bdt bat Privacy Policy

1 Data We Collect

bdt bat collects personal data through several channels: directly from you when you register an account or contact support, automatically as you interact with the platform, and from trusted third-party service providers where necessary for compliance and payment processing. The categories of data we collect are as follows:

1.1 Account Registration Data

When you register a bdt bat account, we collect the information you provide in the registration form, which includes:

• Full legal name
• Date of birth (to verify the 18+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, district, and postcode within Bangladesh)
• Preferred currency (Bangladeshi Taka, BDT)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify player eligibility, bdt bat may request one or more of the following documents:

• National Identity Card (NID) or passport
• Driving licence (front and back)
• Utility bill or bank statement as proof of address (issued within the last 90 days)
• A selfie photograph alongside your identity document

KYC documents are processed by our compliance team and retained only for the period required under applicable law. They are never shared with third parties for commercial purposes.

1.3 Financial Transaction Data

When you make a deposit or withdrawal, we record the transaction details necessary to process the payment. This includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), the transaction reference number, the amount in BDT, and the timestamp of the transaction. bdt bat does not store full payment card numbers or mobile wallet PINs on its servers.

1.4 Platform Activity Data

As you use the bdt bat platform, we automatically collect data about your activity, including:

• Games played, bet amounts, wager history, and game session durations
• Login timestamps, IP address, and geolocation (country and city level only)
• Device type, operating system, browser type and version
• Pages visited within the platform and navigation patterns
• Customer support chat logs and email correspondence

1.5 Data from Third Parties

bdt bat may receive supplementary data from trusted third-party providers in limited circumstances, such as fraud prevention agencies, identity verification services, and payment processors. This data is used solely to verify player identity, detect fraudulent activity, and comply with our legal obligations.

2 How We Use Your Data

bdt bat processes your personal data on the basis of one or more of the following legal grounds: contractual necessity (to provide the service you have requested), legal obligation (to comply with AML, KYC, and age verification requirements), legitimate interest (to operate and improve the platform securely), and, where required, your explicit consent (for optional marketing communications).

The specific purposes for which we use your data are summarised in the table below:

bdt bat will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis.

3 Data Sharing and Disclosure

bdt bat does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, bdt bat shares relevant transaction data with your chosen payment provider. This may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. Each provider operates under its own privacy policy and is contractually bound to use your data only for payment processing purposes.

3.2 Identity Verification and Compliance Services

Where required to fulfil KYC and AML obligations, bdt bat may share identity documents and personal details with regulated identity verification service providers. These providers are subject to strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.

3.3 Game Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data (e.g., player ID, bet amounts, game outcomes) for game integrity and auditing purposes. These providers do not receive your name, contact details, or payment information.

3.4 Law Enforcement and Regulatory Bodies

bdt bat may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, by court order, or in connection with the prevention or investigation of financial crime. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.

3.5 Business Transfers

In the event that bdt bat undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms that apply to your data going forward.

4 Cookies and Tracking Technologies

bdt bat uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse traffic patterns, and deliver a personalised experience. A cookie is a small text file stored on your device by your web browser when you visit the bdt bat website.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language, currency display, and game lobby filters so you do not need to re-enter them each visit.
• Analytics Cookies: Used to understand how players navigate the platform, which pages are visited most frequently, and where technical errors occur. Analytics data is aggregated and does not identify individuals.
• Marketing Cookies: Used only if you have consented to receive personalised promotional communications. These help bdt bat understand which promotional content is relevant to your activity on the platform.

4.2 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling functional cookies may affect the performance of certain features on the bdt bat platform.

5 Data Retention

bdt bat retains personal data for no longer than is necessary to fulfil the purposes described in this Policy or to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply as a general guide:

Once the applicable retention period has expired, bdt bat will securely delete or anonymise the data in question. Anonymised data (which can no longer identify any individual) may be retained indefinitely for statistical and platform improvement purposes.

6 Your Privacy Rights

bdt bat respects your rights over your personal data. Depending on applicable law, you may be entitled to exercise one or more of the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data bdt bat holds about you, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or complete it without undue delay.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Please note that this right is subject to exceptions where retention is required by law (e.g., AML and financial record-keeping obligations).
• Right to Restriction: You may ask bdt bat to restrict the processing of your personal data in specific circumstances, such as while the accuracy of the data is being verified.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
• Right to Data Portability: Where technically feasible, you may request that bdt bat provide your personal data in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please contact our privacy team at [email protected]. We will respond to all verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with prior notice.

bdt bat will not discriminate against you for exercising your privacy rights. Your account will not be restricted or closed as a result of submitting a privacy rights request made in good faith.

7 Data Security Measures

bdt bat implements a multi-layered approach to data security, combining technical controls, organisational procedures, and ongoing staff training to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

Our key security measures include:

• Transport Encryption: All data in transit between your device and bdt bat's servers is encrypted using TLS 1.2 or higher (256-bit AES). The platform URL is served exclusively over HTTPS.
• At-Rest Encryption: Sensitive data stored on bdt bat's database servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members with access to player data are subject to background checks, confidentiality agreements, and regular security training.
• Firewall and Intrusion Detection: bdt bat's infrastructure is protected by enterprise-grade firewalls and continuously monitored intrusion detection systems.
• Regular Security Audits: The platform undergoes periodic penetration testing and security assessments conducted by independent third-party security specialists.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, bdt bat will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

While bdt bat takes all reasonable precautions to safeguard your personal data, no method of transmission over the internet or electronic storage is entirely secure. We encourage all players to use a strong, unique password for their bdt bat account and to enable any two-factor authentication options made available on the platform.

8 Changes to This Policy

bdt bat reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last updated" date at the top of this page. For material changes — those that significantly affect how we collect or use your personal data — we will provide additional notice via email to the address registered on your account, or via a prominent notice on the platform, at least 14 days before the changes take effect.

Your continued use of the bdt bat platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should contact us to request account closure before the updated Policy comes into force.

We encourage you to review this Policy periodically to stay informed about how bdt bat is protecting your personal data. The most current version of the Policy is always available at https://bdt-bat.com/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bdt bat holds about you, please contact our dedicated privacy team:

• Privacy enquiries: [email protected]
• General support: [email protected]
• Response time: Within 2–4 hours (Bangladesh Standard Time, UTC+6)