bdtki Privacy Policy — How We Handle Your Data

Privacy at a Glance

This Privacy Policy describes how bdtki collects, processes, stores, and shares the personal information of players who register and use the bdtki platform at bdtki.org. By creating an account or using any service on bdtki, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. This policy applies to all registered players in Bangladesh.

bdtki takes data protection seriously. We apply technical and organisational measures to safeguard your personal information from unauthorised access, loss, or disclosure. We do not sell, rent, or trade your personal data to third-party advertisers or marketing networks under any circumstances. Your data is used solely to operate the bdtki platform and deliver the services you have requested.

Information We Collect

bdtki collects personal information in two primary ways: information you provide directly when registering or interacting with the platform, and information collected automatically through your use of the site. The categories of information we collect are described below. We collect only the information necessary to deliver our services, comply with legal obligations, and protect platform integrity.

Information you provide directly:

• Registration details: full name, date of birth, registered mobile number (used for account verification and bKash or Nagad wallet association), and email address where provided
• Identity verification (KYC) documents: national identity card, passport, or other government-issued identification submitted to verify your age and identity as required by bdtki's KYC procedures
• Payment method information: the mobile wallet number or bank account details associated with deposits and withdrawals — bdtki does not store full card numbers or mobile banking PINs
• Support communications: the content of any messages, complaints, or requests you send to bdtki's customer support team

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers — used to ensure the platform renders correctly on your device and to detect suspicious activity
• Usage and behavioural data: pages visited, games played, bets placed, session duration, deposit and withdrawal history, and navigation patterns within the bdtki platform
• Cookie and session data: functional session cookies that maintain your logged-in state, and analytics cookies that help bdtki understand aggregate usage patterns — see the Cookies section below for full details

How We Use Your Information

bdtki uses the personal information it collects for the following purposes. Each purpose has a defined legal basis — either the performance of a contract with you (your use of bdtki services), compliance with a legal obligation, or our legitimate interest in operating a secure and fair platform. We do not use your data for purposes beyond those listed here without your explicit consent.

• Account creation and management: processing your registration, verifying your identity, maintaining your account, and delivering the services you have requested on bdtki
• Payment processing: facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and processing withdrawal requests to your registered payment method
• Regulatory compliance and fraud prevention: fulfilling our KYC, anti-money-laundering, and responsible gaming obligations; detecting, investigating, and preventing fraudulent, abusive, or illegal activity on the platform
• Customer support: responding to your enquiries, complaints, and account-related requests; communicating important account or service changes to you
• Platform improvement and analytics: analysing aggregated, anonymised usage data to improve the bdtki platform's performance, game selection, and user experience for all Bangladesh players

Where bdtki intends to use your data for a purpose not listed above — for example, sending you promotional offers by SMS or email — we will seek your specific consent first. You may withdraw consent to marketing communications at any time by contacting bdtki support or using the opt-out mechanism provided in any marketing message.

Payment Data and KYC Processing

When you deposit or withdraw using bKash, Nagad, Rocket, or Upay, the transaction is processed directly inside that payment provider's own secure environment. bdtki does not receive, store, or have access to your mobile banking PIN, one-time password (OTP), or full wallet credentials. bdtki receives only a transaction confirmation reference from the payment provider confirming that the deposit or withdrawal was successful.

As part of bdtki's KYC (Know Your Customer) process, identity documents you submit are reviewed by bdtki's compliance team and stored securely for the duration required by applicable anti-money-laundering and data protection obligations. KYC documents are encrypted at rest and in transit. Access to KYC documents within bdtki is restricted to authorised compliance personnel only and is logged for audit purposes.

When and With Whom We Share Your Information

bdtki does not sell, rent, or trade your personal information. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Game providers: bdtki shares a pseudonymous player session token with certified game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi) so that games can be served to your session — no personally identifiable information beyond a session token is shared with game providers
• Payment processors: transaction reference data is shared with bKash, Nagad, Rocket, Upay, and banking partners solely for the purpose of completing your deposit or withdrawal — each payment provider handles this data under its own privacy policy
• Legal and regulatory authorities: bdtki will disclose personal data to law enforcement, financial intelligence, or regulatory authorities where required to do so by applicable law, court order, or to investigate suspected fraud or money laundering
• Business operations support: third-party service providers who assist bdtki with hosting, security monitoring, and technical infrastructure — these providers are contractually bound to process your data only as directed by bdtki and may not use it for their own purposes

Any third party with whom bdtki shares data is required to maintain appropriate security standards and to use the data solely for the purposes for which it was shared. bdtki remains responsible for ensuring that third-party processors comply with the data protection obligations set out in this Privacy Policy.

Cookies and Tracking Technologies

bdtki uses cookies and similar tracking technologies on its website. Cookies are small text files stored on your device by your browser when you visit bdtki. They serve two primary purposes on this platform: keeping you logged in during a session, and helping bdtki understand how players use the site in aggregate so that the platform can be improved.

bdtki does not use third-party advertising cookies or cross-site tracking pixels. Cookies placed by bdtki do not track your activity on other websites. Your use of bdtki's games and services is not shared with advertising networks through cookie or pixel technology.

• Essential session cookies: required for the platform to function — they keep your account session active while you are logged in and expire automatically when you close your browser or your session times out
• Analytics cookies: anonymised aggregate data about page visits and feature usage that help bdtki identify areas of the platform that can be improved — no individually identifiable data is contained in analytics cookies
• You may manage or disable cookies through your browser settings at any time. Disabling essential cookies will prevent you from staying logged in to your bdtki account and may affect the functionality of games. Disabling analytics cookies will not affect your ability to use bdtki's services

Data Retention

bdtki retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal and regulatory obligations. In practice this means that account registration data, transaction history, and KYC documents are retained for a minimum of five years following account closure, in line with standard anti-money-laundering record-keeping requirements. After this period, data is securely deleted or anonymised.

Data that is no longer required for any legal, regulatory, or operational purpose is permanently deleted from bdtki's systems using secure deletion methods. Where data has been anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes — anonymised data cannot be used to identify you.

Your Data Rights

As a bdtki player in Bangladesh, you have the following rights in relation to your personal data. To exercise any of these rights, contact bdtki support at [email protected]. bdtki will respond to verified data rights requests within 30 days.

• Right of access: you may request a copy of the personal data bdtki holds about you — we will provide this in a readable format within 30 days of a verified request
• Right of rectification: if any personal data bdtki holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bdtki's legal retention obligations — we cannot erase data we are legally required to retain
• Right to restriction: you may request that bdtki restricts its processing of your personal data in certain circumstances, such as where you have contested the accuracy of the data or where processing is unlawful but you prefer restriction to erasure
• Right to object: you may object to bdtki's processing of your personal data where that processing is based on legitimate interest — for example, you may opt out of receiving marketing messages at any time

Security Measures

bdtki implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data stored at rest, role-based access controls that limit internal staff access to personal data on a strict need-to-know basis, and regular security audits of the bdtki platform infrastructure.

While bdtki takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdtki will notify affected players as promptly as practicable and take immediate steps to contain and investigate the breach. You can help protect your account by using a strong, unique password for your bdtki account and not sharing your login credentials with anyone.

Children and Minors

Changes to This Privacy Policy

bdtki may update this Privacy Policy from time to time to reflect changes in the way we process personal data, changes in applicable law, or changes to the bdtki platform itself. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players via their registered contact details. We encourage you to review this Privacy Policy periodically to stay informed about how your data is handled.

Your continued use of bdtki following the posting of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you must stop using bdtki and may request account closure by contacting [email protected]. The most current version of this Privacy Policy is always available at bdtki.org/privacy-policy.