Your Privacy Matters to bdt4

Introduction

This Privacy Policy ("Policy") describes how bdt4 ("bdt4", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the bdt4 online betting and casino platform accessible at bdt4.io (the "Platform") and all related services.

bdt4 is committed to handling your personal data with transparency, integrity, and care. We recognise that players entrust us with sensitive personal and financial information when they register an account, make a deposit, or place a wager, and we take that responsibility seriously. This Policy is designed to help you understand exactly what data we collect, why we collect it, and how it is safeguarded.

This Policy applies to all personal data processed in connection with your use of the bdt4 Platform, whether you access it via a web browser on desktop or mobile, or through any bdt4-branded application. It applies to all players based in Bangladesh and supplements the bdt4 Terms & Conditions, which are available at bdt4.io/terms-conditions.

Data Controller

For the purposes of this Privacy Policy, bdt4 acts as the data controller in respect of all personal data collected from players who use the bdt4 Platform. As data controller, bdt4 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

bdt4 operates the Platform as an online betting and casino service primarily targeting adult players across Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All player accounts are denominated in Bangladeshi Taka (BDT).

If you have any questions about how bdt4 processes your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you may contact the bdt4 Data Privacy team using the contact details set out in Section 15.

Data We Collect

bdt4 collects the following categories of personal data in connection with your use of the Platform:

bdt4 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is contained in standard identity documents submitted for KYC purposes.

How Data Is Collected

bdt4 collects personal data through the following means:

• Direct Registration: When you complete the bdt4 account registration form, you provide your name, date of birth, mobile number, and other required details directly to bdt4.
• KYC Verification Submissions: When bdt4 requests identity verification, you submit copies of identity documents directly through the Platform's secure upload facility.
• Transaction Processing: When you make a deposit or withdrawal, bdt4 records the transaction details including the payment method used, the amount in BDT, and the timestamp.
• Platform Activity: bdt4's systems automatically record technical and usage data as you interact with the Platform, including the pages you visit, the games you play, and the bets you place.
• Customer Support Interactions: When you contact bdt4 via live chat or email, the content of those communications is recorded and associated with your account for support and compliance purposes.
• Cookies and Similar Technologies: bdt4 uses cookies and similar tracking technologies to collect technical data about your browser and session. See Section 8 for full details.
• Third-Party Verification Services: bdt4 may receive supplemental identity or fraud-risk data from third-party KYC and AML service providers where this is required to complete account verification.

Purposes & Legal Basis for Processing

bdt4 processes your personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which bdt4 processes personal data and the corresponding legal basis for each:

• Performance of Contract: Processing your registration data, managing your BDT wallet, processing deposits and withdrawals, and delivering the betting and gaming services you have contracted for.
• Legal Obligation: Conducting KYC and identity verification, complying with anti-money laundering requirements, maintaining financial transaction records, and cooperating with lawful requests from competent authorities.
• Legitimate Interests: Detecting and preventing fraud, securing the Platform against unauthorised access, monitoring for prohibited activities, improving Platform functionality, and personalising the gaming experience where this does not override your privacy rights.
• Consent: Sending you promotional communications about bdt4 bonuses, seasonal offers (such as Eid promotions, BPL season deposit boosts, or Pohela Boishakh specials), and new product launches where you have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Responsible Gaming Obligations: Monitoring account activity for indicators of problem gambling behaviour, applying responsible gaming tools at your request, and fulfilling self-exclusion obligations.

Data Sharing

bdt4 does not sell or rent your personal data to any third party. bdt4 may share your personal data with the following categories of recipient, strictly to the extent necessary to deliver the bdt4 service or to meet legal obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data-handling obligations.
• Game Suppliers: Third-party game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive anonymised or pseudonymised session data required to deliver their game products within the bdt4 lobby. These suppliers do not receive your full identity data.
• KYC and AML Service Providers: Where required for identity verification and anti-money laundering compliance, bdt4 may share identity data with specialised third-party verification services. These providers are contractually bound to process data only for the purpose of verification and not for any secondary use.
• Fraud Prevention and Security Services: bdt4 works with fraud-detection and cybersecurity service providers who may receive technical and behavioural data to assess risk and protect the integrity of the Platform.
• Legal and Regulatory Authorities: bdt4 will disclose personal data to competent law enforcement or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory request. bdt4 will, where legally permitted, notify affected players of such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of bdt4's business, personal data held by bdt4 may be transferred to the acquiring entity, subject to that entity assuming the privacy obligations described in this Policy.

All third parties with whom bdt4 shares personal data are required to implement appropriate technical and organisational security measures and are permitted to use your data only for the specific purposes for which it was shared.

Payment Data

bdt4 processes all player transactions in Bangladeshi Taka (BDT). The payment methods supported — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank — each operate their own secure payment infrastructure. bdt4 receives confirmation of successful transactions from these providers but does not store your full mobile wallet PINs, bank account passwords, or other authentication credentials.

For the purpose of processing withdrawals, bdt4 retains a record of the payment account reference (for example, your bKash-registered mobile number) associated with your bdt4 account. Withdrawals may only be processed to a payment account registered in your own name, consistent with our AML obligations. Where bdt4 requires confirmation that a payment account belongs to you, we may request supporting documentation.

All financial transaction records, including deposit confirmations, withdrawal records, and bet settlement histories, are retained by bdt4 for a minimum period of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.

Cookies & Tracking Technologies

bdt4 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the bdt4 website. They help bdt4 recognise your browser, maintain your session, and understand how you interact with the Platform.

bdt4 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your BDT wallet state between pages, and enable security features such as CSRF protection. These cookies cannot be disabled without disrupting core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language (English) and display settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: bdt4 uses analytics tools to collect aggregated, anonymised data about how players navigate and use the Platform. This data is used solely to improve Platform performance and user experience. No individual player is identified in analytics reports.
• Fraud Prevention Cookies: bdt4 and its security partners use cookies and device fingerprinting technologies to detect suspicious activity, identify multi-accounting attempts, and protect the Platform against automated bot activity.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the bdt4 Platform. bdt4 does not use cookies to deliver third-party advertising or to track your activity across other websites.

Data Retention

bdt4 retains your personal data for as long as your account remains active and for a defined period following account closure, in accordance with the following guidelines:

• Active Accounts: Personal data associated with an active bdt4 account is retained for the lifetime of that account. Transaction data and KYC documents are retained throughout the account lifetime and for a minimum of five (5) years following account closure.
• Closed Accounts: Following voluntary account closure, bdt4 retains identity and financial records for a minimum of five (5) years to meet AML, fraud investigation, and financial record-keeping obligations.
• Suspended Accounts: Where an account has been suspended due to a suspected breach of the bdt4 Terms & Conditions or for fraud-investigation purposes, data may be retained for a longer period pending the outcome of the investigation and any associated legal proceedings.
• Marketing Preferences: Records of your marketing consent or opt-out preference are retained for as long as necessary to honour that preference, plus a reasonable period thereafter to demonstrate compliance.
• Support Communications: Records of customer support interactions are retained for a minimum of two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.

Once the applicable retention period has expired and there is no ongoing legal or regulatory reason to retain the data, bdt4 will securely delete or anonymise the relevant personal data.

Security Measures

bdt4 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bdt4 Platform is encrypted in transit using industry-standard SSL/TLS protocols. The bdt4.io domain operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal and financial data stored within bdt4's database infrastructure is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within bdt4's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role, and all access is logged and auditable.
• Fraud Detection Systems: bdt4 operates automated fraud detection and anomaly-monitoring systems that flag unusual account activity, including atypical login locations, abnormal betting patterns, and suspicious transaction sequences, for human review.
• Regular Security Reviews: bdt4 conducts periodic internal security reviews and vulnerability assessments of its Platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: bdt4 maintains a documented incident response procedure. In the event of a data breach that poses a risk to your rights, bdt4 will notify affected players and relevant authorities as required by applicable law, without undue delay.

While bdt4 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure — please keep your bdt4 login credentials confidential and notify [email protected] immediately if you suspect unauthorised access to your account.

Your Rights

As a bdt4 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the bdt4 support team at [email protected] with your account username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data that bdt4 holds about you. bdt4 will provide this information in a clear and structured format within a reasonable timeframe following receipt of a valid request.
• Right to Rectification: If you believe that any personal data bdt4 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Where a correction affects your account status or transaction records, bdt4 may require supporting documentation before making the change.
• Right to Erasure: In certain circumstances, you have the right to request that bdt4 delete your personal data. This right is subject to limitations — for example, bdt4 is not able to delete data that it is legally required to retain for AML or financial record-keeping purposes. Where erasure cannot be completed in full, bdt4 will explain which data must be retained and why.
• Right to Restrict Processing: You have the right to request that bdt4 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to Object: You have the right to object to processing carried out on the basis of bdt4's legitimate interests. bdt4 will assess such objections on a case-by-case basis. Where the objection relates to direct marketing, bdt4 will cease marketing processing immediately upon receipt of a valid objection.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that bdt4 transmit this data directly to another service provider where technically feasible.
• Right to Withdraw Consent: Where bdt4 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Protection of Minors

The bdt4 Platform is strictly intended for adults aged 21 and above. bdt4 does not knowingly collect personal data from individuals under the age of 21. The registration process requires players to confirm their date of birth and agree that they are of legal age. Where bdt4 has reason to believe that a registered account belongs to a person under 21, the account will be suspended immediately pending age verification, and any deposits made will be returned to the originating payment account.

If you are a parent or guardian and believe that your child has registered a bdt4 account or submitted personal data to the Platform without your knowledge, please contact bdt4 support immediately at [email protected]. bdt4 will investigate the matter promptly and take appropriate action, including the deletion of any data associated with an underage account.

bdt4 encourages parents and guardians in Bangladesh to make use of parental control software and to have open conversations with young people about the risks of online gambling. For additional guidance on protecting minors from gambling-related content, please visit the bdt4 Responsible Gaming page.

Cross-Border Data Transfers

In order to deliver the bdt4 Platform, some of the personal data bdt4 collects may be transferred to, stored, or processed in countries outside Bangladesh. This may occur, for example, where bdt4 uses cloud infrastructure services, game supplier systems, or fraud-detection platforms hosted in other jurisdictions.

Where personal data is transferred outside Bangladesh, bdt4 takes appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection requirements. These steps may include entering into data processing agreements with receiving parties that incorporate appropriate contractual safeguards, and selecting service providers that maintain recognised security certifications and standards.

bdt4 does not transfer personal data to third parties in jurisdictions that do not provide an adequate level of data protection without first putting in place the contractual and technical safeguards necessary to protect your data rights. If you have questions about specific transfers or the safeguards in place, you may contact bdt4 support at [email protected].

Changes to This Privacy Policy

bdt4 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where bdt4 begins processing a new category of personal data, introduces a new third-party data-sharing arrangement, or changes the legal basis on which it processes your data — bdt4 will provide reasonable advance notice to registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the Platform homepage.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent version of this Policy was published. The current version of this Policy is always accessible at bdt4.io/privacy-policy. We encourage you to review this page periodically to stay informed about how bdt4 protects your personal data.

Your continued use of the bdt4 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the Platform and request account closure by contacting [email protected]. Minor amendments such as typographical corrections or clarifications that do not alter the substance of the Policy may be made without prior notice.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bdt4's handling of your personal data, please contact the bdt4 Data Privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget on the bdt4 Platform.
• Response Time: bdt4 aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.

When contacting bdt4 regarding a data privacy matter, please include your registered account username, a clear description of your query or request, and — where applicable — any relevant transaction or account reference numbers. This will help the bdt4 team locate your records and respond to your request as efficiently as possible.