bdtk5 Privacy Policy

bdtk5 collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and from third-party payment and identity verification providers. The categories of data we collect are set out below.

Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), email address, and chosen username;
• Identity verification documents: National ID Card, passport, driving licence, or equivalent government-issued document submitted during KYC;
• Address verification documents: Utility bill, bank statement, or other official correspondence confirming your residential address;
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details (DBBL, BRAC Bank, City Bank) used to process deposits and withdrawals. bdtk5 does not store full card numbers;
• Communications: Records of messages, emails, and Live Chat transcripts you exchange with our support team.

Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone;
• Usage data: Pages visited, games played, betting history, session duration, click and navigation patterns, and feature interactions;
• Log data: Server logs recording access times, error reports, and transaction identifiers;
• Cookies and similar technologies: See Section 4 for full details on our cookie practices.

Data Received from Third Parties

• Payment providers: Transaction status confirmations and reference numbers from bKash, Nagad, Rocket, Upay, and banking partners;
• Identity verification services: Verification outcomes and risk scores from third-party KYC partners where applicable;
• Fraud and security providers: Risk signals and flagged activity reports used to protect the integrity of the platform.

bdtk5 does not knowingly collect personal data from persons under the age of 18. If we become aware that a minor has provided us with personal data, that data will be deleted and the associated account closed immediately.

bdtk5 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary.

Service Providers and Technology Partners

bdtk5 works with a small number of carefully selected third-party service providers who assist us in operating the platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum payment data required to execute your transaction;
• Game providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session data required to deliver game content. They do not receive your full identity details;
• KYC and identity verification providers: Document images and identity data are shared with our verification partner solely for the purpose of completing mandatory KYC checks;
• Fraud and security analytics providers: Technical data such as IP address, device fingerprint, and behavioural signals are shared to detect and prevent fraudulent activity;
• Cloud hosting and infrastructure providers: Our platform infrastructure is hosted on secure cloud servers. These providers act as data processors and are contractually prohibited from accessing or using your data for their own purposes.

All third-party service providers are bound by data processing agreements that require them to handle your data confidentially, in accordance with this Privacy Policy, and solely for the purposes we have authorised.

Legal and Regulatory Disclosure

bdtk5 may disclose personal data to law enforcement agencies, regulatory authorities, or other official bodies where we are legally required to do so, or where disclosure is necessary to:

• Comply with a legal obligation, court order, or regulatory requirement;
• Investigate and report suspected money laundering, fraud, or other criminal activity;
• Protect the rights, property, or safety of bdtk5, its players, or the general public.

Business Transfers

In the event that bdtk5 undergoes a business merger, acquisition, or asset sale, personal data held by bdtk5 may form part of the transferred assets. Affected players will be notified via the registered email address prior to any transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

bdtk5 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, and destruction.

Technical Safeguards

• TLS/SSL encryption: All data transmitted between your device and bdtk5 servers is encrypted using industry-standard TLS protocols;
• Data encryption at rest: Sensitive data fields, including identity documents and payment details, are encrypted in our database;
• Access controls: Access to personal data is strictly limited to bdtk5 personnel and authorised partners who require it to perform their role. Access is governed by role-based permissions and regularly audited;
• Penetration testing: Our platform undergoes regular security assessments to identify and remediate vulnerabilities;
• Two-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.

Organisational Safeguards

• All bdtk5 personnel with access to personal data receive mandatory data privacy training;
• Data processing agreements are in place with all third-party service providers;
• A data breach response procedure is maintained, including notification protocols in the event of a significant breach affecting player data.

Data Breach Notification

In the unlikely event of a data security breach that poses a material risk to your rights, bdtk5 will notify affected players via their registered email address as promptly as circumstances allow. The notification will describe the nature of the breach, the data involved, the steps bdtk5 has taken in response, and any recommended actions for affected players.

While bdtk5 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is entirely infallible. We encourage players to use strong, unique passwords for their bdtk5 accounts and to enable any available account security features.

bdtk5 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below sets out our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where anonymised data is retained for analytical or statistical purposes, it is no longer considered personal data and falls outside the scope of this Privacy Policy.

In the event that a legal dispute, investigation, or regulatory inquiry is ongoing at the time a retention period would otherwise expire, bdtk5 will retain the relevant data until the matter is fully resolved.