bdtka Privacy Policy

1. Data We Collect

bdtka collects personal data in three primary ways: data you provide directly when registering and using the platform; data generated automatically through your interactions with our services; and data received from trusted third-party verification and payment partners as part of our legal compliance obligations.

1.1 Data You Provide Directly

When you create a bdtka account, deposit funds, request withdrawals, contact support, or participate in promotions, you may provide the following categories of personal data:

Data Category	Specific Data Points	Collected At
Identity Data	Full legal name, date of birth, gender, nationality, NID or passport number	Registration & KYC
Contact Data	Email address, mobile number, residential address (district, city, postal code)	Registration
Financial Data	bKash / Nagad / Rocket account number, bank account details, transaction history, deposit and withdrawal amounts	Payment processing
Document Data	Scanned NID, passport photograph page, driver's licence, utility bills, bank statements (for KYC/AML compliance)	KYC verification
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support interactions

1.2 Data Collected Automatically

When you access the bdtka platform — whether via desktop browser or mobile device — certain technical data is collected automatically through our servers and analytics systems:

• Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution, language settings;
• Usage and behavioural data: pages visited, time spent on each page, game sessions initiated, bet history, login timestamps, session duration;
• Location data: approximate geographic location derived from IP address (city and country level only — bdtka does not collect precise GPS coordinates);
• Referral data: the URL or source from which you arrived at bdtka.net, where applicable.

1.3 Data Received from Third Parties

bdtka may receive supplementary personal data from the following categories of third-party sources in connection with our legal compliance and fraud prevention obligations:

• Identity verification and KYC service providers who cross-reference the documents you submit against public databases and official records;
• Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay) who confirm transaction authenticity and account ownership;
• Fraud detection and anti-money-laundering screening services that flag accounts associated with known fraudulent activity;
• Responsible gaming databases (where applicable) that register self-excluded individuals across multiple platforms.

2. How We Use Your Data

bdtka processes your personal data on the basis of one or more of the following legal grounds: contractual necessity (to deliver the services you have signed up for), legal obligation (to meet our regulatory and anti-money-laundering compliance requirements), legitimate interest (to operate a secure and fair platform), and in limited cases, your explicit consent (for optional communications or marketing materials you have opted into).

2.1 Account Operation and Service Delivery

The primary purpose for which bdtka processes your personal data is to create and maintain your account, authenticate your identity at login, process your deposits and withdrawals, record your betting and gaming activity, calculate and credit bonus entitlements, and provide you with customer support. Without this data, the core platform services cannot be delivered.

2.2 Identity Verification and Age Confirmation

bdtka is committed to preventing underage gambling. All registered players must be at least 18 years of age. We process identity and age verification data — including your NID, passport details, and date of birth — to confirm that every account holder meets the minimum age requirement before gameplay or withdrawal privileges are granted. This processing is both a contractual necessity and a responsible gaming obligation.

2.3 Anti-Money-Laundering and Fraud Prevention

bdtka processes financial transaction data, betting patterns, and account activity data to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. This processing is required by applicable legal obligations. Where suspicious activity is identified, we may be legally required to report it to the relevant financial intelligence authorities without prior notification to the account holder.

2.4 Platform Security and Technical Operations

Technical data including IP addresses, device identifiers, and session logs are processed to maintain the security, stability, and integrity of the bdtka platform — including detecting distributed denial-of-service (DDoS) attacks, identifying unauthorised access attempts, troubleshooting technical failures, and enforcing account access restrictions where appropriate.

2.5 Communications and Support

bdtka uses your contact data (email address and mobile number) to send you transactional communications including account confirmation emails, deposit and withdrawal notifications, password reset messages, and important policy update notices. These communications are operational in nature and are not subject to marketing opt-out, as they are necessary to the delivery of the service. Where bdtka sends promotional or bonus-related communications, you may opt out at any time by contacting [email protected].

2.6 Analytics and Platform Improvement

Anonymised and aggregated usage data is processed to understand how players interact with the bdtka platform, identify areas for improvement, optimise page performance, and inform product development decisions. This analytics processing does not involve individual user profiling and does not result in decisions that affect your account in any way.

3. Data Sharing & Disclosure

bdtka does not sell, rent, or trade your personal data to any third party for commercial, advertising, or marketing purposes under any circumstances. Personal data is shared only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

3.1 Service Providers and Data Processors

bdtka engages a small number of third-party service providers who process personal data on our behalf and under our instruction as data processors. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank — for the purpose of processing deposits and withdrawals in Bangladeshi Taka (৳ BDT);
• KYC and identity verification providers: to verify submitted identity documents and confirm player age and identity;
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Big Time Gaming, and Yggdrasil — who may receive anonymised player session identifiers necessary to deliver gameplay and record results;
• Cloud infrastructure and hosting providers: who provide secure server infrastructure for the bdtka platform under strict data processing agreements;
• Cybersecurity and fraud detection providers: who assist in identifying and mitigating fraudulent activity on the platform.

All third-party data processors engaged by bdtka are bound by written data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to bdtka, and that require them to maintain appropriate security standards.

3.2 Legal and Regulatory Disclosure

bdtka may disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where required to do so by applicable law, a valid court order, or a lawful regulatory instruction. Such disclosures are made in strict compliance with applicable legal requirements and, where legally permissible, bdtka will notify the affected player of any such disclosure.

3.3 Business Transfers

In the event that bdtka undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by bdtka may be transferred to the acquiring entity as part of that transaction. In such circumstances, bdtka will provide notice to affected players and ensure that the receiving entity commits to honouring the terms of this Privacy Policy with respect to existing player data.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They serve a variety of functions, from maintaining your login session to remembering your preferences and helping the platform understand how users navigate the site. bdtka uses a minimal and purposeful set of cookies, detailed below.

4.2 Types of Cookies Used by bdtka

Cookie Type	Purpose	Duration	Can Be Disabled?
Strictly Necessary	Maintains your authenticated session, stores CSRF tokens, enables secure login and checkout flows	Session	No — required for the platform to function
Functional / Preference	Remembers your language preference, display settings, and last-visited game category	30 days	Yes — via browser settings
Analytics	Anonymised data on page visits, session duration, and navigation paths — used solely for internal platform improvement	90 days	Yes — via browser settings

4.3 Cookies We Do Not Use

bdtka does not deploy the following categories of cookies or tracking technologies: advertising network cookies, cross-site tracking pixels, social media tracking scripts (Facebook Pixel, Twitter Pixel, TikTok Pixel, or equivalents), fingerprinting scripts designed to identify your device across sessions, or any third-party retargeting technology. The bdtka platform is not enrolled in any advertising network's audience targeting programme.

4.4 Managing Your Cookie Preferences

You can control and manage cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or clear existing cookies from your device. Please note that disabling strictly necessary cookies will prevent the bdtka platform from functioning correctly — you will be unable to log in or maintain an authenticated session without session cookies enabled.

5. Data Security

bdtka implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following core controls:

• Transport Layer Security (TLS 1.3): All data exchanged between your browser or mobile device and bdtka's servers is encrypted in transit using TLS 1.3, the current industry gold standard for web encryption. The bdtka website enforces HTTPS on all pages — unencrypted HTTP connections are automatically redirected;
• At-rest encryption: Sensitive personal data stored in bdtka's databases — including identity documents, payment method details, and KYC records — is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data within bdtka's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive player data are subject to background checks and ongoing security training;
• Two-factor authentication (2FA): bdtka strongly recommends that all players enable 2FA on their accounts. 2FA is mandatory for all internal staff accounts with access to player data;
• Intrusion detection and monitoring: bdtka's infrastructure is monitored 24/7 by automated intrusion detection systems that flag and respond to anomalous access patterns in real time;
• Penetration testing: bdtka engages independent cybersecurity specialists to conduct regular penetration tests on its platform infrastructure, with findings acted upon on a priority basis;
• Data breach response: In the event of a confirmed data breach affecting player personal data, bdtka will notify affected players as promptly as practicable, and will take all reasonable steps to contain and remediate the breach. Notifications will be sent to the email address registered on your account.

6. Data Retention

bdtka retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, financial reporting, or anti-money-laundering retention obligations. The table below outlines the standard retention periods applied to key categories of player data:

Data Category	Retention Period	Reason
Account & Identity Data	Duration of account + 5 years post-closure	AML/CFT regulatory obligation
Financial Transaction Records	7 years from transaction date	Financial reporting and audit requirements
KYC Documents	5 years post-account closure	Regulatory compliance and dispute resolution
Betting & Gaming History	3 years from date of activity	Dispute resolution and bonus audit
Customer Support Correspondence	3 years from last interaction	Complaint resolution and quality assurance
Analytics & Usage Logs	90 days (anonymised aggregates: 2 years)	Platform performance and security monitoring
Session Cookies	Deleted on browser close	Authentication session management

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data sanitisation procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business intelligence purposes.

7. Your Privacy Rights

As a registered player on the bdtka platform, you hold the following rights with respect to the personal data bdtka holds about you. To exercise any of these rights, submit a written request to [email protected]. bdtka will respond within 10 business days of receiving a valid request. We may ask you to verify your identity before processing certain data requests in order to protect the security of your account.

7.1 Right of Access

You have the right to request a copy of the personal data bdtka holds about you. We will provide a structured, machine-readable summary of your personal data, including the categories of data held, the purposes for which it is processed, any third parties with whom it has been shared, and the applicable retention periods.

7.2 Right to Rectification

If any personal data bdtka holds about you is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. Minor corrections — such as updating your email address or mobile number — can typically be made directly through your account settings. For corrections to identity data (name, date of birth, NID number), supporting documentation will be required.

7.3 Right to Erasure

You have the right to request the deletion of personal data bdtka holds about you, subject to certain conditions. Erasure requests will be honoured where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (in cases where processing was based on consent), or where the data has been processed unlawfully. Erasure may be declined where retention is required by applicable law — for example, financial transaction records subject to regulatory minimum retention periods cannot be deleted on request.

7.4 Right to Restrict Processing

In certain circumstances — including where you contest the accuracy of your data or have objected to its processing — you have the right to request that bdtka temporarily restrict the processing of your personal data while the matter is under review. During a processing restriction, your data will be stored but not actively used for any purpose other than the purpose that gave rise to the restriction request.

7.5 Right to Data Portability

You have the right to receive a copy of the personal data you have provided to bdtka in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted to another data controller where technically feasible. Portability requests apply to data processed on the basis of your consent or contractual necessity.

7.6 Right to Object

Where bdtka processes your personal data on the basis of legitimate interest — including for analytics and platform improvement purposes — you have the right to object to that processing. Upon receipt of a valid objection, bdtka will cease the processing in question unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

7.7 Right to Withdraw Consent

Where bdtka processes your personal data on the basis of your explicit consent — for example, where you have opted into receiving promotional communications — you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent for marketing communications, email [email protected] or use the unsubscribe link in any promotional email you receive.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

bdtka reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and services offered on the platform. Where changes are material — meaning they substantively affect how your personal data is collected, used, or shared — bdtka will provide advance notice via on-platform notification or to your registered email address at least 14 days before the changes take effect. For minor, non-substantive amendments (such as clarifications of existing text or corrections of typographical errors), updates will be posted directly to this page without advance notice. The effective date at the top of this page will always reflect the date of the most recent substantive revision.

8.2 How to Stay Informed

We recommend that you review this Privacy Policy periodically — particularly following any notification of updates — to stay informed about how bdtka handles your personal data. Your continued use of the bdtka platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with any changes to this Privacy Policy, you have the right to close your account and request erasure of your personal data (subject to applicable legal retention requirements) by contacting [email protected].

8.3 Contact Information

For all privacy-related queries, data subject rights requests, or concerns about how bdtka processes your personal data, please contact the bdtka data team at the address below. We aim to acknowledge all privacy enquiries within 2 business days and to provide a full substantive response within 10 business days.

Data Contact: [email protected]
Platform: bdtka.net
Operating Hours: 09:00 – 22:00 Bangladesh Standard Time (BST, UTC+6), 7 days a week