district, upazila, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Username and encrypted password — stored using industry-standard one-way hashing. nldbd never stores your password in plaintext.

KYC Verification Documents

To comply with our Know Your Customer (KYC) obligations and to confirm player identity and age, we may request one or more of the following documents during the verification process:

• National Identity Card (NID) — front and back copy
• Valid passport — biographical data page
• Birth certificate — where NID or passport is unavailable
• Proof of address — utility bill, bank statement, or official correspondence dated within the past three months
• Payment method verification — screenshot or confirmation from your bKash, Nagad, Rocket, or bank account showing your registered name matches your nldbd account

KYC documents are processed by nldbd's compliance team and stored in an encrypted document management system with strict access controls. Documents are used solely for identity verification and fraud prevention purposes and are never shared with third parties for marketing or commercial purposes.

Financial Transaction Data

Every deposit and withdrawal processed through the nldbd cashier generates a transaction record that we retain. This record includes the transaction amount in Bangladeshi Taka (BDT), the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), the timestamp of the transaction in Bangladesh Standard Time (UTC+6), and the transaction reference number provided by the payment provider. We do not store full mobile financial service PINs or bank account passwords — these credentials are entered directly on your payment provider's interface and are never transmitted to or visible to nldbd.

Behavioural & Usage Data

When you use the nldbd platform, we automatically collect technical and behavioural data to operate the service, detect fraud, and improve the user experience. This includes:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, browser name and version
• Session start and end times, pages visited, and features used
• Games launched, bet amounts, win/loss history, and session duration
• Bonus offers viewed, claimed, and wagering progress
• Customer support interactions, including live chat transcripts and email correspondence

02 How We Use Your Data

nldbd processes player data only for specific, defined purposes. We do not use your data for any purpose beyond what is described in this policy without first obtaining your explicit consent. The primary purposes for which we process your personal data are as follows:

Purpose	Data Used	Legal Basis
Account creation & authentication	Name, email, password hash, phone number	Contractual necessity
Age & identity verification (KYC)	NID / passport, date of birth, address	Legal obligation
Payment processing	Transaction records, payment method details	Contractual necessity
Fraud & AML monitoring	Transaction patterns, IP address, device fingerprint	Legitimate interest / Legal obligation
Customer support	Account details, chat transcripts, email history	Contractual necessity
Responsible gaming monitoring	Betting patterns, session data, self-exclusion status	Legal obligation / Legitimate interest
Promotional communications	Email address, game preferences, bonus history	Consent (opt-in only)
Platform analytics & improvement	Aggregated, anonymised usage data	Legitimate interest

nldbd will never sell your personal data to third parties for advertising or commercial profiling purposes. Promotional emails are only sent to players who have explicitly opted in to marketing communications during registration or through their account settings. You may withdraw your consent to marketing communications at any time by contacting support at [email protected] or by adjusting your communication preferences in your account dashboard.

03 Data Sharing & Disclosure

nldbd does not sell, rent, or trade your personal data with unaffiliated third parties. However, in order to operate the nldbd platform effectively and comply with applicable legal obligations, we share specific categories of data with the following categories of third party:

Payment Service Providers

To process deposits and withdrawals, nldbd shares transaction-level data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). The data shared is limited to what is strictly necessary to execute the transaction — typically the transaction amount, your registered name, and your account reference. Each payment provider operates under its own privacy policy and data protection framework.

Game Software Providers

The games available on nldbd are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. When you launch a game, a session token and your anonymised player ID are shared with the relevant game provider to initialise your session. Your full name, address, and financial details are never shared with game providers. Game providers use session data solely for the purpose of operating their games and generating the statistical reports required for fair-play certification.

Legal & Regulatory Disclosure

nldbd may be required to disclose player data to law enforcement agencies, financial intelligence units, or other competent authorities where we receive a lawful request, court order, or where disclosure is necessary to prevent, investigate, or report criminal activity including fraud, money laundering, or terrorist financing. In such circumstances, nldbd will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

Corporate Transactions

In the event that nldbd undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player data held by nldbd may be transferred to the acquiring entity as part of that transaction. In such circumstances, nldbd will provide advance notice to all registered players and will ensure that the acquiring entity is bound by data protection obligations no less stringent than those described in this policy.

04 Cookies & Tracking Technologies

nldbd uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform, personalise your experience, and gather anonymised analytics data. Cookies are small text files placed on your device when you visit the nldbd website. They do not contain executable code and cannot access other files on your device.

Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as your preferred language setting, display theme, and last-visited game category. These cookies improve your experience but are not essential to platform operation.
• Analytics Cookies: Collect anonymised data about how players interact with the nldbd platform — which pages are visited most, how long sessions last, and which features are used. This data is aggregated and cannot be used to identify individual players. nldbd uses this information solely to improve the platform.
• Fraud Prevention Cookies: Record device fingerprint data and IP-session associations to help nldbd identify and prevent fraudulent account activity, bonus abuse, and multi-accounting. These cookies are treated as strictly necessary for security purposes.

05 Data Security Measures

nldbd takes the security of your personal data seriously and employs a layered security architecture designed to protect player information against unauthorised access, disclosure, alteration, and destruction. Our core security measures include:

• TLS 1.3 Encryption in Transit: All data transmitted between your browser or app and the nldbd servers is encrypted using Transport Layer Security (TLS) version 1.3. The nldbd website is accessible exclusively via HTTPS; unencrypted HTTP connections are automatically redirected.
• AES-256 Encryption at Rest: Sensitive personal data stored in nldbd's databases — including KYC documents, identity verification records, and financial transaction histories — is encrypted using AES-256 symmetric encryption.
• Password Hashing: Account passwords are never stored in plaintext. nldbd uses a modern, salted one-way hashing algorithm (bcrypt) to store password credentials. Even in the event of a database breach, password hashes cannot be reversed to recover original passwords.
• Access Controls: Access to production systems and player data is restricted to authorised nldbd personnel on a strict need-to-know basis. All internal access is logged, and access logs are reviewed regularly by the security team.
• Regular Security Audits: nldbd conducts periodic security assessments of its platform infrastructure, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: nldbd maintains a documented data breach response procedure. In the event of a confirmed security incident affecting player data, affected players will be notified promptly with details of the nature of the breach, the data involved, and the steps taken to contain it.

While nldbd employs robust technical and organisational security measures, no online platform can guarantee absolute security against all threats. Players are encouraged to use strong, unique passwords for their nldbd account and to enable two-factor authentication (2FA) where available. If you suspect that your account has been accessed without your authorisation, contact nldbd support immediately via live chat or at [email protected].

06 Data Retention Periods

nldbd retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The retention periods applicable to the principal categories of player data are summarised in the table below:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Anti-money laundering compliance
KYC identity documents	Duration of account + 5 years post-closure	Regulatory & legal obligation
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Betting / gaming history	Duration of account + 3 years post-closure	Dispute resolution & fair play audit
Customer support records	3 years from last interaction	Quality assurance & complaint handling
Marketing preferences & consent logs	Duration of consent + 2 years	Consent audit trail
Anonymised analytics data	Indefinite (no personal identifiers retained)	Platform improvement & statistical research

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players who voluntarily close their nldbd accounts may request confirmation of the deletion schedule applicable to their data by contacting [email protected]. Note that certain data categories cannot be deleted ahead of their legally mandated retention periods regardless of player request.

07 Your Privacy Rights

nldbd respects your right to understand and control how your personal data is used. As a registered player, you have the following rights with respect to your personal data held by nldbd:

• Right of Access: You may request a copy of the personal data that nldbd holds about you at any time. nldbd will respond to verified access requests within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date-of-birth corrections, you will be asked to provide updated identity documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). Note that erasure requests cannot override legally mandated retention obligations.
• Right to Restriction of Processing: In certain circumstances (e.g., while a data accuracy dispute is under review), you may request that nldbd restrict the processing of your personal data to storage only.
• Right to Withdraw Marketing Consent: Where you have previously opted in to receiving promotional communications from nldbd, you may withdraw that consent at any time by contacting support or adjusting your account preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe that nldbd has processed your personal data in a manner that is inconsistent with this Privacy Policy, you have the right to lodge a formal complaint with nldbd's support team at [email protected]. nldbd will acknowledge all privacy complaints within 5 business days and resolve them within 30 calendar days wherever possible.

To exercise any of the rights listed above, please contact nldbd's data team via email at [email protected] with the subject line "Privacy Rights Request" and a clear description of your request. You may be asked to verify your identity before nldbd processes your request in order to prevent unauthorised access to another player's data.

08 Policy Updates & Contact

nldbd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, nldbd will publish the updated policy at https://nldbd.net/privacy-policy and update the "Last Updated" date at the top of this document. For significant changes that affect the legal basis on which we process your data or that expand the categories of data we collect, nldbd will provide advance notice via email to all registered players at least 14 days before the changes take effect.

Your continued use of the nldbd platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any updated version of this policy, you should cease using the platform and request account closure in accordance with the procedure described in the nldbd Terms & Conditions.

Contact the nldbd Data Team

For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal data, please contact the nldbd data protection team using the details below. All correspondence must be in English and must include your registered account username or email address to allow us to locate your account records.

• Email: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Available 24/7 on the nldbd platform dashboard — average response time under 90 seconds
• Email Response Time: 2–6 hours for standard queries; up to 14 business days for formal data subject requests