Privacy Policy — How bdtjdb Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") describes how bdtjdb ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal data obtained from individuals ("you", "your") who register, visit, or otherwise interact with the bdtjdb website and associated services at bdtjdb.app.

By creating a bdtjdb account, making a deposit, placing a bet, or simply browsing the platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform immediately.

This Policy is incorporated by reference into the bdtjdb Terms and Conditions. Where any term in this Policy is inconsistent with the Terms and Conditions on a privacy-related matter, this Policy prevails. We encourage you to read both documents together for a complete picture of your rights and obligations as a bdtjdb user.

bdtjdb may update this Policy from time to time to reflect changes in applicable law, platform features, or data-processing practices. Significant changes will be communicated to registered players via the mobile number or email address held on your account. The date at the top of this page always reflects the most recent revision.

bdtjdb processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions, including account operation, bet settlement, and payment processing.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including identity verification, age-gating, and anti-money-laundering obligations.
• Legitimate interests: Processing conducted in bdtjdb's legitimate business interests — including fraud detection, security monitoring, and platform analytics — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, receiving optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bdtjdb may share your personal data with the following categories of third parties:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard, for the purpose of processing your deposits and withdrawals. Each payment partner operates under its own privacy terms and data-security obligations.
• Game content providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive anonymised session data necessary to deliver their game content. These providers do not receive your identity or financial information.
• Identity verification services: Where required, bdtjdb may use third-party Know Your Customer (KYC) and document verification services to validate the identity documents you submit. These services process your data under strict contractual confidentiality obligations.
• Legal and regulatory authorities: Where required by law or in response to a valid legal request, bdtjdb may disclose personal data to law enforcement agencies, courts, or financial regulatory bodies.
• IT infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on behalf of bdtjdb under binding data-processing agreements that prohibit use of your data for any purpose other than service delivery.

All third-party data processors engaged by bdtjdb are contractually required to maintain at minimum the same standard of data protection as applied by bdtjdb itself. We conduct periodic reviews of third-party data handling practices to confirm ongoing compliance.

bdtjdb retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to meet record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• Betting and gaming records: Retained for a minimum of three (3) years from the date of each activity record.
• Support and communications logs: Retained for two (2) years following resolution of the relevant interaction.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever occurs first.
• Technical logs (IP, device, session): Retained for up to twelve (12) months from the date of collection, unless a specific investigation requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

bdtjdb takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the bdtjdb platform.
• Encryption of sensitive data fields (including identity document scans and payment credentials) at rest in our databases.
• Role-based access controls ensuring that only authorised personnel access personal data on a strictly need-to-know basis.
• Regular security audits and vulnerability assessments conducted by qualified cybersecurity professionals.
• Intrusion detection and monitoring systems that alert our security team to anomalous access patterns in real time.
• Staff training on data protection obligations and secure data-handling practices.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights, bdtjdb will notify affected players as promptly as practicable and take all reasonable steps to contain and remediate the breach.

The bdtjdb platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has provided personal data in connection with a bdtjdb account, we will immediately suspend the account, delete the associated personal data, and return any deposited funds to the originating payment source where technically feasible.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on bdtjdb, please contact us immediately at [email protected] and we will investigate and act without delay.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how bdtjdb has handled your personal data, please contact our data protection team in writing at:

Email (plain text — not a clickable link): [email protected]

Please include your registered account username and a clear description of your request or concern. bdtjdb aims to acknowledge all privacy-related requests within two (2) business days and to provide a substantive response within ten (10) business days of receipt. Complex requests may take longer, in which case we will keep you informed of progress.

If you are not satisfied with bdtjdb's response to your privacy complaint, you retain the right to escalate the matter through appropriate legal channels available in your jurisdiction.