Privacy Policy – How bdtk99 Handles Your Personal Data

bdtk99 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who uses our services. This Policy sets out in plain language how we collect personal information, the lawful basis on which we process it, how we keep it secure, and how long we retain it.

This Policy applies to data collected through the bdtk99 website, mobile browser interface, customer support channels, and any communications you initiate with us. It does not apply to third-party websites or services linked to or from bdtk99, which are governed by their own privacy policies.

If you have any questions about this Policy or wish to exercise your data rights, please contact us at [email protected]. We will respond to all privacy-related enquiries within 10 business days.

bdtk99 processes your personal data only for specific, documented purposes. We do not sell your data to third parties, and we do not use it for purposes incompatible with those described below. The primary purposes for which we use your data are:

• Account creation and management: To open, maintain, and close your bdtk99 account, verify your identity, and provide you with access to our games and betting markets.
• Processing transactions: To handle deposits, withdrawals, bonus credits, and any other financial operations associated with your account, and to maintain accurate financial records of all transactions.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct that may harm the integrity of the platform or its users.
• Responsible gaming compliance: To monitor player behaviour for signs of problem gambling, enforce self-exclusion requests, apply deposit limits and cool-off periods, and comply with responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and communicate account-related updates to you.
• Platform improvement: To analyse aggregate usage patterns, fix technical issues, test new features, and improve the overall user experience on bdtk99.
• Legal and regulatory compliance: To meet any legal obligations applicable to bdtk99's offshore operations, including responding to lawful requests from competent authorities.
• Marketing communications: Where you have given explicit consent, to send you promotions, bonus offers, and updates about new games or features. You may withdraw this consent at any time by contacting [email protected].

We process your data on the following lawful bases: performance of a contract (account and transaction management), legitimate interests (fraud prevention, security, platform improvement), legal obligation (compliance), and consent (marketing communications).

Cookies are small text files stored on your device when you visit a website. bdtk99 uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session tokens that keep you logged in and security cookies that help us detect fraud. You cannot opt out of these without also opting out of using the platform.
• Functional cookies: Store your display preferences (such as language and notification settings) so you do not need to reset them on every visit.
• Analytics cookies: Collect anonymised or pseudonymised data about how users navigate the platform. This helps us understand which features are popular and where technical problems occur. No individual user is identified through analytics data.
• Security cookies: Used by our fraud detection systems to flag IP addresses, devices, or behavioural patterns associated with known abusive activity.

You can control cookie storage through your browser's privacy settings. Disabling essential cookies will prevent you from logging in and using the platform. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

bdtk99 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: Your payment details are shared with the relevant provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a licensed bank) to the extent necessary to process your transaction. Each provider operates under its own data protection framework.
• Game providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymised player identifier to deliver their games and record wager outcomes. They do not receive your name, email address, or financial details.
• Identity verification services: KYC documents may be processed by an authorised third-party verification provider. All such providers are contractually bound to process your data exclusively for verification purposes and to delete it once verification is complete.
• Fraud prevention networks: Where fraud is suspected, limited data (such as an IP address or device fingerprint) may be shared with fraud prevention services to investigate and prevent further harmful activity.
• Legal authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so by a valid court order, subpoena, or applicable law. We will notify you of such a disclosure wherever legally permitted.

All third parties who process data on behalf of bdtk99 are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our written instructions.

bdtk99 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of all account credentials — passwords are hashed using a modern cryptographic algorithm and are never stored in recoverable form.
• Role-based access controls that restrict employee access to personal data to only those staff members who need it to perform their duties.
• Regular security audits and penetration testing conducted by independent third-party specialists.
• Automatic account locking following a configurable number of failed login attempts, with re-authentication required before the account is reinstated.
• Continuous monitoring of platform traffic for anomalous patterns that may indicate a security breach or targeted attack.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, bdtk99 will notify affected users without undue delay and take all reasonable steps to contain the breach and prevent further harm.

You also have a role to play in keeping your account secure. Choose a strong, unique password, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

bdtk99 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and reporting obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, to satisfy anti-money laundering and record-keeping obligations.
• Transaction records: All financial transaction records are retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for the duration of your account and for 5 years after account closure. Where a verification attempt was unsuccessful, documents submitted are deleted within 30 days.
• Support communications: Emails and chat records with our support team are retained for 2 years from the date of the last communication in a given thread.
• Device and usage logs: Retained for 12 months on a rolling basis for security and fraud prevention purposes.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, and for 2 years after you opt out, as evidence of your consent history.

Once a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

As a user of the bdtk99 platform, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you, including information on how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot erase data that we are legally required to retain (e.g., financial transaction records).
• Right to restriction of processing: You may ask us to pause processing of your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to us in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to our processing of your data where it is based on legitimate interests, unless our legitimate grounds override your rights.

We will not charge a fee for exercising any of these rights in standard circumstances. We may charge a reasonable fee or decline to act on requests that are manifestly unfounded or excessive.

bdtk99 reserves the right to update this Privacy Policy at any time. When we make material changes — that is, changes that meaningfully affect how we use your personal data — we will notify registered users by email at least 14 days before the changes take effect.

For minor updates (such as clarifications of existing practices, corrections of typographical errors, or additions of new payment method names), we will update the "Last Updated" date at the top of this page without sending individual notifications. It is your responsibility to review this Policy periodically.

Your continued use of the bdtk99 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with any change, you may close your account by contacting [email protected] before the revision takes effect.

All privacy enquiries are handled confidentially by designated personnel. We do not route privacy requests through general customer service queues — your request will be reviewed directly by a member of our compliance team.