1bdtk Privacy Policy — How We Protect Your Personal Data

1bdtk operates the online casino and sports betting platform accessible at https://1bdtk.io (the "Platform"). References in this Privacy Policy to "1bdtk", "we", "us", or "our" mean the operating entity responsible for the 1bdtk Platform and the personal data processed in connection with it.

1bdtk is designed and operated for players in Bangladesh. All platform communications, support, and data processing are conducted in English. The Platform's primary currency is the Bangladeshi Taka (৳ BDT), and all payment integrations are with Bangladeshi financial service providers including bKash, Nagad, Rocket, and Upay, as well as major Bangladeshi commercial banks.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact us using the details set out in Section 15 of this document.

The categories of personal data we collect depend on how you interact with the 1bdtk Platform. The table below summarises the main categories of data we may hold about you:

3.1 Data You Provide Directly

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, claim a bonus, contact our support team, or respond to a survey or promotion. All data collection fields on our registration and verification forms are clearly labelled, and mandatory fields are identified as such.

3.2 Data Collected Automatically

When you visit the 1bdtk Platform, our servers automatically collect Technical Data and Usage Data as described in Section 2. This data is collected through server logs, session cookies, and analytics tools operated by 1bdtk. This automated collection is necessary for the secure operation of the Platform, for fraud prevention, and for platform performance optimisation.

3.3 Data from Third Parties

We may receive limited personal data about you from third-party sources, including:

• Payment Processors: bKash, Nagad, Rocket, Upay, and our banking partners provide transaction confirmation data (transaction reference numbers, amounts, timestamps) to allow us to credit your account. They do not share your full payment credentials with us.
• Identity Verification Services: Where we use third-party KYC services to assist with document verification, we may receive a verification status (verified / not verified) and flagged risk indicators from those services.
• Game Providers: Software providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming may share game session data (session ID, game outcome, RTP data) with us in order to settle bets and maintain audit records.

We process your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing required to create and operate your 1bdtk account, process deposits and withdrawals, settle bets, and provide customer support. Without this processing, we cannot provide the services you have registered for.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and any other legal duties imposed on 1bdtk under applicable law.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud detection and prevention, platform security monitoring, responsible gaming compliance, and internal analytics to improve the Platform. We have assessed that our legitimate interests do not override your fundamental privacy rights in each case where we rely on this basis.
• Consent: Where we send you promotional emails, SMS notifications about bonuses, or personalised offers, we do so only on the basis of your explicit consent, given at registration or subsequently opted in. You may withdraw this consent at any time — see Section 11.

1bdtk uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent.

• Account Creation & Management: To create, maintain, and secure your 1bdtk account, process login authentication, and manage account settings.
• Payment Processing: To process deposits and withdrawals in ৳ BDT via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate transaction records.
• Identity Verification (KYC): To verify your identity and age (21+) before processing withdrawal requests or when required by our risk and compliance procedures.
• Bet Settlement & Game Records: To accurately record and settle all sports bets, casino game sessions, and associated wins, losses, and bonus calculations.
• Customer Support: To investigate and respond to your queries, complaints, and account issues efficiently and accurately.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, bonus abuse, and other prohibited conduct as defined in the 1bdtk Terms & Conditions.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion requests you have set, and to provide appropriate intervention where required.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, user experience, and support quality.
• Marketing & Promotions: To send you promotional offers, bonus notifications, and personalised recommendations — solely where you have provided consent and have not subsequently withdrawn it.
• Legal Compliance: To fulfil our obligations under applicable law, to respond to lawful requests from competent authorities, and to enforce our Terms & Conditions.

1bdtk does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

6.1 Service Providers

We engage third-party service providers who process personal data on our behalf and under our instruction, including: identity verification (KYC) service providers, payment processing partners (bKash, Nagad, Rocket, Upay, commercial banks), cloud hosting and data centre providers, and customer support software platforms. All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than delivering services to 1bdtk.

6.2 Game Software Providers

Third-party game providers — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — receive session-level technical data (such as a pseudonymous session token and game outcome data) necessary to run the game interface and return results to the Platform. These providers do not receive your full identity data or financial account details from 1bdtk.

6.3 Legal and Regulatory Disclosures

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law or in response to a valid legal process. In such cases, we will disclose only the minimum data required and will notify you of the disclosure where we are legally permitted to do so.

6.4 Business Transfers

In the event that 1bdtk undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy terms that apply to your data before the transfer takes effect.

7.1 What Cookies We Use

The 1bdtk Platform uses cookies and similar tracking technologies to deliver a secure, functional, and personalised experience. The cookies we deploy fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during a browser session, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language setting, preferred game category, and responsible gaming limit configurations so that you do not need to re-enter these each time you visit.
• Analytics Cookies: Allow us to measure how players navigate the Platform — which game categories are most popular, which pages generate the most support queries, and where technical errors occur. Analytics data is aggregated and anonymised before we analyse it.
• Marketing Cookies: Used only where you have consented to receive personalised promotional communications. These cookies help us understand which promotions you have responded to and allow us to avoid sending you offers that are not relevant to your gaming preferences.

7.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from accessing the Platform. Disabling functional or analytics cookies will not prevent access but may reduce the quality of your experience. Marketing cookies can be disabled independently by withdrawing your marketing consent — see Section 11.

1bdtk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your active account and for a minimum of 5 years after account closure, in accordance with financial record-keeping and anti-money laundering requirements.
• Transaction & Financial Records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial audit requirements.
• KYC & Verification Documents: Retained for the duration of your account and for 5 years after closure. Document images are stored with restricted access and encrypted at rest.
• Betting & Gaming History: Full records retained for 5 years from the date of each game session or bet settlement, for dispute resolution and audit purposes.
• Support Communications: Retained for 2 years from the date the query was resolved, unless linked to an ongoing dispute or compliance investigation.
• Marketing Preferences & Consent Records: Retained for the duration of your account and for 2 years after closure, as evidence of the consent basis for any marketing communications sent.

When the applicable retention period expires and no legal obligation requires further retention, your personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

1bdtk implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security: All data transmitted between your device and 1bdtk servers is encrypted using TLS 1.2 or TLS 1.3. Our SSL certificate is maintained and renewed continuously.
• Encryption at Rest: Sensitive data stored in our databases — including payment details, identity document images, and account credentials — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within 1bdtk is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access controls, and all access events are logged and auditable.
• Password Hashing: Account passwords are never stored in plain text. We use bcrypt or equivalent one-way hashing algorithms with salting to store password credentials.
• Fraud Monitoring: Our Platform employs real-time transaction monitoring and anomaly detection systems to identify suspicious activity patterns associated with account takeover attempts, bonus abuse, and financial fraud.
• Third-Party Audits: We conduct periodic security reviews and engage external parties to perform penetration testing and vulnerability assessments of the Platform infrastructure.

As a player registered on the 1bdtk Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond within 5 business days and fulfil all legitimate requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, including the categories of data, the purposes for which it is processed, and details of any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For minor details such as contact email or mobile number, you may also update these directly from within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and we have no overriding legitimate interest. Note that this right may be limited where we are required by law to retain certain data — for example, financial transaction records subject to AML retention requirements.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests where you believe your individual rights and freedoms override those interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we process your data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

1bdtk sends promotional communications — including bonus offers, free bet notifications, seasonal promotions (such as Pohela Boishakh and Eid specials), and IPL or BPL cricket betting promotions — only to players who have explicitly opted in to receive them at registration or subsequently through their account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the Notifications section of your account settings.
• Clicking the unsubscribe link included in any marketing email we send you.
• Contacting our support team via live chat or email and requesting removal from our marketing list.

Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent in connection with the operation of your account and do not require marketing consent.

The 1bdtk Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under the age of 21, we will immediately close the account, void all associated bets and bonuses, return any deposited funds to the originating payment method, and securely delete the personal data associated with that account.

If you believe that a minor has registered an account on 1bdtk, please contact our support team immediately so that we can investigate and take appropriate action. Parents and guardians are encouraged to use parental control tools to restrict access to online gambling platforms on devices used by minors.

The 1bdtk Platform does not include outbound links to third-party websites. All navigation within the Platform remains within the 1bdtk domain. However, certain game interfaces rendered by third-party providers such as Evolution Gaming and Pragmatic Play operate within iFrame environments that are subject to those providers' own privacy and data handling practices for the duration of the game session.

1bdtk is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policies of any third-party software provider whose games you play on our Platform if you wish to understand how game session data is processed at the provider level.

1bdtk reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via the email address on file or by displaying a prominent notice on the Platform for a minimum of 7 days before the revised policy takes effect.

Minor amendments — such as typographical corrections, structural reorganisation that does not change the substance of the policy, and clarifications that do not affect your rights — may be made without prior notice, with the updated policy taking effect on the date shown in the "Last updated" header at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how 1bdtk protects your personal data. Your continued use of the Platform following notification of any material update constitutes your acceptance of the revised policy.

For all privacy-related queries, data rights requests, or concerns about how 1 bdtk handles your personal data, please contact our Data Protection team using the following details:

• Support Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Support Hours: 10:00 AM – 2:00 AM BST (UTC+6)

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise. We may need to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.

We aim to acknowledge all privacy-related requests within 2 business days and to provide a full response within 30 calendar days. If your request is complex or you have submitted multiple requests simultaneously, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it before the initial 30-day period expires.