bdt67 Privacy Policy — How We Handle Your Data

1 Who We Are

bdt67 is an online betting and casino platform operating at https://bdt67.io, serving players in Bangladesh with a range of sports betting markets, live casino games, slot games, and crash game products. For the purposes of this Privacy Policy, bdt67 is the data controller responsible for the personal data of registered players and website visitors.

If you have any questions about how bdt67 handles your personal data, or if you wish to exercise any of your data rights as described in this policy, you may contact our data support team at [email protected]. Our support team operates 24 hours a day, 7 days a week, in both English and Bengali, on Bangladesh Standard Time (UTC+6).

2 Data We Collect

bdt67 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party service providers engaged to deliver specific services such as payment processing and identity verification.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access and use the bdt67 platform, certain technical data is collected automatically through cookies, log files, and similar technologies. This automatically collected data includes:

• IP address and approximate geographic location derived from IP address.
• Device type, operating system version, and browser type and version.
• Pages visited, features used, games played, bets placed, and session duration.
• Referral source (the URL or search engine that directed you to bdt67).
• Date and time stamps of all platform interactions.
• Crash reports and error logs generated during platform use.

2.3 Data from Third Parties

bdt67 may receive personal data about you from third-party service providers in the following contexts:

• Payment providers (bKash, Nagad, Rocket, Upay): Transaction confirmation data, including transaction reference numbers and payment status, to reconcile deposits and withdrawals with your bdt67 wallet.
• Identity verification partners: Results of automated document authenticity checks and database-based identity confirmation, used to fulfil our know-your-customer (KYC) obligations.
• Fraud prevention services: Risk scores and signals used to detect potentially fraudulent account activity, bonus abuse, or suspicious betting patterns.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Game round data, bet histories, and RNG audit logs required for dispute resolution and platform integrity purposes.

3 How We Use Your Data

bdt67 uses personal data collected from players for the following purposes. Each purpose is linked to a legal basis described in Section 4 of this policy.

• Account creation and management: To register your bdt67 account, authenticate your identity at login, manage your account settings, and maintain your betting and gaming history.
• Payment processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain an accurate record of all financial transactions associated with your account.
• Identity verification (KYC/AML): To verify that you meet the 21+ age requirement, to confirm your identity before processing withdrawals above specified thresholds, and to meet our anti-money laundering obligations.
• Fraud and abuse prevention: To detect and prevent bonus abuse, account fraud, match-fixing, automated betting software use, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your support queries, complaints, and dispute submissions through live chat and email support channels.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the design, performance, and content of the bdt67 platform.
• Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour and to deliver responsible gaming interventions such as deposit limit reminders and cooling-off period notifications where appropriate.
• Promotional communications: To send you information about promotions, bonuses, and new features on bdt67, where you have consented to receive marketing communications. You may withdraw this consent at any time.
• Legal compliance: To retain records required by applicable law and to cooperate with legitimate requests from law enforcement authorities or regulatory bodies.

4 Legal Basis for Processing

bdt67 processes personal data on the following legal bases:

5 Data Sharing and Disclosure

bdt67 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data is shared only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

5.1 Service Providers

bdt67 engages a number of third-party service providers who process personal data on our behalf under strict contractual obligations of confidentiality and data security. These providers include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals in BDT.
• Identity verification providers: Third-party KYC partners receive your identity documents and verification data to perform automated and manual identity checks.
• Fraud prevention vendors: Risk and fraud analytics providers receive technical and behavioural data to generate risk assessments for fraud detection purposes.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and bet data necessary to deliver game content and maintain game integrity records.
• Cloud infrastructure providers: Server and database infrastructure providers store platform data under contractual security obligations on behalf of bdt67.

5.2 Legal Disclosure

bdt67 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of bdt67, its players, or the public.

5.3 Business Transfers

In the event that bdt67's business or any part of it is sold, transferred, or merged with another entity, personal data held by bdt67 may form part of the transferred assets. In such circumstances, bdt67 will use reasonable efforts to ensure that the receiving entity adopts privacy practices consistent with this policy, and registered players will be notified of any material change to data controllership.

6 Cookies and Tracking Technologies

bdt67 uses cookies, web beacons, pixel tags, and similar tracking technologies on the platform to enable core functionality, remember your preferences, and analyse how the platform is used. This section describes the categories of cookies in use.

6.1 Cookie Categories

6.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent core platform functionality, including the ability to remain logged in to your bdt67 account, from operating correctly. Instructions for managing cookies are available in your browser's help documentation.

bdt67 does not use third-party advertising or retargeting cookies. Analytics data collected via cookies is processed in aggregate and is not used to identify individual players for commercial profiling purposes.

7 Data Retention

bdt67 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five (5) years following the date of the transaction, consistent with applicable financial record-keeping obligations.
• Identity verification documents: Retained for the duration of the account relationship and for five (5) years following account closure. Documents may be retained for longer periods where required by law enforcement or regulatory request.
• Customer support correspondence: Retained for three (3) years from the date of the support interaction, to enable complaint review and dispute resolution.
• Technical and usage logs: Retained for a maximum of twelve (12) months, after which they are either deleted or anonymised for aggregate analytics purposes.
• Marketing consent records: Retained for as long as necessary to demonstrate the existence and withdrawal of consent in the event of a complaint or regulatory inquiry.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically complex due to backup system architecture, bdt67 will ensure that data in backup systems is deleted at the next scheduled backup purge cycle and is not used for any operational purpose in the interim.

8 Data Security

bdt67 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the bdt67 platform.
• AES-256 encryption for sensitive personal data and financial records stored in bdt67's databases.
• Strict access controls ensuring that personal data is accessible only to bdt67 personnel and authorised service providers with a documented operational need.
• Regular security audits and penetration testing of the platform's technical infrastructure.
• Multi-factor authentication requirements for all bdt67 internal systems that process personal data.
• Formal data breach response procedures, including notification protocols to affected players in the event of a confirmed breach affecting their personal data.

While bdt67 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. bdt67 cannot provide an absolute guarantee against all security threats, and players use the platform acknowledging this inherent characteristic of internet-based services.

9 Your Data Rights

As a registered player on bdt67, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered username and a clear description of the right you wish to exercise. bdt67 will respond to all data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that bdt67 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by bdt67. You may update most account information directly from your account settings panel without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected. Please note that bdt67 may be required to retain certain data for legal compliance purposes notwithstanding an erasure request.
• Right to Restrict Processing: You have the right to request that bdt67 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contractual relationship, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bdt67's legitimate interests. Where you object, bdt67 will cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

10 Children's Privacy (21+ Policy)

As part of our registration process and ongoing identity verification (KYC) procedures, bdt67 actively verifies the age of all registered players. Any account found to be registered by a person under the age of 21 will be immediately closed and any funds deposited will be returned to the originating payment method, net of any amounts already wagered.

If bdt67 becomes aware that personal data has been inadvertently collected from an individual under the age of 21, that data will be permanently deleted from all bdt67 systems without delay. If you are a parent or guardian and believe that a minor in your care has accessed or registered on the bdt67 platform, please contact us immediately at [email protected] so that we can take appropriate action.

bdt67 encourages parents and guardians to make use of parental control software and internet filtering tools to prevent minors from accessing online betting and gaming platforms. A range of such tools are available and recommended in our Responsible Gaming guidance.

11 Third-Party Links and Services

The bdt67 platform integrates game content delivered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these integrations are embedded within the bdt67 platform environment, the game providers operate under their own data processing agreements and privacy practices in relation to game-session data generated during gameplay.

The bdt67 platform does not contain links to unaffiliated external websites. All navigation within the platform leads to bdt67-operated pages only. bdt67 accepts no responsibility for the data practices of third-party payment providers accessed via their own independent applications (such as the bKash, Nagad, Rocket, or Upay apps) when you use those apps to fund your bdt67 account. Please review the privacy policies of your chosen payment provider for information about how they handle your data.

12 Updates to This Privacy Policy

bdt67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made to this policy, bdt67 will notify registered players by posting a prominent notice on the platform and, where practicable, by sending a notification to the email address or mobile number associated with your account.

The date of the most recent revision will always be displayed at the top of this page. We encourage you to review this Privacy Policy periodically to remain informed about how bdt67 collects, uses, and protects your personal data. Your continued use of the bdt67 platform following the posting of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

If any update to this Privacy Policy materially reduces your rights or significantly changes how your personal data is used, bdt67 will seek your renewed consent where required by applicable law before implementing the change in respect of your existing personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bdt67's data practices generally, please contact our support team using the details below. All privacy-related inquiries will be handled with care and responded to within 30 calendar days.

For data rights requests specifically, please use the subject line "Data Rights Request — [Your Username]" when emailing [email protected] to ensure your inquiry is directed to the correct team without delay.