bdt64 Privacy Policy — How We Protect Your Personal Data

bdt64 is an online casino and sports betting platform accessible at https://bdt64.io, operated for and directed at players located in Bangladesh. Throughout this Privacy Policy, references to "bdt64", "we", "us", or "our" refer to the bdt64 platform and its operating entity.

bdt64 acts as the data controller in respect of all personal data collected from players who register accounts, make deposits, place wagers, or otherwise interact with the bdt64 platform. As data controller, bdt64 determines the purposes for which your personal data is collected and processed, and is responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

Our primary point of contact for all privacy-related enquiries is the bdt64 Support Team, reachable at [email protected]. All data subject requests, privacy complaints, and consent withdrawal notices should be directed to this address.

The categories of personal data that bdt64 collects from players are set out in the table below. The data collected varies depending on the stage of your relationship with bdt64 and the features you use.

bdt64 does not intentionally collect special category data (such as health or medical data, racial or ethnic origin, or political opinions) unless it is voluntarily disclosed in the context of a responsible gaming or self-exclusion enquiry, in which case it will be treated with enhanced confidentiality.

bdt64 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, place a bet or play a game, contact the support team, or update your account preferences.
• Automatically through technology: When you visit the bdt64 website, our servers automatically record your IP address, device and browser information, pages visited, session duration, and interaction patterns. This data is collected via server logs and first-party cookies.
• From payment providers: When a BDT transaction is processed, bdt64 receives transaction confirmation data from bKash, Nagad, Rocket, or Upay, including the registered mobile wallet number and transaction reference. bdt64 does not receive your full mobile banking PIN or password from any payment provider.
• From identity verification processes: Document images and data extracted from your Bangladesh NID or passport during the KYC verification process.
• From game providers: Game studios such as Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may return session data, RNG outcome logs, and game round identifiers to bdt64 for the purposes of dispute resolution and audit compliance.

bdt64 uses the personal data we collect for the following specific and defined purposes:

• Account administration: Creating and managing your bdt64 account, verifying your login credentials, and communicating account-related notifications to you.
• Identity verification (KYC): Confirming your identity and age (21+) prior to processing withdrawals, as required to prevent fraud and comply with anti-money laundering standards.
• Payment processing: Facilitating BDT deposits and withdrawals via your registered mobile wallet (bKash, Nagad, Rocket, or Upay) and maintaining transaction records.
• Service delivery: Providing access to sports betting, live casino games, slots (including those provided by Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi), crash games, and all other features of the bdt64 platform.
• Fraud and security monitoring: Detecting and investigating suspicious account activity, preventing duplicate account registration, identifying collusion and bonus abuse, and protecting the integrity of the bdt64 platform.
• Responsible gaming: Monitoring gaming activity against responsible gaming indicators, administering deposit limits, session time limits, loss limits, and self-exclusion requests, and providing proactive outreach where problem gambling patterns are detected.
• Customer support: Responding to your enquiries, processing complaints, and resolving account disputes in a timely manner.
• Legal compliance: Meeting record-keeping obligations, responding to valid legal requests from competent authorities, and enforcing the bdt64 Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, security, and user experience of the bdt64 platform.
• Direct marketing: Sending promotional communications about bdt64 bonuses, tournaments, and seasonal offers where you have opted in to receive such communications. You may withdraw your marketing consent at any time — see Section 13 for details.

bdt64 processes your personal data on one or more of the following legal bases:

• Performance of a contract: Processing necessary to provide the gaming and betting services you have registered to use, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with anti-money laundering, fraud prevention, and record-keeping obligations applicable to online gaming platforms.
• Legitimate interests: Processing carried out for bdt64's legitimate interests in securing its platform, preventing fraud, improving service quality, and protecting the welfare of players through responsible gaming monitoring — where such interests are not overridden by your own privacy interests or fundamental rights.
• Consent: Processing for direct marketing purposes, where you have given express opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdt64 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay receive the minimum data necessary to process your BDT deposits and withdrawals, including your registered mobile wallet number and transaction amount.
• Game providers: Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive a pseudonymous player identifier and session data necessary to deliver their games and resolve game-round disputes.
• Identity verification providers: Third-party KYC verification services may process your NID or passport data on behalf of bdt64 for the sole purpose of authenticating your identity. These providers are bound by strict data processing agreements and may not use your data for any independent purpose.
• Fraud prevention and security services: Device fingerprinting and IP intelligence providers receive technical data for the purpose of detecting fraudulent account activity and protecting the bdt64 platform from abuse.
• Legal and regulatory authorities: bdt64 will disclose your personal data to competent legal or regulatory authorities where required to do so by a valid court order, law enforcement request, or applicable legal obligation. We will notify you of such a request where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of the bdt64 operating entity, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

All third-party service providers who process personal data on behalf of bdt64 are required to execute a data processing agreement committing them to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and not to subcontract the processing without bdt64's prior written consent.

bdt64 uses first-party cookies and similar tracking technologies to operate the platform, maintain your login session, and collect anonymised analytics data. We do not use third-party advertising cookies or cross-site tracking technologies.

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. You may decline functional and analytics cookies by adjusting your browser settings; however, doing so may affect the performance and personalisation features of the bdt64 platform.

bdt64 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bdt64 servers.
• Encryption at rest for all sensitive data fields, including KYC document images, mobile wallet numbers, and hashed passwords.
• Role-based access controls ensuring that only bdt64 personnel with a specific operational need can access personal data, and that all such access is logged and audited.
• Two-factor authentication for all bdt64 staff accounts with access to player data management systems.
• Regular penetration testing and security audits conducted by independent security professionals to identify and remediate vulnerabilities.
• Incident response procedures that include a defined protocol for identifying, containing, and notifying affected parties in the event of a personal data breach.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a high risk to your rights and freedoms, bdt64 will notify affected players without undue delay and will publish a breach notice on the platform.

bdt64 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for statistical and analytical purposes.

As a bdt64 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the bdt64 support team at [email protected] with the subject line "Data Subject Request" and your registered mobile number for verification purposes:

• Right of Access: You may request a copy of all personal data bdt64 holds about you. We will provide this in a structured, machine-readable format within 30 calendar days of receiving your verified request.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Where the data affects account-critical fields (e.g., your legal name or date of birth), supporting documentation may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that bdt64 may be required to retain certain data (e.g., KYC and transaction records) for legal compliance purposes despite an erasure request.
• Right to Restriction: You may request that bdt64 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that bdt64 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on bdt64's legitimate interests, including profiling for responsible gaming purposes. bdt64 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., direct marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

bdt64 will not charge a fee for standard data subject requests. Where requests are manifestly unfounded, repetitive, or excessive, bdt64 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons in either case.

bdt64 employs age verification as part of its registration and KYC process to prevent underage access. Any person who believes that a minor has gained access to the bdt64 platform should report this immediately to the support team at [email protected] for immediate investigation and account closure.

The bdt64 platform is operated for players in Bangladesh. Some of our technical service providers — including cloud infrastructure providers, game studios (Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), and cybersecurity vendors — may process your data on servers located outside Bangladesh.

Where such international transfers occur, bdt64 ensures that appropriate safeguards are in place, including contractual data processing agreements requiring the receiving party to maintain data protection standards equivalent to those applied by bdt64. bdt64 does not transfer your personal data to jurisdictions that do not provide an adequate level of protection without such contractual safeguards in place.

Your KYC documents and financial transaction records are stored on servers within jurisdictions that maintain strong data protection standards. If you would like further information about the specific transfer mechanisms applicable to your data, please contact the support team.

With your express opt-in consent, bdt64 may send you promotional communications via SMS to your registered Bangladesh mobile number. These communications may relate to welcome bonuses, reload promotions, tournament announcements, seasonal offers (such as Eid, Pohela Boishakh, or BPL cricket season promotions), and VIP programme updates.

bdt64 will never send unsolicited marketing communications to individuals who have not opted in, and will never share your mobile number with third-party marketers for their independent promotional use.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your bdt64 account dashboard.
• Replying STOP to any promotional SMS received from bdt64.
• Contacting the support team at [email protected] with the subject line "Unsubscribe from Marketing".

Withdrawal of marketing consent will take effect within 48 hours and will not affect your access to any platform feature or your eligibility for bonuses that are available to all players regardless of marketing opt-in status.

The bdt64 platform may contain references to or integrations with third-party game providers, payment processors, and technology partners. Where such integrations involve redirects or pop-up frames to third-party interfaces — for example, a bKash payment confirmation screen or a Pragmatic Play game window — those third-party interfaces are governed by the privacy policies of the respective third party, not by this Privacy Policy.

bdt64 is not responsible for the privacy practices of third-party services that operate outside the direct bdt64 platform environment. We recommend that you review the privacy policy of any third-party service you interact with in connection with your bdt64 account, particularly in relation to how payment processors such as bKash, Nagad, Rocket, and Upay handle your mobile wallet data.

bdt64 does not control the content, data practices, or security standards of third-party websites or services and accepts no liability for any privacy harm arising from your interaction with those third parties beyond the scope of the bdt64 platform itself.

bdt64 reserves the right to update or amend this Privacy Policy at any time. When a material change is made — that is, a change that significantly affects how your personal data is collected, used, or shared — bdt64 will provide at least 14 days' advance notice to all registered players via SMS to their registered Bangladesh mobile number and via a prominent notice displayed on the bdt64 platform upon login.

Non-material changes (such as corrections of typographical errors, clarifications of existing practices that do not alter the substance of the policy, or updates to contact details) may be made without advance notice, and the updated version will take effect upon publication on the bdt64 platform.

The effective date shown at the top of this Privacy Policy will be updated to reflect the date on which the current version became operative. Your continued use of the bdt64 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Privacy Policy, you must discontinue use of the platform and may request account closure by contacting the support team.

bdt64 recommends that you review this Privacy Policy periodically — at minimum, whenever you receive a notification that it has been updated — to stay informed about how your personal data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt64 handles your personal data, please contact the bdt64 Data Support Team using the details below. All communications must be in English. Our team is available 24 hours a day, 7 days a week, and will respond to privacy-related enquiries within 4 hours during normal operations and within 24 hours during peak periods. All times are Bangladesh Standard Time (BST, UTC+6).

When submitting a data subject request, please include your registered mobile number and, where relevant, your account username to allow bdt64 to verify your identity and locate your records efficiently. bdt64 may request additional verification information before acting on a data subject request to protect against unauthorised disclosure of personal data.