Privacy Policy — bdtk36

⚡ Privacy at a Glance

The following six cards summarise the core principles of how bdtk36 handles your personal data. They are provided for convenience only — the full policy sections below contain the complete and authoritative detail.

📄 Full Privacy Policy

1. Who We Are

1.1 This Privacy Policy is issued by bdtk36 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at bdtk36.app. For any privacy-related queries, contact our Data Support team at [email protected].

1.2 bdtk36 is the data controller in respect of all personal data collected and processed through the platform. We are committed to handling member data responsibly, transparently and in compliance with applicable data protection principles.

2. Data We Collect

2.1 Data you provide directly:

• Registration data: full name, date of birth, gender, residential address (city/district within Bangladesh), mobile phone number and chosen username.
• Identity verification data: copies of government-issued National ID (NID), passport or other documents submitted to verify your age and identity.
• Payment data: mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank), card details (Visa, Mastercard) and transaction references. We do not store full card numbers — card data is tokenised by the payment processor.
• Communications data: messages sent to our support team via email, the content of complaints and feedback submitted through the platform.
• Preference data: marketing consent choices, responsible gaming limit settings, preferred game categories and language settings.

2.2 Data collected automatically:

• Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution.
• Usage data: pages visited, game titles played, bet amounts, session start/end times, deposit and withdrawal history, bonus utilisation.
• Cookie data: session cookies essential for platform operation and, where consent is given, analytics cookies that help us understand how members use the platform. See Section 10 for full cookie details.

3. How We Use Your Data

3.1 bdtk36 uses your personal data for the following purposes:

• Creating and managing your account, including processing login authentication and maintaining your account balance.
• Processing BDT deposits and withdrawals through your chosen payment method and issuing transaction confirmations.
• Verifying your identity and age to comply with responsible gaming obligations. Players must be 21 years of age or older to use bdtk36.
• Detecting, investigating and preventing fraud, money laundering, collusion, use of automated betting tools and other prohibited activities described in the Terms & Conditions.
• Calculating and crediting bonus funds, applying wagering requirements and managing promotional eligibility.
• Providing customer support and responding to complaints, disputes and enquiries within a target response time of 30 minutes during peak hours (Bangladesh Standard Time, UTC+6).
• Sending transactional communications (deposit confirmations, withdrawal status updates, security alerts) via SMS or email. These communications are service-related and do not require separate consent.
• Sending marketing communications (new game announcements, seasonal promotions, bonus offers) only where you have provided explicit consent. You may withdraw this consent at any time via account settings or by contacting [email protected].
• Improving the platform through analysis of aggregated, anonymised usage data. Individual member data is not used for platform analytics in a form that identifies you personally.
• Enforcing the bdtk36 Terms & Conditions and exercising or defending legal claims.

3.2 bdtk36 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on members, without human review being available upon request.

4. Sharing Your Data

4.1 bdtk36 will not sell, rent or trade your personal data to third parties for their own marketing purposes. We share data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa and Mastercard receive the payment data necessary to process your transactions. Each processor operates under its own privacy policy and security standards.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi receive session tokens and anonymous bet data to deliver their game content. They do not receive your name, NID or payment details.
• Identity verification partners: Where enhanced identity checks are required, your NID or passport data may be shared with a third-party verification service. Such partners are contractually restricted from using this data for any purpose other than the verification requested.
• Fraud prevention services: Anonymised device fingerprint and IP data may be shared with industry fraud-prevention networks to protect the integrity of the bdtk36 platform and its members.
• Professional advisors: Lawyers, accountants and auditors acting under duties of confidentiality, where disclosure is necessary for bdtk36 to obtain professional advice or to conduct audits.
• Authorities: Where bdtk36 is required by law to disclose data to government agencies, law enforcement bodies or courts, we will comply with such obligations. Where permitted, we will notify you of such a disclosure.

4.2 Any third party receiving data from bdtk36 is contractually required to maintain appropriate technical and organisational security measures and to process the data only for the purpose for which it was provided.

5. International Data Transfers

5.1 Some of our technology and game content providers operate servers located outside Bangladesh. Where your data is processed in a territory other than Bangladesh, bdtk36 ensures that appropriate safeguards are in place — including contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this policy.

5.2 Your core account and transaction data is stored on servers located within Asia-Pacific regions and is not transferred to territories with materially weaker data protection standards without contractual safeguards in place.

6. Data Security

6.1 bdtk36 implements industry-standard technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and bdtk36 servers.
• AES-256 encryption for sensitive data at rest, including payment credentials and identity documents.
• Role-based access controls ensuring that staff can access only the member data required for their specific job function.
• Access logs and anomaly detection systems that flag unusual access patterns for security review.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Secure deletion procedures applied to data that has reached the end of its retention period.

6.2 Despite these measures, no internet-based service can guarantee absolute security. If you have reason to believe your bdtk36 account has been accessed without your authorisation, contact [email protected] immediately so that we can investigate and, if necessary, suspend access to protect your funds.

7. Data Retention

7.1 bdtk36 retains personal data for the following periods:

• Active account data: retained for the duration of your account membership plus five years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction records: retained for seven years from the date of the transaction, in line with financial record-keeping best practice.
• Identity verification documents: retained for five years following account closure or the date of the last verification review, whichever is later.
• Marketing consent records: retained for three years from the date of the last interaction or consent update.
• Support communications: retained for two years from the date of resolution of the relevant enquiry or complaint.
• Cookie and analytics data: session cookies expire at the end of each browsing session. Analytics data is aggregated and anonymised within 90 days of collection.

7.2 At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised is no longer considered personal data and may be retained indefinitely for statistical purposes.

8. Your Rights

8.1 As a bdtk36 member, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request":

• Right of access: you may request a copy of the personal data bdtk36 holds about you. We will respond within 30 days of a verified request.
• Right to rectification: if any of your personal data is inaccurate or incomplete, you may request that we correct it. Corrections to core account data (name, date of birth, NID number) will require supporting documentation.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records as described in Section 7.
• Right to restrict processing: you may request that we suspend processing of your data while a rectification or objection request is being assessed.
• Right to object: you may object to processing based on legitimate interests, including profiling for fraud prevention. We will assess the objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8.2 bdtk36 will not charge a fee for responding to a data rights request unless the request is manifestly unfounded or excessive. In such cases, we will notify you of the applicable fee before proceeding.

9. Children and Minors

The bdtk36 platform is strictly for adults aged 21 and over. bdtk36 does not knowingly collect personal data from persons under the age of 21. If we discover or are notified that a member is under 21, the account will be suspended immediately, all personal data associated with the account will be reviewed and data that is not required for legal record-keeping purposes will be deleted. If you believe an underage person has registered on the bdtk36 platform, please notify us immediately at [email protected].

10. Cookies

10.1 bdtk36 uses cookies and similar tracking technologies to operate the platform and, with your consent, to improve your experience. Cookies are small text files stored on your device. The types of cookies we use are as follows:

• Essential cookies: required for core platform functions including login session management, balance display and secure checkout. These cannot be disabled without disrupting your use of the platform. Legal basis: legitimate interest.
• Analytics cookies: used to understand how members navigate the platform in aggregate, identify popular game categories and improve site performance. Legal basis: consent. You may opt out via your browser settings or account preferences.
• Preference cookies: used to remember your language setting, preferred game view and responsible gaming limit settings between sessions. Legal basis: consent or legitimate interest depending on cookie type.

10.2 You can control cookies via your browser settings. Note that disabling essential cookies will prevent certain platform features from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

11. Third-Party Links

The bdtk36 platform does not contain links to external third-party websites. All links within the platform navigate to pages within bdtk36.app. If you independently navigate to external sites after leaving bdtk36.app, this Privacy Policy does not govern the data practices of those sites and bdtk36 accepts no responsibility for their content or privacy practices.

12. Changes to This Policy

12.1 bdtk36 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or platform features. The effective date at the top of this page will be updated accordingly.

12.2 For material changes — those that significantly affect your rights or the way we use your data — bdtk36 will notify active members via a prominent notice displayed upon login before the change takes effect. Continued use of the platform following the effective date of a revised policy constitutes your acceptance of the updated terms.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how bdtk36 has handled your personal data, please contact our support team. Email: [email protected]. Our support team is available 24 hours a day, 7 days a week, with responses typically provided within 30 minutes during peak hours (Bangladesh Standard Time, UTC+6). For formal data rights requests, please use the subject line "Data Rights Request" to ensure your message is routed to the correct team.