bdbt Privacy Policy

bdbt operates the online casino and sports betting platform accessible at https://bdbt.io (the "Platform"). For the purposes of this Privacy Policy, bdbt acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

The Platform is designed and operated for players based in Bangladesh. All customer support, data handling enquiries, and privacy-related requests are managed in English on Bangladesh Standard Time (BST, UTC+6). Our designated point of contact for all data privacy matters is our support team, reachable at [email protected].

This Privacy Policy covers all personal data collected through the bdbt website, mobile web interface, and any related communication channels including email and live chat support. It does not apply to third-party websites or services that may be linked from the Platform, each of which operates under its own privacy terms.

2.1 Registration and Identity Data

When you create a bdbt account, we collect the following personal information to establish and maintain your account:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify you are at least 21 years of age)
• Residential address, including district, division, and postal code within Bangladesh
• Email address (used as your primary account identifier and for communications)
• Mobile phone number registered in Bangladesh
• Username and encrypted password credentials

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests, we may collect and retain copies of:

• National Identity Card (NID) or passport
• Utility bill or bank statement as proof of address (issued within the last 90 days)
• Selfie photograph for facial verification against your identity document
• Bank account details or mobile financial service account details (bKash, Nagad, Rocket, Upay) associated with your withdrawal methods

2.3 Financial Transaction Data

We record all financial activity associated with your bdbt account, including deposit amounts and timestamps, withdrawal requests and processing records, bonus credits and wagering activity, win and loss history, and payment method reference numbers. We do not store full card numbers or mobile banking PINs — payment processing is handled by our certified payment partners.

2.4 Usage and Behavioural Data

When you use the bdbt Platform, we automatically collect technical and behavioural data including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session start and end times, duration, and login history
• Pages visited, games played, bets placed, and features used
• Clickstream data and navigation patterns within the Platform

2.5 Communication Data

When you contact bdbt's support team or respond to communications from us, we retain records of those interactions, including email correspondence, live chat transcripts, and the content of any support tickets you raise. This data is used for quality assurance, dispute resolution, and service improvement.

bdbt uses the personal data it collects for the following specific purposes:

bdbt does not use your personal data for automated decision-making that produces significant legal effects without human review. Where profiling is used — for example, in responsible gaming monitoring — a member of our team reviews flagged accounts before any action is taken.

bdbt processes your personal data under the following legal bases, depending on the specific activity involved:

• Contract Performance: Processing necessary to create and manage your account, execute deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money-laundering (AML) checks, and record-keeping obligations.
• Legitimate Interests: Processing necessary for bdbt's legitimate business interests, including fraud prevention, platform security, responsible gaming oversight, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit, freely given consent, such as receiving promotional emails or push notifications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Where bdbt relies on legitimate interests as its legal basis, we conduct a balancing test to ensure that our interests do not unfairly override your privacy rights. You may request information about any such balancing assessment by contacting [email protected].

5.1 Service Providers and Partners

bdbt shares personal data with trusted third-party service providers only to the extent necessary to operate the Platform. These providers are contractually bound to process your data solely on bdbt's instructions and in accordance with applicable data protection standards. Categories of recipients include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner Bangladeshi banks for the processing of deposits and withdrawals in BDT.
• Identity Verification Providers: Third-party KYC and AML compliance platforms used to verify your identity and fulfil our legal obligations.
• Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which may receive anonymised session data necessary to deliver game content.
• Fraud Prevention Services: Specialist fraud detection platforms that analyse transaction and usage patterns to protect our players and the Platform.
• Cloud Infrastructure Providers: Secure hosting and data storage providers operating under strict data processing agreements.

5.2 Legal Disclosure

bdbt may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, or where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of bdbt, our players, or the public.

5.3 What We Never Do

bdbt does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial use. We do not share your data with advertising networks for targeted advertising purposes.

6.1 Types of Cookies Used

The bdbt Platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players use the Platform — which pages are visited most, where errors occur, and how navigation flows work. This data helps us improve bdbt's performance.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously used payment methods to make your experience more convenient.
• Responsible Gaming Cookies: Track session duration and activity levels to support our responsible gaming monitoring obligations and alert systems.

6.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, manage, block, and delete cookies. Please be aware that disabling certain cookies may affect the functionality of the bdbt Platform, including the ability to stay logged in or access certain features.

bdbt retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following retention schedule applies:

When data reaches the end of its retention period, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data. Players may request early deletion of their data, subject to the limitations described in Section 8 below.

As a player on the bdbt Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". bdbt will acknowledge your request within 5 business days (BST) and respond in full within 30 days.

• Right of Access: You may request a copy of all personal data bdbt holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Corrections affecting your KYC status may require submission of updated documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Where legal obligations require us to retain certain data, we will explain the applicable retention period.
• Right to Restrict Processing: You may request that we restrict processing of your data while a dispute about accuracy or legitimate interests is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to bdbt in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your data where bdbt relies on legitimate interests as its legal basis. You may also withdraw consent to marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

bdbt implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• Transport Layer Security: All data transmitted between your device and the bdbt Platform is encrypted using TLS 1.2 or higher, with 256-bit SSL certificates issued by a trusted certificate authority.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored using AES-256 encryption on secured servers.
• Access Controls: Access to personal data within bdbt's systems is restricted on a strict need-to-know basis. Staff with access to personal data undergo background checks and receive regular data protection training.
• Multi-Factor Authentication: Internal systems containing personal data require multi-factor authentication for all staff access.
• Penetration Testing: bdbt conducts regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdbt will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

While bdbt maintains rigorous security standards, no system connected to the internet can be guaranteed to be entirely free from risk. Players are encouraged to use a strong, unique password for their bdbt account and to contact [email protected] immediately if they suspect unauthorised activity on their account.

The bdbt Platform is strictly intended for adults aged 21 years and above. bdbt does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform implements age verification controls at the point of registration and requires KYC verification before processing any financial transactions.

If bdbt discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data collected from that individual to the extent not required for legal compliance purposes, and report the matter where required by applicable law.

The bdbt Platform integrates third-party game content and services provided by licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own privacy and data processing agreements. While bdbt has contractual obligations in place with these providers, bdbt is not responsible for their independent data processing activities.

Payment processing on the bdbt Platform is handled by bKash, Nagad, Rocket, Upay, and partner Bangladeshi banking institutions. When you initiate a deposit or withdrawal, your financial data is transmitted securely to the relevant payment provider and processed in accordance with that provider's privacy and security policies.

The bdbt Platform does not contain embedded social media plugins, third-party advertising trackers, or cross-site analytics tools that would result in your data being shared with social networks or advertising platforms without your explicit consent.

bdbt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The version number and effective date displayed at the top of this document indicate the current version in force.

When material changes are made — meaning changes that affect the types of data we collect, how we use it, or your rights — bdbt will notify all registered players by email to the address on file no less than 14 days before the updated policy takes effect. Non-material amendments, such as corrections of typographical errors or clarifications that do not alter your substantive rights, may take effect immediately upon publication.

Continued use of the bdbt Platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should contact [email protected] to exercise your right to request account closure and data deletion before the revised policy takes effect.

For all privacy-related enquiries, data rights requests, or concerns about how bdbt handles your personal data, please contact our support team using the details below. All communications are handled in English on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Security Concerns: "Security Report"
• Response Target: Within 1 hour for urgent matters; within 30 days for formal data rights requests
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST), UTC+6

When submitting a data rights request, please include your registered email address and a brief description of the right you wish to exercise. bdbt may need to verify your identity before processing your request to ensure the security of your personal data.