bdtk33 Privacy Policy

bdtk33 ("we", "us", "our") operates the online casino and sports betting platform accessible at bdtk33.bid (the "Platform"). We are committed to handling the personal data of our players, visitors, and prospective users with transparency, care, and respect for individual privacy rights.

This Privacy Policy sets out in clear terms what categories of personal data bdtk33 collects, the purposes for which that data is processed, the conditions under which it may be disclosed to third parties, how long it is retained, the security measures we employ to protect it, and the rights available to you as a data subject.

This policy should be read alongside the bdtk33 Terms & Conditions and Responsible Gaming policy, both of which are published on the Platform. Collectively these documents form the full framework governing your relationship with bdtk33.

Where this policy refers to "personal data", it means any information that directly or indirectly identifies a living individual — including names, contact details, device identifiers, financial information, and behavioural data generated through your use of the Platform.

bdtk33 collects personal data from you in three principal ways: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party sources such as payment processors and identity verification providers.

Information You Provide Directly:

• Full legal name and date of birth;
• Residential address (including district, division, and postal code within Bangladesh);
• Email address and mobile phone number;
• Username and encrypted password;
• Government-issued identity document numbers submitted for KYC verification (National ID, passport, or driving licence);
• Payment method details (bKash/Nagad mobile numbers, bank account references — not full card numbers);
• Communications sent to customer support, including live chat transcripts and email correspondence;
• Self-declared responsible gaming preferences (deposit limits, self-exclusion elections).

Information Collected Automatically:

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Session data including pages visited, time spent, and navigation path;
• Game history, betting activity, wagering patterns, and transaction logs;
• Cookie and similar tracking technology data (see Section 7);
• Login timestamps and access logs.

Information from Third Parties:

• Identity verification status and fraud-risk scores from KYC/AML service providers;
• Payment confirmation and transaction status data from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Fraud alerts or sanctions screening results from compliance data providers.

bdtk33 processes personal data only for defined, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which your data is used are set out in the table below.

bdtk33 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on players without providing an opportunity to request human review of that decision.

For each category of processing activity, bdtk33 relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between bdtk33 and you, including account management, game delivery, and payment processing;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and fraud prevention duties;
• Legitimate Interests: Processing carried out in the legitimate interests of bdtk33 or third parties, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing based on your freely given, informed, and specific consent, principally for the sending of promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bdtk33 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following specific and controlled circumstances:

• Payment Processors: We share the minimum necessary data with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
• Identity Verification Providers: We share identity document data with licensed KYC and AML verification service providers to confirm your identity and assess fraud or sanctions risk as required by our compliance obligations.
• Game Providers: Where you play games supplied by third-party studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Spribe, Ezugi, or Microgaming), those providers may receive session and game-play data necessary to operate the game environment. Game Providers are subject to their own data security standards.
• IT Infrastructure and Security Providers: We use trusted third-party hosting, content delivery, and cybersecurity providers who process data on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities when required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bdtk33's assets, personal data held by bdtk33 may be transferred to the acquiring entity. We will notify affected players prior to any such transfer and before personal data becomes subject to a different privacy policy.

All third parties with whom bdtk33 shares personal data are required, by contract, to process that data only for the purposes for which it was shared, to maintain appropriate security standards, and to delete or return it when the processing purpose has been fulfilled.

The security of your financial data is treated with the highest priority at bdtk33. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, or a Visa/Mastercard, your payment credentials are transmitted directly to the relevant payment gateway over an encrypted connection.

bdtk33 does not store full card numbers, mobile banking PINs, or one-time passwords (OTPs) on its own servers. Payment method references retained by bdtk33 are limited to tokenised identifiers, last four digits (where applicable), and the associated registered name — sufficient for reconciliation and fraud prevention purposes only.

All financial transactions on the Platform are denominated in Bangladeshi Taka (৳ / BDT). Transaction records are retained in accordance with the data retention schedule in Section 8 and are accessible to you via your account dashboard at any time.

bdtk33 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform effectively, maintain your login session, protect against cross-site request forgery, and gather aggregated analytics data to improve user experience.

The categories of cookies used by bdtk33 are as follows:

• Strictly Necessary Cookies: Essential for core Platform functionality, including login session management, security tokens, and load balancing. These cookies cannot be disabled without breaking the Platform. No consent is required for these cookies.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and game lobby filter selections. These enhance your experience but are not essential to platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players navigate and interact with the Platform. This data helps bdtk33 identify performance issues, improve page layouts, and prioritise feature development. Individual players are not identifiable from this data.
• Fraud Prevention Cookies: Used to detect suspicious activity, multiple account creation attempts, and abnormal usage patterns that may indicate fraud or security threats.

bdtk33 does not use third-party behavioural advertising cookies or cross-site tracking pixels that would allow third parties to build a profile of your browsing behaviour across other websites.

Most browsers allow you to control or delete cookies through their settings. Please be aware that disabling strictly necessary cookies will prevent you from logging in to or using the Platform properly.

bdtk33 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements;
• KYC and identity verification records: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications: Retained for three (3) years from the date of the most recent communication in a support thread;
• Analytics and log data: Aggregated analytics data is retained indefinitely in anonymised form. Raw access logs are retained for up to twelve (12) months;
• Marketing consent records: Retained for the duration of the consent plus three (3) years following withdrawal of consent, as evidence of compliance.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is feasible.

bdtk33 implements a multi-layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include but are not limited to the following:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Access controls and role-based permissions ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Regular internal security audits and vulnerability assessments;
• Intrusion detection and prevention systems monitoring for abnormal activity;
• Secure coding practices and regular third-party penetration testing of the Platform;
• Staff training on data protection obligations and secure data handling practices.

Notwithstanding these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bdtk33 will notify affected players without undue delay in accordance with applicable notification obligations.

You also play a role in keeping your account secure. You are responsible for maintaining the confidentiality of your bdtk33 login credentials and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account.

Subject to applicable law and certain conditions and exceptions, you have the following rights in respect of the personal data bdtk33 holds about you:

• Right of Access: You may request a copy of all personal data bdtk33 holds about you, along with information about how it is being used. Requests will be fulfilled within 30 days.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update many account details directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where you object to processing and there are no overriding legitimate grounds. This right does not apply where retention is required by law (e.g., AML record-keeping).
• Right to Restriction of Processing: You may request that bdtk33 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that the personal data you have provided be supplied to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data where that processing is based on bdtk33's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient information to allow bdtk33 to verify your identity before responding. bdtk33 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

The bdtk33 Platform is strictly intended for adults aged 18 years and above. bdtk33 does not knowingly collect, process, or retain personal data relating to individuals under the age of 18. If we become aware that personal data has been inadvertently collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered on the bdtk33 Platform or provided personal information without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

The bdtk33 Platform primarily serves players located in Bangladesh. However, because bdtk33 uses certain technology infrastructure providers and Game Providers whose servers may be located outside Bangladesh, your personal data may in some cases be processed in jurisdictions other than your country of residence.

Where such international transfers occur, bdtk33 takes steps to ensure that your personal data receives an equivalent level of protection to that which it would receive if processed within Bangladesh. These steps may include:

• Entering into data processing agreements with receiving parties that incorporate standard contractual clauses or equivalent data transfer safeguards;
• Transferring data only to jurisdictions that maintain adequate data protection standards;
• Applying contractual obligations on receiving parties to maintain security standards consistent with those described in this policy.

By using the bdtk33 Platform, you acknowledge that your personal data may be transferred and processed internationally as described in this section.

bdtk33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material, we will make reasonable efforts to notify registered players by displaying a prominent notice on the Platform or by sending a notification to the email address associated with your account before the revised policy takes effect.

The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this page periodically to remain informed about how bdtk33 protects and uses your personal data. Continued use of the Platform following the publication of any revised policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bdtk33's handling of your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24 hours a day, 7 days a week, directly from your account dashboard
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to resolve them within 30 calendar days

bdtk33 serves players across all divisions and major cities of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our support team is available in English around the clock to assist with any privacy-related matters.