bdtk3 Privacy Policy

bdtk3 ("we", "us", "our") operates the online gaming and sports betting platform accessible at bdtk3.im. We are committed to protecting the privacy of everyone who visits or uses our platform ("you", "your", "the user").

This Privacy Policy describes our practices with respect to the collection, use, storage, transfer, and deletion of personal data. It applies to all interactions you have with bdtk3, including account registration, deposits and withdrawals, gameplay, customer support communications, and your use of our website and any associated mobile experience.

We operate in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. All personal data processing activities are carried out on a lawful basis, and we maintain internal policies and technical safeguards to enforce those standards consistently.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with bdtk3. Where this Policy conflicts with those documents on a data-related matter, this Privacy Policy shall take precedence.

bdtk3 collects personal data in the following categories, depending on how you interact with the platform:

We do not collect special category data (such as biometric data, religious beliefs, or health information) except where you voluntarily provide context relevant to responsible gaming support requests.

Data collected from third-party sources may include identity verification results returned by our KYC service partners and fraud-screening signals provided by our payment processing partners.

bdtk3 uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your player account, and to verify your identity in accordance with our Know Your Customer (KYC) obligations.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer channels, and to maintain an accurate record of all financial activity on your account.
• Platform delivery: To provide access to casino games, live dealer tables, sports betting markets (including BPL, IPL, T20, and international cricket), and all other features of the bdtk3 platform.
• Customer support: To respond to queries, complaints, and disputes, and to maintain records of communications for quality assurance and compliance purposes.
• Responsible gaming: To monitor gaming behaviour and identify indicators of problem gambling, enforce self-exclusion requests and deposit limits, and fulfil our duty of care obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats.
• Regulatory compliance: To meet applicable legal, regulatory, and audit requirements, including record-keeping obligations.
• Platform improvement: To analyse usage patterns and technical performance in order to improve the platform, fix bugs, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.

bdtk3 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except in fraud-screening processes where such screening is a necessary and proportionate safeguard.

Every personal data processing activity carried out by bdtk3 rests on one or more of the following lawful bases:

• Contract performance: Processing that is necessary to fulfil the Terms and Conditions you agreed to when registering your account — including delivering games, processing payments, and managing your account.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC requirements, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of bdtk3's legitimate business interests where those interests are not overridden by your rights and freedoms. This includes fraud prevention, security monitoring, and platform analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where multiple bases apply to a single processing activity, we rely on the most relevant basis for the primary purpose of that activity.

bdtk3 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment service providers: We share the minimum data required (such as your mobile wallet number and transaction amount) with bKash, Nagad, Rocket, Upay, and bank partners to process deposits and withdrawals on your behalf.
• Identity verification and KYC partners: We engage third-party KYC service providers to verify the authenticity of identity documents you submit. These providers are contractually bound to use your data solely for verification purposes.
• Fraud and security technology providers: We use specialist third-party services to assist in detecting and preventing fraudulent transactions, account compromises, and money laundering. These providers process technical and transactional data under strict data processing agreements.
• Game software providers: Certain games on bdtk3 are operated by third-party studios, including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive the minimum session data required to deliver their games. They are prohibited from using this data for independent marketing purposes.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or judicial authorities where required to do so by applicable law or a binding legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bdtk3's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

bdtk3 uses cookies and similar tracking technologies (including local storage and session tokens) on its website. These technologies serve the following functions:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and protect the platform against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing your ability to use the site.
• Performance and analytics cookies: These cookies collect anonymised data about how users navigate the platform — including which pages are visited most frequently, how long sessions last, and where errors occur. This information helps us improve the platform's usability and stability.
• Functional cookies: These cookies remember your preferences (such as your preferred deposit method or game category) to provide a more personalised experience on your next visit.
• Marketing and retargeting cookies: Where you have consented to marketing communications, these cookies help bdtk3 identify which promotional campaigns are effective and ensure that marketing messages are relevant to your demonstrated interests.

You can control non-essential cookies through your browser's settings or developer tools. Please note that disabling certain cookies may affect the functionality of some platform features. Your consent to non-essential cookies, where sought, can be withdrawn at any time.

bdtk3 implements a layered approach to data security, combining technical controls, organisational policies, and ongoing staff training. The key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and bdtk3's servers.
• Encrypted storage of sensitive personal data, including identity documents and financial account details, using industry-standard encryption at rest.
• Access control: Personal data is accessible only to bdtk3 staff and authorised contractors who have a legitimate need to access it for their job function. Access is governed by role-based permissions and logged for audit purposes.
• Penetration testing and vulnerability scanning conducted periodically to identify and remediate security weaknesses before they can be exploited.
• Incident response procedures: In the event of a confirmed data breach that poses a risk to your rights and freedoms, bdtk3 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the incident.
• Secure payment processing: Payment data is handled by PCI-DSS-compliant payment partners. bdtk3 does not store full card numbers or mobile banking PINs on its own servers.

While bdtk3 takes all reasonable precautions, no digital system can guarantee absolute security. You are encouraged to use a strong, unique password for your bdtk3 account and to enable any additional security features offered through the account settings panel.

bdtk3 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on bdtk3.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or from the date your account is closed, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless a longer period is required for an unresolved dispute or regulatory matter.
• Marketing consent records: Retained for 3 years from the date of consent or the date of the last marketing interaction, to demonstrate compliance with consent obligations.
• Inactive account data: Accounts that have been inactive for 24 consecutive months are subject to a data review. Non-essential data may be purged while core identity and transaction records are retained as required by law.

Upon account closure, bdtk3 will delete or anonymise your personal data within a reasonable period, except for data that must be retained to meet legal, regulatory, or dispute-resolution obligations.

As a user of bdtk3, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered username.

bdtk3 will respond to verified data rights requests within 30 days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to exceptions. For example, we cannot delete data that we are legally required to retain, and we cannot provide a data export of records that would compromise the security of other users or reveal proprietary platform logic.

bdtk3 is strictly an adults-only platform. Access is limited to individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21.

If we become aware that we have inadvertently collected personal data from a user who is under 21, we will take immediate steps to delete that data and to permanently close the associated account. Any funds deposited to an underage account will be returned via the original payment method.

If you are a parent or guardian and believe that a minor in your care has registered an account on bdtk3, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The bdtk3 platform may from time to time contain references to third-party game providers, payment partners, or informational resources. Where such references exist, please be aware that:

• bdtk3 does not control the content, privacy practices, or data handling policies of any third-party website or service.
• This Privacy Policy applies exclusively to data collected and processed by bdtk3 through the bdtk3.im platform. It does not apply to any data you provide directly to a third-party service, even if you accessed that service via a reference on bdtk3.
• We encourage you to review the privacy policies of any third-party services with which you interact, particularly those handling financial transactions or identity data.

bdtk3 accepts no liability for the privacy practices or data breaches of third-party providers, platforms, or services.

bdtk3 reviews this Privacy Policy periodically and reserves the right to update it at any time to reflect changes in our data practices, applicable law, or platform features. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — bdtk3 will notify registered users in advance of the change taking effect. Notification may be delivered via a prominent notice on the platform login screen, or via the email address or mobile number registered to your account.

Your continued use of the bdtk3 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you may close your account by contacting [email protected] before the change takes effect.

We recommend bookmarking this page and reviewing it periodically so that you remain informed about how bdtk3 handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the bdtk3 data support team:

Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Support Hours: 24/7, including public holidays
Response Time: Data rights requests are handled within 30 days of receipt.

When submitting a data-related request, please include your registered username and a clear description of your request or concern. We may ask you to verify your identity before processing your request to protect against unauthorised access to your account information.

If you are not satisfied with bdtk3's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority in your jurisdiction.