bmw3 Privacy Policy
Your privacy matters to us. This Privacy Policy explains precisely what personal data bmw3 collects from players in Bangladesh, why we collect it, how we use and protect it, and what rights you have over your own information.
Our Privacy Commitments at a Glance
bmw3 is committed to handling your personal information with care, transparency, and respect. Here is a plain-English summary of our core privacy commitments before you read the full policy below.
We Never Sell Your Data
bmw3 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is used exclusively to operate your bmw3 account and improve our platform services.
256-Bit SSL Encryption
All data transmitted between your device and the bmw3 platform is protected by industry-standard 256-bit SSL encryption. This applies to login sessions, deposits, withdrawals, and KYC document uploads alike.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time. bmw3 will respond to all verifiable data requests within 30 days of receipt. Contact [email protected] to exercise your rights.
Bangladesh-First Approach
bmw3 is built specifically for Bangladeshi players. Your data is processed in accordance with internationally recognised data protection standards. All communications regarding your data are delivered in English.
Transparent Cookie Use
bmw3 uses cookies and similar tracking technologies solely to improve platform performance and personalise your experience. We do not use third-party advertising trackers or cross-site behavioural profiling cookies.
Breach Notification
In the unlikely event of a data security breach affecting your personal information, bmw3 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, with full details of what occurred and what steps we are taking.
Information We Collect
bmw3 collects only the personal information that is necessary to operate your account safely, process your transactions, and comply with applicable legal obligations.
1.1 Information You Provide Directly
When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with personal information directly. This includes:
- Full legal name as it appears on your government-issued identification document.
- Date of birth (used to verify you are aged 18 or above).
- Bangladesh mobile number (used for SMS authentication and account notifications).
- Email address (used for account communications, withdrawal confirmations, and promotional messages where consented).
- Residential address, including division and district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
- National ID (NID) number or passport number, along with document images and a verification selfie submitted during KYC.
- Payment method details — bKash account number, Nagad number, Rocket (DBBL) number, Upay number, or Visa/Mastercard card details (card details are tokenised and never stored in raw form on bmw3 servers).
- Any messages, support tickets, complaints, or feedback you send to the bmw3 support team.
1.2 Information Collected Automatically
When you access and use the bmw3 platform, certain technical information is collected automatically by our systems. This data is used for security monitoring, fraud prevention, and platform optimisation:
- IP address and approximate geographic location derived from IP (country and city level only).
- Device type, operating system, browser name and version.
- Session timestamps — time of login, duration of session, time of logout.
- Pages visited within the bmw3 platform, game sessions accessed, and betting history.
- Referring URL (the page or link that directed you to bmw3.app).
- Crash reports and error logs generated during platform use.
1.3 Information From Third Parties
In certain circumstances bmw3 may receive information about you from trusted third-party sources, including:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status and account ownership details.
- Identity verification service providers used to cross-check NID or passport data submitted during KYC.
- Fraud detection and anti-money-laundering (AML) screening databases, which may flag accounts associated with known fraudulent activity.
- Game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, etc.) who may share game-session logs or dispute-related data when a player raises a complaint about a specific game round.
Data Categories Summary
| Category | Examples |
|---|---|
| Identity | Name, DOB, NID, Selfie |
| Contact | Email, Mobile, Address |
| Financial | Payment method, Transaction history |
| Technical | IP address, Device, Browser |
| Behavioural | Game history, Session logs |
| Communications | Support tickets, Chat logs |
bmw3 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification.
How We Use Your Data
bmw3 uses your personal data only for the purposes described below. We rely on one of four legal bases for each use: contractual necessity, legal obligation, legitimate interest, or your explicit consent.
The following table summarises the primary purposes for which bmw3 processes your personal data, along with the legal basis for each processing activity:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, mobile, address, date of birth | Contractual necessity |
| Age and identity verification (KYC) | NID/passport, selfie, date of birth | Legal obligation |
| Processing deposits and withdrawals | Payment method details, transaction data | Contractual necessity |
| Fraud prevention and AML screening | IP address, transaction history, device data | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Support tickets, game logs, account history | Contractual necessity |
| Platform security and abuse prevention | IP address, session logs, device fingerprint | Legitimate interest |
| Responsible gaming monitoring | Behavioural data, session duration, bet frequency | Legal obligation / Legitimate interest |
| Sending account and transaction notifications | Email address, mobile number | Contractual necessity |
| Sending promotional communications | Email address, betting preferences | Consent (opt-in required) |
| Platform analytics and improvement | Aggregated, anonymised behavioural data | Legitimate interest |
bmw3 will never use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent. If you have consented to receiving promotional communications and later wish to withdraw that consent, you may do so at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent for marketing communications does not affect the processing of your data for contractual or legal purposes.
Automated Decision-Making: bmw3 uses automated systems to screen new accounts for fraud and AML risk during registration. These systems may result in an account being flagged for manual review or temporarily restricted. If you believe you have been incorrectly flagged, you have the right to request human review of the automated decision by contacting [email protected].
Data Sharing and Disclosure
bmw3 does not sell your personal data. We share it only in the limited circumstances described below, and only with parties who are contractually bound to protect it to the same standard we apply.
3.1 Service Providers and Processors
bmw3 engages carefully selected third-party service providers to help operate the platform. These providers act as data processors on our behalf and may only process your data in accordance with our documented instructions. Current categories of service providers include:
- Payment processors: bKash, Nagad, Rocket (DBBL), Upay, Visa, and Mastercard, who process transaction data to facilitate deposits and withdrawals.
- Identity verification providers: Third-party KYC services that cross-check NID and passport information against official databases.
- Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios who provide game software and maintain independent game logs.
- Cloud infrastructure providers: Hosting and data storage providers who operate the servers on which the bmw3 platform runs, subject to strict data processing agreements.
- Customer support platform providers: Live chat and ticketing system providers who process the content of your support communications on our behalf.
- Anti-fraud and AML screening providers: Services that screen account and transaction data against watchlists and fraud databases.
3.2 Legal and Regulatory Disclosures
bmw3 may be required to disclose your personal data to law enforcement authorities, regulators, courts, or other public bodies where such disclosure is mandated by applicable law, a valid legal order, or is necessary to protect the safety of our players or the integrity of the platform. bmw3 will notify affected players of any such disclosure where legally permitted to do so.
3.3 Business Transfers
In the event that bmw3 undergoes a merger, acquisition, asset sale, or restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. bmw3 will notify affected players via their registered email address before any such transfer occurs, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
3.4 What We Will Never Do
- We will never sell your personal data to data brokers, advertising networks, or any other commercial third party.
- We will never share your data with other gambling platforms or online casinos for marketing purposes.
- We will never share your financial information with parties other than your chosen payment provider in connection with your transactions.
Data Sharing Overview
-
Payment Providers
Transaction data only — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard. -
KYC Verification Services
Identity documents only — for age and identity confirmation during account verification. -
Game Studios
Game session data only — for game delivery, RNG certification, and dispute resolution. -
AML / Fraud Screening
Account and transaction data — to detect and prevent financial crime and platform abuse. -
Legal Authorities
Only when required by valid legal order or applicable law — bmw3 will notify you where permitted.
Cookies and Tracking Technologies
bmw3 uses cookies and similar technologies to keep the platform running smoothly, remember your preferences, and identify unusual activity that may indicate fraud or account misuse.
A cookie is a small text file placed on your device by the bmw3 platform when you visit. Cookies allow the platform to recognise your device across sessions and store information about your preferences and activity. bmw3 uses the following categories of cookies:
Strictly Necessary
These cookies are essential for the platform to function. They manage your login session, maintain your account state, and protect against cross-site request forgery (CSRF) attacks. They cannot be disabled without breaking core functionality.
Analytics
These cookies collect anonymised information about how players navigate the platform — which pages are visited most, where errors occur, and how long sessions last. This data helps bmw3 improve the platform experience over time.
Functional / Preference
These cookies remember your platform preferences such as language selection, display settings, and last-visited game categories. They are not strictly necessary but significantly improve the convenience of using bmw3.
Security / Fraud Detection
These cookies contribute to our fraud detection and responsible gaming systems by helping identify unusual patterns of access, multiple accounts operating from the same device, or signs of automated bot activity on the platform.
Managing Your Cookie Preferences: Strictly necessary cookies cannot be disabled as they are essential to platform operation. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to block or delete cookies; please note that disabling functional cookies may limit certain platform features. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available via each browser's help documentation.
Local Storage and Session Storage: In addition to cookies, bmw3 uses browser local storage and session storage to maintain certain platform state information on your device. This data is stored locally and is not transmitted to bmw3 servers independently of your normal platform activity. You can clear this data by clearing your browser's site data for bmw3.app.
bmw3 does not use third-party advertising cookies, retargeting pixels, social media tracking tags, or any cross-site behavioural profiling technology. Your bmw3 browsing activity is not shared with advertising networks.
Data Security Measures
bmw3 applies a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information from unauthorised access, loss, or misuse.
Technical Safeguards:
- All data transmitted between your device and bmw3.app is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by international banks.
- Passwords are stored using a one-way cryptographic hash function with per-user salting. bmw3 staff cannot read your password in plain text at any time.
- Payment card data is tokenised at the point of entry and is never stored in raw form on bmw3 infrastructure. Card processing is handled by PCI-DSS compliant payment processors.
- KYC documents are stored in an encrypted, access-restricted document vault with audit logging on every access event.
- Server infrastructure is protected by firewalls, intrusion detection systems (IDS), and 24/7 security monitoring.
- Regular penetration testing is conducted by independent security professionals to identify and remediate vulnerabilities.
Organisational Safeguards:
- Access to personal data is restricted on a strict need-to-know basis. Customer support staff can only access account information relevant to resolving an active support query.
- All bmw3 staff with access to personal data are bound by confidentiality obligations and receive regular data protection training.
- A formal data breach response procedure is in place, including a 72-hour notification commitment to affected players.
Security Layers at bmw3
- Layer 1 — Transport Security:
TLS 1.3 encryption on all data in transit between your browser/app and bmw3 servers. - Layer 2 — Storage Encryption:
Sensitive data encrypted at rest using AES-256. Encryption keys managed separately from data stores. - Layer 3 — Authentication:
Bcrypt password hashing with salting. Optional SMS two-factor authentication for all accounts. - Layer 4 — Access Control:
Role-based access control (RBAC) limiting staff data access to what is necessary for their role. - Layer 5 — Monitoring:
Continuous IDS/IPS monitoring, automated anomaly alerts, and regular independent penetration tests. - Layer 6 — Incident Response:
Documented breach response plan with 72-hour player notification commitment.
Important: While bmw3 takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to keep your login credentials secure. bmw3 will never ask for your password — if anyone claims to be bmw3 support and requests your password, treat it as a phishing attempt and report it immediately to [email protected].
Data Retention Policy
bmw3 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations.
The following retention periods apply to the major categories of personal data held by bmw3:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, email, mobile, address) | Duration of account + 5 years after closure | Legal obligation / Dispute resolution |
| KYC documents (NID, passport, selfie) | Duration of account + 5 years after closure | AML / regulatory compliance |
| Transaction records (deposits, withdrawals, bet history) | 7 years from transaction date | Financial record-keeping / AML compliance |
| Support communications (tickets, chat logs) | 3 years from last interaction | Dispute resolution / Quality assurance |
| Technical logs (IP address, session data) | 12 months from collection | Security monitoring / Fraud detection |
| Marketing consent records | Duration of consent + 3 years after withdrawal | Proof of consent / Legal compliance |
| Anonymised analytics data | Indefinite (no personal identifiers retained) | Platform improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Secure deletion involves overwriting stored data so that it cannot be recovered. Where data is held in backup systems, it is purged from those backups in accordance with bmw3's backup rotation schedule, which operates on a maximum 90-day cycle.
If you request deletion of your personal data before the end of the applicable retention period, bmw3 will assess your request and delete data where there is no overriding legal obligation to retain it. Data that must be retained for legal or regulatory reasons will be placed in a restricted-access archive and will not be used for any active processing purpose.
Your Privacy Rights
As a bmw3 player, you have a meaningful set of rights over how your personal data is collected, held, and used. bmw3 is committed to honouring these rights promptly and transparently.
Right of Access
You may request a copy of all personal data bmw3 holds about you. We will provide this within 30 days in a structured, machine-readable format.
Right to Rectification
If any personal data bmw3 holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
Right to Erasure
You may request deletion of your personal data where there is no overriding legal obligation for bmw3 to retain it. Requests are assessed case by case.
Right to Restrict Processing
In certain circumstances you may request that bmw3 restrict the processing of your data — for example, while a dispute about data accuracy is being resolved.
Right to Data Portability
You may request that your personal data be provided to you in a portable format (e.g., JSON or CSV) so that it can be transferred to another service provider of your choice.
Right to Object
You have the right to object to the processing of your data where bmw3 relies on legitimate interest as its legal basis — for example, platform analytics or fraud screening profiling.
Right Re: Automated Decisions
Where bmw3 makes automated decisions that significantly affect you (e.g., account risk flagging), you have the right to request human review of that decision.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of the rights above, submit a written request to [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise. bmw3 will respond to all verified privacy rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for the delay.
Identity Verification: To protect your data from unauthorised access requests, bmw3 will verify your identity before fulfilling any privacy rights request. You may be asked to confirm details associated with your registered account. bmw3 will not charge a fee for reasonable, good-faith requests.
Contact and Complaints
If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a complaint about how bmw3 has handled your personal information, please reach out through the channels below.
Data Privacy Contact:
All privacy-related enquiries, data rights requests, and complaints should be directed to the bmw3 Data Privacy team. The fastest way to reach us is by email. Our team operates during Bangladesh Standard Time (BST, UTC+6) business hours, and we aim to acknowledge all privacy enquiries within 24 hours.
Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
Response time: within 2 hours for general enquiries; within 30 days for formal data rights requests.
Raising a Complaint:
If you are not satisfied with how bmw3 has handled your personal data or responded to a privacy rights request, you have the right to escalate your complaint. bmw3 encourages players to contact us directly in the first instance so that we have the opportunity to resolve your concern. If, after contacting bmw3, you remain dissatisfied, you may escalate your complaint to the relevant data protection authority or regulatory body applicable in your jurisdiction.
Policy Updates:
bmw3 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify registered players via their registered email address at least 14 days before the changes take effect. The "Last Reviewed" date at the top of this page will always reflect the date of the most recent review. Continued use of the bmw3 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.
Current version: This Privacy Policy was last reviewed in January 2026 (Version 2.4). If you accessed a previously cached version of this page, please refresh to ensure you are reading the most current version.
Privacy Contact Summary
-
General Privacy Questions
Email [email protected] with subject "Privacy Enquiry". Response within 2 hours (BST, UTC+6). -
Data Rights Requests
Email [email protected] with subject "Privacy Rights Request". Include your name and registered email. Response within 30 days. -
Data Breach Reports
If you suspect unauthorised access to your bmw3 account or personal data, contact [email protected] immediately with subject "Security Alert". -
Marketing Opt-Out
Withdraw consent for promotional emails at any time via account settings or by emailing [email protected] with subject "Unsubscribe". -
Live Chat Support
24/7 English live chat is available inside your bmw3 account dashboard for real-time assistance with any privacy concern.
Ready to Explore bmw3?
Now that you understand how we protect your data, discover everything bmw3 has to offer — from live cricket betting and premium slots to exciting table games, all available securely via bKash, Nagad, and Rocket.