Privacy Policy — ongbd Online Casino Bangladesh
This Privacy Policy explains how ongbd collects, uses, stores, and protects your personal information when you use our online casino and sports betting platform. Your privacy matters to us — read on to understand exactly what data we handle and why.
Every data transfer between your device and ongbd's servers is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
ongbd does not sell, rent, or trade your personal information to third-party marketers or advertisers under any circumstances. Data shared with third parties is limited strictly to what is necessary for platform operation.
Registered players on ongbd can request access to, correction of, or deletion of their personal data at any time by contacting the support team. Your right to manage your own data is a core principle of this policy.
ongbd uses cookies strictly for session management, platform analytics, and security purposes. We do not use cross-site tracking cookies or third-party advertising cookies that follow you outside the ongbd platform.
Player data is stored on access-controlled, encrypted servers. Internal access to personal data is limited to authorised personnel on a strict need-to-know basis. Regular audits verify that access controls remain in place.
This Privacy Policy is written in plain English so that every player across Bangladesh — from Dhaka to Cox's Bazar — can understand exactly what data is collected and why. No legal jargon without explanation.
Section 1
Introduction & Scope
This Privacy Policy governs the collection, processing, storage, and use of personal data by ongbd — Bangladesh's trusted online casino and sports betting platform, accessible at ongbd.com. It applies to all individuals who visit the ongbd website, create a player account, make a deposit, place a bet, interact with customer support, or use any feature of the platform in any capacity.
ongbd is committed to handling your personal information responsibly, transparently, and in accordance with recognised data protection principles. This policy is designed to give you a clear picture of what personal data we collect, the lawful basis on which we process it, how long we retain it, who we share it with, and what rights you have in relation to it.
This Privacy Policy should be read alongside ongbd's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and the platform. In the event of any conflict between this Privacy Policy and any other document on the platform, this Privacy Policy shall take precedence in relation to data protection matters.
By accessing ongbd.com, registering an account, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the platform immediately.
Section 2
Personal Data We Collect
ongbd collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from third-party verification and payment service providers. The categories of personal data we collect are set out in the table below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, copy of National ID (NID), passport, or birth certificate submitted during KYC verification. | Provided directly by the player during registration and KYC. |
| Contact Data | Bangladeshi mobile phone number, email address (if provided), and city or division of residence. | Provided directly by the player during registration or account update. |
| Financial Data | bKash number, Nagad number, Rocket number, Upay number, bank account details (if applicable), transaction history, deposit amounts, withdrawal amounts, and account balance records. | Provided during deposit/withdrawal operations; generated by platform transaction systems. |
| Account Activity Data | Login timestamps, session duration, bet history, game history, bonus claims, wagering records, and self-exclusion status. | Automatically generated by platform systems during normal use. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator. | Automatically collected via server logs and analytics tools. |
| Communications Data | Records of support chat conversations, emails sent to [email protected], and any documents submitted in connection with a dispute or complaint. | Collected when you contact ongbd support. |
| Cookie & Usage Data | Page views, navigation paths, click events, session tokens, and preference settings stored via cookies and local browser storage. | Automatically collected via cookies and analytics scripts. |
ongbd does not knowingly collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, except where strictly required for responsible gaming compliance (e.g., vulnerability assessments linked to self-exclusion requests).
Section 3
How We Use Your Data
ongbd processes your personal data only where a lawful basis for doing so exists. The primary bases on which we rely are: (a) performance of a contract — processing necessary to provide the services you have registered for; (b) legal obligation — processing required to comply with applicable laws; (c) legitimate interests — processing conducted for ongbd's legitimate business interests where those interests are not overridden by your rights; and (d) consent — where you have given express consent for a specific processing activity.
- Account Management: To create, maintain, and administer your player account, authenticate your identity at login, process deposits and withdrawals, and provide access to games and betting markets.
- KYC & Age Verification: To verify that you are 18 years of age or older before processing your first withdrawal, and to comply with responsible gaming obligations that require age and identity confirmation.
- Payment Processing: To process bKash, Nagad, Rocket, Upay, and bank transfer transactions securely, to match withdrawals to verified payment methods, and to maintain accurate financial records.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, collusion, and other conduct that violates ongbd's Terms & Conditions or applicable law.
- Responsible Gaming Compliance: To monitor play patterns that may indicate problem gambling behaviour, to administer self-exclusion requests, to enforce deposit limits, and to comply with responsible gaming obligations.
- Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and communicate account-related notifications such as KYC requests, bonus expiry alerts, and security notices.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the platform's features, game selection, interface, and performance. This analysis does not identify individual players.
- Promotional Communications: Where you have opted in to marketing communications, to send you information about new games, promotions, seasonal bonuses (e.g., BPL, Eid, Pohela Boishakh offers), and platform updates. You may opt out at any time.
- Legal Compliance: To comply with any applicable legal obligation, court order, or request from a competent regulatory or law enforcement authority.
Section 4
Cookies & Tracking Technologies
ongbd uses cookies and similar technologies (including local storage and session tokens) to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to gather anonymised analytics data. The following table describes the categories of cookies used on ongbd.com.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the platform to function. Includes session authentication tokens, CSRF protection tokens, and load-balancing cookies. Cannot be disabled without breaking core platform functionality. | Session / Until logout |
| Functional | Remembers your language preference (English), display settings, and responsible gaming tool settings such as deposit limits and session time reminders. | Up to 12 months |
| Analytics | Collects anonymised data about pages visited, session duration, and navigation paths to help ongbd understand how the platform is used and where improvements can be made. No personally identifiable information is included. | Up to 24 months |
| Security | Helps detect and prevent suspicious activity such as brute-force login attempts, credential stuffing, and session hijacking. Stores a device fingerprint hash used to flag anomalous login behaviour. | Up to 30 days |
Third-Party Cookies: ongbd does not use third-party advertising or retargeting cookies. Game content delivered through integration with providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may involve cookies set by those providers in the context of their game delivery iframe. These cookies are governed by the respective provider's own privacy policies.
Managing Cookies: You can control and delete cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in or using the platform. Disabling functional cookies may reset your preferences on each visit.
Section 5
Data Sharing & Third Parties
ongbd does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment processors receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and regulatory obligations.
- Identity Verification Partners: Third-party KYC service providers may receive copies of identity documents submitted during the verification process for the purpose of confirming identity and age. KYC partners are contractually bound to process this data only for verification purposes.
- Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive anonymised session and game-round data necessary for delivering game content and settling outcomes. They do not receive your full identity or financial data.
- Fraud Prevention Services: Aggregated, pseudonymised account risk data may be shared with fraud prevention and anti-money laundering (AML) services to detect patterns consistent with financial crime. This sharing is conducted in compliance with applicable legal obligations.
- Legal & Regulatory Authorities: ongbd may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by law, a valid court order, or a formal regulatory request. ongbd will notify you of such disclosure where legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of the platform's operations, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to the processing of their data as a result.
All third-party data processors engaged by ongbd are required to enter into data processing agreements that impose obligations on the processor to: (a) process data only on ongbd's documented instructions; (b) implement appropriate technical and organisational security measures; and (c) delete or return all personal data upon termination of the processing relationship.
Section 6
Data Retention & Storage
ongbd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply as a general guide.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Anti-money laundering (AML) compliance and dispute resolution obligations. |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations and tax audit requirements. |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance and re-verification capability. |
| Bet & Game History | 5 years from account closure | Dispute resolution, responsible gaming monitoring, and AML review. |
| Support Communications | 3 years from last interaction | Quality assurance, dispute resolution, and legal claims. |
| Analytics Data (anonymised) | Up to 24 months on a rolling basis | Platform improvement. Fully anonymised — no individual re-identification possible. |
| Cookie & Session Data | As stated in the Cookies section above | Session management and security. |
Data Storage Location: Player data is stored on secure, access-controlled servers. ongbd takes all reasonable technical and organisational precautions to ensure that personal data is processed and stored securely, regardless of the physical location of the servers used.
Data Deletion: Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Players may request earlier deletion of their data where no legal retention obligation prevents it — see Section 7 (Your Privacy Rights) for details.
Section 7
Your Privacy Rights
As a player on ongbd, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.
You have the right to request a copy of all personal data ongbd holds about you. This is commonly known as a Subject Access Request (SAR). We will provide the data in a structured, readable format.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your account dashboard following ongbd Login.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to legal retention obligations.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified by our team.
Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format.
You have the right to object to processing of your personal data carried out on the basis of ongbd's legitimate interests. You may also withdraw consent for marketing communications at any time without penalty.
Section 8
Data Security Measures
ongbd implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with industry best practices.
All data in transit between your device and ongbd's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) headers.
Sensitive data fields including identity documents, payment method details, and passwords are encrypted at rest using AES-256. Passwords are hashed using a one-way cryptographic function and are never stored in recoverable form.
Access to production systems containing personal data is restricted to authorised personnel with a documented business need. Multi-factor authentication is required for all internal system access. Access logs are retained and audited.
Incident Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ongbd will take immediate steps to contain the breach, assess its scope, and notify affected individuals as quickly as practicable. Notification will be provided via the contact details registered on the affected player accounts.
Player Responsibility: While ongbd implements robust technical controls, the security of your account is also partially dependent on the strength and confidentiality of your password. You are responsible for choosing a strong, unique password, keeping it confidential, and not sharing your login credentials with any third party. ongbd strongly recommends enabling SMS-based two-factor authentication (2FA) on your account.
Section 9
Minors & Age Verification
ongbd is an 18+ platform. The collection and processing of personal data belonging to individuals under the age of 18 is strictly prohibited. ongbd does not knowingly collect personal data from minors, and any account found to belong to a person under 18 will be closed immediately upon discovery, with all associated data handled in accordance with applicable legal requirements.
Age Verification at Registration: All players are required to confirm that they are 18 years of age or older at the point of registration. Before processing a player's first withdrawal, ongbd conducts a formal KYC age verification process requiring submission of a valid government-issued identity document — such as a Bangladesh National Identity Card (NID), passport, or birth certificate — that confirms the player's date of birth.
Parental Controls: If you are a parent or guardian and believe that a minor in your household has registered an account on ongbd using false age information, please contact us immediately at [email protected]. Upon receipt of a credible report, ongbd will suspend the account, conduct an expedited review, and close the account if the minor status is confirmed. Any real money balance attributable to legitimate deposits will be returned to the verified payment method.
Marketing to Minors: ongbd does not direct marketing communications at individuals known or suspected to be under 18. If an individual opts in to marketing communications and is subsequently identified as being under 18 during the KYC process, all marketing communications to that individual are terminated immediately.
Section 10
Changes to This Policy
ongbd reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made in response to evolving data protection standards, updates to platform functionality, changes in payment processing arrangements, new game provider integrations, or other operational developments that affect how personal data is processed.
Notification of Material Changes: Where a change to this Privacy Policy is material — meaning it substantively alters how your personal data is collected, processed, shared, or retained — ongbd will notify registered players through one or more of the following channels: an in-platform notification displayed upon next login, an email to your registered contact address, or a prominent notice on the ongbd homepage. Non-material updates such as typographical corrections, structural reformatting, or minor clarifications of existing intent may be made without formal notification.
Effective Date: The revised Privacy Policy takes effect from the "Last Updated" date displayed at the top of this page and in the hero section above. Continued use of the ongbd platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must stop using the platform and contact support to close your account.
Version Archive: Prior versions of this Privacy Policy are archived internally. Players who wish to review a prior version may request it in writing by contacting [email protected] with the subject line "Privacy Policy Version Request" and specifying the approximate date range of the version required. Requests will be fulfilled within 10 business days.
Section 11
Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ongbd holds about you, please contact the ongbd data team using the details below. All privacy-related communications should be directed to the support team in the first instance.
For general privacy questions, data access requests, and consent withdrawal requests, email: [email protected] with the subject line "Privacy Enquiry". We aim to respond within 5 business days.
To exercise your rights of access, rectification, erasure, restriction, portability, or objection, email: [email protected] with the subject line "Privacy Rights Request". Include your account username and a description of your request.
If you suspect that your ongbd account has been accessed without your authorisation, or that your personal data has been compromised, contact: [email protected] immediately with the subject line "Security Incident".
ongbd is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with the response you receive from the ongbd support team, you may escalate your concern by requesting a formal review by emailing [email protected] with the subject line "Privacy Complaint Escalation". Escalated complaints will be reviewed by a senior member of the compliance team within 10 business days.
All privacy enquiries, data rights requests, and related communications must be submitted in English to ensure accurate and timely processing. Requests submitted in other languages may be delayed while translation is arranged.
Your Privacy Is Protected at ongbd
Have more questions about how your data is handled? Browse our FAQ for instant answers, explore our Responsible Gaming commitment, or head to the ongbd Casino to enjoy games with confidence.