bdt44 Privacy Policy — How We Handle Your Personal Data

1 Introduction & Scope

bdt44 is an online casino and sports betting platform operated for players based in Bangladesh. This Privacy Policy applies to all personal data processed in connection with the bdt44 platform, including data collected through the website at https://bdt44.io, through direct communications with the support team, and through any related services operated under the bdt44 brand.

This Policy should be read alongside the bdt44 Terms & Conditions, which are available at bdt44.io/terms-conditions and are incorporated by reference. In the event of any inconsistency between this Policy and the Terms & Conditions on data-related matters, this Privacy Policy shall prevail.

The data controller responsible for your personal data is bdt44. All data-related enquiries, requests, and complaints should be directed to the support team at [email protected], with "Data Privacy" included in the subject line to ensure prompt routing to the appropriate team member.

2 Data We Collect

bdt44 collects personal data across several categories, each of which is described in the table below together with the specific data points collected and the context in which collection occurs.

bdt44 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data unless such data is voluntarily disclosed by the player in a support communication, in which case it is processed solely to resolve the relevant query and is not retained beyond that purpose.

3 How We Use Your Data

bdt44 uses the personal data described in Section 2 for the following purposes:

• Account Creation and Management: To register your bdt44 account, verify your identity, maintain your account profile, and communicate essential account information to you.
• Payment Processing: To process deposits received from and withdrawals sent to your designated mobile wallet (bKash, Nagad, Rocket, or Upay), and to maintain accurate financial records in BDT.
• Identity Verification and KYC Compliance: To verify that you meet the minimum age requirement of 21 years and to satisfy know-your-customer (KYC) obligations applicable to online gambling platforms operating for Bangladesh-based players.
• Fraud Detection and Security: To monitor account activity for patterns consistent with fraud, money laundering, bonus abuse, unauthorised access, or other prohibited conduct as defined in the bdt44 Terms & Conditions.
• Responsible Gaming Monitoring: To identify indicators of problem gambling behaviour and to facilitate the operation of responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to enquiries, resolve disputes, and communicate with you regarding your account status, promotions, or platform updates.
• Personalisation and Promotions: Where you have opted in to marketing communications, to send you personalised promotional offers, bonus notifications, and seasonal campaign information relevant to your gaming activity and preferences.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable anti-money laundering legislation, court orders, or lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised gaming and navigation data for the purpose of improving platform performance, game selection, and user experience.

bdt44 does not use personal data for automated decision-making that produces legal or similarly significant effects on players without human review. Where automated screening flags an account for investigation (for example, in a fraud or bonus-abuse context), a qualified member of the bdt44 compliance team will review the case before any action is taken.

4 Legal Bases for Processing

bdt44 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between bdt44 and the player — including account creation, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering requirements, identity verification mandates, and lawful authority requests, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out in pursuit of bdt44's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — is conducted where those interests are not overridden by the player's fundamental data-protection rights.
• Consent: Processing for the purpose of sending personalised marketing communications is carried out only where the player has provided clear, freely given, and informed consent. Consent may be withdrawn at any time by contacting [email protected] or by updating marketing preferences in the account dashboard.

5 Data Sharing & Disclosure

bdt44 does not sell, rent, or trade personal data to third parties for commercial purposes under any circumstances. Personal data may be shared with the following categories of recipients only where strictly necessary:

• Payment Service Providers: Mobile wallet operators including bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process deposit and withdrawal transactions. These providers operate under their own privacy policies and data protection obligations.
• Identity Verification Services: Third-party KYC and identity verification providers may process verification documents on behalf of bdt44 in order to confirm player identity and age. Such providers are bound by confidentiality agreements and data processing contracts.
• Game Software Providers: Game studios and technology providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session-level technical data necessary to deliver game content. These providers do not receive identifiable personal data such as your name, NID number, or contact details.
• Legal and Regulatory Authorities: bdt44 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or regulatory directive.
• Professional Advisers: Legal counsel, accountants, and auditors engaged by bdt44 may access personal data in the course of providing professional services, subject to strict confidentiality obligations.

6 Cookies & Tracking Technologies

The bdt44 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The categories of cookies used are described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your account settings, and enable the secure processing of transactions. These cookies cannot be disabled without impairing the core functionality of the platform.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the platform — including which pages are visited most frequently and where technical errors occur. This data is used solely to improve platform performance and is not linked to individual identities.
• Functional Cookies: These cookies remember preferences you have set — such as your preferred language or previously used payment method — to reduce the number of steps required each time you log in.
• Marketing Cookies: Where you have consented to receive personalised promotions, marketing cookies may be used to identify your general gaming interests so that promotional communications are relevant to you. These cookies do not track your activity outside the bdt44 platform.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bdt44 account and using the platform's core services. Disabling performance or marketing cookies will not affect your ability to access your account or place bets.

7 Data Retention

bdt44 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. The general retention schedule applied by bdt44 is as follows:

• Account and Identity Data: Retained for the duration of the active account relationship and for a period of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a period of 5 years from the date of each transaction, in accordance with financial record-keeping obligations applicable to payment service operations.
• Identity Verification Documents: Retained for the duration of the account relationship and for 5 years following account closure. Physical or scanned copies are stored in encrypted form and access-restricted to compliance personnel only.
• Gaming Activity Records: Retained for 2 years from the date of each gaming session, used for responsible gaming monitoring, dispute resolution, and fraud investigations. Anonymised aggregates are retained indefinitely for platform analytics purposes.
• Support Communications: Retained for 2 years from the date of the most recent message in each support thread, to facilitate dispute resolution and quality assurance review.
• Marketing Preference Records: Retained for the duration of the account relationship and for 1 year following withdrawal of consent, to maintain an accurate opt-out record and prevent inadvertent re-marketing.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or anonymised in a manner that permanently prevents re-identification of the individual.

8 Your Data Rights

As a bdt44 player, you hold the following rights with respect to your personal data. Requests to exercise any of these rights should be submitted to [email protected] with "Data Rights Request" in the subject line. bdt44 will acknowledge all requests within 48 hours and will respond substantively within 30 days of receipt.

9 Data Security

bdt44 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the bdt44 platform is encrypted using Transport Layer Security (TLS 1.3). This prevents interception of your personal data and payment credentials in transit.
• AES-256 Encryption at Rest: Stored personal data — including identity documents and financial records — is encrypted using AES-256, a standard used globally by financial institutions and government agencies.
• Role-Based Access Controls: Access to player personal data within the bdt44 organisation is strictly limited to personnel whose operational role requires it. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication: All bdt44 administrative accounts that have access to player data are protected by mandatory two-factor authentication. Players are also strongly encouraged to enable two-factor authentication on their own accounts.
• Regular Security Audits: The bdt44 platform and its data infrastructure undergo periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a personal data breach that poses a risk to player rights, bdt44 will notify affected players and relevant authorities within the timeframes required by applicable data protection obligations, and will take immediate remediation steps.

While bdt44 takes every reasonable precaution to protect your personal data, no internet-connected system can be guaranteed to be completely secure against all threats. You also bear responsibility for maintaining the security of your own account credentials; please refer to Section 3 of the bdt44 Terms & Conditions for your specific obligations in this regard.

10 Children & Minors

The bdt44 platform is strictly restricted to individuals aged 21 years and above. bdt44 does not knowingly collect, process, or retain the personal data of anyone under the age of 21. Age verification is a mandatory step in the bdt44 registration process, and additional verification checks are conducted before any withdrawal is approved.

If bdt44 becomes aware or has reasonable grounds to suspect that personal data has been submitted by or on behalf of an individual under 21 years of age, the associated account will be suspended immediately, all data relating to that account will be permanently deleted, and any deposited funds will be returned to the originating payment source following verification of the source account holder's identity.

If you are a parent or guardian and believe that a minor in your care has created a bdt44 account, please contact the support team immediately at [email protected]. bdt44 will treat all such reports as urgent and will act within 24 hours of receiving a credible report.

11 Third-Party Links

The bdt44 platform does not include links to external third-party websites beyond the payment service providers integrated for deposit and withdrawal processing. However, in the unlikely event that any third-party reference appears on the platform, bdt44 is not responsible for the privacy practices or content of those external sites. This Privacy Policy applies solely to data collected and processed by bdt44 in connection with the bdt44 platform at https://bdt44.io.

If you access any third-party service — including your bKash, Nagad, Rocket, or Upay mobile wallet application — in connection with your bdt44 account, please review that service's own privacy policy to understand how your data is handled outside the bdt44 platform.

12 Policy Updates

bdt44 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data-processing practices. The effective date displayed at the top of this page will be updated whenever a substantive change is made.

Where a change to this Policy materially affects the rights of registered players or introduces new categories of data processing, bdt44 will notify affected players via the registered email address and/or through an in-platform notification at least 7 days before the change takes effect. For non-material updates — such as clarifications of existing language or corrections of typographical errors — no advance notice is required.

Continued use of the bdt44 platform after the effective date of any Policy update constitutes acceptance of the revised terms. If you do not agree with any update, you may request account closure by contacting [email protected] before the effective date of the change, and your data will be handled in accordance with the version of this Policy in force at the time of your closure request.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about the way your personal data has been handled by bdt44, please contact the support team using the details below:

• Email: [email protected] (please include "Data Privacy" in the subject line)
• Response Time: All data-related enquiries are acknowledged within 48 hours and resolved within 30 days of receipt
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

bdt44 operates an internal complaints resolution process for data-related matters. If you submit a formal data complaint, a dedicated member of the compliance team will review your case, communicate their findings in writing, and propose a resolution within the 30-day response window. If you are not satisfied with the outcome of the internal process, you retain the right to escalate your complaint to the relevant supervisory authority.

bdt44 is committed to handling all data-related complaints with full confidentiality, impartiality, and respect for the player's rights as set out in this Policy. We view every complaint as an opportunity to improve our data-handling practices and take all submissions seriously regardless of the nature or scale of the concern raised.