bdtk7 Privacy Policy

This Privacy Policy describes how bdtk7 ("we", "us", "our") collects, processes, stores and uses personal data relating to individuals ("you", "your") who access or use the bdtk7 online casino and sports betting platform available at bdtk7.io (the "Platform"). It applies to all registered players, prospective players who browse the Platform, and any individual who contacts bdtk7 through our support channels.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which together form the complete agreement governing your relationship with bdtk7. Where there is any conflict between this Privacy Policy and the Terms & Conditions on a privacy matter, this Privacy Policy shall take precedence.

By registering an account with bdtk7 or by continuing to use the Platform after this policy has been made available to you, you acknowledge that you have read, understood and accepted the data processing practices described herein. If you do not accept this policy, you should discontinue use of the Platform and contact us to request account closure.

bdtk7 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your interaction with our services, and from authorised third parties where necessary. The categories of data we collect include:

2.1 Registration and Identity Data

• Full legal name, date of birth, gender and nationality.
• Residential address including city, district and postal code (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Email address and mobile phone number.
• Username and encrypted account password.

2.2 KYC Verification Documents

• Copy of your National Identity Card (NID) or valid passport.
• Proof of address documentation (utility bills, bank statements).
• Payment method confirmation documents (bKash account verification, bank statements).

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, methods and transaction reference numbers.
• Payment method details such as bKash wallet number, Nagad account reference, or bank account identifiers (we do not store full card numbers).
• Account balance history and bonus credit records.

2.4 Gaming and Betting Activity Data

• Games played, bet amounts, wager outcomes and session durations.
• Sports betting market selections, odds accepted and settlement outcomes.
• Bonus claims, wagering progress and promotional participation records.

2.5 Technical and Device Data

• IP address, browser type and version, operating system, device type and screen resolution.
• Session timestamps, pages visited, clickstream data and feature usage logs.
• Geolocation data derived from your IP address (country and city level only — not precise GPS location).

2.6 Communications Data

• Records of support interactions via live chat, email and WhatsApp, including the content of those communications.
• Records of any formal complaints submitted to bdtk7.
• Marketing preference records, including opt-in and opt-out history.

bdtk7 uses personal data collected from you for the following specific and documented purposes:

bdtk7 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human review. Where automated systems flag activity (for example, unusual transaction patterns), a qualified member of our compliance team reviews the flag before any account action is taken.

Every processing activity conducted by bdtk7 rests on one of the following recognised legal bases:

• Contractual Necessity: Processing required to perform our contract with you as a registered player — including account creation, deposit and withdrawal processing, and game delivery.
• Legitimate Interests: Processing necessary for bdtk7's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, security monitoring, platform analytics, and business improvement activities.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations — including identity verification (KYC), anti-money-laundering record-keeping, and responsible gaming compliance.
• Consent: Processing based on your freely given, specific and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without detriment to your account or services.

bdtk7 does not sell, rent or trade your personal data to any third party. We share personal data only in the following carefully controlled circumstances:

• KYC and Identity Verification Partners: Authorised third-party identity verification services that assist with document checks and age verification. These partners process data under strict data processing agreements and are permitted to use the data solely for the verification purpose.
• Payment Service Providers: Payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank and Sonali Bank, to the extent required to process deposits and withdrawals. We share only the transaction-specific data necessary for each payment instruction.
• Game Software Providers: Third-party game studios (such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt and Ezugi) may receive anonymised or pseudonymised session data necessary to deliver game services. These providers do not receive full player identity data.
• Fraud Prevention and Security Services: Specialist fraud detection and cybersecurity partners who assist bdtk7 in identifying and preventing fraudulent activity, money laundering or platform abuse.
• Legal and Regulatory Authorities: Where required by applicable law, court order or formal regulatory request, bdtk7 may disclose personal data to governmental or law enforcement authorities. We will notify you of any such disclosure request unless prohibited from doing so by law.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the bdtk7 business, personal data held by bdtk7 may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data going forward.

All third parties with whom bdtk7 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose beyond that for which it was shared.

bdtk7 operates servers and engages service providers that may be located in jurisdictions outside Bangladesh. Where personal data is transferred internationally, bdtk7 takes steps to ensure that an adequate level of protection is applied to that data, consistent with the standards described in this Privacy Policy.

Safeguards applied to international transfers include:

• Contractual data protection clauses incorporated into agreements with all international service providers, requiring them to process personal data to a standard no less protective than that applied by bdtk7.
• Transfer of only the minimum necessary personal data to each international processor.
• Regular review of international processing arrangements to ensure continued adequacy of protection.

bdtk7 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory obligations that require extended retention. The following retention standards apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is applied, the resulting data may be retained indefinitely for aggregate analytics and platform improvement purposes.

bdtk7 uses cookies and similar technologies (collectively "cookies") on our Platform. Cookies are small text files stored on your device that help us deliver a functional, personalised and secure experience. The following categories of cookies are used on bdtk7:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login session management, security token validation and load balancing. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: These cookies remember your preferences such as your preferred language, display settings, and notification preferences so that you do not need to re-enter them on each visit.
• Analytics Cookies: We use first-party analytics tools to collect aggregated, anonymised information about how players use the Platform — including which pages are visited most frequently, session durations, and navigation paths. This data helps us improve Platform performance and user experience. No personally identifiable information is included in analytics reports.
• Security Cookies: These cookies support fraud prevention and account security functions, including detection of suspicious login patterns and geographic anomalies.

Most web browsers allow you to control cookie settings through your browser preferences. You may choose to block or delete cookies; however, disabling strictly necessary cookies will affect your ability to use core Platform features including account login. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a player on the bdtk7 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your full name, registered email address and account username so that we can verify your identity before responding.

• Right of Access: You may request a copy of all personal data that bdtk7 holds about you, including an explanation of the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will update your data promptly upon verification of the correction requested.
• Right to Erasure: You may request deletion of your personal data where (a) the data is no longer necessary for the purpose for which it was collected, (b) you withdraw consent and no other legal basis applies, or (c) the data has been unlawfully processed. Note that certain data must be retained under legal obligations and cannot be deleted on request.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while a rectification request is being resolved or where you contest the lawfulness of processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including any profiling conducted on that basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal is effective from the point of receipt and does not affect prior processing.

bdtk7 will respond to all verified privacy rights requests within 30 calendar days of receipt. Where a request is particularly complex or where we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your privacy rights unless a request is manifestly unfounded or excessive.

The bdtk7 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Registration by persons under 21 is a breach of our Terms & Conditions and any such account, upon discovery, will be immediately closed and any balance forfeited in accordance with those Terms.

bdtk7 applies technical and procedural controls designed to prevent access by minors, including age confirmation at registration and mandatory KYC age verification before the first withdrawal is processed. If you believe that a minor has registered on the bdtk7 platform using false age information, please notify us immediately at [email protected] so that the account can be investigated and closed without delay.

bdtk7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the bdtk7 platform is encrypted using 256-bit SSL/TLS protocols. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data fields (including identity document data and payment references) are encrypted at rest within our database infrastructure using AES-256 encryption.
• Access Controls: Access to personal data within bdtk7's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific job functions. All access is logged and subject to periodic review.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their bdtk7 accounts for an additional layer of login security. Internal staff accounts with access to player data are required to use 2FA.
• Penetration Testing and Vulnerability Management: The bdtk7 platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bdtk7 maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

While bdtk7 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. We strongly advise you not to share your password with anyone and to use a strong, unique password for your bdtk7 account. If you believe your account has been compromised, contact our support team immediately via live chat.

The bdtk7 platform may contain references to, or integration with, third-party services such as game providers and payment gateways. While we take care to work only with reputable partners, bdtk7 is not responsible for the privacy practices or content of any third-party service.

Game software delivered through the Platform by providers such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming and Ezugi operates within embedded interfaces on bdtk7. These providers may collect limited technical data (such as game session data) in accordance with their own privacy policies. We encourage you to review the privacy policies of any third-party game provider whose titles you play regularly.

Payment service providers including bKash, Nagad, Rocket and Upay process payment instructions in accordance with their own privacy and data protection policies. bdtk7 does not control the data practices of these independent payment networks and encourages you to review their policies directly.

bdtk7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Where changes are material — meaning they substantially affect how we collect, use or share your personal data — we will provide reasonable advance notice by posting a prominent notice on the Platform and, where we hold a valid email address for your account, by sending notification to that address.

The effective date of any revised Privacy Policy will be clearly stated at the top of the document. Your continued use of the bdtk7 platform following the effective date of any amendment constitutes your acknowledgement of the updated policy. If you do not agree to the revised policy, you should cease using the Platform and contact us to request account closure, at which point any verified withdrawable balance will be processed in accordance with our standard procedures.

We recommend bookmarking this page and checking it periodically. The most current version of this Privacy Policy is always available at bdtk7.io/privacy-policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the way bdtk7 handles your personal data, please contact our dedicated privacy support team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" as appropriate.
• Live Chat: Available on the bdtk7 platform 24 hours a day, 7 days a week. Average response time: 2–5 minutes.
• WhatsApp: Available via the Help page on the Platform.

bdtk7 will acknowledge all privacy enquiries within 48 hours and will provide a substantive response within 30 calendar days. For complex requests, this period may be extended by a further 30 days with prior notification.

If you are not satisfied with how bdtk7 has handled a privacy concern after giving us a reasonable opportunity to respond, you may escalate your complaint through applicable consumer protection or data protection channels available in your jurisdiction.