bdtk36 Privacy Policy

1 Introduction

bdtk36 is Bangladesh's premier online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout the country. The bdtk36 platform provides live dealer casino games, cricket and sports betting markets, slot games from leading studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, along with exclusive VIP loyalty programmes and promotions.

In the course of delivering these services, bdtk36 necessarily processes personal data relating to our Members. We take this responsibility seriously. This Policy has been drafted to be transparent, specific, and accessible — so that every bdtk36 Member in Bangladesh and beyond understands precisely what data we hold, why we hold it, how long we keep it, and what control you have over it.

bdtk36 operates in accordance with internationally recognised privacy standards and applies GDPR-aligned data protection principles as a benchmark for responsible data management, even where such frameworks are not formally mandated by local Bangladeshi regulation.

2 Data Controller

For the purposes of this Policy, bdtk36 acts as the data controller in respect of all personal data collected from Members who access the platform at bdtk36.net. As data controller, bdtk36 determines the purposes and means of processing Member personal data.

All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the bdtk36 Data Protection contact at [email protected] (plain text — not a clickable link). bdtk36 will acknowledge receipt of all formal data requests within five (5) business days and will endeavour to provide a substantive response within thirty (30) calendar days of receipt.

3 Personal Data We Collect

bdtk36 collects the following categories of personal data from Members. Not all categories apply at every stage; the data collected depends on the nature of your interaction with the platform.

bdtk36 does not knowingly collect or process any special categories of sensitive personal data (such as health data, biometric data, political opinions, religious beliefs, or racial or ethnic origin) unless specifically required for responsible gaming intervention purposes, in which case such processing will be conducted with explicit Member consent.

4 How We Collect Personal Data

bdtk36 collects personal data through the following channels and mechanisms:

• Direct provision by you: When you register a bdtk36 account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account preferences, you directly provide personal data to bdtk36.
• Automated technical collection: When you access the bdtk36 platform, certain technical data — including your IP address, device identifiers, browser information, and session behaviour — is automatically collected by our servers and analytics systems. This collection occurs regardless of whether you are a registered Member or an anonymous visitor.
• Cookie and tracking technologies: bdtk36 uses cookies and similar tracking technologies to maintain session state, remember Member preferences, detect fraudulent activity, and analyse platform performance. See Section 8 of this Policy for a detailed explanation of cookies used by bdtk36.
• Third-party service providers: bdtk36 may receive personal data about you from third-party payment processors (such as bKash, Nagad, Rocket, and Upay), identity verification services, and fraud prevention partners in the course of processing your transactions and verifying your account.
• Publicly available sources: In limited circumstances relating to fraud prevention or compliance, bdtk36 may supplement Member records with data obtained from publicly available sources, including court records and publicly accessible databases.

5 Legal Basis for Processing

bdtk36 processes Member personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing is necessary for the performance of the contract between bdtk36 and the Member — that is, to operate and maintain the Member's account, process deposits and withdrawals, verify identity, and deliver the gaming and betting services that Members have signed up to use.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations, and data retention requirements imposed by applicable law.
• Legitimate interests: Processing is necessary for bdtk36's legitimate business interests, including fraud detection and prevention, platform security, service improvement, and responsible gaming monitoring — provided those interests are not overridden by the Member's fundamental privacy rights.
• Consent: For marketing communications and certain non-essential data processing activities, bdtk36 relies on the Member's freely given, specific, informed, and unambiguous consent. Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 How We Use Your Personal Data

bdtk36 uses Member personal data for the following specific purposes:

• Account creation and management: To register, verify, and maintain your bdtk36 Member account, and to enable you to log in, manage preferences, and access all platform features.
• Identity verification (KYC): To verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that you are not subject to any self-exclusion or account restriction.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to reconcile transactions, and to maintain accurate financial records for each Member account.
• Customer support: To respond to enquiries, resolve disputes, process complaints, and communicate account-related information to you via email, live chat, or WhatsApp.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bot usage, and other prohibited conduct that may harm the bdtk36 platform or its Members.
• Responsible gaming monitoring: To monitor Member account activity for indicators of potential gambling harm, to apply responsible gaming tools proactively where appropriate, and to support Members who have requested self-exclusion or deposit limits.
• Platform analytics and improvement: To analyse aggregate usage data, identify technical issues, and improve the overall bdtk36 platform experience for all Members. Analytics data is processed in aggregated, anonymised form where possible.
• Marketing communications: To send promotional offers, bonus notifications, and personalised recommendations to Members who have opted in to receive such communications. Marketing is only sent with prior consent and may be withdrawn at any time.
• Legal and regulatory compliance: To fulfil bdtk36's obligations under applicable law, to respond to lawful requests from regulatory or law enforcement authorities, and to establish, exercise, or defend legal claims.

7 Data Sharing & Disclosure

bdtk36 does not sell, rent, or trade Member personal data. Data is shared with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: bdtk36 shares transaction-relevant data with payment processors including bKash, Nagad, Rocket, Upay, Visa network operators, and Mastercard for the purpose of processing deposits and withdrawals. These providers are bound by their own privacy policies and are obligated to handle your data securely.
• Identity verification and KYC partners: bdtk36 may use third-party identity verification services to confirm the authenticity of documents submitted during KYC. These partners receive only the data necessary to perform the verification and are contractually prohibited from using it for any other purpose.
• Game content providers: Technical session data may be shared with game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to the extent necessary to deliver their games within the bdtk36 platform. These providers are bound by contractual data processing agreements.
• Fraud and security service providers: bdtk36 works with specialised fraud prevention and cybersecurity partners who may process Member technical data (such as IP addresses and device fingerprints) to identify suspicious activity. These partners act as data processors under strict contractual controls.
• Legal and regulatory authorities: bdtk36 may disclose Member personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where we are required to do so by applicable law, court order, or regulatory direction. bdtk36 will notify the affected Member of such disclosure to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bdtk36's assets, Member personal data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such change in data controller via the registered email address on their account.

8 Cookies & Tracking Technologies

bdtk36 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the platform. A cookie is a small text file placed on your device by a web server when you visit the bdtk36 website. The following categories of cookies are used:

bdtk36 does not use third-party advertising cookies or tracking pixels for retargeting purposes. You may manage optional cookie preferences via your browser settings. Please note that disabling strictly necessary or security cookies may impair your ability to access certain bdtk36 platform features.

9 Data Security

bdtk36 implements a comprehensive set of technical and organisational security measures to protect Member personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your device and the bdtk36 platform is encrypted using TLS 1.2 or higher, providing 256-bit SSL encryption for all HTTP communications.
• Password hashing: Member account passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. Plain-text passwords are never stored or transmitted by bdtk36.
• Two-factor authentication (2FA): bdtk36 offers and strongly recommends two-factor authentication for all Member accounts, adding a second layer of access control beyond the password.
• Access controls: Access to Member personal data within bdtk36's internal systems is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security training.
• Infrastructure security: bdtk36's server infrastructure is hosted in secured data centres with physical access controls, regular vulnerability scanning, and intrusion detection monitoring.
• Incident response: bdtk36 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to Member personal data, bdtk36 will notify affected Members and, where legally required, relevant authorities, within the timeframes required by applicable law.

Despite bdtk36's commitment to data security, no internet transmission or electronic storage system can guarantee absolute security. Members are encouraged to use a strong, unique password for their bdtk36 account and to enable two-factor authentication to minimise the risk of unauthorised account access.

10 Data Retention

bdtk36 retains Member personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

When personal data is no longer required for the purposes for which it was collected, and where there is no legal obligation requiring continued retention, bdtk36 will securely delete or anonymise that data in accordance with our internal data disposal procedures.

11 Your Privacy Rights

bdtk36 recognises and upholds the following rights in relation to your personal data. To exercise any of these rights, contact bdtk36 at [email protected] with your account details and a clear description of your request.

• Right of access: You may request a copy of the personal data that bdtk36 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data bdtk36 holds about you is inaccurate or incomplete, you have the right to request correction. For account-level data, many fields can be updated directly via your account dashboard.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. This right is subject to bdtk36's legal retention obligations — data required for AML compliance or regulatory purposes cannot be deleted before the mandated retention period expires.
• Right to restriction of processing: You may request that bdtk36 temporarily restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and bdtk36 is assessing whether its legitimate grounds override your interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where bdtk36 relies on legitimate interests as the legal basis. bdtk36 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children's Privacy

The bdtk36 platform is strictly intended for adults aged 18 and over. bdtk36 does not knowingly collect or process personal data belonging to any individual under the age of 18. Age verification is a mandatory step in the bdtk36 registration and KYC process, and any account found to belong to a minor will be closed immediately.

If a parent or guardian believes that their child has registered a bdtk36 account or that their child's personal data has been inadvertently collected by the platform, they should contact bdtk36 immediately at [email protected]. bdtk36 will investigate the matter promptly and will delete any data found to relate to a person under the age of 18.

13 Third-Party Links

The bdtk36 platform may contain references to or integrations with third- party service providers, game studios, and payment partners. While bdtk36 takes care to work only with reputable partners, we are not responsible for the privacy practices of any third-party service. Each third-party provider operates under its own privacy policy, which bdtk36 does not control. Members are encouraged to review the privacy policies of any third-party service they interact with — including payment platforms such as bKash, Nagad, Rocket, and Upay — before providing personal data to those services.

The inclusion of any third-party service provider within the bdtk36 platform does not constitute an endorsement of that provider's data practices. If you have concerns about how a third-party provider handles your personal data, please contact that provider directly.

14 International Data Transfers

bdtk36 operates servers and engages service providers that may be located outside of Bangladesh. As a result, personal data collected from Members in Bangladesh may be transferred to, stored in, or processed in jurisdictions outside the country. Where such international transfers occur, bdtk36 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that described in this Policy.

Safeguards used by bdtk36 for international data transfers include contractual data processing agreements with service providers that incorporate standard data protection clauses, and technical security measures — including encryption in transit and at rest — that apply regardless of the jurisdiction in which data is processed.

By registering and using the bdtk36 platform, you acknowledge and consent to the transfer of your personal data in the manner described in this section. If you have concerns about international data transfers relating to your bdtk36 account, please contact us at [email protected].

15 Policy Amendments

bdtk36 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made to this Policy, bdtk36 will notify registered Members via the email address on their account and will update the "Last Updated" date displayed at the top of this Policy.

Minor or clarificatory amendments that do not materially affect Member rights or bdtk36's data processing practices may be made without individual notification. The current version of this Policy is always accessible at bdtk36.net/privacy-policy.

Continued use of the bdtk36 platform following notification of a material Policy amendment constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the bdtk36 platform and may request account closure and data deletion in accordance with Section 11 of this Policy.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bdtk36's handling of your personal data, please contact the bdtk36 support and data protection team using the details below. All contacts should be made in writing to ensure a clear record of your enquiry.

Please note that all contact details above are displayed as plain text only and are not clickable links. bdtk36 does not use mailto: or tel: protocol links anywhere on its platform. When emailing bdtk36, please include your Member ID and a clear subject line referencing "Privacy Policy" or "Data Request" so your message is routed correctly.