bdtbtd Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data bdtbtd collects from players in Bangladesh, why we collect it, how we use and protect it, and what rights you have over your information. We believe in full transparency — no hidden data practices, no unexplained third-party sharing.
Our Commitment
Six Privacy Principles We Live By
Before the detailed legal text, these six principles capture how bdtbtd approaches player data privacy at every level of the organisation.
Minimal Collection
bdtbtd collects only the personal data that is strictly necessary to deliver our services, comply with legal obligations, and prevent fraud. We do not collect data speculatively or for purposes we cannot clearly justify to our players.
Security by Design
All personal data held by bdtbtd is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel only, subject to strict internal access controls and audit logging.
Player Control
You have meaningful control over your personal data at bdtbtd. You can access, correct, download, or request deletion of your data at any time by contacting our support team. We will respond to all data rights requests within 30 days.
Transparent Sharing
bdtbtd does not sell your personal data to third parties. Where we share data with partners — such as payment processors and game providers — we do so only under strict data processing agreements that bind those parties to confidentiality and security standards equivalent to our own.
Time-Limited Retention
Personal data is retained only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. Once the retention period has expired, data is securely deleted or anonymised. Retention schedules are reviewed annually.
Regulatory Compliance
bdtbtd maintains its data handling practices in alignment with international data protection standards , including anti-money laundering (AML) record-keeping requirements and KYC identity verification obligations. Our compliance team conducts regular internal audits to ensure our data practices remain current and lawful.
Section 1
Data Controller Information
For the purposes of this Privacy Policy, the data controller responsible for your personal information is bdtbtd, an internationally operated online gaming platform serving the Bangladesh market. The platform is accessible at bdtbtd.net.
As the data controller, bdtbtd determines the purposes and means by which your personal data is processed. All data processing activities described in this Privacy Policy are carried out by bdtbtd or by authorised third-party processors acting under bdtbtd's instructions and bound by written data processing agreements.
If you have any questions, concerns, or requests relating to your personal data or to this Privacy Policy, you may contact the bdtbtd data protection team using the following details:
- Email: support@bdtbtd.net (subject line: "Privacy / Data Request")
- Response time: Within 72 hours for general enquiries; within 30 calendar days for formal data rights requests
- Support hours: 24/7 live chat available inside your account; email monitored daily including weekends
Dedicated Data Requests: To exercise any of your data rights described in Section 9 of this policy — including access, correction, portability, or erasure — please email support@bdtbtd.net with the subject line "Data Rights Request" and include your registered account username and the specific right you wish to exercise. We will acknowledge your request within 48 hours.
Section 2
What Personal Data We Collect
bdtbtd collects personal data from players through several channels: directly when you register an account or complete KYC verification, automatically when you use the platform, and occasionally from trusted third-party sources such as payment processors. The following table summarises the categories of data we collect and the source of each category.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number, photograph | Provided directly by you during registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address in Bangladesh | Provided directly by you during registration |
| Financial Data | bKash/Nagad/Rocket mobile wallet numbers, bank account details, transaction history, deposit and withdrawal records | Provided by you and received from payment processors (bKash, Nagad, Rocket, Upay) |
| Gaming Activity Data | Game sessions, wager amounts, bet history, win/loss records, game preferences, bonus usage | Generated automatically through your use of the bdtbtd platform |
| Technical Data | IP address, device type, operating system, browser type and version, session timestamps, login history | Collected automatically by our servers and analytics systems |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Generated when you contact bdtbtd support |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off period records, problem gambling assessments | Provided directly by you through the responsible gaming tools in your account |
bdtbtd does not collect special category data (such as racial or ethnic origin, health data, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming support interaction, in which case it is handled with the highest level of confidentiality and used only to provide the support you have requested.
Section 3
How We Use Your Personal Data
bdtbtd uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes stated here without first obtaining your explicit consent.
- Account creation and management: To register your bdtbtd account, verify your identity, maintain your account profile, and enable you to log in securely.
- Service delivery: To process your deposits and withdrawals, make games available to you, record your betting activity, and calculate and credit winnings to your account balance.
- Identity and age verification (KYC): To verify that you meet the minimum age requirement of 18 years and that your identity matches the details provided during registration. This is both a regulatory obligation and a responsible gaming measure.
- Anti-money laundering (AML) compliance: To monitor transactions for patterns consistent with money laundering or terrorist financing, report suspicious activity where required by law, and maintain the records required under applicable AML regulations.
- Fraud prevention and platform security: To detect and prevent fraudulent accounts, bonus abuse, collusion, and other forms of prohibited conduct described in the bdtbtd Terms & Conditions.
- Customer support: To respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support service based on interaction history.
- Responsible gaming: To monitor your gaming activity for indicators of problem gambling, administer self-exclusion and deposit limit tools, and fulfil our duty of care obligations to players.
- Marketing communications: To send you promotional offers, bonus notifications, and news about bdtbtd — but only where you have opted in to receive marketing communications. You may withdraw your marketing consent at any time from your account settings or by emailing support@bdtbtd.net.
- Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, design, and game selection of the bdtbtd platform. Individual player data is not used for this purpose without anonymisation.
Section 4
Legal Basis for Processing
bdtbtd processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual necessity: The processing is necessary to perform the contract between you and bdtbtd — including operating your account, processing payments, and delivering gaming services.
- Legal obligation: The processing is required to comply with applicable legal requirements, including AML record-keeping obligations, KYC identity verification mandates, and cooperation with law enforcement or regulatory authorities.
- Legitimate interests: The processing is necessary for bdtbtd's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and general business operations, provided those interests are not overridden by your privacy rights.
- Consent: For marketing communications and certain non-essential cookies and tracking technologies, bdtbtd relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Note on Withdrawal of Consent: Withdrawing your consent to marketing communications or non-essential cookies will not affect your ability to continue using the bdtbtd platform. Core account functionality is delivered under contractual and legal obligation bases and does not depend on your marketing consent.
Section 5
Data Sharing and Third Parties
bdtbtd does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and necessary circumstances, and in every case under appropriate contractual safeguards:
- Payment processors: bKash, Nagad, Rocket, Upay, and local bank partners receive the financial data necessary to process your deposits and withdrawals. These organisations process your data as independent data controllers under their own privacy policies, which we recommend you review.
- Game providers: Third-party game studios and live casino providers — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — receive limited technical data (such as player session tokens) necessary to deliver their games on the bdtbtd platform. These providers are contractually prohibited from using this data for any purpose other than game delivery.
- Identity verification services: bdtbtd may engage specialist KYC providers to assist with automated identity and age verification. These providers process your identity documents under strict data processing agreements and are not permitted to retain your documents beyond the verification process.
- Fraud detection partners: bdtbtd uses third-party fraud detection and analytics tools to identify suspicious account activity. These services receive technical and behavioural data but are not provided with your full identity documents or financial account details.
- Legal and regulatory authorities: bdtbtd will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by a valid legal obligation, court order, or regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.
- Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bdtbtd's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified in advance of any such transfer, and the receiving entity will be required to honour the commitments made in this Privacy Policy.
All third parties with whom bdtbtd shares personal data are required to process that data solely for the specified purpose, maintain appropriate security measures, and return or destroy the data once the purpose has been fulfilled. bdtbtd conducts due diligence on all data processors before engagement and reviews those relationships periodically.
Section 6
Cookies and Tracking Technologies
The bdtbtd platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by our web server when you visit bdtbtd.net. Cookies do not contain executable code and cannot directly identify you as a named individual — they recognise your device or browser.
bdtbtd uses the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, enable secure payment processing, and support responsible gaming tools. These cookies cannot be disabled without impairing platform functionality.
- Performance and analytics cookies: These cookies collect anonymised information about how players use the bdtbtd platform — which pages are visited most frequently, how long sessions last, and where errors occur. We use this data to improve platform performance. These cookies require your consent.
- Functionality cookies: These cookies remember your preferences (such as language settings, game display preferences, and notification choices) to personalise your experience. These cookies require your consent.
- Marketing and targeting cookies: These cookies track your interaction with bdtbtd promotional content and, where consent has been given, may be used to deliver relevant promotional offers within the platform. bdtbtd does not use cross-site advertising tracking cookies that follow you across unrelated third-party websites.
You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core platform features including account login and payment processing. bdtbtd does not use fingerprinting technologies or any tracking method designed to circumvent browser-level privacy controls.
Session Cookies vs. Persistent Cookies: Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period (typically 30 to 365 days depending on their purpose) and are deleted automatically on expiry. You can delete all cookies at any time through your browser settings.
Section 7
Data Retention Periods
bdtbtd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account plus 5 years after closure | AML regulatory obligation |
| Financial transaction records | 7 years from the date of each transaction | AML and financial record-keeping obligation |
| KYC identity documents | 5 years after account closure | AML regulatory obligation |
| Gaming activity logs | 3 years from date of each session | Dispute resolution and fraud prevention |
| Support communications | 2 years from date of last interaction | Legitimate interest — complaint management |
| Responsible gaming records | Duration of self-exclusion plus 5 years | Duty of care and regulatory obligation |
| Marketing preferences | Until consent is withdrawn or account is closed | Consent |
Upon expiry of the relevant retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.
Section 8
How We Protect Your Data
bdtbtd takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- Encryption in transit: All data transmitted between your device and the bdtbtd platform is protected using TLS 1.3 (256-bit SSL encryption). This applies to account login, payment processing, game data, and all support communications.
- Encryption at rest: Personal and financial data stored on bdtbtd servers is encrypted using AES-256. Database access is restricted to authorised systems and personnel only.
- Access controls: Internal access to player data is governed by a strict role-based access control (RBAC) system. Employees can only access the data categories necessary for their specific job function. All access is logged and subject to regular audit review.
- Two-factor authentication: All internal bdtbtd systems that hold player data require two-factor authentication for staff access. Players are also strongly encouraged to enable 2FA on their own accounts.
- Security monitoring: Our security team operates continuous intrusion detection and monitoring systems. Any anomalous access pattern triggers an immediate automated alert for investigation.
- Penetration testing: The bdtbtd platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
- Data breach response: In the event of a personal data breach, bdtbtd has a documented incident response procedure. Affected players will be notified promptly where the breach is likely to result in a risk to their rights and interests, and the relevant authorities will be informed as required.
While bdtbtd maintains robust technical security measures, no online platform can guarantee absolute security against all possible threats. Players are responsible for maintaining the security of their own login credentials and for reporting any suspected unauthorised access to their account without delay.
Section 9
Your Data Rights
As a bdtbtd player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bdtbtd.net with the subject line "Data Rights Request". We will respond within 30 calendar days.
- Right of access: You have the right to request a copy of all personal data bdtbtd holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as email address or phone number, you can update most information directly from your account settings.
- Right to erasure: In certain circumstances — for example where your data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request that bdtbtd delete your personal data. Note that some data categories (such as AML and KYC records) are subject to mandatory retention periods and cannot be deleted before those periods expire.
- Right to data portability: Where data is processed by automated means on the basis of consent or contractual necessity, you have the right to receive your data in a portable electronic format and to request that it be transmitted to another service provider where technically feasible.
- Right to restrict processing: You may request that bdtbtd restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
- Right to object: You have the right to object to processing carried out on the basis of legitimate interests at any time. You also have an absolute right to object to the use of your data for direct marketing at any time.
- Right to withdraw consent: Where processing is based on your consent (such as marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Identity Verification for Data Requests: To protect your privacy, bdtbtd will verify your identity before fulfilling any data rights request. This typically requires confirmation of your registered email address and account username. In some cases we may request additional verification. We will not fulfil data rights requests that cannot be matched to a verified account holder.
Section 10
Children and Minors
The bdtbtd platform is strictly restricted to adults aged 18 years and above. bdtbtd does not knowingly collect personal data from any person under the age of 18. Age verification is a mandatory step in the account registration and KYC process, and any account found to belong to an underage individual will be closed immediately and all associated data deleted as soon as the violation is confirmed.
If you are a parent or guardian and have reason to believe that a minor under your care has registered on the bdtbtd platform or has provided personal data to bdtbtd without your consent, please contact us immediately at support@bdtbtd.net. We will investigate and, where confirmed, close the account and delete the associated data promptly.
bdtbtd does not direct any marketing communications at individuals under the age of 18, and we do not use the personal data of any player to deliver advertising to minors on any external platform.
Section 11
Updates to This Privacy Policy
bdtbtd reviews this Privacy Policy regularly and will update it to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this page indicates when the current version came into force.
Where a material change is made to this Privacy Policy — one that meaningfully affects your rights or how your data is used — bdtbtd will notify you via one or more of the following channels: a notification displayed within your account upon login, an email to your registered address, or a prominent notice on the bdtbtd website. We will provide at least 14 days' notice before material changes take effect, except where a shorter period is required to comply with a legal obligation.
Your continued use of the bdtbtd platform following the effective date of a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you should cease using the platform and contact support to request account closure. The previous version of this Privacy Policy will remain available upon request for a period of 12 months following any update.
The current version of this Privacy Policy is always accessible at bdtbtd.net/privacy-policy. We recommend reviewing it periodically so you remain informed about how we protect your personal information.
Questions About This Policy: If you have any questions, concerns, or feedback about this Privacy Policy or about bdtbtd's data practices in general, please reach out to our team at support@bdtbtd.net. We are committed to handling all privacy enquiries promptly, professionally, and in plain English.
Your Data Is Safe With bdtbtd
Now that you know how bdtbtd handles your personal information, you can explore the platform with confidence. From cricket betting to live casino games and slots — your data, your account, and your funds are all protected. 18+ only. Please play responsibly.