bmw3 Privacy Policy
Your Data, Your Rights

1 Introduction

This Privacy Policy describes how bmw3 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal information belonging to users ("you", "your", "the Player") who access or interact with the bmw3 online betting and gaming platform available at bmw3.io and any associated mobile interfaces or subdomains.

bmw3 is committed to handling all personal data with transparency, integrity, and care. This policy has been written in plain English so that every player — regardless of technical background — can clearly understand how their information is managed. We have structured this document to answer the questions we hear most often from players across Bangladesh, from Dhaka to Chittagong, Sylhet to Khulna.

By registering an account, making a deposit, or otherwise using bmw3, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the bmw3 platform and may request account closure by contacting our support team.

2 Data Controller

For the purposes of this Privacy Policy, bmw3 acts as the data controller in respect of all personal information collected from players using the bmw3 platform. As data controller, bmw3 determines the purposes and means by which personal data is processed.

All queries, data access requests, correction requests, deletion requests, and complaints relating to your personal data should be directed to the bmw3 Data Protection team at: [email protected]

The email address above is displayed as plain text and is not a clickable link. Please copy it manually into your email client.

3 Data We Collect

bmw3 collects a range of personal data categories depending on how you interact with the platform. The table below summarises the main categories of data we collect and relevant examples:

4 How We Collect Data

bmw3 collects personal data through the following channels and means:

4.1 Direct Collection

Data you provide directly when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, participate in a promotion, respond to a survey, or update your account profile settings.

4.2 Automated Collection

Technical and usage data is collected automatically as you navigate the bmw3 platform, through cookies, session tracking technologies, server logs, and analytics tools. This data is collected to improve platform security and performance and to deliver a better player experience.

4.3 Third-Party Sources

In certain circumstances, bmw3 may receive personal data from trusted third-party sources, including:

• Identity verification service providers used to confirm the authenticity of KYC documents
• Payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard, who may share transaction confirmation data
• Anti-fraud and anti-money laundering screening services
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may share game session metadata required for dispute resolution

5 How We Use Your Data

bmw3 uses your personal data for the following purposes. We process data only to the extent necessary for each stated purpose and do not use your data in ways that are incompatible with the original reason for collection.

• Account Management: Creating, maintaining, and securing your bmw3 account, including password reset, login verification, and profile updates.
• Service Delivery: Processing bets, settling game rounds, crediting winnings, applying bonuses, and delivering all platform features to which you are entitled as a registered player.
• Identity Verification: Confirming your age (21+), identity, and residential address in accordance with responsible gaming and anti-money laundering obligations.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods available in Bangladesh.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, multi-accounting, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring player activity to identify patterns that may indicate problem gambling, enforcing self-exclusion and limit settings, and fulfilling our duty of care to players.
• Customer Support: Responding to queries, resolving disputes, processing complaints, and providing assistance with account or payment issues.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including record-keeping requirements and responding to lawful requests from authorities.
• Platform Improvement: Analysing aggregated usage data to improve the bmw3 platform interface, game selection, betting markets, and overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of receiving such communications.

6 Legal Basis for Processing

bmw3 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and bmw3 — for example, processing deposits, settling bets, and managing your account.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and record-keeping duties.
• Legitimate Interests: Processing carried out for bmw3's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for which you have given explicit consent, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

bmw3 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We may share your data only in the following limited circumstances:

7.1 Service Providers

bmw3 engages trusted third-party service providers who assist in operating the platform. These include identity verification partners, payment processors, IT infrastructure providers, customer support tooling providers, and analytics services. Each provider is contractually bound to process your data solely on bmw3's instructions and in compliance with applicable data protection principles.

7.2 Game Providers

When you play games supplied by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — certain session data (such as player ID, game round ID, and bet/win amounts) may be shared with the provider for the purpose of game operation, dispute resolution, and fairness auditing. These providers operate under data processing agreements with bmw3.

7.3 Legal & Regulatory Disclosure

bmw3 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of bmw3, its players, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bmw3's business, personal data held by bmw3 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and their data will continue to be processed in accordance with this Privacy Policy.

8 Payment Data & Financial Privacy

Financial transactions on bmw3 are processed through established and trusted payment gateways. When you deposit or withdraw using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction is processed by the respective payment provider under their own privacy and security policies.

bmw3 retains transactional records — including deposit amounts, withdrawal amounts, dates, and payment method references — for a minimum period as required to meet legal obligations and to support dispute resolution. bmw3 does not store full card numbers, CVV codes, or mobile wallet PINs on its servers.

All financial data at rest on bmw3 infrastructure is encrypted using industry-standard algorithms. Access to financial records is restricted to authorised bmw3 personnel on a strict need-to-know basis.

9 Cookies & Tracking Technologies

bmw3 uses cookies and similar web technologies (such as local storage, session storage, and pixel tags) to operate and improve the platform. The following table explains the main categories of cookies used on bmw3:

bmw3 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies may impair your ability to log in or use certain bmw3 platform features.

10 Data Retention

bmw3 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to meet legal record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or longer if related to an ongoing dispute.
• Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent or until you withdraw it, plus one (1) year as evidence of the consent record.

When personal data is no longer required, bmw3 will securely delete or irreversibly anonymise it so that it can no longer be associated with any individual player.

11 Security Measures

bmw3 employs a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and bmw3 servers
• Encryption of sensitive data at rest using industry-standard algorithms
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication options for player accounts
• Regular security audits and vulnerability assessments of bmw3 infrastructure
• Automated fraud detection systems monitoring account activity in real time
• Secure, password-hashed storage of account credentials — bmw3 staff cannot view your password

While bmw3 takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, bmw3 will notify affected players without undue delay and will take all appropriate remedial action.

12 Your Privacy Rights

As a bmw3 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and the specific request. We will respond to all verified requests within a reasonable timeframe.

• Right of Access: You may request a copy of the personal data bmw3 holds about you, along with information about how it is used.
• Right to Rectification: If your personal data is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that bmw3 delete your personal data. This right is subject to exceptions where retention is required by law or for legitimate dispute resolution purposes.
• Right to Restrict Processing: You may request that bmw3 temporarily suspend processing of your data — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to bmw3, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

13 Minors & Age Policy

bmw3 strictly prohibits access by individuals under the age of 21. The bmw3 platform, including all betting, casino, and gaming services, is intended exclusively for adults aged 21 and above. bmw3 does not knowingly collect personal data from anyone under 21 years of age.

Where bmw3 discovers or has reason to believe that a registered account belongs to a player under 21, the account will be immediately suspended, all pending bets voided, and any deposit balance returned to the registered payment method. Any personal data collected in connection with an underage account will be securely deleted once the matter is resolved.

14 International Data Transfers

bmw3 primarily processes player data within its secure infrastructure. In certain circumstances, personal data may be transferred to or processed by service providers operating in countries outside Bangladesh — for example, where game providers or cloud infrastructure services are hosted internationally.

Where such transfers occur, bmw3 takes appropriate safeguards to ensure your data receives a level of protection consistent with this Privacy Policy and applicable data protection principles. These safeguards include data processing agreements with all international service providers and, where applicable, standard contractual clauses or equivalent protections.

15 Changes to This Privacy Policy

bmw3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players via email or through a prominent notice on the bmw3 platform at least 14 days before the changes take effect.

The effective date at the top of this document will always reflect the date of the most recent revision. We encourage players to review this Privacy Policy periodically to stay informed about how bmw3 handles personal data. Continued use of the platform after the effective date of any update constitutes acceptance of the revised policy.

16 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bmw3 handles your personal data, please contact our Data Protection team using the details below. All communications must be in writing and should include your registered account username or email address so that we can verify your identity and respond appropriately.

Email (plain text — not a clickable link): [email protected]

bmw3 aims to acknowledge all privacy-related enquiries within 3 business days and to resolve substantive data rights requests within 30 calendar days of receiving a verified request. If a request is particularly complex or if you have submitted multiple requests, we may extend this period by a further 30 days and will notify you accordingly.