bdtje Privacy Policy

1. Data We Collect

bdtje collects personal data from you at various points during your relationship with our platform. The categories of data we collect, the context in which they are collected, and the purposes for which each category is initially gathered are set out below. We collect only the data that is necessary for the specific purpose identified and do not collect data in excess of what is required.

Where you access bdtje via a mobile device, we may also collect your mobile network operator name and, if you grant permission, your approximate location based on IP geolocation. We do not access GPS-level device location data. You may withdraw consent for location-based data at any time by adjusting your device settings, though this may affect certain platform features.

2. How We Use Your Data

bdtje processes your personal data only where we have a lawful basis for doing so. The lawful bases we rely upon are: (a) the performance of a contract with you (your bdtje account agreement and these associated policies); (b) compliance with a legal obligation (KYC, AML, and responsible gaming regulations); (c) our legitimate interests in operating a safe, fair, and commercially viable platform; and (d) your explicit consent, where specifically requested. Below we describe the primary purposes for which bdtje uses each category of data collected.

• Account Management: We use your Identity Data and Contact Data to create and maintain your bdtje account, verify your identity, communicate account notices, and respond to your support requests.
• Payment Processing: We use your Financial Data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate transaction records in compliance with our AML obligations.
• Platform Delivery: We use your Gaming Data and Technical Data to deliver the games, betting markets, and services you have requested, to personalise your gaming experience, and to ensure platform performance and stability.
• Fraud Prevention & Security: We use Technical Data, Financial Data, and Gaming Data to detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access. This processing is carried out in our legitimate interests and in fulfilment of legal obligations.
• Responsible Gaming: We use your Gaming Data and Responsible Gaming Data to monitor for indicators of problem gambling, to enforce self-exclusion and deposit limits you have set, and to proactively contact players who may need support.
• Legal Compliance: We use Identity Data, Financial Data, and Communications Data to fulfil our obligations under applicable anti-money laundering laws, tax reporting requirements, and any lawful requests from competent authorities.
• Marketing Communications: Where you have given explicit consent during registration, we may use your Contact Data and Gaming Data to send you promotional offers, bonus notifications, and event updates via email or SMS. You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].
• Platform Improvement: We use anonymised and aggregated Usage Data to analyse how players navigate the bdtje platform, identify areas for improvement, and optimise game selection and feature placement. This analysis does not identify individual players.

3. Data Sharing

bdtje does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. We share personal data only where it is strictly necessary for the operation of the bdtje platform, the fulfilment of a legal obligation, or the protection of bdtje's legitimate interests. All third-party recipients of personal data are bound by contractual data protection obligations and are permitted to use your data only for the specific purpose for which it was shared.

The categories of third parties with whom bdtje may share personal data, and the basis for each sharing arrangement, are set out below:

• Payment Processors: bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank receive the minimum financial data necessary to process your deposit and withdrawal transactions. These entities operate under their own privacy frameworks and are subject to Bangladesh Bank regulations.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised player session identifiers to facilitate game delivery, RTP auditing, and technical support. These providers do not receive your full identity or financial data.
• KYC & Identity Verification Partners: We use third-party identity verification services to validate government-issued documents submitted during KYC. These services process your Identity Data in accordance with their own regulatory obligations and bdtje's contractual instructions.
• Fraud Detection & Security Services: We share Technical Data and transactional metadata with specialist fraud detection platforms to identify and prevent unauthorised access, bonus abuse, and payment fraud. This processing is carried out in bdtje's legitimate interests.
• Customer Support Platforms: Our support ticketing and live chat infrastructure may be hosted by third-party platforms. Support Communications Data is stored on these platforms subject to contractual data processing agreements.
• Legal & Regulatory Authorities: bdtje will disclose personal data to competent authorities — including law enforcement agencies and financial intelligence units — where required to do so by law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of bdtje's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the acquiring entity will be required to honour the commitments made in this Policy.

4. Cookies & Tracking Technologies

bdtje uses cookies and similar tracking technologies on bdtje.net to ensure the platform functions correctly, to remember your preferences, to maintain your logged-in session securely, and to collect anonymised analytics data that helps us improve the platform. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device.

By continuing to use bdtje.net after being presented with our cookie notice, you consent to the placement of cookies on your device in accordance with this section of our Privacy Policy. You may withdraw this consent at any time by adjusting your browser settings to refuse or delete cookies; however, please note that disabling certain cookies may impair the functionality of the bdtje platform, including your ability to remain logged in to your account.

bdtje does not use third-party advertising cookies or behavioural tracking cookies that profile you for the purposes of targeted advertising on other websites. We do not participate in cross-site tracking networks. The analytics data we collect is used exclusively for internal platform improvement purposes and is not shared with external advertising platforms.

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. For instructions specific to your browser, refer to your browser's help documentation. Note that blocking strictly necessary cookies will prevent you from logging in to your bdtje account.

5. Data Retention

bdtje retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. When personal data is no longer required for any of these purposes, it is securely deleted or anonymised in accordance with our data destruction procedures.

The retention periods applicable to each category of personal data held by bdtje are set out below. These periods reflect the minimum retention requirements imposed by anti-money laundering regulations, which require financial services providers to retain customer identity and transaction records for a defined period following the end of the business relationship.

• Identity & KYC Data: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later. This retention period reflects applicable AML obligations.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction. Deposit and withdrawal records are maintained to support AML reporting, tax obligations, and dispute resolution.
• Gaming Activity Data: Retained for 3 years from the date of the relevant gaming session. Aggregated and anonymised gaming statistics may be retained indefinitely for platform improvement purposes.
• Support Communications: Retained for 2 years from the date of the last communication in a support thread. Communications related to formal complaints or legal disputes are retained for 5 years.
• Responsible Gaming Data: Self-exclusion records and responsible gaming restriction logs are retained for the duration of the restriction plus 5 years, to prevent reactivation of accounts during an exclusion period and to support regulatory reporting.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account and for 3 years following account closure, to demonstrate compliance with consent requirements.
• Technical & Usage Data: Server logs and session data are retained for 90 days for security and fraud investigation purposes, after which they are automatically deleted. Anonymised analytics data may be retained for up to 24 months.

6. Your Privacy Rights

bdtje respects your rights over your own personal data. The following rights are available to all bdtje players with respect to the personal data held about them. To exercise any of the rights described below, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days (Bangladesh Standard Time, UTC+6) and aim to fulfil it within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data held about you by bdtje, together with information about the purposes for which it is processed, the categories of data held, the recipients to whom it has been disclosed, and the applicable retention periods. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data held by bdtje about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic account information such as your contact email or phone number directly from your account settings at any time.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other lawful basis exists, or where the data has been unlawfully processed. This right is subject to legal retention obligations as described in Section 5.
• Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data is being contested — you have the right to request that bdtje restricts its processing of your personal data. Restricted data will be stored but not actively processed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where bdtje relies on legitimate interests as the lawful basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes, including profiling related to direct marketing.
• Right to Withdraw Consent: Where bdtje processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

We will never discriminate against you for exercising your privacy rights. Exercising these rights will not result in your account being penalised, your service being degraded, or your access to the bdtje platform being restricted, except where the exercise of a specific right (such as a request for data deletion) necessarily results in account closure.

7. Data Security

bdtje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme is designed to be proportionate to the sensitivity of the data we hold and the risks posed by our operating environment as an online gaming platform serving players across Bangladesh.

Key security measures implemented by bdtje to protect your personal data include:

• Transport Encryption: All data transmitted between your device and bdtje.net is encrypted using 256-bit TLS (Transport Layer Security). The padlock icon in your browser confirms that your connection to bdtje is encrypted at all times.
• Data Encryption at Rest: Sensitive personal data — including identity documents, financial account numbers, and password hashes — is encrypted at rest using AES-256 encryption. Passwords are stored as salted cryptographic hashes and are never stored in plaintext.
• Access Controls: Access to systems containing personal data is restricted to authorised bdtje personnel on a strict need-to-know basis. All staff with access to personal data undergo data protection training as part of their onboarding process.
• Two-Factor Authentication: Player accounts on bdtje support SMS OTP two-factor authentication. We strongly recommend all players enable 2FA from their account settings to protect against unauthorised access.
• Penetration Testing & Vulnerability Management: bdtje conducts regular security assessments and penetration tests of the platform infrastructure. Identified vulnerabilities are remediated in accordance with a risk-based patching policy.
• Incident Response: bdtje maintains a documented data breach incident response plan. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take immediate remediation action.
• Third-Party Security Standards: All third-party service providers who process personal data on bdtje's behalf are required to demonstrate compliance with recognised security standards and are assessed for data security posture as part of our vendor onboarding process.

8. Contact & Policy Updates

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bdtje handles your personal data, please contact our privacy team directly. We take all privacy enquiries seriously and are committed to resolving them promptly and transparently.

bdtje reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. When we make material changes to this Policy, we will notify you by sending an email to your registered bdtje account address and by displaying a prominent notice on bdtje.net for a period of at least 14 days prior to the changes taking effect.

Minor, non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact information — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bdtje is protecting your personal data.

Your continued use of the bdtje platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated document. If you do not agree with any changes to this Policy, you should discontinue your use of the bdtje platform and close your account in accordance with the procedure described in our Terms & Conditions.

• All privacy rights requests must be submitted in writing via email to [email protected] with sufficient information to verify your identity before your request can be processed.
• bdtje will never charge a fee for processing a privacy rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.
• If you are dissatisfied with bdtje's response to a privacy enquiry, you have the right to escalate your complaint through the formal dispute resolution process described in our FAQ.
• This Policy was last reviewed and updated in January 2026 and supersedes all previous versions of the bdtje Privacy Policy.