Privacy Policy — How lodbd Collects, Uses, and Protects Your Data

Data Controller Information

For the purposes of applicable data protection law, the data controller responsible for processing the personal data of lodbd players is the lodbd platform operator. As data controller, lodbd determines the purposes for which personal data is processed and the means by which that processing is carried out. All data protection enquiries, access requests, and complaints should be directed to the lodbd data protection contact at [email protected].

lodbd operates as an online casino and sports betting platform serving players in Bangladesh. The platform processes personal data in connection with account registration, identity verification, payment processing, responsible gaming compliance, customer support, and — where consent has been given — direct marketing. Each of these processing activities is described in detail in the sections that follow.

Personal Data We Collect

lodbd collects personal data from players through several channels: directly from you when you register an account or use the platform, automatically through technical systems when you browse the site, and from third-party service providers such as payment processors and identity verification services. The categories of personal data we collect are set out in the table below.

lodbd does not knowingly collect or process special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless this is strictly necessary to fulfil a responsible gaming obligation — for example, processing a self-exclusion request that references a gambling-related health concern. Such data is processed only with your explicit consent and is stored with enhanced security controls.

Lawful Basis for Processing

lodbd processes personal data only where a valid lawful basis exists. The primary lawful bases on which lodbd relies are as follows:

• Contractual necessity: The majority of data processing at lodbd is necessary to perform the contract between lodbd and the player — specifically, to operate the player account, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, settle bets, award winnings, and provide customer support. Without this processing, lodbd cannot deliver its service.
• Legal obligation: lodbd is subject to anti-money laundering (AML) requirements and Know Your Customer (KYC) obligations. Processing identity data, financial transaction records, and gameplay logs is necessary to comply with these obligations. This data may also be retained and disclosed to relevant authorities where required by law.
• Legitimate interests: lodbd processes certain technical and gameplay data on the basis of legitimate interests — specifically, to detect and prevent fraud, to ensure platform security, to analyse and improve the quality of lodbd services, and to conduct responsible gaming monitoring. Where legitimate interests are the basis, lodbd has assessed that these interests are not overridden by player privacy rights.
• Consent: Where lodbd sends direct marketing emails, SMS messages, or push notifications promoting lodbd casino games, slots, cricket betting markets, or seasonal offers (such as BPL or Eid promotions), this is done only on the basis of your freely given, specific, and informed consent. You may withdraw marketing consent at any time through your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

How We Use Your Data

The personal data lodbd collects is used exclusively for purposes that are consistent with the lawful bases described in Section 3. The specific uses are set out below, mapped to the data categories from Section 2.

• Account creation and management: Identity and contact data are used to create and maintain your lodbd player account, verify your age (18+ requirement), authenticate your logins, and communicate account-related notices such as deposit confirmations, withdrawal approvals, and security alerts.
• Payment processing: Financial data is used to process deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, Visa, or Mastercard account, to reconcile transaction records, and to investigate any disputed transactions. Payment data is handled in accordance with the security standards of the respective payment providers.
• KYC and fraud prevention: Identity data, financial data, and technical data are used to verify your identity, to detect and prevent fraudulent account activity, to screen against sanctions lists, and to fulfil our AML reporting obligations.
• Responsible gaming compliance: Gameplay data is monitored to identify patterns that may indicate problem gambling behaviour, such as unusually rapid escalation of wager sizes, extended continuous play sessions, or frequent deposits following losses. Where such patterns are identified, lodbd may contact you to offer responsible gaming tools or to apply account-level controls.
• Platform improvement and analytics: Aggregated and anonymised technical and gameplay data are used to improve the lodbd platform — for example, to identify pages with high exit rates, to test new game layouts, or to optimise payment flow performance. This analytics processing does not identify you as an individual.
• Customer support: Communications data is used to handle your support queries, to investigate complaints, and to train support staff. Support interactions may be reviewed for quality assurance purposes.
• Direct marketing (consent only): Where you have opted in, contact data and marketing preference data are used to send you promotional communications about lodbd bonuses, new game releases, cricket betting markets, and seasonal offers. You can opt out at any time.

Cookies and Tracking Technologies

lodbd uses cookies and similar tracking technologies on its platform to ensure core functionality, to remember your preferences, and — where you have consented — to analyse your browsing behaviour for performance improvement purposes. A cookie is a small text file that is placed on your device by a web server when you visit a site. It allows the site to recognise your device on subsequent visits.

The categories of cookies used on lodbd are as follows:

• Strictly necessary cookies: These cookies are essential for the lodbd platform to function. They enable core features such as maintaining your login session, keeping your game state between page loads, and processing payments securely. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting, your last-visited game category, and your display settings — so you do not need to re-enter them on each visit. Disabling these cookies will not prevent you from using the platform, but your experience may be less personalised.
• Analytics cookies: With your consent, lodbd uses analytics tools to collect anonymised data about how players navigate the site — which pages they visit most, how long they spend in each section, and where they exit. This data helps us identify areas for improvement. Analytics cookies do not identify you personally.
• Security cookies: lodbd sets security cookies to detect and prevent fraudulent access attempts, brute-force login attacks, and session hijacking. These cookies are strictly necessary and cannot be disabled.

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your lodbd account. lodbd does not currently use third-party advertising or cross-site tracking cookies.

Data Sharing and Third Parties

lodbd does not sell, rent, or trade your personal data. However, to deliver its services, lodbd shares limited personal data with carefully selected third-party service providers who act as data processors on lodbd's behalf. Each of these processors is bound by a data processing agreement that obligates them to process your data only on lodbd's documented instructions, to implement appropriate security measures, and to delete or return data when the processing relationship ends.

The categories of third parties with whom lodbd shares personal data are as follows:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process deposits and withdrawals. Visa and Mastercard card transactions are processed by a PCI-DSS compliant payment gateway. lodbd does not store full card numbers on its own servers.
• Identity verification providers: Third-party KYC services receive identity documents and facial images to perform age verification and identity checks on lodbd's behalf. These providers are prohibited from using your data for their own purposes.
• Game software providers: Game providers such as Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and Spribe receive session identifiers and wager data to deliver their games and to resolve any game-related disputes. These providers do not receive your name, address, or payment details.
• Cloud infrastructure providers: lodbd's platform is hosted on secure cloud infrastructure. The cloud provider processes technical data as part of hosting the service but does not have access to player data in a meaningful sense — they provide infrastructure, not data access.
• Regulatory and law enforcement authorities: Where required by applicable law, lodbd will disclose personal data to relevant authorities — including responses to lawfully issued production orders or AML reporting requirements. lodbd will notify affected players of such disclosures where legally permitted to do so.

Data Retention and Deletion

lodbd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applicable to each category of data are set out below. Once the applicable retention period has expired, lodbd deletes or anonymises the relevant data in a secure and irreversible manner.

If you request deletion of your personal data before the end of the applicable retention period, lodbd will assess the request and delete all data that is not subject to a legal retention obligation. Data that must be retained to comply with AML or other legal requirements cannot be deleted early, but will be restricted from use for any other purpose during the remainder of the retention period.

Your Rights and How to Exercise Them

As a player whose personal data is processed by lodbd, you have the following rights in relation to your data. lodbd is committed to facilitating the exercise of these rights promptly and without undue barrier.

• Right of access: You have the right to request a copy of all personal data that lodbd holds about you. Upon a verified access request, lodbd will provide a structured summary of your data within 30 calendar days.
• Right to rectification: If any personal data lodbd holds about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating your mobile number or email address) can be made directly in your account settings panel.
• Right to erasure: You may request that lodbd delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where it has been unlawfully processed. Note that erasure requests may be subject to legal retention obligations as described in Section 7.
• Right to restriction of processing: In certain circumstances — for example, while an accuracy dispute is under investigation — you may request that lodbd restrict the processing of your data to storage only, pending resolution of the dispute.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling for responsible gaming purposes. lodbd will assess the objection and will cease processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw marketing consent: You may withdraw consent to direct marketing communications at any time, either via your account settings or by emailing [email protected]. Withdrawal takes effect within 5 business days.

To exercise any of these rights, please send a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and a brief description of the right you wish to exercise. lodbd may ask you to verify your identity before processing the request. All requests are handled free of charge unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.