bdt68 Privacy
Policy

1 Introduction

bdt68 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who visits, registers on, or interacts with our website at https://bdt68.io (the "Site"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bdt68.

bdt68 operates as an online betting and casino platform serving players in Bangladesh. Given the nature of our services — which include account registration, financial transactions, identity verification, and wagering activity — we necessarily collect and process a range of personal data in order to deliver a safe, compliant, and functional experience.

This Privacy Policy applies to all personal data collected through the bdt68 website, mobile-optimised browser experience, customer support channels, and any other interaction you have with bdt68 as a registered or prospective player. It does not apply to third-party websites or services that may be linked to or from the bdt68 platform, which are governed by their own privacy policies.

We encourage you to read this policy in full alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into our full player agreement.

2 Data We Collect

bdt68 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the site, and from trusted third-party sources where permitted. The categories of data we collect are described below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided at the point of account creation.
• Identity verification (KYC) documents: Copies of government-issued photo identification (National ID Card, passport, or driving licence), proof of address documents, and any additional documentation requested during the verification process.
• Payment information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay, SureCash), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, and others), and payment card metadata (card type, last four digits, expiry date). Full card numbers are never stored on bdt68 servers.
• Communications data: The content of any messages, emails, or chat communications you send to the bdt68 support team, including support tickets, complaint submissions, and feedback forms.
• Responsible gaming preferences: Self-exclusion requests, deposit limit settings, session time reminders, and cooling-off period requests submitted through the platform.

2.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each page, navigation paths, search queries entered, game sessions initiated, bet history, and deposit/withdrawal activity.
• Cookie and tracking data: Session cookies, persistent cookies, and similar tracking technologies as described in Section 6 of this policy.
• Geolocation data: Approximate location derived from your IP address for the purpose of geographic access controls and localisation of content.

2.3 Data Received from Third Parties

• Identity verification providers: Results and flags from third-party KYC and anti-fraud screening services used to verify the identity and age of registered players.
• Payment processors: Transaction status updates, fraud alerts, and chargeback notifications from bKash, Nagad, Rocket, and other payment partners.
• Fraud and risk intelligence services: Device fingerprinting scores, IP reputation data, and behavioural risk indicators from third-party fraud prevention partners.

3 How We Use Your Data

bdt68 uses personal data only for the purposes for which it was collected or for compatible purposes that a reasonable person would expect given the context of collection. The primary purposes for which we process personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your account settings and preferences throughout your relationship with bdt68.
• Service delivery: To process deposits and withdrawals, settle bets, credit winnings, apply bonus offers, and provide access to the full range of bdt68 casino games and sports betting markets.
• Identity verification and age checks: To conduct KYC verification in accordance with our obligations to prevent underage gambling and ensure that all registered players are aged 21 or above. KYC data may be cross-referenced with third-party identity verification databases.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, money laundering, and other forms of prohibited conduct as described in our Terms & Conditions.
• Responsible gaming compliance: To apply and monitor self-exclusion requests, deposit limits, session time restrictions, and cooling-off periods requested by players or imposed by bdt68 under its responsible gaming obligations.
• Customer support: To respond to your support enquiries, resolve disputes, investigate complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse usage patterns, measure the performance of features, conduct A/B testing, and improve the functionality, security, and user experience of the bdt68 platform.
• Marketing communications: Where you have provided consent or where we have a legitimate interest, to send you information about bdt68 promotions, bonus offers, seasonal campaigns (such as Eid and Pohela Boishakh specials), and new games or features. You may opt out of marketing communications at any time by contacting support at [email protected].
• Legal and regulatory compliance: To meet our obligations under applicable laws, respond to lawful requests from regulatory authorities, and maintain records required for audit and compliance purposes.

4 Legal Basis for Processing

bdt68 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to perform the contract between you and bdt68 — including account registration, deposit and withdrawal processing, bet settlement, and customer support — is carried out because it is necessary to fulfil our obligations to you under the player agreement.
• Legal obligation: Certain processing activities — including KYC identity verification, age verification, anti-money laundering checks, and the maintenance of transaction records — are carried out because bdt68 is required to do so by applicable law.
• Legitimate interests: bdt68 relies on legitimate interests for processing activities such as fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your privacy rights.
• Consent: Where bdt68 sends you direct marketing communications or deploys non-essential cookies and tracking technologies, we rely on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

bdt68 may share your personal data with the following categories of third parties, strictly for the purposes described:

• Identity verification and KYC providers: To verify your identity, age, and address details as required for account activation and ongoing compliance. These providers process data under strict confidentiality obligations.
• Payment processors and financial institutions: To process your deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard, and other accepted payment methods. Data shared is limited to that necessary to complete the transaction.
• Fraud prevention and risk management partners: To screen transactions and account activity against fraud, money laundering, and abuse indicators. These partners may retain data for the purpose of maintaining industry-wide fraud databases.
• Game content providers: Game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive session identifiers and gameplay data necessary to deliver the game experience and settle results. Game providers do not receive your full personal profile.
• IT and infrastructure providers: Cloud hosting, data storage, and platform infrastructure providers who process data on behalf of bdt68 under data processing agreements that require equivalent levels of data protection.
• Regulatory and law enforcement authorities: Where bdt68 is required by law, court order, or regulatory direction to disclose personal data to a competent authority, we will do so. Where permitted, we will notify you of such a request.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by professional obligations of confidentiality and who require access to data in the performance of their professional services to bdt68.

6 Cookies & Tracking Technologies

bdt68 uses cookies and similar technologies (including local storage, session storage, and device fingerprinting) to ensure the platform functions correctly, to remember your preferences, to maintain your session security, and to understand how players interact with the site.

The categories of cookies used by bdt68 are as follows:

Strictly necessary cookies are deployed without requiring consent, as they are essential to the operation of the platform. Functional, analytics, and marketing cookies are only deployed with your prior consent. You may manage or withdraw your cookie preferences at any time by contacting bdt68 support or clearing cookies in your browser settings. Note that disabling certain cookies may affect the functionality of the bdt68 platform.

7 Data Retention

bdt68 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your active account and for a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years following the completion of the verification process or the closure of the associated account, whichever is later.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the last communication, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, to evidence compliance with consent obligations.
• Technical and usage data: Typically retained for 24 months in aggregated or pseudonymised form for platform analytics and improvement purposes.

Where data is no longer required for any purpose and no legal obligation requires its retention, bdt68 will securely delete or anonymise the data in accordance with industry-standard data destruction procedures.

8 Data Security

bdt68 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All communications between your device and the bdt68 platform are encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data stored on bdt68 servers is encrypted at rest using industry-standard encryption protocols.
• Password security: Account passwords are stored using a one-way cryptographic hashing algorithm with salting. bdt68 staff cannot view your plaintext password.
• Access controls: Internal access to personal data is restricted to bdt68 personnel and authorised third-party processors who have a legitimate need to access that data. Access is governed by role-based permissions and reviewed regularly.
• Network security: The bdt68 infrastructure is protected by firewalls, intrusion detection systems, and regular security vulnerability assessments.
• Payment data security: Full payment card numbers are never stored on bdt68 servers. Payment processing is conducted by PCI-DSS compliant third-party payment processors.
• Incident response: bdt68 maintains an internal data breach response protocol. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

While bdt68 takes every reasonable precaution to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. We encourage you to use a strong, unique password for your bdt68 account and to notify us immediately at [email protected] if you suspect any unauthorised access to your account.

9 Your Privacy Rights

As a registered player on the bdt68 platform, you hold a number of rights with respect to your personal data. bdt68 is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of access: You have the right to request a copy of the personal data bdt68 holds about you, along with information about how it is being processed. This is sometimes referred to as a "Subject Access Request" (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that bdt68 delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to exceptions including our legal obligation to retain certain records.
• Right to restriction of processing: In certain circumstances you may request that we restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or where you object to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes. If you object to marketing processing, bdt68 will cease that processing immediately.
• Right to withdraw consent: Where bdt68 relies on consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact bdt68 at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will respond within a reasonable timeframe and will not charge a fee for handling legitimate requests unless they are manifestly unfounded or excessive.

10 Children & Minors

bdt68 takes the protection of minors extremely seriously. Our platform is not directed at, and is not intended for use by, any person under the age of 21. Registration by or on behalf of a person under 21 years of age is strictly prohibited under our Terms & Conditions and constitutes grounds for immediate account termination.

As part of the mandatory KYC identity verification process, bdt68 verifies the age of all registered players. Where bdt68 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered an account with bdt68 or has provided us with their personal data, please contact us immediately at [email protected] so that we can take the appropriate action.

11 Third-Party Links & Integrations

The bdt68 platform integrates with third-party game providers and payment services. While these integrations are necessary to deliver core platform functionality, each third-party provider operates under its own privacy policy and data practices, for which bdt68 is not responsible.

Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may independently collect session data and technical information within their game environments for the purpose of game delivery, result verification, and their own analytics. Players are encouraged to review the privacy policies of these providers if they have specific concerns about in-game data collection.

Payment providers including bKash, Nagad, Rocket, Upay, and SureCash are independent entities with their own privacy policies and data processing practices. bdt68 has no control over the data practices of these providers beyond the scope of our contractual agreements with them.

bdt68 does not include links to external third-party websites beyond those necessary for platform functionality. Where any such links are present, their inclusion does not constitute an endorsement of the linked site's privacy practices, and bdt68 accepts no responsibility for the content or data practices of any third-party website.

12 Updates to This Policy

bdt68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. The date of the most recent revision is displayed at the top of this document and in the "Last Updated" bar below the hero section.

Where changes to this policy are material — meaning they significantly affect your rights, the types of data we collect, or the purposes for which we use your data — bdt68 will notify registered players by email to the address on file, and/or by displaying a prominent notice on the platform. Non-material changes (such as typographical corrections or minor clarifications) may be made without prior notice.

We recommend that you review this Privacy Policy periodically. Your continued use of the bdt68 platform after the effective date of any revised policy constitutes your acceptance of the updated version. If you do not agree with any changes to this policy, you should stop using the platform and contact support to arrange account closure.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or bdt68's data practices, please contact our dedicated privacy support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

If you are not satisfied with our response to your privacy concern or believe that bdt68 has handled your personal data in a manner inconsistent with this policy or applicable law, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.

bdt68 takes all privacy complaints seriously and will investigate every complaint received in good faith. We are committed to working with you to reach a fair resolution and will not discriminate against any player for exercising their privacy rights.