This Privacy Policy explains what personal data bplwin collects from players in Bangladesh, how that data is used and stored, who it may be shared with, and what rights you hold over your own information. Your privacy is taken seriously — this document sets out our obligations clearly and in plain English.
Your Privacy Matters: bplwin is committed to protecting the personal data of every player on the platform. This Privacy Policy is a binding document that describes our data practices in full. By registering an account and using the bplwin platform, you confirm that you have read and understood this policy and that you consent to the processing of your personal data as described herein.
bplwin ("bplwin", "we", "us", "our") operates the online casino and sports betting platform accessible at bplwin.bio, providing registered players in Bangladesh with access to cricket betting, live dealer casino games, slot titles, fishing arcade games, and related financial transaction services denominated in Bangladeshi Taka (৳).
In the course of providing these services, bplwin collects, processes, stores, and in certain circumstances shares personal data relating to registered players and site visitors. This Privacy Policy ("Policy") sets out in detail what personal data we collect, the purposes for which we process it, the legal grounds on which we rely, the circumstances under which data may be disclosed to third parties, the security measures we apply, and the rights available to you as a data subject.
This Policy forms part of bplwin's broader legal framework alongside the Terms & Conditions and the Responsible Gaming Policy. Where this Policy uses terms defined in the Terms & Conditions, those definitions apply here too. In the event of any conflict between this Policy and the Terms & Conditions regarding data processing matters, this Policy prevails.
This Policy applies to all personal data collected through the bplwin website, mobile-optimised platform, any bplwin-branded application, and all communications between bplwin and its players, including support correspondence and promotional communications. It applies to all players, regardless of their method of registration or the payment method they use.
bplwin collects only the personal data that is necessary to operate the platform, comply with applicable legal obligations, and deliver a secure and personalised experience to our players. The categories of personal data we collect are described below.
Note on Sensitive Data: bplwin does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) except where strictly required by applicable KYC or anti-money laundering obligations, in which case collection is limited to the minimum necessary and handled with heightened security controls.
bplwin collects personal data through several distinct channels, each of which is described below. In all cases, collection is limited to data that is relevant and proportionate to the purpose for which it is collected.
| Collection Channel | Examples of Data Collected |
|---|---|
| Registration form | Name, date of birth, email, phone number, chosen username and password |
| KYC verification process | NID/passport number, identity document images, address confirmation |
| Financial transactions | bKash/Nagad/Rocket/Upay account numbers, transaction amounts and timestamps |
| Platform usage (automated) | IP address, device data, session logs, gameplay history, cookie data |
| Support communications | Email content, complaint details, account queries |
| Third-party payment processors | Transaction confirmation data, payment method validation signals |
| Responsible gaming interactions | Limit-setting history, self-exclusion requests, cool-off activations |
bplwin processes personal data only for specific, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes stated below. The main purposes for which bplwin processes personal data are:
To create, maintain, and administer your bplwin account; to authenticate your identity at login; to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to deliver game content and sports betting markets; and to manage your bonus and promotional entitlements.
To verify that you meet the minimum age requirement of 18 years; to confirm your identity in accordance with applicable anti-money laundering and Know Your Customer obligations; and to prevent fraudulent account creation or misuse of the platform.
To detect and prevent unauthorised account access, bonus abuse, multi-accounting, collusion, money laundering, and other prohibited conduct as defined in the bplwin Terms & Conditions. Technical and device data, including IP addresses and login patterns, are analysed for anomalies that may indicate fraudulent activity.
To administer and enforce responsible gaming tools selected by you, including deposit limits, session time limits, cool-off periods, and self-exclusion; to identify players who may be exhibiting signs of problem gambling based on account activity patterns; and to contact those players proactively in line with bplwin's player welfare obligations.
To respond to your support queries, process complaints and disputes, provide account assistance, and maintain records of communications for quality assurance and dispute resolution purposes.
Where you have given explicit consent, to send you promotional communications about bplwin offers, new game releases, seasonal promotions tied to events such as BPL, IPL, T20 World Cup, or Eid, and other relevant updates. You may withdraw this consent at any time by contacting [email protected] or by updating your communication preferences in your account settings.
To analyse aggregate, anonymised usage data in order to improve the bplwin platform, optimise game delivery, and enhance the overall user experience. This processing does not involve identifying individual players from aggregate datasets.
bplwin relies on one or more of the following legal grounds when processing your personal data:
bplwin does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or any commercial third party for their independent marketing purposes. Disclosure of your personal data is limited to the following categories of recipients and circumstances:
bplwin engages third-party service providers who process personal data on bplwin's behalf and under bplwin's instruction, subject to data processing agreements that require them to maintain appropriate security standards. These providers include:
bplwin may be required to disclose personal data to governmental authorities, law enforcement bodies, financial intelligence units, or courts of competent jurisdiction where required or permitted by applicable law. Such disclosures are made only to the extent required by the relevant legal demand or obligation.
In the event of a merger, acquisition, asset sale, or restructuring of the bplwin business, personal data held by bplwin may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any changes to the applicable privacy policy before the transfer takes effect.
No Third-Party Marketing Sales: bplwin will never sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your data is used solely to deliver and improve bplwin's own services.
All deposits and withdrawals on the bplwin platform are processed in Bangladeshi Taka (৳) via mobile financial service partners including bKash, Nagad, Rocket, and Upay. bplwin retains records of all financial transactions associated with your account, including deposit dates and amounts, withdrawal requests and outcomes, bonus credits and deductions, and any adjustments made by the bplwin finance team.
bplwin does not store full payment credentials on its own servers. Mobile financial service account numbers are stored in encrypted form and are accessible only to authorised bplwin personnel with a verified operational need. Transaction confirmation data is received from payment partners and retained in accordance with bplwin's data retention schedule (see Section 9).
Financial transaction records are subject to retention obligations under applicable anti-money laundering legislation and are retained for the periods required by those obligations, which may extend beyond the period of your active account relationship with bplwin.
bplwin uses cookies and similar tracking technologies to operate the platform, maintain login sessions, prevent fraud, and analyse platform usage. A cookie is a small text file placed on your device by the bplwin platform when you access it. The categories of cookies used by bplwin are as follows:
| Cookie Category | Purpose | Basis |
|---|---|---|
| Strictly Necessary | Maintain your login session, authenticate your account, prevent cross-site request forgery, and enable core platform functionality | Contractual necessity |
| Security & Fraud | Detect anomalous login behaviour, identify devices associated with suspicious activity, and support multi-account detection | Legitimate interests |
| Analytics | Aggregate, anonymised data on page visits, feature usage, and session behaviour used to improve the platform | Legitimate interests |
| Preferences | Remember your language, display, and notification preferences between sessions | Legitimate interests |
Most browsers allow you to manage or block cookies through their settings. Disabling strictly necessary cookies will impair your ability to log in and use the bplwin platform. Disabling analytics cookies will not affect platform functionality. Detailed instructions for managing cookies in your browser are available from your browser's official support pages.
bplwin retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Data that has been anonymised and is no longer capable of identifying an individual falls outside the scope of this Policy and may be retained indefinitely for aggregate analytics purposes.
bplwin applies a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:
Despite these measures, no internet-based service can guarantee absolute security. In the event of a data security incident that poses a risk to your rights and interests, bplwin will notify affected players without undue delay and will take immediate remedial action to contain the incident and prevent further exposure.
Player Responsibility: You play an important role in the security of your own account. Use a strong, unique password that you do not reuse on other services. Do not share your login credentials with any other person. If you suspect your account has been accessed without your authorisation, contact [email protected] immediately.
As a data subject whose personal data is processed by bplwin, you hold the following rights with respect to that data. To exercise any of these rights, please submit a written request to [email protected], clearly identifying yourself and specifying the right you wish to exercise. bplwin will respond to all valid requests within a reasonable timeframe.
You have the right to request confirmation of whether bplwin holds personal data about you, and if so, to receive a copy of that data together with information about the purposes for which it is processed, the categories of data held, and any third parties to whom it has been disclosed.
You have the right to request the correction of any inaccurate personal data held about you, and the completion of any incomplete personal data. Requests to change name or date of birth will require identity document verification before being actioned.
You may request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based. The right to erasure does not apply where bplwin is required to retain the data under applicable legal obligations (for example, anti-money laundering record-keeping requirements), and in those cases bplwin will explain the applicable retention obligation.
You may request that bplwin restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
You have the right to object to processing carried out on the basis of legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing processing, bplwin will cease that processing immediately. Where you object to other legitimate-interest processing, bplwin will assess your objection against its legitimate interests and inform you of the outcome.
Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Strictly 18+ Platform: The bplwin platform is intended exclusively for adults aged 18 years and above. bplwin does not knowingly collect or process personal data belonging to individuals under the age of 18. If bplwin discovers that personal data has been collected from a person under 18, that data will be immediately and permanently deleted and the associated account will be closed.
bplwin implements age verification at the point of registration and may require documentary proof of age at any subsequent stage of the account lifecycle. If you are a parent or guardian and believe that a person under your care has registered an account with bplwin, please contact us immediately at [email protected] so that we can take prompt remedial action.
The bplwin platform integrates with game content provided by third-party studios including, but not limited to, Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, and NetEnt. When you launch a game from one of these providers, limited technical data (including your session token and account identifier) is transmitted to the relevant provider's systems to enable game delivery and record the outcome of play.
Each game provider operates under its own privacy policy and security certification, and their processing of data transmitted during gameplay is governed by their own policies, not this bplwin Privacy Policy. bplwin selects game providers that maintain reputable standards and holds contractual data processing agreements with all integrated providers.
Payment processing for deposits and withdrawals involves the technical infrastructure of bKash, Nagad, Rocket, and Upay. These services operate under their own privacy policies and regulatory obligations as licensed mobile financial service providers in Bangladesh. bplwin is not responsible for the privacy practices of these independent payment providers in respect of data processed directly by them under their own terms.
bplwin reviews this Privacy Policy periodically and reserves the right to update it at any time. Where changes are material — meaning they significantly affect the way in which your personal data is processed or the rights available to you — bplwin will notify you by email to your registered address and by means of a prominent notice on the platform at least seven (7) days before the changes take effect.
For minor or non-material changes, such as typographical corrections, clarifications that do not alter the substance of any provision, or updates to reflect new game providers added to the platform, bplwin may update this Policy without prior notice. The updated Policy will be published at bplwin.bio/privacy-policy and the version number and review date at the top of this document will be updated accordingly.
Your continued use of the bplwin platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you must stop using the platform and submit an account closure request to [email protected].
For any question, concern, or request relating to this Privacy Policy or to bplwin's processing of your personal data — including requests to exercise any of the rights described in Section 11 — please contact the bplwin privacy and support team using the details below:
Privacy & Support Email: [email protected]
Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
Response Target: Within 48 hours for privacy-related enquiries; within 30 days for formal data subject access requests.
Written Requests: Please include your registered username or email address and clearly state the nature of your request to allow bplwin to locate the relevant records promptly.
This Privacy Policy was last reviewed and updated in 2026. The current version is always available at bplwin.bio/privacy-policy.
Every measure described in this Privacy Policy is backed by concrete technical and organisational controls. Here is a summary of what bplwin does to keep your data safe.
All data exchanged between your device and the bplwin platform is protected by TLS 1.3 encryption in transit. Sensitive data fields are also encrypted at rest on bplwin's servers.
bplwin collects only the personal data that is genuinely necessary to operate the platform, verify your identity, process your transactions, and comply with legal obligations. Nothing more.
bplwin will never sell, rent, or trade your personal data to third-party advertisers, data brokers, or any other commercial entity. Your data exists solely to power your bplwin experience.
You hold the right to access, correct, delete, restrict, and object to the processing of your personal data at any time. Submit a request to [email protected] and bplwin will respond promptly.
Personal data is not kept indefinitely. Clear retention schedules apply to every category of data bplwin holds, and data is securely deleted or anonymised as soon as it is no longer required.
bplwin does not knowingly collect or retain data from individuals under 18. Age verification is enforced at registration and throughout the account lifecycle. Minors are never permitted to use the platform.
Now that you have reviewed bplwin's Privacy Policy, discover what the platform has to offer — from cricket betting and live casino tables to slots and fishing arcade games, all processed securely in BDT. Players must be 18 years or older.
18+ only. Gambling involves risk. Please play responsibly.