bdttk1 Privacy Policy — How We Collect, Use, and Protect Your Data

bdttk1 collects personal data that you provide directly to us during registration and account use, data generated automatically through your interaction with the Platform, and — in limited circumstances — data received from trusted third-party partners such as payment processors. We collect only the data that is necessary for the purposes described in this Privacy Policy.

Data You Provide Directly

When you register a player account or update your account profile, we collect the following categories of personal information:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address.
• Identity verification (KYC) documents: Government-issued photo ID (National ID card, passport, or driving licence) and proof of payment method ownership (e.g., a screenshot of your bKash or Nagad wallet showing your registered number).
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored by bdttk1 — card transactions are processed via PCI-DSS-compliant payment gateways that tokenise payment data.
• Support communications: Messages, emails, and live chat transcripts that you send to the bdttk1 support team, including any attachments you provide.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, loss limits, cool-off periods, and any other account restriction settings you configure.

Data Collected Automatically

When you access and use the bdttk1 Platform, our systems automatically record certain technical information about your session:

Data From Third Parties

In certain situations, bdttk1 may receive data about you from third-party partners. This includes:

• Payment processors: Confirmation of transaction status and, where required for fraud prevention, flagging of transactions that fail verification checks.
• Identity verification services: If we use an automated KYC service to verify your submitted documents, that service will return a verification result (pass/fail) to us. We do not receive raw biometric data from those services.
• Fraud prevention networks: Industry-shared databases that flag known fraudulent payment credentials, stolen identities, or self-excluded players who are attempting to circumvent restrictions.

bdttk1 uses the personal data we collect for the following purposes. For each purpose, we identify the lawful basis on which we rely to process your data.

bdttk1 uses cookies and similar local storage technologies to provide a functional, secure, and personalised experience on the Platform. This section explains the types of cookies we use and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, your preferred language, and your account settings — so you do not have to re-enter this information every time you return. Cookies cannot execute code, carry viruses, or access any other files on your device.

Types of Cookies We Use

Managing Cookies

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, or to alert you before a cookie is placed. However, please note that disabling strictly necessary cookies will prevent you from logging in to your bdttk1 account and using core Platform features. Disabling functional cookies will mean that your preferences are not saved between sessions.

bdttk1 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers

We share data with carefully selected third-party service providers who assist us in operating the Platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways — to execute deposit and withdrawal transactions.
• KYC and identity verification providers: To automate and validate the identity verification process for new player accounts.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — these providers may receive a session token and anonymised player identifier to launch their games within the bdttk1 environment. They do not receive your name, address, or payment details.
• Customer support tools: Live chat and ticketing platforms that process support conversation data on our behalf.
• Security and fraud prevention services: Third-party tools that help us detect bot activity, suspicious login patterns, and financial fraud.

All service providers are required to process your data only on our documented instructions and to maintain security standards consistent with this Privacy Policy.

Legal and Regulatory Disclosure

bdttk1 may disclose personal data to authorities or third parties where we are legally required to do so, including but not limited to:

• Compliance with a court order, subpoena, or other valid legal process.
• Cooperation with law enforcement agencies investigating financial crime, including money laundering or fraud.
• Fulfilment of anti-money-laundering (AML) reporting obligations where a suspicious activity report is required.

Business Transfers

If bdttk1 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. In such an event, we will notify registered players via email and this Privacy Policy will be updated to reflect any changes in data controller identity or processing practices. Your rights under this Privacy Policy will continue to apply.

bdttk1 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below apply to key data categories.

When a retention period expires and there is no outstanding legal obligation that requires continued storage, we will securely delete or irreversibly anonymise the relevant data. Anonymised aggregate data (which cannot be linked back to any individual) may be retained indefinitely for statistical and product development purposes.

bdttk1 respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

bdttk1 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. Our security framework includes the following layers of protection:

• Transport encryption: All data in transit between your browser or app and the bdttk1 servers is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS. Our SSL certificate is maintained and renewed with no lapses.
• Data at rest encryption: Sensitive data fields stored in our databases — including identity document references and payment method identifiers — are encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems and player data is restricted to authorised personnel only, on a need-to-know basis. All internal access is authenticated via multi-factor authentication (MFA) and is logged for audit.
• Intrusion detection: Our infrastructure is monitored 24/7 by automated systems that detect and alert on anomalous access patterns, unusual data export volumes, and known attack signatures.
• Vulnerability management: bdttk1 conducts regular security assessments of its Platform and infrastructure. Critical vulnerabilities are patched within 72 hours of discovery; non-critical issues are addressed in scheduled maintenance windows.
• Employee training: All bdttk1 staff with access to personal data receive regular data protection and information security training. New employees receive security training as part of their onboarding.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, bdttk1 will notify affected players without undue delay. Notifications will be sent to your registered email address and will include: a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the measures taken or proposed to address it. We will also document all breaches internally, regardless of whether notification is required.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how bdttk1 handles your personal information, please contact our support team. We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve them within 30 calendar days.

Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")

If you are not satisfied with the response you receive from bdttk1, you have the right to escalate your complaint to an appropriate data protection supervisory authority. For players based in Bangladesh, this matter may be directed to your national consumer or data protection authority.

Updates to This Privacy Policy

bdttk1 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will:

• Update the "Last updated" date at the top of this document.
• Send a notification to your registered email address summarising the key changes.
• In some cases, ask for your renewed consent where a change affects processing that is based on consent.

Continued use of the bdttk1 Platform after a Privacy Policy update constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically so that you remain informed about how we protect your data.