bdtk Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how bdtk ("bdtk", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of players and visitors ("you", "your") who access or use the bdtk Platform at bdtk.vin. By registering an account on bdtk or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which also govern your use of the bdtk Platform. We may update this Policy periodically to reflect changes in our practices or applicable law. The most current version will always be available on this page, and material changes will be communicated to registered players via their registered email address or via a prominent notice on the Platform.

Our Privacy Commitments

1. Information We Collect

bdtk collects personal information in order to provide and improve the Platform, fulfil our legal obligations, and deliver a tailored, secure experience to players in Bangladesh. The categories of information we collect are described below.

Information You Provide Directly

When you register an account, make a deposit, submit a withdrawal request, or contact our support team, you may provide us with the following categories of personal information:

• Identity information: full name, date of birth, gender, and government-issued identification document number.
• Contact information: email address, mobile telephone number, and residential address (city, district, and postal code).
• Account credentials: username and encrypted password.
• Financial information: payment method details (bKash/Nagad/Rocket mobile number or card last four digits), deposit and withdrawal history, and account balance records.
• Verification documents: copies of national ID card, passport, or other government-issued documents submitted during KYC verification.

Information Collected Automatically

When you access or use the bdtk Platform, we automatically collect certain technical and behavioural information through cookies, log files, and similar tracking technologies:

• Device and browser information: device type, operating system, browser type and version, screen resolution, and language settings.
• Network information: IP address, internet service provider, and approximate geographic location derived from IP address (country and city level only — we do not track precise GPS coordinates).
• Usage data: pages visited, game sessions played, bets placed, session duration, click patterns, and navigation paths within the Platform.
• Communications data: records of any communications between you and bdtk's support team, including chat logs, email correspondence, and support ticket history.

Information from Third Parties

In certain circumstances, bdtk may receive information about you from third parties, including identity verification service providers used during KYC processing, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who provide transaction confirmation data, and fraud-prevention and anti-money-laundering screening services. We use this third-party data only for the purposes of verifying your identity, processing your transactions, and fulfilling our compliance obligations.

2. How We Use Your Information

bdtk uses your personal information only for legitimate, lawful purposes that are directly connected to the operation of our Platform and the delivery of our services. Specifically, we use your data for the following purposes:

• Account management: to create, verify, and maintain your player account; to authenticate your identity when you log in; and to communicate account-related updates to you.
• Transaction processing: to process deposits, withdrawals, and bonus payments; to verify payment method ownership; and to maintain accurate financial records.
• Legal and compliance obligations: to conduct KYC verification, perform anti-money-laundering checks, comply with applicable tax reporting requirements, and respond to lawful requests from regulatory or law enforcement authorities.
• Platform operation and improvement: to monitor Platform performance, diagnose technical issues, analyse usage patterns, and develop new features and services that better serve Bangladesh-based players.
• Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, collusion, account takeovers, and other security threats to the Platform and its players.
• Responsible gaming: to monitor player behaviour for indicators of problem gambling; to apply player-requested deposit limits, self-exclusion periods, and reality-check reminders; and to comply with our responsible gaming obligations.
• Marketing and promotions: to send you relevant promotional offers, seasonal bonuses (such as Eid specials or BPL cricket promotions), and platform updates — but only where you have given your consent to receive such communications, or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

3. Legal Basis for Processing

bdtk processes your personal data only where there is a valid legal basis for doing so. Depending on the specific processing activity, we rely on one or more of the following legal bases:

• Contractual necessity: processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your account (e.g. processing deposits, paying out winnings, maintaining your account).
• Legal obligation: processing required to comply with applicable law, including anti-money-laundering obligations, KYC requirements, tax reporting, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: processing necessary for our legitimate business interests (e.g. fraud prevention, Platform security, product improvement, and direct marketing to existing customers) where those interests are not overridden by your privacy rights.
• Consent: processing based on your freely given, informed consent (e.g. receiving promotional email communications). Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

4. Sharing Your Information

bdtk does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We may share your personal data with the following categories of third parties only where necessary and for the limited purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit and withdrawal transactions. These providers have their own privacy policies and are subject to their own data protection obligations.
• Identity and compliance service providers: third-party KYC verification and anti-money-laundering screening providers who assist us in verifying your identity and meeting our compliance obligations. These providers act as our data processors under written agreements and are prohibited from using your data for any purpose other than providing their contracted services to bdtk.
• Technology and infrastructure providers: hosting, cloud storage, cybersecurity, and analytics service providers who process data on our behalf under strict confidentiality agreements. These providers do not have independent access to your data and may only process it on our written instructions.
• Law enforcement and regulatory authorities: where we are required by law, court order, or regulatory instruction to disclose your personal data, we will do so to the minimum extent necessary to comply with that requirement. Where permitted by law, we will attempt to notify you of any such disclosure in advance.

All third parties with whom bdtk shares personal data are bound by written data processing agreements that prohibit them from using your data for any purpose beyond the specific purpose for which it was shared, and that require them to implement appropriate technical and organisational security measures.

5. Payment Data and Financial Information

bdtk takes the security of your financial information particularly seriously. We do not store complete payment instrument details on our own servers. When you make a deposit via bKash, Nagad, Rocket, or Upay, only your registered mobile number associated with that service (as provided by you at the time of the transaction) is retained by bdtk for record-keeping and withdrawal reconciliation purposes. For card transactions processed via Visa or Mastercard, only the last four digits of your card number and the card's expiry month and year are stored; full card numbers and CVV codes are never retained.

All payment transaction data is transmitted using TLS encryption. Transaction logs are retained for a minimum of five years in accordance with our financial record-keeping and anti-money-laundering obligations. Access to financial records is restricted to authorised bdtk personnel with a documented need to access such information, and all access is logged and audited.

6. Cookies and Tracking Technologies

bdtk uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website. We do not use cookies to collect sensitive personal information or to track you across third-party websites for advertising purposes.

Types of Cookies We Use

• Strictly necessary cookies: required for the Platform to function correctly, including maintaining your login session, remembering items in your account preferences, and enabling secure payment processing. These cookies cannot be disabled without preventing the Platform from functioning.
• Performance and analytics cookies: help us understand how players use the Platform by collecting anonymous, aggregated data about page visits, session duration, and feature usage. This data is used solely to improve the Platform's performance and user experience.
• Functional cookies: remember your preferences such as language settings, and personalise your experience on the Platform. Disabling these cookies may affect the functionality of certain features.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to use the Platform. For most mobile browsers on Android and iOS devices, cookie settings are accessible via the browser's Privacy or Settings menu.

7. Data Retention

bdtk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy our legal, regulatory, accounting, and reporting obligations. Specifically: account data and KYC documentation are retained for a minimum of five years following the closure of your account; transaction records are retained for a minimum of five years; communications data (support tickets, chat logs) are retained for three years; and technical log data (IP address logs, session logs) are retained for twelve months.

When personal data is no longer required for any retention purpose, it is securely deleted or anonymised in accordance with industry-standard data destruction procedures. Anonymised or aggregated data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

8. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that bdtk holds about you. To exercise any of these rights, please contact our support team using the email address provided in the Contact section of this Policy.

• Right of access: the right to request a copy of the personal data bdtk holds about you, together with information about how it is used and with whom it has been shared.
• Right of rectification: the right to request correction of inaccurate or incomplete personal data that bdtk holds about you.
• Right to erasure: the right to request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention.
• Right to restrict processing: the right to request that bdtk restricts the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: where bdtk processes your personal data on the basis of your consent or contractual necessity, the right to receive a copy of that data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where bdtk processes your personal data on the basis of your consent, the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all valid rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further thirty days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period. We will not charge a fee for handling your rights request unless it is manifestly unfounded or excessive.

9. Security Measures

bdtk implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data in transit between your device and our servers; AES-256 encryption for sensitive data at rest; strict role-based access controls limiting access to personal data to authorised personnel with a documented business need; regular penetration testing and vulnerability assessments; and comprehensive security incident response procedures.

While bdtk takes all reasonable and appropriate steps to safeguard your personal data, no method of transmission over the internet and no method of electronic storage is completely secure. We therefore cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and will take all appropriate steps to mitigate the impact of the breach.

10. Children's Privacy

The bdtk Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on bdtk without your knowledge, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

11. Third-Party Links and Services

The bdtk Platform may display references to third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) and payment partners (such as bKash and Nagad). While bdtk takes care to partner only with reputable third parties, we have no control over the privacy practices of external organisations and accept no responsibility or liability for them. This Privacy Policy applies only to the bdtk Platform. When interacting with any third-party service — including completing a payment via bKash or Nagad outside the bdtk interface — you are subject to that third party's own privacy policy.

12. Changes to This Privacy Policy

bdtk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where required by applicable law or where the changes significantly affect your rights, we will provide notice to registered players via their registered email address or via a prominent banner on the Platform.

Your continued use of the bdtk Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request the closure of your account. We encourage you to review this Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdtk handles your personal data, please contact our data support team. We are committed to responding to all privacy-related enquiries promptly and transparently.

Email: [email protected] (plain text — not a clickable link). Our support team operates seven days a week and aims to respond to all privacy enquiries within five business days.