Privacy Policy — How royalbd Protects Your Data

1. Data We Collect

royalbd collects personal data through several channels: directly from you during registration and account management, automatically as you use the platform, and from third-party sources such as payment processors and identity verification partners. The categories of data we collect are set out below.

1.1 Registration and Identity Data

When you create a royalbd account, we collect the following information:

• Full legal name — as it appears on your National Identity Card (NID) or passport.
• Date of birth — to verify that you meet the 18+ age requirement.
• Residential address — including city, district, and division within Bangladesh.
• Email address — used for account communications and transaction confirmations.
• Mobile phone number — linked to your bKash, Nagad, Rocket, or Upay account for payment processing.
• Government-issued identity document — scanned copy of NID or passport submitted during KYC verification.

1.2 Financial and Transaction Data

To process deposits and withdrawals, royalbd collects transactional data including:

• Mobile banking account identifiers (bKash wallet number, Nagad number, Rocket number, Upay number).
• Bank account details where bank transfer is the chosen payment method (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank).
• Deposit amounts, withdrawal requests, transaction reference numbers, and timestamps.
• Wager history, game session records, win/loss outcomes, and bonus utilisation records.

royalbd does not store full card numbers or CVV codes for Visa and Mastercard transactions. Card payment data is handled exclusively by our PCI-DSS-compliant payment processing partners.

1.3 Technical and Device Data

When you access royalbd, our servers and analytics systems automatically log the following technical data:

1.4 Communications Data

When you contact royalbd through live chat, email, or support tickets, we retain records of those communications including the content of messages, timestamps, and support agent responses. This data is used to resolve disputes, train support staff, and improve service quality. Support communication records are retained for a minimum of 24 months.

2. How We Use Your Data

royalbd processes your personal data on the basis of one or more of the following lawful grounds: contractual necessity (to deliver the service you signed up for), legal obligation (to comply with AML and KYC requirements), legitimate interest (to operate a safe, fair platform), and consent (for optional marketing communications).

2.1 Core Service Delivery

The primary use of your data is to operate royalbd's gaming platform. This includes:

• Creating and managing your player account.
• Processing bKash, Nagad, Rocket, and Upay deposits and withdrawals in Bangladeshi Taka (৳ BDT).
• Verifying your identity and age before activating withdrawal capabilities.
• Delivering bonuses, tracking wagering requirements, and administering VIP programme tiers.
• Providing customer support and resolving account disputes.

2.2 Security, Fraud Prevention, and AML Compliance

royalbd maintains comprehensive fraud detection and anti-money laundering (AML) monitoring systems. Your transaction history, IP address, device fingerprint, and behavioural patterns are analysed continuously to detect and prevent:

• Duplicate account creation and bonus abuse.
• Unauthorised account access and account takeover attempts.
• Money laundering, structuring, or other financial crimes.
• Use of VPNs, proxies, or other tools to circumvent geographic restrictions.

Where suspicious activity is detected, royalbd may freeze withdrawals, request additional verification documents, or escalate the matter to relevant regulatory authorities. This processing is conducted on the basis of legal obligation and legitimate interest.

2.3 Responsible Gaming Monitoring

As part of our commitment to player welfare, royalbd uses session data, deposit frequency, wagering patterns, and self-declared financial limits to identify players who may be showing signs of problematic gambling behaviour. Where such patterns are identified, our responsible gaming team may proactively reach out to offer support tools including deposit limits, session timers, and self-exclusion. See our Responsible Gaming page for full details.

2.4 Marketing and Promotional Communications

With your explicit consent, royalbd may send you promotional emails, SMS notifications, and in-platform messages about new games, seasonal promotions (such as Pohela Boishakh or Eid special offers), BPL cricket betting markets, VIP programme updates, and exclusive deposit bonuses. You may withdraw your consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support@royalbd. Withdrawal of marketing consent does not affect your ability to use the platform.

3. Cookies & Tracking Technologies

royalbd uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, remember your preferences, and analyse usage patterns. Below is a breakdown of the cookie categories in use.

3.1 Managing Cookie Preferences

You can manage non-essential cookie preferences through your browser settings. Most modern mobile and desktop browsers allow you to block third-party cookies, clear stored cookies on exit, or browse in private/incognito mode to limit persistent tracking. Note that disabling strictly necessary cookies will prevent you from logging in to your royalbd account, as session authentication depends on these cookies.

3.2 Third-Party Analytics

royalbd uses privacy-configured analytics tools to monitor platform performance. Any data shared with analytics providers is anonymised and aggregated — no personally identifiable information is included in analytics reports. Analytics providers are contractually prohibited from using royalbd data for their own product development or advertising purposes.

4. Data Sharing and Third-Party Disclosure

royalbd does not sell, rent, or trade your personal data. We share data with third parties only in the limited circumstances described in this section, and only with parties who are contractually bound to protect that data to standards consistent with this Privacy Policy.

4.1 Payment Processing Partners

To process your deposits and withdrawals, royalbd shares the minimum necessary payment-related data with the following categories of payment partners operating in Bangladesh: mobile financial service providers (bKash, Nagad, Rocket, Upay), local commercial banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and international card scheme processors (Visa, Mastercard). Data shared is limited to transaction amounts, reference numbers, and the account identifiers required to route the payment correctly.

4.2 Identity Verification Partners

royalbd works with KYC (Know Your Customer) verification service providers to authenticate the identity documents submitted by players. These providers receive copies of your NID or passport solely for the purpose of identity verification and are prohibited from using that data for any other purpose. All identity verification partners are contractually bound by data processing agreements that meet or exceed the standards set out in this policy.

4.3 Game Content Providers

Live casino, slots, and sports data feeds on royalbd are powered by third-party game studios and data providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive anonymised session identifiers to deliver game content and resolve technical issues. They do not receive your name, NID number, or financial account details. Game provider data-sharing is governed by individual data processing agreements.

4.4 Legal and Regulatory Disclosure

royalbd may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so — for example, in response to a court order, subpoena, or formal regulatory investigation into suspected money laundering or financial fraud. We will notify you of such disclosures where we are legally permitted to do so. Where notification is legally prohibited, we will act in accordance with applicable law and document the disclosure in our internal compliance records.

4.5 Business Transfers

In the event that royalbd undergoes a merger, acquisition, restructuring, or sale of assets, player data held at the time of that transaction may be transferred to the acquiring entity as part of the business assets. In such an event, royalbd will notify registered players via email before their data is transferred and will ensure that the acquiring entity agrees to honour the terms of this Privacy Policy or provides players with equivalent protections.

5. Data Security

royalbd implements a layered security architecture to protect player data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include both technical controls and organisational safeguards.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the platform.
• AES-256 encryption at rest for sensitive personal and financial data stored in our databases.
• Two-factor authentication (2FA) available on all player accounts and mandatory for all internal staff accounts.
• Automated intrusion detection systems (IDS) monitoring for anomalous access patterns around the clock.
• Regular penetration testing conducted by independent third-party security firms on a quarterly basis.
• Role-based access controls ensuring that royalbd staff can only access player data required for their specific job function.

5.2 Organisational Safeguards

Access to player personal data within royalbd is restricted to staff with a legitimate operational need. All staff with data access privileges receive mandatory data protection training at onboarding and annually thereafter. Staff are bound by confidentiality obligations that survive the termination of their employment. Data breaches — whether actual or suspected — are subject to royalbd's Incident Response Protocol, which mandates investigation, containment, and notification within defined timeframes.

5.3 Player-Side Security Responsibilities

While royalbd maintains robust platform-side security, players also have responsibilities. You are advised to:

• Use a unique, strong password for your royalbd account that is not reused on any other platform.
• Enable two-factor authentication in your account security settings.
• Log out of your account after every session, particularly when using shared or public devices.
• Report any suspected unauthorised access to your account immediately via support@royalbd or live chat.

6. Data Retention

royalbd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes and enforce agreements. The following retention schedule applies:

When a retention period expires, the relevant data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player. Players may request early deletion of certain data categories — subject to the limitations described in the Your Rights section below.

7. Your Privacy Rights

As a registered player on royalbd, you hold the following rights with respect to your personal data. royalbd respects and upholds these rights in line with internationally recognised data protection principles. To exercise any of the rights listed below, contact us at support@royalbd with the subject line "Privacy Rights Request".

7.1 Limitations on Erasure and Restriction

The right to erasure is not absolute. royalbd cannot delete data that it is legally obligated to retain — including AML transaction records (retained for 7 years) and identity verification documents (retained for 5 years post-closure). Where a deletion request cannot be fully honoured, we will inform you of the specific legal basis for retaining the relevant data and delete all other data that is not subject to that retention obligation.

7.2 Response Timeframes

royalbd will acknowledge all privacy rights requests within 5 business days and will provide a substantive response within 30 calendar days. In cases of complexity or high volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and its reason within the initial 30-day window.

8. Contact & Privacy Complaints

royalbd takes privacy concerns seriously. If you believe your personal data has been handled in a manner inconsistent with this Privacy Policy, or if you wish to exercise any of your rights, please use the following contact method:

8.1 Complaint Resolution Process

Upon receiving a privacy complaint, royalbd will:

1. Acknowledge receipt of your complaint within 5 business days.
2. Assign the complaint to a qualified member of our privacy and compliance team.
3. Investigate the complaint thoroughly, which may involve reviewing access logs, transaction records, and staff communications related to your account.
4. Provide a written response within 21 business days outlining the findings of the investigation and any remedial action taken.
5. Where the complaint is upheld, implement corrective measures and confirm these to you in writing.

8.2 Policy Updates

royalbd reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via email to the address on their account and display a prominent notice within the platform for a minimum of 14 days following the update. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of the platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

We encourage all players to review this Privacy Policy periodically — particularly before making deposits, submitting verification documents, or opting in to promotional communications. If at any point you disagree with the terms of this policy, you may request account closure by contacting support@royalbd and your verified real-money balance will be returned to your registered payment method.