bdtk4 Privacy Policy — How We Collect, Use, and Protect Your Data

1.1  bdtk4 is committed to protecting the privacy and personal data of all players who use our platform. This Policy sets out a transparent account of the personal information we hold, the lawful basis on which we process it, the parties with whom it may be shared, and the rights available to you as a data subject.

1.2  bdtk4 operates primarily for players based in Bangladesh and processes personal data in accordance with applicable data protection and privacy legislation. Where reference is made to specific legal frameworks, this is for guidance only and does not constitute legal advice.

1.3  We keep this Policy under regular review. The "Last Updated" date at the top of this page indicates when the most recent revision was made. You are encouraged to review this Policy periodically to stay informed of how we handle your personal data.

2.1  bdtk4 collects personal data in the following categories, depending on how you interact with our platform:

2.2  We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, health data, or data concerning sexual orientation, except where this information is incidentally disclosed in communications with our support team. Any such data disclosed incidentally is not recorded as a distinct data field and is not used for profiling purposes.

3.1  bdtk4 collects personal data through the following channels:

• Direct interactions: Data you provide when creating an account, completing KYC verification, making deposits or withdrawals, updating your profile, or contacting our support team.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar technologies when you access and navigate the platform. See Section 7 for our Cookie Policy.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank when processing deposits and withdrawals. These providers operate under their own privacy policies.
• Identity verification services: Data returned from third-party KYC and identity verification services used to confirm your identity and age as part of our compliance obligations.
• Fraud prevention services: Risk signals and device fingerprinting data from security service providers used to detect and prevent fraudulent activity on the platform.

3.2  bdtk4 does not purchase or acquire personal data from data brokers, list providers, or any other source outside of your direct interaction with the platform and the service providers listed above.

4.1  bdtk4 processes your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+ compliance), maintain your account profile, and provide access to platform features.
• Payment processing: To process deposits and withdrawals securely, match payments to your account, and maintain accurate transaction records.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming regulations, including record-keeping and reporting obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, identity theft, money laundering, and other prohibited activities on the platform.
• Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance.
• Platform improvement: To analyse usage patterns and technical performance data to improve the platform's functionality, features, and user experience.
• Responsible gaming: To monitor play patterns that may indicate problem gambling behaviour and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion at your request.
• Marketing communications: To send you promotional offers, bonuses, and news about bdtk4 services, subject to your communication preferences and any applicable consent requirements. You may opt out at any time.

4.2  bdtk4 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without human review, except where required by law or where you have provided explicit consent.

5.1  bdtk4 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accept when registering, including account management, payment processing, and access to platform services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, age verification requirements, and financial record-keeping mandates.
• Legitimate interests: Processing carried out for bdtk4's legitimate business interests, including fraud prevention, platform security, abuse detection, and improving our services, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1  bdtk4 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients under the circumstances described:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data strictly necessary to process your deposits and withdrawals. These providers act as independent data controllers under their own privacy policies.
• Identity verification providers: Third-party KYC service providers receive copies of identity and address documents for the purpose of verifying your eligibility to use the platform. These providers are bound by contractual data processing agreements.
• Fraud prevention and security providers: Risk management and device intelligence providers receive technical and behavioural data to assist in fraud detection and platform security. All such providers operate under strict confidentiality obligations.
• IT and infrastructure providers: Cloud hosting, database management, and content delivery partners who process data on our behalf under data processing agreements that prohibit them from using your data for any other purpose.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where required by law or valid legal process, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to persons.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bdtk4's business, personal data held by bdtk4 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance.

7.1  bdtk4 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot carry viruses.

7.2  The following categories of cookies are used on the bdtk4 platform:

• Strictly necessary cookies: Essential for the platform to function. These include session management cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Collect anonymised data about how visitors use the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely to improve platform performance.
• Functional cookies: Remember your preferences such as language settings, regional configurations, and display options to provide a more personalised experience during subsequent visits.
• Marketing and targeting cookies: Used to deliver relevant promotional content and track the effectiveness of bdtk4's marketing campaigns. These cookies are only set with your consent.

7.3  You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the platform. Most modern browsers provide options to block or delete cookies; refer to your browser's help documentation for instructions.

7.4  bdtk4 does not use third-party advertising networks or social media tracking pixels that would share your browsing behaviour with social platforms without your knowledge.

8.1  bdtk4 implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for personal data and financial records stored at rest.
• Role-based access controls ensuring that staff can only access personal data necessary for their specific job functions.
• Multi-factor authentication (MFA) for all internal systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Comprehensive audit logging of all access to personal data records, with automated alerts for anomalous access patterns.
• Physical and network segmentation of database infrastructure to reduce the attack surface available to external threats.

8.2  While bdtk4 takes every reasonable precaution to protect your data, no system can guarantee absolute security. You also play a role in keeping your account secure — choose a strong, unique password, do not share your login credentials, and log out of your account when using a shared device. If you suspect your account has been compromised, contact our support team immediately.

9.1  bdtk4 retains personal data for the periods set out below. Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with an individual.

9.2  Where retention is required for legal purposes, data is stored in a restricted access archive that is not used for active operational processing. Only designated compliance personnel can access archived data, and only for legitimate compliance or legal purposes.

10.1  Subject to applicable law and any legitimate grounds for restriction, you have the following rights with respect to the personal data bdtk4 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will respond within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Minor corrections (such as a misspelled name) can often be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to overriding legal retention obligations (see Section 9).
• Right to Restriction: You may request that we restrict the processing of your data — for example, while a rectification request is being assessed — rather than deleting it outright.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. You also have an unconditional right to object to processing for direct marketing purposes, which will be honoured immediately upon receipt of your request.

10.2  To exercise any of these rights, contact our support team at [email protected]. We may need to verify your identity before processing your request to protect against unauthorised data disclosure. There is no charge for exercising these rights, except in cases of manifestly unfounded or excessive requests.

11.1  The bdtk4 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age declaration and is supported by identity verification checks designed to prevent underage access.

11.2  If bdtk4 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation at registration or any other means — the affected account will be immediately suspended, the data will be deleted, and any associated winnings will be forfeited in accordance with our Terms & Conditions.

12.1  bdtk4 is primarily operated for players in Bangladesh. Some of our service providers — including cloud infrastructure and security partners — may process data on servers located outside Bangladesh. Where personal data is transferred internationally, bdtk4 takes appropriate steps to ensure an equivalent level of protection is maintained, including by entering into contractual data processing agreements with all international service providers.

12.2  bdtk4 does not transfer your personal data to countries or territories that do not maintain adequate data protection standards without implementing appropriate safeguards. Our international infrastructure partners are selected in part on the basis of their data protection certifications and compliance track records.

13.1  The bdtk4 platform does not contain links to external third-party websites as a general matter of policy. In the limited circumstances where references to third-party services are made (for example, references to payment provider platforms), bdtk4 is not responsible for the privacy practices or content of those third-party services.

13.2  Any interaction you have with a third-party service — including bKash, Nagad, Rocket, or your bank — is governed by that party's own privacy policy and terms of service. We encourage you to review those policies before sharing your personal data with any third-party service.

14.1  bdtk4 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes — those that significantly affect your rights or the way we use your data — we will notify you by email to your registered address and display a prominent notice on the platform prior to the changes taking effect.

14.2  Non- material changes (such as clarifications of existing language, typographical corrections, or updated contact details) may be made without prior notice, but the "Last Updated" date at the top of the Policy will always reflect the date of the most recent revision.

14.3  Your continued use of the bdtk4 platform after any updated Privacy Policy has been published and notified constitutes your acknowledgement of the revised Policy. If you do not agree with any material changes, you should cease using the platform and may request account closure by contacting our support team.

15.1  If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bdtk4 holds about you, please contact our Data Protection team using the details below. All privacy-related requests must be submitted in English and will be handled by a designated member of our compliance team.

15.2  Contact details for privacy matters:

• Email: [email protected]
• Subject Line: Please use "Privacy Request — [Your Username]" as the subject line for all data rights requests to ensure prompt handling.
• Response Time: Privacy enquiries are acknowledged within 48 hours. Full responses to data rights requests are provided within 30 days of identity verification.
• Operating Hours: Our compliance team processes privacy requests during standard Bangladesh Standard Time (UTC+6) business hours, Monday through Sunday.

15.3  When submitting a data rights request, please include your registered username, the specific right you wish to exercise, and any relevant context that will help us locate and process the correct data efficiently. For identity verification purposes, we may ask you to confirm information that only the legitimate account holder would know.