Privacy Policy – How bdtbed Handles Your Personal Data

Our Commitment to Your Privacy

bdtbed processes personal data responsibly, transparently, and only for the purposes described in this policy.

This Privacy Policy ("Policy") describes how bdtbed ("we", "us", "our") collects, uses, stores, and protects the personal information you provide when you register, deposit, wager, or otherwise interact with the bdtbed Platform (the "Platform"), accessible at https://bdtbed.app. This Policy forms part of our Terms & Conditions and should be read alongside them.

By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform and may request account closure by contacting our support team.

We review and update this Policy periodically. Where changes are material, we will notify registered users by email and publish the revised version on this page with an updated effective date. Continued use of the Platform after an update constitutes your acceptance of the revised terms.

Our Six Privacy Principles

These principles guide every decision we make about your personal data at bdtbed.

Full Privacy Policy

1. Personal Data We Collect

When you register and use the bdtbed Platform, we collect the following categories of personal data:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where required as part of a mandatory identity verification process (for example, a government ID that incidentally includes a photograph).

2. How We Collect Your Data

bdtbed collects personal data through the following channels:

• Direct interactions: Information you provide when you register, complete identity verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automated technologies: When you visit or use the Platform, we automatically collect technical and usage data via server logs, cookies, and similar tracking technologies.
• Third-party payment processors: When you transact via bKash, Nagad, Rocket, Upay, or bank channels, those providers share transaction confirmation data with us to reconcile your account.
• Identity verification providers: Where we use third-party KYC (Know Your Customer) services to verify your identity documents, those providers return a verification result and summary data to us.

3. Cookies and Tracking Technologies

The bdtbed Platform uses cookies and similar technologies (local storage, session tokens) to operate core Platform functions, remember your preferences, maintain your login session, and analyse aggregate usage patterns. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without breaking core functionality (e.g., session authentication, security tokens).
• Functional cookies: Remember your preferences such as language and display settings. These improve your experience but are not essential.
• Analytical cookies: Help us understand how users navigate the Platform so we can improve performance, fix errors, and optimise game loading times. Data collected is aggregated and anonymised where possible.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. We do not use third-party advertising cookies or behavioural tracking networks that profile you across other websites.

4. How We Use Your Personal Data

bdtbed processes your personal data for the following specific purposes:

• To create and maintain your account and verify your identity in accordance with our responsible gaming and anti-money-laundering obligations.
• To process deposits, withdrawals, and bet settlements in Bangladeshi Taka (BDT) via your chosen payment method.
• To provide customer support and respond to your queries, complaints, and responsible gaming requests.
• To send you transactional communications (account confirmations, withdrawal notifications, security alerts) via email or SMS.
• To monitor Platform activity for fraud, collusion, match-fixing, money laundering, and other prohibited conduct.
• To enforce our Terms & Conditions and apply self-exclusion, deposit limits, or other responsible gaming restrictions you have requested.
• To analyse aggregate usage patterns and improve the Platform's performance, stability, and game selection.
• To send you promotional communications about bdtbed offers, where you have opted in to receive such messages. You may withdraw this consent at any time.
• To comply with applicable legal obligations and respond to lawful requests from competent authorities.

5. Legal Basis for Processing

bdtbed processes your personal data on the following legal bases:

• Contractual necessity: Processing required to operate your account, settle bets, and process payments under our Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, identity verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and aggregate analytics — where these interests do not override your fundamental rights.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

bdtbed does not sell or rent your personal data. We share data only with the following categories of recipients, and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process transactions you initiate.
• Identity verification providers: Third-party KYC services that verify the authenticity of identity documents you submit. These providers are contractually bound to process data only for verification purposes.
• Game technology providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account identifier (not your full identity) to deliver game sessions and settle outcomes.
• IT and security providers: Cloud hosting, DDoS protection, and security audit firms that process data only under strict confidentiality agreements and on our documented instructions.
• Competent authorities: Where we are legally required to disclose information to law enforcement, regulatory bodies, or courts of competent jurisdiction.

All third-party processors are vetted by bdtbed and are contractually required to maintain data security standards equivalent to our own. We do not transfer your personal data outside our operating jurisdiction except where strictly required for payment processing or game delivery, and only to providers who maintain equivalent data protection safeguards.

7. Data Retention

bdtbed retains your personal data for as long as your account remains active and for a defined period thereafter as required for legal, audit, and responsible gaming compliance purposes. Specific retention periods are as follows:

• Account and identity data: Retained for the life of your account plus 5 years after permanent account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• Transaction records: Retained for 7 years from the date of each transaction for financial audit and dispute resolution purposes.
• Communications records: Support chat transcripts and emails retained for 3 years from the date of the interaction.
• Technical and usage logs: Retained for 12 months for security monitoring and fraud detection purposes, then securely deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent plus 1 year after withdrawal, as evidence of your preferences.

When retention periods expire, personal data is securely deleted from active systems and purged from backups in accordance with our data lifecycle management procedures. Where deletion is not technically possible within a backup cycle, the data is isolated and prevented from further active processing until it can be permanently removed.

8. Your Data Rights

As a registered user of the bdtbed Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the email address displayed in the footer of this page:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of receiving your verified request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by bdtbed. Certain fields can be updated directly in your account settings.
• Right to erasure: You may request deletion of your personal data where we no longer have a legal basis to retain it. Note that data subject to legal retention requirements (transaction records, AML records) cannot be erased until the applicable retention period expires.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute over data accuracy is pending.
• Right to data portability: You may request your personal data in a structured, machine-readable format to transfer to another service provider where technically feasible.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. We will cease direct marketing processing immediately upon receiving your objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9. Minors and Age Restrictions

The bdtbed Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a user is under 21, we will immediately close their account, void any associated transactions, return any verifiable deposits, and permanently delete all associated personal data from our systems. If you believe a minor has registered on the Platform, please notify us immediately at the contact address in the footer of this page.

10. Security Measures

bdtbed implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including identity documents and payment records.
• Multi-factor authentication options for account access.
• Role-based access controls limiting employee access to personal data strictly to those who require it.
• Regular penetration testing and vulnerability assessments by qualified third-party security firms.
• Automated anomaly detection to identify and respond to suspicious login attempts, unusual transaction patterns, and potential data breach indicators.
• Incident response procedures including user notification in the event of a confirmed data breach affecting your personal data.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been compromised, please contact our support team immediately.

11. Changes to This Privacy Policy

bdtbed may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. When we make material changes, we will notify you by email to the address registered on your account and publish the updated Policy on this page with a revised effective date at the top. Minor clarifications that do not affect your rights may be made without specific notification. We encourage you to review this page periodically to stay informed of how bdtbed protects your personal data.

12. Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bdtbed holds about you, please contact our support team. Our contact email address is displayed as plain text in the footer of this page. We aim to respond to all privacy-related enquiries within 5 business days and to fully resolve data subject requests within 30 calendar days of identity verification.

All correspondence regarding data privacy should include your registered username, the email address associated with your account, and a clear description of your request or concern. This helps us locate your records and respond accurately without undue delay.