bdkb Privacy Policy – How We Handle Your Personal Data

bdkb operates an online betting platform accessible at https://bdkb.org, serving players located in Bangladesh. This Privacy Policy governs the collection, storage, use, and disclosure of personal data by bdkb in connection with your use of the platform, including when you register an account, make a deposit or withdrawal, place a bet, contact customer support, or visit any page on the bdkb website.

By registering a bdkb account or using the platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you should not create an account or use the bdkb platform. This policy is incorporated by reference into bdkb's Terms and Conditions.

bdkb collects personal data from you directly (when you provide it) and automatically (when you use the platform). The categories of data we collect are:

• 👤
  Identity & Contact Data

  Full name, date of birth, gender, residential address (city and division within Bangladesh), phone number, and email address collected during registration and KYC verification.

• 📱
  Device & Technical Data

  IP address, device type and model (e.g. Android smartphone), mobile network operator (e.g. Grameenphone, Robi, Banglalink), browser type and version, operating system version, and session timestamps.

• 💳
  Financial & Payment Data

  Mobile wallet identifiers (bKash account number, Nagad account number, Rocket account number) and last four digits of any Visa or Mastercard used, transaction amounts in BDT, transaction dates and reference IDs. Full card numbers are never stored by bdkb — card payments are processed through PCI-DSS compliant third-party payment gateways.

• 🎮
  Betting & Gaming Activity

  Sports betting history (including markets wagered on, bet amounts, odds accepted, and outcomes), casino game history (game titles, session duration, amounts staked and won), bonus redemption history, and responsible gaming tool activations (deposit limits set, self-exclusion requests).

• 🌐
  Usage & Navigation Data

  Pages visited on bdkb, features accessed, click-stream data, search queries within the platform, time spent on specific pages, and referral source (the URL or channel from which you arrived at bdkb). This data is collected via server logs and first-party analytics tools.

bdkb uses personal data collected from players for the following defined purposes only. We do not use your data for any purpose not listed below without first obtaining your explicit consent:

• Account creation, maintenance, and verification — including KYC identity checks required to confirm that all players are aged 21 or above and that account details are accurate and complete.
• Processing deposits and withdrawals — including authenticating payment method ownership, reconciling transaction records, and detecting and preventing payment fraud or money laundering.
• Providing the betting and casino service — including displaying personalised betting markets based on your sport preferences, serving live casino tables suited to your stake history, and delivering account notifications (e.g. withdrawal confirmation, bonus credit alerts).
• Responsible gaming compliance — including monitoring betting patterns to identify potential problem gambling behaviours, triggering alerts when voluntary deposit limits are approached, and processing self-exclusion requests.
• Customer support — including reviewing account activity relevant to a support query, verifying identity before making account changes, and maintaining records of support interactions for quality and compliance purposes.
• Platform improvement and security — including analysing aggregated usage data to improve site performance and navigation, detecting and preventing technical attacks (e.g. bot traffic, credential stuffing), and auditing system access logs for security compliance.

bdkb does not use your personal data for the purpose of selling advertising, building marketing profiles for third-party use, or any automated decision-making that produces legal or similarly significant effects without human oversight.

bdkb processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to perform the contract between you and bdkb, including operating your account, executing bets, and processing deposits and withdrawals. Without this processing, bdkb cannot provide the service you have signed up for.
• Legal obligation — processing required to comply with applicable law, including anti-money laundering (AML) obligations, KYC requirements for age verification and identity confirmation, transaction record-keeping mandated by financial regulations, and cooperation with lawful requests from competent authorities.
• Legitimate interests — processing conducted for bdkb's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud detection, platform security monitoring, responsible gaming pattern analysis, and aggregated analytics for service improvement.
• Consent — where bdkb asks for your explicit consent before a specific processing activity (such as sending you optional promotional communications), we will only carry out that processing if you have actively opted in. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of processing carried out before withdrawal.

bdkb does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors and mobile wallet operators — your mobile wallet number and transaction reference data are shared with bKash, Nagad, Rocket, Upay, and card payment processors solely to execute the specific deposit or withdrawal transaction you have initiated. These service providers are bound by their own data protection obligations and may not use your data for any other purpose.
• KYC and identity verification providers — where bdkb uses a third-party service to assist with age verification or document authentication as part of the KYC process, your identity documents and verification data are shared with that provider under a strict data processing agreement that limits their use of your data to the verification task only.
• Game providers — your username, session token, and stake information are shared with third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to the extent necessary to authenticate your session and record the outcome of bets placed through their games. Game providers operate under their own privacy frameworks and are prohibited from using your data for marketing or profiling purposes.
• Law enforcement and regulatory authorities — bdkb will disclose personal data to competent governmental or regulatory authorities when required to do so by applicable law, court order, or where bdkb has a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or money laundering. bdkb will notify affected players of such disclosures where legally permitted to do so.

No other sharing occurs without your explicit prior consent. bdkb does not share your data with social media platforms, advertising networks, data analytics companies acting as data controllers, or any other commercial third party for their own purposes.

Given that the majority of bdkb players in Bangladesh use mobile financial services — particularly bKash, Nagad, and Rocket — for deposits and withdrawals, bdkb handles mobile wallet data with particular care. Your mobile wallet number is stored in encrypted form and is used exclusively to process transactions you have explicitly initiated. bdkb does not store your mobile banking PIN, OTP codes, or any authentication credentials associated with your mobile wallet account. These are entered directly into the relevant mobile financial service's own interface and are never transmitted to or seen by bdkb.

bdkb applies the same-source rule to all withdrawals: funds will only be returned to the mobile wallet or card from which the corresponding deposit was made. This policy exists both as an anti-money laundering control and as a player protection measure, ensuring that account balances cannot be redirected to an unverified payment destination without additional identity verification.

bdkb retains your personal data for as long as your account remains active and for a defined period after account closure. The following retention periods apply: identity and contact data is retained for a minimum of 5 years following account closure to satisfy AML record-keeping obligations; transaction records (deposits, withdrawals, and bet history) are retained for a minimum of 5 years from the date of each transaction; customer support records are retained for 3 years from the date of the support interaction; device and technical log data is retained for 12 months on a rolling basis and then automatically purged.

Once a retention period has expired and there is no ongoing legal obligation or active dispute requiring continued retention, bdkb will securely delete or irreversibly anonymise the relevant personal data. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

bdkb implements industry-standard technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and bdkb's servers; encryption at rest for all stored personal and financial data; role-based access controls ensuring that bdkb staff can only access the personal data necessary for their specific job function; multi-factor authentication required for all administrative access to production systems; and regular penetration testing and vulnerability assessments conducted by qualified security professionals.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bdkb will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. You are also responsible for keeping your own bdkb login credentials secure and should notify us immediately at [email protected] if you suspect unauthorised access to your account.

As a bdkb player, you have the following rights with respect to your personal data. To exercise any of these rights, contact bdkb support at [email protected]. We will respond to all rights requests within 5 business days and will complete the requested action within 30 calendar days of receipt, unless an extension is required and we notify you accordingly.

• 👁️
  Right of Access

  You may request a copy of all personal data bdkb holds about you. We will provide this in a structured, commonly-used format within 30 days of your verified request.

• ✏️
  Right of Rectification

  If any personal data bdkb holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Some corrections (e.g. name or date of birth) may require supporting documentation.

• 🗑️
  Right to Erasure

  You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to bdkb's legal retention obligations — data that must be kept under AML or financial regulation cannot be deleted early.

• 📦
  Right to Data Portability

  Where bdkb processes your data based on your consent or on a contractual basis, and the processing is carried out by automated means, you have the right to receive a copy of that data in a machine-readable format so that you may transfer it to another service provider if you wish.

• 🚫
  Right to Object

  You have the right to object to bdkb processing your personal data where that processing is based on legitimate interests. If you object, bdkb will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

All rights requests must be submitted from the email address registered to your bdkb account so that we can verify your identity before actioning the request. bdkb will not action a rights request that cannot be verified, to protect against fraudulent requests made by third parties.

bdkb uses cookies and similar tracking technologies (such as local storage tokens) on the bdkb website to support the operation of your session and improve platform performance. The categories of cookies bdkb uses are:

• Strictly necessary cookies — these are essential for the bdkb platform to function. They maintain your login session, remember your language preference, and enable secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies — these first-party cookies collect anonymised data about how players use the bdkb platform (e.g. which pages are visited most frequently, where players drop off during registration). This data is used solely to improve the platform and is never linked to your personal identity.
• Functional cookies — these cookies remember your preferences (such as your preferred deposit method or notification settings) so that you do not need to re-enter them on each visit. They do not track your activity across other websites.

bdkb does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your mobile browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your bdkb account.

bdkb reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. When a material change is made to this policy, bdkb will notify registered players by displaying a prominent notice on the bdkb platform upon next login. The updated policy will be published on this page with a revised effective date. Your continued use of the bdkb platform after the updated policy has been published constitutes acceptance of the revised terms. We encourage you to review this page periodically so that you remain informed about how bdkb protects your personal data.