Privacy Policy for bitbdt

This Privacy Policy ("Policy") sets out the basis on which bitbdt ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to users ("you", "your", "the Player") of the bitbdt website and all associated services accessible at https://bitbdt.net.

bitbdt is an online casino and sports betting platform operated primarily for players based in Bangladesh. In the course of providing our services — which include account registration, cricket and sports betting, live casino games, video slots, mobile wallet deposits and withdrawals, customer support, and promotions — we collect and process personal data about registered players and site visitors.

We are committed to processing your personal data lawfully, fairly, and transparently. This Policy explains in plain language what data we collect, why we collect it, how long we keep it, who we may share it with, and what rights you have in relation to it. We encourage you to read this Policy carefully before registering an account or providing us with any personal information.

This Policy should be read alongside the bitbdt Terms & Conditions, which govern the overall relationship between you and the platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy takes precedence.

By registering an account on bitbdt, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or use the bitbdt platform.

bitbdt collects personal data from you in several ways: directly when you provide it to us during registration or in the course of using the platform; automatically through your use of the website; and from third-party service providers involved in payment processing and identity verification.

2.1 Data You Provide Directly

The following categories of data are collected directly from you:

• Identity data: Full legal name, date of birth, nationality, and gender (where required for KYC verification).
• Contact data: Email address, mobile phone number, and residential address (city, district, division within Bangladesh).
• Account credentials: Username and hashed password. We never store your password in plain text.
• Identity verification documents: Copies of government-issued identification (National ID card, passport, or driving licence) submitted during the KYC process.
• Payment data: Mobile wallet account numbers associated with bKash, Nagad, Rocket, or Upay transactions. Full financial account credentials are never stored by bitbdt — payment processing is handled by the respective wallet providers.
• Communications data: Records of any correspondence you send to the bitbdt support team, including live chat transcripts, support ticket content, and emails.

2.2 Data Collected Automatically

When you access the bitbdt platform, certain technical data is collected automatically by our systems:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths within the platform.
• Transaction data: Records of all deposits, withdrawals, bets placed, game rounds completed, bonuses claimed, and account balance movements.
• Cookie and tracking data: Session cookies and first-party analytics data as described in Section 6 of this Policy.
• Geolocation data: Approximate geolocation derived from your IP address, used for fraud prevention and jurisdictional compliance. We do not collect precise GPS-level location data.

2.3 Data from Third Parties

bitbdt may receive data about you from the following third-party sources:

• Identity verification partners: Third-party KYC providers may return verification status data, document authenticity scores, and watchlist screening results to bitbdt as part of the account verification process.
• Payment processors: Mobile wallet providers (bKash, Nagad, Rocket, Upay) confirm transaction status, reference numbers, and the registered name associated with a wallet account. They do not share full financial account details with bitbdt.
• Fraud and AML screening services: Anti-money laundering and fraud detection partners may flag accounts or transactions based on risk scoring models that incorporate publicly available and commercially licensed data sources.

bitbdt uses the personal data it collects for specific, defined purposes. The table below summarises the key purposes and the categories of data used for each:

bitbdt will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for the new processing activity.

Every instance of personal data processing by bitbdt is underpinned by one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you under the bitbdt Terms & Conditions — for example, creating your account, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responses to lawful requests from law enforcement or regulatory bodies.
• Legitimate interests: Processing that is necessary for the legitimate interests of bitbdt or a third party, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security monitoring, responsible gaming analysis, and internal analytics used to improve the platform.
• Consent: Where we rely on your consent as the legal basis for processing — primarily for promotional and marketing communications — you may withdraw that consent at any time by contacting support at [email protected] or by updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

bitbdt does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Service Providers

bitbdt engages carefully selected third-party service providers to assist in operating the platform. These providers act as data processors on our behalf and are contractually bound to process your data only on our documented instructions, to implement appropriate security measures, and not to use your data for their own purposes. Categories of service provider include:

• Identity verification and KYC solution providers
• Mobile wallet payment processing partners (bKash, Nagad, Rocket, Upay)
• Anti-fraud and anti-money laundering screening services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — these studios receive anonymised session tokens only; they do not receive your name, contact details, or payment information

5.2 Legal and Regulatory Disclosures

bitbdt may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of bitbdt, its players, or the public. Such disclosures are made on a case-by-case basis, limited to the data strictly required, and recorded in our internal disclosure log.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of bitbdt's assets, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify registered players by posting a notice on the platform before any transfer takes place, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

bitbdt uses cookies and similar technologies on its platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the website to recognise your device on subsequent visits and to store limited information about your preferences and session state.

6.1 Types of Cookies Used

6.2 Third-Party Cookies

bitbdt does not deploy third-party advertising cookies or allow advertising networks to place cookies on the platform. Game content delivered by studio providers (such as Pragmatic Play or Evolution Gaming) may set their own functional cookies required for the game software to operate correctly. These cookies are limited to technical session management and do not track you across third-party websites.

6.3 Managing Cookies

You may configure your browser to refuse all cookies, to alert you when a cookie is being set, or to delete cookies after each session. However, please note that disabling certain cookies — particularly session and security cookies — will impair or entirely prevent your ability to log in to your bitbdt account and use the platform's core features. Instructions for managing cookies in the most commonly used browsers are available in each browser's help documentation.

bitbdt retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or as required or permitted by applicable law. The table below summarises our key retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

bitbdt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser or mobile device and the bitbdt platform.
• Encryption at rest for sensitive data stored on platform servers, including identity documents and hashed credentials.
• Access controls limiting access to personal data to those employees and contractors who genuinely need it to perform their job functions, on a strict least-privilege basis.
• Multi-factor authentication for all internal administrative access to systems containing personal data.
• Regular security assessments including vulnerability scanning and periodic penetration testing of the platform infrastructure.
• Incident response procedures ensuring that any data breach or suspected breach is identified, contained, and assessed promptly, with notification to affected players and relevant authorities where required.

While bitbdt takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your bitbdt account and to contact the support team immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

As a registered player on bitbdt, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data bitbdt holds about you, together with information about how it is used and with whom it has been shared. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where data has been shared with third parties, we will inform them of the correction where feasible.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that this right is subject to overriding legal retention obligations — data we are required to retain for AML compliance cannot be erased early.
• Right to Restriction of Processing: You may request that bitbdt restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of the personal data you have provided to bitbdt, suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing based on bitbdt's legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bitbdt will respond to all verified data rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it. There is no charge for exercising your rights, except in cases of manifestly unfounded or excessive requests.

The bitbdt platform is strictly intended for adults aged 18 years and above. bitbdt does not knowingly collect or process personal data relating to persons under the age of 18. Account registration requires confirmation of age, and all accounts are subject to age verification as part of the KYC process.

If bitbdt becomes aware that personal data has been collected from a person under the age of 18 — whether through a fraudulent registration or any other means — the account will be immediately suspended, all funds will be frozen pending investigation, and all personal data relating to the minor will be deleted from our systems as promptly as practicable in compliance with applicable law.

The bitbdt platform may contain references to third-party services — such as mobile wallet providers and game studios — in a purely informational context. bitbdt does not control the privacy practices of third-party websites or services and is not responsible for the content, data practices, or privacy policies of those third parties.

We recommend that you review the privacy policy of any third-party service you interact with — including bKash, Nagad, Rocket, and Upay — before providing them with your personal data. Your interactions with those services are governed by their own terms and privacy policies, not by this bitbdt Privacy Policy.

bitbdt reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, new services added to the platform, or feedback from players and regulators. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where a change to this Policy is material — meaning it meaningfully affects your rights or the way we process your personal data — bitbdt will provide advance notice by posting a prominent notice on the platform, by sending an email to your registered address, or both, at least 14 days before the change takes effect. Continued use of the platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how bitbdt collects and uses your personal data. Archived versions of previous Policy revisions are available on request from the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bitbdt holds about you, please contact the bitbdt privacy and support team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

For data rights requests specifically (access, erasure, portability, rectification, objection), please include "Data Rights Request" in your email subject line and provide sufficient information to allow us to verify your identity before processing the request. This is necessary to protect your data from being disclosed to or acted upon by unauthorised persons.

For responsible gaming concerns, account self-exclusion requests, and deposit limit adjustments, please contact the support team directly or visit the Responsible Gaming page. For general platform questions, the FAQ page covers the most common topics in detail.