Privacy Policy for bdkb — Your Data, Protected

1 Who We Are

bdkb is an online sports betting and casino platform operating at https://bdkb.io, principally serving players located in Bangladesh. For the purposes of this Privacy Policy, bdkb acts as the data controller — meaning we determine the purposes for which and the means by which your personal data is processed.

Our platform offers cricket betting, live casino games, slots, and a VIP loyalty programme to registered adult players aged 21 and above. All platform services are delivered in English to players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Our designated data protection contact can be reached at: [email protected]. Please mark the subject line of any data-related enquiry as "Data Privacy Request" to ensure it is routed to the correct team.

2 Personal Data We Collect

bdkb collects the following categories of personal data from players, depending on the services accessed and the stage of the account lifecycle:

3 How We Collect Your Data

We collect personal data through the following channels and mechanisms:

• Direct Provision: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings, you provide data directly to bdkb.
• Automated Technical Collection: When you access the bdkb platform, our servers and analytics systems automatically record technical and usage data including IP address, device fingerprint, browser characteristics, and click-path data. This collection occurs for every session whether or not you are logged into your account.
• Cookies and Similar Technologies: bdkb uses cookies, web beacons, local storage, and similar tracking technologies to recognise your device, maintain your session, remember your preferences, detect fraud, and (where consented) deliver personalised promotional content. See Section 5 for full details.
• Payment Service Providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, transaction reference data is shared between bdkb and the payment service provider to confirm and reconcile the payment. The payment provider processes your financial credentials under their own privacy policy; bdkb receives only transaction confirmation data and wallet references.
• Identity Verification Services: For KYC purposes, bdkb may use third-party identity verification services that cross-reference the documents you provide with national identity databases to confirm authenticity. Results are returned to bdkb as a verification status (pass/fail/pending) together with the verified identity data.
• Fraud Prevention Partners: bdkb works with fraud detection service providers who may cross-reference your registration data against industry-wide databases of known fraudulent accounts, multi-accounting records, and self-exclusion lists. This processing is conducted on the basis of our legitimate interest in protecting the platform and its honest players.

4 Purposes and Legal Basis for Processing

bdkb processes your personal data only where we have a lawful basis to do so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

5 Cookies and Tracking Technologies

bdkb uses the following categories of cookies and similar tracking technologies on the platform. By continuing to use the platform with your browser set to accept cookies, you consent to the use of cookies as described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preference, secure your account against cross-site request forgery (CSRF), and enable core platform features such as the games lobby and cashier. These cookies cannot be disabled without rendering the platform unusable.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the platform — including which pages are visited most frequently, how long sessions last, and which game categories generate the most engagement. This data is used exclusively for platform performance optimisation. No personally identifiable information is included in analytics reports.
• Functionality Cookies: These cookies remember your personalisation choices — including your preferred deposit method, your VIP dashboard layout, and any platform display preferences you have saved. Disabling these cookies will not break the platform but will reset your preferences on each visit.
• Fraud Prevention Cookies: These cookies generate and store a unique device fingerprint that helps bdkb identify and block fraudulent activity including multi-accounting, bonus abuse, and automated bot activity. They are active for all sessions whether or not you are logged in.
• Marketing Cookies (Consent Required): If you have consented to receive personalised promotional communications, these cookies track which promotions you have viewed and interacted with, enabling bdkb to deliver relevant bonus offers for cricket betting, slots, and live casino without repeating promotions you have already seen. You may withdraw consent at any time via your Account Settings.

You can control cookie settings through your browser's privacy controls. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform. For specific cookie opt-out requests, contact [email protected].

6 Sharing Your Personal Data

bdkb does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction reference data and wallet/account identifiers necessary to process your deposits and withdrawals. Each payment partner processes your financial credentials under its own privacy policy and is not authorised by bdkb to use your data for any other purpose.
• Identity Verification Partners: Third-party KYC service providers receive copies of identity documents and personal details you submit during the verification process, solely for the purpose of confirming your identity and age. Results are returned to bdkb as a verification outcome.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account session token and wagering data to deliver and settle game rounds. These providers operate as data processors under agreements requiring them to process your data only for game delivery purposes.
• Fraud Prevention and Security Partners: Specialist fraud detection services may receive technical data (IP address, device fingerprint, behaviour patterns) to cross-reference against known fraud indicators. These providers are contractually prohibited from using your data for any purpose outside of fraud prevention services provided to bdkb.
• Customer Support Technology: If bdkb uses a third-party customer support platform (such as a live chat or ticketing system) to manage support communications, that platform will process communications data on bdkb's behalf as a data processor.
• Regulatory and Law Enforcement Authorities: bdkb will disclose personal data to competent authorities, courts, or law enforcement bodies where required to do so by applicable law, court order, or regulatory obligation, including anti-money laundering reporting obligations. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bdkb's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the acquirer will be required to honour the terms of this Privacy Policy.

7 International Data Transfers

Some of bdkb's third-party service providers — including game technology providers and fraud prevention partners — may be located outside Bangladesh and may process your personal data in other jurisdictions. Where personal data is transferred internationally, bdkb takes the following steps to ensure your data remains appropriately protected:

• We enter into data processing agreements with all third-party recipients that include contractual data protection clauses requiring them to protect your data to a standard equivalent to that applied by bdkb.
• We conduct due diligence assessments of third-party recipients' security practices and data protection standards prior to engaging them as data processors.
• Where transfers are made to game providers operating within regulated gambling jurisdictions, we confirm that those jurisdictions maintain appropriate data protection frameworks.

If you would like further information about the safeguards in place for any specific international transfer of your personal data, please contact us at [email protected] with the subject line "International Transfer Query".

8 Data Retention Periods

bdkb retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Your Data Subject Rights

As a data subject, you have the following rights in respect of your personal data held by bdkb. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request — [Right Type]". We will respond within 30 days of receipt:

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or update it. Where possible, you may also correct certain data directly through your Account Settings page.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to our legal obligation to retain certain data categories for regulatory compliance — specifically identity, financial, and responsible gaming records as set out in Section 8.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is under review, or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability: Where we process your data on the basis of consent or contract performance, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV) for transfer to another controller.
• Right to Object: You have the right to object to processing of your personal data that is based on our legitimate interests, including profiling for fraud detection and analytics. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Rights Related to Automated Decision-Making: If bdkb makes any solely automated decisions that produce legal or similarly significant effects on you (such as automated account suspension), you have the right to request human review of that decision, to express your point of view, and to contest the outcome.

10 Marketing Communications

bdkb may send you promotional emails and SMS notifications about bonus offers, VIP programme updates, new game releases, cricket betting promotions (including BPL, IPL, and T20 World Cup specials), and seasonal offers (Eid, Pohela Boishakh, Victory Day) — but only where you have given your explicit consent to receive such communications during the registration process or at a later date through your Account Settings.

Opting Out: You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by bdkb.
• Updating your communication preferences in your Account Settings panel.
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests are processed within 5 business days. Please note that withdrawing consent to marketing communications does not affect your receipt of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming notifications — which are sent on the basis of contract performance and legitimate interest rather than consent.

11 Children and Minors

The bdkb platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21. The minimum age of 21 applies across all services offered by bdkb, including sports betting, live casino, slots, and the VIP Loyalty Programme.

During the registration process, all applicants are required to confirm their date of birth and submit government-issued identity documents for KYC verification. bdkb uses automated age-checking tools cross-referenced against submitted identity documents to verify that every account holder meets the 21+ requirement before any deposit or wagering activity is permitted.

If bdkb discovers or reasonably suspects that a registered account is held by a person under the age of 21, we will immediately suspend the account, freeze any associated funds pending investigation, conduct a full KYC review, and permanently close the account if the underage status is confirmed. Any funds deposited by an underage player will be returned to the payment source used, less any bonuses claimed, in accordance with our Terms & Conditions.

If you believe that a minor has registered an account on the bdkb platform, please notify us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports seriously and will investigate within 24 hours of receipt.

12 Responsible Gaming Data

bdkb processes a dedicated category of responsible gaming data to fulfil our duty of care to all players. This includes records of any deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests that you set or that we apply to your account. This data is processed on the basis of legal obligation and legitimate interest in preventing gambling-related harm.

Responsible gaming records are treated with the highest level of confidentiality within bdkb. Access is restricted to our responsible gaming team and senior compliance officers. This data is never used for marketing profiling, never shared with third parties for commercial purposes, and is retained permanently (in anonymised form after 10 years) to ensure that self-exclusion decisions remain enforceable even if an account is closed and a new registration is attempted.

If you have set a self-exclusion on your bdkb account, any future attempt to register a new account using the same identity documents, mobile number, payment wallet, or device fingerprint will be automatically blocked and flagged for review by our responsible gaming team. This processing is conducted on the basis of our legal duty of care and our legitimate interest in preventing harm to vulnerable players.

For more information about your responsible gaming options and the data bdkb maintains in connection with your responsible gaming profile, please visit our Responsible Gaming page or contact [email protected].

13 Security Measures

bdkb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• Transport Encryption: All data transmitted between your device and the bdkb platform is encrypted using TLS 1.2 or higher (256-bit SSL). The platform operates exclusively over HTTPS. Any attempt to access the platform over an unencrypted HTTP connection is automatically redirected to HTTPS.
• Data Encryption at Rest: Sensitive personal data fields — including identity document images, financial data, and password hashes — are encrypted at rest using AES-256 encryption. Plain-text passwords are never stored; only salted cryptographic hashes are retained.
• Access Controls: Access to production databases and personal data stores is restricted to authorised personnel on a strict need-to-know basis. All internal access is controlled via role-based access control (RBAC), multi-factor authentication (MFA), and comprehensive access logging.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and DDoS mitigation services. All network traffic between internal services is encrypted and authenticated.
• Vulnerability Management: bdkb conducts regular security assessments including vulnerability scanning and penetration testing of the platform. Identified vulnerabilities are triaged and remediated according to a risk-prioritised schedule.
• Incident Response: We maintain a documented data breach incident response procedure. In the event of a confirmed personal data breach, our security team follows a defined response protocol including containment, investigation, notification, and remediation steps.
• Third-Party Security Standards: All third-party data processors — including payment partners, game providers, and identity verification services — are required to demonstrate compliance with equivalent security standards as a condition of their data processing agreement with bdkb.

14 Third-Party Links

The bdkb platform does not contain links to external third-party websites. All navigation within the platform remains within the bdkb domain at https://bdkb.io. This policy is maintained to protect the security and privacy of our players, as bdkb cannot control or accept responsibility for the privacy practices of external websites.

If game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi deliver game content via embedded frames within the bdkb platform, those game environments are governed by the respective provider's data processing agreement with bdkb. The game providers are contractually restricted from collecting personal data from players beyond what is necessary for game delivery and settlement, and are prohibited from using player data for their own marketing purposes.

15 Amendments to This Privacy Policy

bdkb reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time. Where changes are material — including changes to the categories of data collected, the purposes for which data is used, or the rights available to you as a data subject — bdkb will provide at least fourteen (14) days' advance notice by publishing the revised policy on this page and, where practicable, by sending a notification to your registered email address.

Non-material changes, such as typographical corrections, clarifications of existing provisions, or updated contact details, may be made without prior notice and take effect immediately upon publication. The effective date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the bdkb platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not accept the revised Privacy Policy, you must cease using the platform and request account closure by contacting our support team at [email protected]. We will process your data subject erasure rights as set out in Section 9, subject to applicable legal retention obligations.

16 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bdkb processes your personal data, please contact our support team using the details below. Our team is available 24 hours a day, seven days a week, operating in Bangladesh Standard Time (BST, UTC+6):

• Data Privacy Enquiries: [email protected] — Subject line: "Data Privacy Enquiry"
• Subject Access Requests: [email protected] — Subject line: "Data Subject Rights Request — Access"
• Erasure / Deletion Requests: [email protected] — Subject line: "Data Subject Rights Request — Erasure"
• Marketing Opt-Out: [email protected] — Subject line: "Marketing Opt-Out"
• Data Breach Reports: [email protected] — Subject line: "Security Concern"
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 hours and provide a full response within 30 days of receipt.