bdt89 Privacy Policy

1.1 This Privacy Policy sets out the basis on which bdt89 ("we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "the Player") who register for or use the bdt89 online casino and sports betting platform at bdt89.io.

1.2 bdt89 is the data controller in respect of personal data collected through the Platform. As data controller, bdt89 is responsible for determining the purposes and means of processing that data, and for ensuring it is handled in accordance with applicable data protection principles.

1.3 This Policy should be read alongside the bdt89 Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the conflict, except where this Policy imposes additional data protection obligations.

1.4 If you have any questions about this Policy or about how bdt89 handles your personal data, please contact us at [email protected].

2.1 bdt89 collects personal data from you in the following categories:

This includes your full legal name, date of birth, residential address (including district and division within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, or Mymensingh), mobile phone number, and email address. This data is collected during Account registration and KYC verification.

This includes your chosen username, your hashed (encrypted) password, OTP authentication records, login timestamps, IP addresses used to access your Account, and device identifiers associated with your sessions.

This includes records of all deposits and withdrawals processed through your bdt89 Account, the payment methods used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction reference numbers, and transaction amounts in Bangladeshi Taka (BDT). bdt89 does not store full card numbers or mobile banking PINs — these are handled directly by the respective payment providers.

This includes records of all games played, bets placed, outcomes, bet amounts, bonus usage, and session duration on the bdt89 Platform. This data is retained for operational, compliance, and responsible gaming purposes.

Where required for KYC compliance, bdt89 may collect copies of government-issued identity documents such as your National ID (NID) card, passport, or driving licence, as well as proof-of-address documentation such as a utility bill or bank statement.

This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited on the Platform, time spent on each page, and error logs. This data is collected automatically when you access the Platform.

This includes the content of any support tickets, live chat transcripts, emails, or other communications you send to or receive from bdt89 customer support. These records are retained to ensure quality of service and to resolve disputes.

This includes your opt-in or opt-out status for promotional emails and SMS notifications, the date and method of consent, and any subsequent changes to your marketing preferences.

3.1 bdt89 uses the personal data described in Section 2 for the following purposes:

3.2 bdt89 will not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your consent.

4.1 bdt89 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the bdt89 Terms & Conditions — including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations;
• Legitimate interests: Processing carried out in pursuit of bdt89's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms;
• Consent: Processing based on your freely given, specific, and informed consent — most notably for marketing communications. You may withdraw consent at any time by contacting [email protected] or updating your Account settings.

5.1 bdt89 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited circumstances:

To process deposits and withdrawals, bdt89 shares necessary transaction and identity data with payment providers including bKash, Nagad, Rocket, Upay, and card networks. Each provider handles your data under their own privacy terms and applicable financial regulations.

bdt89 uses third-party KYC service providers to verify your identity and age. These providers receive the identity document data you submit and return a verification result to bdt89. They are contractually prohibited from using your data for any other purpose.

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised player identifiers necessary to deliver their games within the bdt89 Platform. These providers do not receive your full name, contact details, or financial information.

Technical and account activity data may be shared with fraud prevention and cybersecurity services to protect the Platform and its players from fraudulent activity, account takeovers, and other security threats.

bdt89 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, court order, or in connection with an investigation into suspected illegal activity involving the Platform.

In the event of a merger, acquisition, or sale of all or part of the bdt89 business, personal data held by bdt89 may be transferred to the acquiring entity. You will be notified of any such transfer and of any resulting change in data controller before it takes effect.

6.1 bdt89 uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for core Platform functionality such as user authentication, session management, and fraud prevention. These cannot be disabled without impairing the Platform's basic operation;
• Functional Cookies: Used to remember your preferences and settings — for example, your preferred language or display options — so you do not need to re-enter them on each visit;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling bdt89 to improve its features and content. These cookies do not track individuals across third-party websites;
• Security Cookies: Used to detect and respond to fraudulent access attempts, bot activity, and other security threats in real time.

6.2 bdt89 does not use third-party advertising cookies or behavioural tracking technologies that profile you across other websites for the purpose of serving targeted advertisements.

6.3 Most browsers allow you to control cookie settings through their privacy or security options. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain Platform features.

7.1 bdt89 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The general retention guidelines applied by bdt89 are:

• Active Account data: Retained for the duration of your Account and for a period of five (5) years following Account closure, to support AML compliance, dispute resolution, and audit requirements;
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, in line with financial due diligence obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute;
• Marketing consent records: Retained for the duration of your opt-in period plus two (2) years following withdrawal of consent, as proof of lawful processing;
• Technical and usage logs: Retained for up to twelve (12) months in standard log rotation, or longer where retained as evidence in connection with a security incident or investigation.

7.2 At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to you.

8.1 bdt89 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bdt89 servers;
• Encryption at rest for all databases containing personal and financial data;
• Industry-standard password hashing using salted algorithms — plaintext passwords are never stored;
• Role-based access controls limiting bdt89 staff access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing by independent security specialists;
• Intrusion detection and prevention systems monitoring the Platform for anomalous activity in real time;
• Two-factor authentication (2FA) for Account access, available and encouraged for all players.

8.2 In the event of a personal data breach that poses a risk to your rights and freedoms, bdt89 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

8.3 While bdt89 takes all reasonable precautions, no online system can be guaranteed entirely secure. You are responsible for keeping your own login credentials confidential and for notifying bdt89 immediately if you suspect unauthorised access to your Account.

9.1 As a player whose data is processed by bdt89, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data bdt89 holds about you, together with information about how it is used and with whom it is shared;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. You can update most Account details directly in your Account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bdt89's legal retention obligations as described in Section 7;
• Right to Restriction: You may request that bdt89 restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of the data or while an objection to processing is being considered;
• Right to Object: You may object to processing based on legitimate interests at any time. bdt89 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights;
• Right to Withdraw Consent: Where processing is based on your consent (most notably for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9.2 To exercise any of the above rights, please submit a request in writing to [email protected]. Include your registered Account username and a description of the right you wish to exercise. bdt89 will respond within a reasonable timeframe and will request proof of identity before disclosing or modifying any personal data.

9.3 bdt89 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10.1 The bdt89 Platform is strictly for adults aged 21 years and above. bdt89 does not knowingly collect personal data from individuals under the age of 21. If bdt89 discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that Account will be closed immediately, all personal data will be deleted, any deposited funds will be returned to the originating payment method, and any winnings will be voided.

10.2 If you have reason to believe that a minor has registered an Account on bdt89, please notify us immediately at [email protected].

11.1 The bdt89 Platform may contain references to third-party payment services (such as bKash, Nagad, and Rocket) and game studios (such as Pragmatic Play, Evolution Gaming, and Microgaming). These third parties operate under their own privacy policies, which are independent of this Policy.

11.2 bdt89 is not responsible for the privacy practices of any third party whose services are accessed through or in connection with the Platform. We encourage you to review the privacy policies of any third-party service you use.

12.1 bdt89 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the services we offer. When material changes are made, bdt89 will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect.

12.2 The current version of this Privacy Policy, including its effective date, is always available on this page at bdt89.io/privacy-policy. Your continued use of the Platform after the effective date of any update constitutes your acknowledgement of the revised Policy.

12.3 If you do not agree with any update to this Policy, you should cease using the Platform and may request Account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to how bdt89 handles your personal data, please contact us using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Target: Within 2 business days for data rights requests; live chat typically within minutes for general queries

When submitting a data rights request, please include your registered Account username and a clear description of the request so we can handle it promptly and accurately.