bdtil Privacy Policy

1 Data We Collect

bdtil collects personal data through several channels: directly from you when you register an account or interact with our services; automatically through your use of the platform; and occasionally from third-party sources such as payment providers and fraud prevention agencies. Below is a detailed breakdown of the categories of data we collect.

1.1 Registration and Identity Data

When you create a bdtil account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, gender (optional), residential address, email address, and mobile phone number. This data is required to open and maintain your account, verify your identity as required by our Know Your Customer (KYC) process, and comply with age verification obligations. Without this information, we are unable to provide you with a functional account.

1.2 Identity Verification Documents

As part of our KYC and responsible gaming obligations, we may ask you to submit copies of identity documents. These typically include a government-issued national identity card, passport, or driving licence, and a recent utility bill or bank statement as proof of address. Document images are stored securely and retained only for as long as legally required. We do not share KYC documents with any party other than our regulated verification service provider and, where legally required, competent regulatory or law enforcement authorities.

1.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and in-platform transactions associated with your account. This includes payment method identifiers (such as your bKash or Nagad mobile number, or bank account reference), transaction amounts in Bangladeshi Taka (৳ BDT), timestamps, and transaction statuses. Full payment credentials — such as complete bank account numbers — are handled directly by our payment processing partners and are not stored on bdtil's systems.

1.4 Gaming Activity Data

bdtil logs your gaming history, including games played, bet amounts, outcomes, session durations, and responsible gaming tool usage. This data is used to maintain your account records, detect irregular or fraudulent activity, monitor compliance with self-imposed responsible gaming limits, and improve our product offerings. Gaming activity data is also used in aggregate, anonymised form to analyse platform performance.

1.5 Technical and Device Data

When you access the bdtil platform, our systems automatically collect certain technical data. This includes your IP address, device type and operating system, browser type and version, screen resolution, referring URL, and the pages you visit within the platform. This data is used to ensure the platform functions correctly across different devices, to detect and prevent unauthorised access, and to analyse aggregate usage patterns. We do not use technical data to build individual behavioural profiles for advertising purposes.

1.6 Communications Data

If you contact our customer support team via live chat or email, we retain records of those communications, including message content, timestamps, and any supporting files you share with us. This allows us to resolve your enquiry, maintain a record of interactions for quality assurance, and refer back to previous communications in the event of a dispute or follow-up query.

2 How We Use Your Data

bdtil processes your personal data only where we have a lawful basis for doing so. The following table summarises the primary purposes for which we use your data and the corresponding legal basis for each use.

2.1 Marketing Communications

bdtil will only send you promotional emails, bonus offers, or tournament notifications if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Unsubscribing from marketing messages does not affect the delivery of essential service communications such as deposit confirmations, withdrawal notifications, and account security alerts.

2.2 Automated Decision-Making

bdtil uses automated systems to flag potentially fraudulent transactions, detect bonus abuse, and enforce responsible gaming limits. Where an automated process results in a consequential action — such as a temporary account restriction or a withdrawal hold — you have the right to request human review of that decision. To exercise this right, contact [email protected] with the subject line "Automated Decision Review".

3 Data Sharing and Disclosure

bdtil does not sell your personal data. We share your information only in the circumstances described below, and only to the minimum extent necessary for each stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, bdtil shares the necessary transaction details with our payment processing partners. These include mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as bank partners including Dutch-Bangla Bank, City Bank, and BRAC Bank. Each payment partner processes your data under their own privacy policy and is independently responsible for their data handling practices. bdtil selects payment partners that maintain appropriate security standards.

3.2 Identity Verification Providers

To satisfy our KYC obligations, bdtil works with regulated third-party identity verification service providers. These providers receive the identity documents you submit for verification purposes and return a verification result to bdtil. They are contractually prohibited from using your data for any purpose other than identity verification on bdtil's behalf.

3.3 Game Software Providers

The games available on bdtil are supplied by third-party software providers including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming. When you participate in a game, the relevant provider's servers process the game logic and may receive a session token and anonymised player identifier. Full personal data such as your name, address, or payment details are not passed to game providers. Game provider data handling is governed by their respective data processing agreements with bdtil.

3.4 Legal and Regulatory Disclosure

bdtil may be required to disclose your personal data to competent authorities in response to a valid legal obligation, court order, regulatory investigation, or law enforcement request. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and will notify you of the disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that bdtil undergoes a merger, acquisition, reorganisation, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. We will notify registered players of any such transfer and of any material changes to data handling practices that result from it, providing sufficient notice to allow you to close your account if you choose not to have your data transferred.

4 Cookies and Tracking

bdtil uses cookies and similar technologies — including local storage and session tokens — to operate the platform, remember your preferences, and understand how players use our services. This section explains what types of cookies we use and why.

4.1 Essential Cookies

Essential cookies are strictly necessary for the platform to function. They maintain your login session so you do not need to re-authenticate on every page, enforce your responsible gaming settings, and preserve your language and currency preferences. Essential cookies cannot be disabled without breaking the core functionality of your bdtil account. They do not collect personal data beyond what is needed for session management.

4.2 Performance and Analytics Cookies

Performance cookies help us understand how players navigate the bdtil platform by collecting anonymised, aggregate data on page views, session durations, error rates, and feature usage. This information is used exclusively to improve the platform's performance and usability. We do not use this data to identify individual users or build personal behavioural profiles.

4.3 Preference Cookies

Preference cookies remember choices you make on the platform — such as your preferred deposit method, table game stakes, or notification settings — so that your experience is personalised on your next visit. These cookies are set only in response to actions you take and can be cleared by resetting your browser settings, though doing so will reset your saved preferences.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers provide options to block all cookies, block third-party cookies only, or clear existing cookies. Please note that disabling essential cookies will prevent you from logging in and using your bdtil account. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

5 Data Security

The security of your personal data is a core operational priority at bdtil. We implement a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.

5.1 Encryption in Transit and at Rest

All data exchanged between your browser or app and bdtil's servers is encrypted using TLS 1.2 or higher, with 256-bit encryption keys. Sensitive data stored in our databases — including identity documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.

5.2 Access Controls

Access to personal data within bdtil's systems is governed by a strict role-based access control policy. Only personnel with a documented need to access specific categories of data are granted permission to do so. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly to detect any anomalous activity.

5.3 Two-Factor Authentication

bdtil strongly recommends that all registered players enable two-factor authentication (2FA) on their accounts. When 2FA is active, logging in requires both your password and a one-time code sent to your registered mobile number, providing a second layer of protection against unauthorised access even in the event that your password is compromised.

5.4 Incident Response

In the unlikely event of a data security incident that affects your personal information, bdtil will assess the incident promptly and notify affected players within a reasonable timeframe where the incident is likely to result in a risk to your rights or interests. Notifications will be sent to your registered email address and will include a description of the nature of the incident, the categories of data affected, and the steps bdtil is taking to address it.

6 Your Data Rights

As a player whose personal data is processed by bdtil, you hold the following rights in respect of that data. These rights may be subject to certain limitations where bdtil has overriding legal obligations — for example, we may be required by law to retain certain financial records even after a deletion request.

• Right of Access: You have the right to request a copy of the personal data bdtil holds about you, along with information about how it is being used. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data bdtil holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as your email address or phone number, you can update these directly from your account settings.
• Right to Erasure: You may request that bdtil delete your personal data. We will honour such requests where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where you have objected and bdtil has no overriding legitimate grounds to continue processing.
• Right to Restrict Processing: You may request that bdtil limit the processing of your personal data in certain circumstances — for example, while a rectification request is under review.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing processing, we will stop immediately.
• Right to Data Portability: Where processing is carried out by automated means and on the basis of your consent or a contract, you may request that bdtil provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where bdtil processes your data on the basis of consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact our data protection team at [email protected] with the subject line "Data Rights Request". Please include your registered account username and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing the request.

7 Data Retention

bdtil retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following retention periods apply as general guidelines:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, to satisfy financial record-keeping and fraud prevention obligations.
• Transaction records: Retained for a minimum of five years following the transaction date, in accordance with standard financial record-keeping requirements.
• KYC documents: Retained for a minimum of five years following account closure, or longer where required by applicable legal or regulatory obligation.
• Gaming activity logs: Retained for a minimum of three years following account closure, for dispute resolution and responsible gaming audit purposes.
• Customer support communications: Retained for three years from the date of the most recent communication in a given support thread.
• Technical and device data: Retained in anonymised, aggregate form indefinitely for platform analytics; individual IP logs are retained for 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bdtil's data disposal procedures. Where data has been anonymised, it no longer constitutes personal data and may be retained indefinitely for statistical purposes.

8 Policy Updates and Contact

8.1 Updates to This Policy

bdtil reviews this Privacy Policy periodically and whenever our data practices change in a material way. When we make significant updates — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties we share it with — we will notify registered players by email at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how your data is being handled.

8.2 Minor Updates

For minor or non-material updates — such as corrections to typographical errors, clarifications of existing language, or structural formatting changes that do not alter the substance of our data practices — bdtil may update this page without advance notice or a separate email notification. In such cases, the effective date will be updated to reflect the revision.

8.3 Contact and Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or would like to raise a concern about how bdtil handles your personal information, please contact our team at:

Email: [email protected]

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8.4 Disputes and Complaints

If you are not satisfied with bdtil's response to a privacy concern or data rights request, you have the right to escalate the matter through appropriate channels available in your jurisdiction. bdtil takes all privacy complaints seriously and will cooperate fully with any legitimate investigation or review arising from a complaint.