BDG Win App Permissions: What to Say No To
A game has no use for your texts or your screen. This page lists the requests an app file can make, shows how each one looks when it appears, says where to switch it off, and explains the one permission BDG Win’s own web page asked for.
Say no to two requests every time: reading your text messages, and acting as an accessibility service. Both can show an app the one-time codes meant for you. For the rest, the tables below separate the requests that have a reason from those that have none.
The two answers that never change
Reading your texts. A one-time password, or OTP, is a short code sent by SMS that works once. Banks and UPI apps use them. If an app can read your messages, it can read that code the instant it arrives, sometimes before you have looked at your phone. At the time of writing (8 October 2026), the sign-in screen and register form we saw had no box for an SMS code. A file that asks to read your texts “for the code” is therefore asking for something we never saw there.
Accessibility service. These services were built so that people who struggle with a touchscreen can still use a phone: they can describe the screen aloud, press buttons for the user and type text. An app given that power can do the same things for itself. It can see what you type and press buttons without you. No game needs it.
What BDG Win’s own web page asked for
The page asked for one thing: permission to send notifications. That request came from your browser, not from a file. A web page has far fewer powers than an installed file, and the table shows where the gap lies.
| Request | A web page in your browser | An installed app file |
|---|---|---|
| Show notifications | Can ask. Your browser draws the box, and you pick Allow or Block | Can ask. On Android 13 and newer an app must ask first |
| Your location, camera or microphone | Can ask through your browser, which asks you first | Can ask through Android’s own pop-up |
| Read your text messages | Cannot | Can, if you allow it |
| Act as an accessibility service | Cannot | Can, if you switch it on in Settings |
| Draw over other apps | Cannot | Can, if you allow it in Settings |
| Install other apps | Cannot | Can ask to, and you must allow it in Settings |
| Stay on the phone | Only as a shortcut that you add | Until you uninstall it |
That gap is why the shortcut route asks fewer decisions of you.
How each request looks on your screen
Android sorts requests into two kinds. Everyday ones, such as camera, contacts and location, appear as a small pop-up, and tapping Don’t allow costs you nothing. Powerful ones cannot be granted that way. They have a Settings screen or a system box of their own, and the app must send you there and wait while you switch them on yourself. Treat any app that guides you through such a screen “to make the game work” as asking for more than a game ever needs.
| Request, and how it appears | What you hand over | Your answer |
|---|---|---|
| Read or receive SMS. A pop-up with Allow and Don’t allow | All your messages, which includes codes from your bank | Refuse every time |
| Accessibility service. A Settings screen with a warning, where you flip the switch yourself | Everything on your screen, plus taps made for you | Refuse every time |
| Notification access. A Settings screen under Special app access | Every notification, codes included, which the app can also clear before you see them | Refuse |
| Display over other apps. A Settings screen | The right to paint over what you are using, so a fake box can sit on your banking screen | Refuse |
| Install unknown apps. A Settings screen, shown when an app tries to install a file | The right to bring in more apps | Allow your browser or file manager only while you install, then switch it off |
| Device administrator. A Settings screen with an Activate button | The power to lock or wipe the phone, and to resist removal | Refuse |
| VPN. A system box asking to set up a connection | Your traffic passes through a server someone else runs | Refuse |
| All-files access. A Settings screen | Photos, downloads and documents across the phone | Refuse |
| Contacts. A pop-up | Your address book | Refuse. The usual excuse is an “invite friends” button, but what travels is every number you saved |
| Call log and phone state. A pop-up | Who you called, your own number and your SIM details | Refuse |
| Camera and microphone. A pop-up with While using the app or Only this time | Photos, video and sound | Say yes only to a feature you picked yourself, and prefer the While using the app option |
| Location. A pop-up offering precise or approximate | Where you are | Refuse, or choose approximate and while using the app |
| Notifications. A pop-up on Android 13 and newer | The right to show you alerts | Your choice. By itself it reads nothing on your phone |
Five screens to check on your own phone
Go in this order, most urgent first. Phone makers and Android versions name their menus differently, so if you cannot find a screen, type its name into the search box at the top of Settings.
- Accessibility. Open Settings, then Accessibility, and look through the installed or downloaded apps. Switch off any you did not turn on yourself.
- SMS. Open Settings, Security and privacy, Privacy, then Permission manager, and choose SMS. You see every app that can read your texts. Remove any you do not recognise.
- Special app access. Open Settings, Apps, then Special app access. Open each of the five lists that matter here: Notification access, Display over other apps, All files access, Device admin apps and Install unknown apps. The last should name only your browser or a file manager, if it names anything.
- VPN. Under Settings, then Network and internet, open VPN. Delete any connection you never set up yourself.
- App by app. Open Settings, Apps, the app and then Permissions, and choose Don’t allow for whatever the app does not need. Google’s help shows the same route.
If you have already said yes to one
- Turn the permission off, then remove the app. An app that appears under Device admin apps must be deactivated there first, or Android will refuse to uninstall it.
- Assume any code that reached your phone while the app held that access was visible to it. Look through your bank and UPI statements for payments you did not make, and phone your bank at once if you find one.
- From another device, change your passwords. Do your email account first.
- If money has gone, or you gave out a code, follow after a scam. Call 1930, the national cyber-fraud helpline, and report it at cybercrime.gov.in.
The five checks cover what to look at before a file reaches your phone, and the login APK guide shows what a sign-in screen inside a file should never ask.
Common questions
Why does BDG Win’s page ask to send notifications?
We do not know the platform’s reason. At the time of writing (8 October 2026), the request came from the web page, and it is a browser setting, not an app permission. You can answer Block and change the answer later in your browser’s site settings. Allowing it does not hand the page your texts or your screen.
Can a web page read my text messages?
No. A web page cannot browse your inbox, your call log or your other apps. A browser lets a page ask for a few things, such as notifications or your location, and it asks you first. An app file can ask for far more, which is why the source of a file matters.
Which Android permissions can show an app a one-time password?
Reading your texts, notification access and an accessibility service can each show an app a code that was meant for you. A sign-in file has no use for any of them. Typing the code yourself takes a few seconds and shares nothing.
What if a BDG Win file will not start unless I allow “Display over other apps”?
Then the file is telling you what it wants. That permission lets an app paint over whatever you are using, including a fake box on top of your banking screen. Uninstall the file rather than agree.
How do I find which apps can draw over other apps?
Open Settings, then Apps, then Special app access, then Display over other apps. Menu names differ between makers, so you can also search Settings for the phrase. Switch off any app you do not recognise or do not need.
Why does an app ask about notifications the first time I open it?
From Android 13, an app must ask before it may show notifications, so many apps ask on first launch. You can answer Don’t allow and the app still runs. The question is about alerts, and by itself it takes nothing from your phone.