bdtka Privacy Policy — Your Data, Your Rights

1. Introduction

bdtka operates the online casino and sports betting platform accessible at https://bdtka.io, serving players located primarily in Bangladesh. As part of delivering a secure, fair, and responsible gaming service, we necessarily process certain personal data about the individuals who use the platform.

We take the privacy of our players seriously. This Policy is written in plain, professional English and is intended to give you a clear understanding of our data practices. Where technical or legal language is unavoidable, we have provided explanations alongside it.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which form part of the overall agreement between you and bdtka.

2. Data We Collect

bdtka collects personal data through two routes: information you provide directly to us, and information collected automatically when you use the platform.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, gender, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile number.
• Identity verification (KYC) documents: Copies of your National Identity Card (NID), passport, or other government-issued identification submitted to satisfy our age and identity verification requirements.
• Payment data: Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay; transaction reference numbers; deposit and withdrawal history.
• Communications data: Any messages sent to bdtka via live chat, email, or support ticket — including the content of those messages and any attachments you provide.
• Responsible gaming data: Self-imposed limits, cooling-off requests, self-exclusion requests, and related preferences set via your account settings.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, time and duration of sessions, games played, bets placed, features accessed, and navigation paths through the platform.
• Cookie data: Session identifiers, preference tokens, and anonymised analytics identifiers as described in Section 6 of this Policy.
• Geolocation data: Approximate location derived from your IP address, used to apply relevant platform restrictions and to deliver localised content.

3. How We Use Your Data

The table below summarises the primary purposes for which bdtka uses personal data and the category of data used for each purpose.

Purpose	Data Categories Used
Account registration and management	Registration data, device data
Age and identity verification (KYC)	Registration data, KYC documents
Processing deposits and withdrawals	Payment data, registration data
Detecting and preventing fraud and money laundering	Payment data, usage data, device data, geolocation data
Responsible gaming monitoring and intervention	Usage data, responsible gaming data, registration data
Customer support and dispute resolution	Communications data, account data, transaction history
Platform analytics and performance improvement	Usage data, cookie data (anonymised)
Compliance with legal and regulatory obligations	All categories as required
Sending transactional communications (e.g. deposit confirmations)	Registration data, payment data

bdtka does not use personal data for automated decision-making that produces significant legal effects without human oversight. Where automated systems flag an account for review (for example, as part of fraud detection), a member of the bdtka compliance team will review the case before any action is taken.

4. Legal Basis for Processing

bdtka processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including operating your account, processing transactions, and providing the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering, age verification, and responsible gaming obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and anonymised analytics, where those interests are not overridden by your individual privacy rights.
• Consent: Where bdtka sends you optional promotional communications about bonuses or new features, we do so on the basis of your explicit consent. You may withdraw this consent at any time by contacting support.

5. Data Sharing and Disclosure

bdtka does not sell, rent, or trade your personal data to any third party. We share personal data only where strictly necessary, with the following categories of recipient:

5.1 Payment Processors

Transaction data is shared with mobile financial service providers — bKash, Nagad, Rocket, and Upay — solely for the purpose of processing deposits and withdrawals you initiate. These providers operate their own privacy policies and are responsible for data processed within their own systems.

5.2 Game Providers

Third-party game studios and live casino providers (including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi) receive a session token and anonymised player identifier to operate game sessions. They do not receive your full name, NID number, or payment details.

5.3 Identity Verification Services

Where required to complete KYC verification, identity document data may be shared with specialist third-party verification providers under data processing agreements that require them to handle documents securely and delete them following verification.

5.4 Legal and Regulatory Authorities

bdtka may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent or detect a serious crime.

6. Cookies and Tracking Technologies

bdtka uses the following categories of cookies on the platform:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, prevent cross-site request forgery attacks, and ensure the secure transmission of data during your visit. These cookies cannot be disabled.
• Functional cookies: These remember your preferences — such as your preferred language, display settings, or responsible gaming tool configurations — so you do not need to reset them each time you log in.
• Analytics cookies: bdtka uses anonymised, aggregated analytics data to understand how players navigate the platform and to identify areas for improvement. No personally identifiable information is used in analytics processing.

bdtka does not use advertising or retargeting cookies. No third-party advertising technology is deployed on the bdtka platform. You may manage functional and analytics cookies through your browser settings; however, disabling strictly necessary cookies may prevent certain features of the platform from operating correctly.

7. Data Retention

bdtka retains personal data for as long as your account is active and for a period following account closure as required by our legal and operational obligations. The following retention periods apply as a general guide:

• Account and registration data: Retained for a minimum of 5 years following account closure to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for a minimum of 5 years following the completion of verification or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last communication in a support thread.
• Analytics and usage data: Retained in anonymised form indefinitely for platform improvement purposes. Personally identifiable usage data is deleted or anonymised within 12 months of collection.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. If you request deletion of your data before a retention period has expired, bdtka will restrict active processing of your data while retaining only the minimum necessary to satisfy legal obligations.

8. Data Security

bdtka implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Hashed password storage using industry-standard one-way algorithms — bdtka does not store passwords in plain text;
• Tokenisation of sensitive financial data;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security testing and vulnerability assessments of the platform infrastructure;
• Incident response procedures enabling rapid detection and containment of any security breach.

In the event of a personal data breach that is likely to result in a risk to your rights and interests, bdtka will notify affected players without undue delay using the contact details registered on their account.

9. Your Privacy Rights

As a player registered on bdtka, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the bdtka support team at [email protected].

• Right of access: You may request a copy of the personal data bdtka holds about you. We will provide this within a reasonable period following identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: You may request deletion of your personal data. Where we are legally required to retain certain records, we will restrict active processing and retain only the minimum necessary data.
• Right to restriction: You may request that we restrict processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to object: You may object to processing based on legitimate interests. Where you object, bdtka will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bdtka will acknowledge all data rights requests within 5 business days and aim to resolve them within 30 calendar days. Complex requests may take longer, in which case we will communicate the expected timeline to you.

10. Children's Privacy

bdtka is strictly an adults-only platform. No person under the age of 21 is permitted to register an account or use any service provided by bdtka. We do not knowingly collect personal data from individuals under the age of 21. If bdtka becomes aware that personal data has been collected from an individual below the minimum age, the relevant account will be closed immediately and the data will be deleted without delay.

If you believe that a minor may have registered an account on bdtka, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

11. International Data Transfers

bdtka's primary operations are focused on the Bangladesh market. Where personal data is transferred to or processed by third-party service providers located outside Bangladesh — for example, game providers or cloud infrastructure services — bdtka ensures that appropriate safeguards are in place. These safeguards may include contractual data processing agreements requiring recipient parties to maintain data security standards consistent with those described in this Policy.

bdtka does not transfer personal data to jurisdictions that do not provide adequate protection for personal data without first implementing appropriate contractual or technical safeguards.

12. Third-Party Links and Services

The bdtka platform may contain references to third-party services — such as payment providers including bKash and Nagad — which operate their own websites and privacy practices. This Privacy Policy applies solely to data processed by bdtka and does not govern the data practices of any third party. We encourage you to review the privacy policies of any third-party service you interact with in connection with using bdtka.

13. Updates to This Privacy Policy

bdtka may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via the contact details associated with their account, or via a prominent notice on the bdtka platform, at least 7 days before the change takes effect. The effective date shown at the top of this page will be updated with each revision.

Your continued use of the bdtka platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with any change, you must cease using the platform and may request account closure by contacting bdtka support.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bdtka holds about you, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat feature on the bdtka platform
• Email: [email protected] (plain text — not a clickable link)

All privacy-related enquiries will be acknowledged within 2 business days. Formal data rights requests will be handled in accordance with the timelines described in Section 9 of this Policy.