bdttk Privacy
Policy

This Privacy Policy describes how bdttk collects, uses, stores, and protects personal data belonging to players and visitors who interact with the bdttk platform. It is intended to be clear, transparent, and written in plain English so that every player based in Bangladesh — and anywhere else the platform is accessible — can understand precisely how their information is handled.

This policy should be read alongside the bdttk Terms & Conditions and the Responsible Gaming page, both of which contain provisions that interact with how we collect and process certain categories of data.

The English-language version of this Privacy Policy is the sole authoritative version. In the event of any inconsistency between this document and any translated or localised rendering, the English text prevails.

Effective date: This version of the Privacy Policy took effect on 1 January 2026. Previous versions are available upon request by contacting our support team.

For the purposes of this Privacy Policy, bdttk is the data controller — the entity that determines the purposes for which and the means by which your personal data is processed. All queries, requests, and complaints relating to your personal data should be directed to bdttk using the contact details provided in Section 15 of this policy.

Where bdttk engages third-party service providers — such as game providers, payment processors, or KYC verification partners — those parties act as data processors on bdttk's behalf, subject to contractual data processing agreements that require them to handle personal data only in accordance with bdttk's instructions and in compliance with applicable data protection standards.

bdttk collects personal data in the following categories. We collect only what is genuinely necessary for the operation of the platform and the fulfilment of our legal obligations.

bdttk does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion or support request. In such cases the data is used solely to provide the requested responsible gaming support and is handled with additional care.

bdttk collects personal data through the following channels and mechanisms:

• Direct registration: When you create a bdttk account, you actively provide identity and contact data through the registration form.
• Account usage: As you use the platform — depositing, playing games, placing bets, withdrawing funds — account activity and financial data are generated automatically and recorded.
• KYC submissions: When prompted to complete identity verification, you upload documents directly to the platform's secure KYC module.
• Payment transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, transaction metadata is received from the relevant payment provider and associated with your account.
• Support interactions: When you contact bdttk via live chat or email, the content of that communication is collected and stored as communications data.
• Automated technical collection: Cookies, server logs, and similar technologies automatically collect technical data when you access the platform. See Section 8 for full details on cookies.
• Third-party verification partners: Where bdttk uses third-party KYC or fraud-detection services, those services may return data about you (for example, identity match scores) that is associated with your account record.

bdttk processes personal data under the following legal bases. At least one of these bases applies to every processing activity described in this policy:

1. Contractual necessity: Processing is necessary to perform the contract between bdttk and the player — specifically, to operate the player's account, process deposits and withdrawals, settle bets, and deliver the gaming services the player has requested.
2. Legal obligation: Processing is necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, know-your-customer (KYC) obligations, and record-keeping requirements.
3. Legitimate interests: Processing is necessary for bdttk's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and improving the quality of services — provided those interests are not overridden by the rights and interests of the individual player.
4. Consent: For processing activities that are not covered by the above bases — in particular, the sending of marketing communications and the use of non-essential cookies — bdttk relies on the player's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

The personal data bdttk holds about you is used for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and process account closure requests.
• Payment processing: To receive deposits from and send withdrawals to your registered payment methods (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), and to maintain accurate financial records.
• Age and identity verification: To confirm that you are at least 21 years of age and that the identity you have provided is genuine, as required under our eligibility policy.
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit and loss limits set by the player.
• Customer support: To respond to support requests, resolve disputes, and maintain a record of communications for quality assurance and compliance purposes.
• Legal and regulatory compliance: To fulfil AML reporting obligations, respond to lawful requests from competent authorities, and retain records as required by applicable law.
• Platform improvement: To analyse aggregated usage data and identify areas where the platform's performance, game selection, or user experience can be improved. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: To send promotional emails, SMS messages, or in-platform notifications about bonuses, new games, tournaments, and seasonal promotions — only where you have given explicit consent to receive such communications.

bdttk will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing notice and, where required, obtaining your consent.

bdttk does not sell, rent, or trade personal data to third parties for their own commercial purposes. Data is shared with third parties only in the following limited circumstances:

• Game providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi receive the minimum data necessary to deliver their games within the bdttk platform (typically a session token and player identifier). They do not receive your full identity data.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction data necessary to process deposits and withdrawals. Each processor operates under its own privacy policy, which we encourage you to review.
• KYC and identity verification partners: Third-party KYC service providers receive identity documents and data solely to perform identity and age verification on bdttk's behalf.
• Fraud detection services: Fraud prevention partners may receive technical data (IP addresses, device fingerprints, behavioural signals) to assess the risk profile of account activity.
• Legal and regulatory authorities: bdttk may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory obligation. bdttk will, where legally permitted, notify affected players of such disclosures.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bdttk's business, personal data held by bdttk may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

bdttk uses cookies and similar tracking technologies to operate core platform functionality, maintain session security, and — with your consent — to analyse usage patterns and improve the player experience.

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Blocking strictly necessary cookies will impair or prevent access to the bdttk platform. Blocking analytics or marketing cookies will not affect your ability to log in, deposit, play, or withdraw.

To withdraw consent for analytics or marketing cookies at any time, contact us at [email protected] with the subject line "Cookie Opt-Out".

bdttk takes the security of personal data seriously and applies a layered set of technical and organisational measures to protect data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your device and the bdttk platform is encrypted using TLS (Transport Layer Security). The platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data — including identity documents and financial records — is stored in encrypted form on bdttk's servers.
• Access controls: Access to personal data is restricted to authorised bdttk personnel and contractors on a strict need-to-know basis. Access privileges are reviewed and revoked promptly when no longer required.
• OTP authentication: Login from unrecognised devices triggers an OTP (one-time password) verification step to prevent unauthorised account access.
• Monitoring and logging: bdttk maintains audit logs of access to personal data and monitors for anomalous access patterns as part of ongoing security operations.
• Incident response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, bdttk will notify affected individuals promptly and take immediate remedial action.

While bdttk applies industry-standard security measures, no system is entirely immune to security incidents. Players are encouraged to use strong, unique passwords for their bdttk accounts and to enable OTP authentication. Never share your password or OTP codes with anyone, including individuals claiming to represent bdttk support.

bdttk retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data has been anonymised, it may be retained indefinitely for aggregated analytical purposes.

Where a player requests account closure, bdttk will cease active use of their personal data for marketing and gameplay purposes immediately. Retention of data for compliance purposes will continue for the periods specified above, regardless of account status.

As a player whose personal data is processed by bdttk, you hold the following rights in relation to your data. To exercise any of these rights, contact us at [email protected] with "Data Privacy Request" in the subject line. We will respond within 30 days of receiving a valid request, and we will not charge a fee for standard requests.

bdttk may send you promotional communications — including emails, SMS messages, and in-platform notifications — about bonuses, new game launches, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and platform updates. These communications are sent only where you have given explicit consent at registration or subsequently through your account settings.

You may withdraw consent for marketing communications at any time by:

• Clicking the unsubscribe link included in any promotional email sent by bdttk;
• Updating your communication preferences in your account settings dashboard; or
• Contacting bdttk support at [email protected] with the subject line "Withdraw Marketing Consent".

Withdrawal of marketing consent will be processed within 5 business days (Bangladesh Standard Time). Please note that withdrawing marketing consent does not affect the receipt of essential service communications, such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages. These operational communications are necessary for the performance of your contract with bdttk and cannot be opted out of while your account is active.

The bdttk platform is strictly intended for individuals who are 21 years of age or older. bdttk does not knowingly collect or process personal data belonging to individuals under the age of 21, and does not permit individuals under 21 to register for or use the platform under any circumstances.

Age verification is performed as part of the KYC process for all newly registered accounts. Where bdttk has reason to believe that a player may be under 21, the relevant account will be suspended immediately and all funds held will be frozen pending verification. If verification confirms the player is under 21, the account will be permanently closed and all personal data associated with it will be deleted, except where retention is required by law.

If you are a parent or guardian and believe that a minor may have registered a bdttk account using false identity information, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action as a matter of priority.

bdttk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this policy, bdttk will:

• Update the "Effective date" at the top of this page to reflect the date the revised policy takes effect;
• Display a prominent notice on the bdttk platform for a minimum of 14 days following the publication of material changes; and
• Where the change materially affects your rights or how we use your personal data, send a direct notification to your registered email address at least 14 days before the changes take effect.

Your continued use of the bdttk platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a revised policy, you should cease using the platform and request account closure before the effective date of the changes.

Previous versions of this Privacy Policy are archived and available upon written request to [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdttk handles your personal data, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within 48 hours during standard business hours (Bangladesh Standard Time, UTC+6, Monday to Sunday).

When submitting a data rights request, please include your registered username or email address, a clear description of your request, and any relevant account reference numbers. This will allow us to process your request efficiently and securely.

bdttk is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with the response you receive, you have the right to escalate your concern through any available legal channel in your jurisdiction.