bdt8 Privacy Policy

bdt8 is an online gaming platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We offer live casino games, sports betting, slots, crash games, and card games sourced from leading providers including Pragmatic Play, Evolution Gaming, and Spribe. bdt8 acts as the data controller in respect of all personal data collected through the platform.

This Policy is issued by bdt8 and governs all personal data processing activities carried out in connection with the operation of the bdt8 platform and the delivery of its associated services. Our contact email for all privacy matters is [email protected].

We may also collect identity verification documents as part of our KYC process. The types of documents we may request include:

• National Identity Card (NID) — front and back copies.
• Passport (biographical data page).
• Proof of address — utility bills or bank statements not older than three months.
• Payment method ownership evidence — screenshots or confirmation documents from bKash, Nagad, or other registered providers.
• Any other documentation reasonably required for anti-money laundering (AML) compliance.

bdt8 uses the personal data it collects strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

• Account creation, maintenance, and authentication — to set up and secure your bdt8 account and verify your identity during login.
• Payment processing and financial record-keeping — to process your deposits and withdrawals and maintain accurate transaction records.
• KYC and AML compliance — to fulfil our regulatory obligations to verify player identity and detect financial crime.
• Fraud detection and platform security — to monitor for suspicious activity and protect the integrity of games and transactions.
• Customer support — to respond to your queries, resolve disputes, and communicate service-related information.
• Platform improvement and analytics — to analyse usage patterns and improve the features, performance, and design of the bdt8 platform.

Where we send you promotional communications (such as bonus notifications or seasonal offers tied to events like Eid or the BPL), we do so based on your existing player relationship with bdt8. You may opt out of receiving such communications at any time by contacting [email protected].

bdt8 processes your personal data only where there is a lawful basis for doing so. The primary legal bases on which bdt8 relies are:

• Contract performance — processing necessary to provide the services you requested when registering your bdt8 account, including account management and payment processing.
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC verification and AML reporting requirements.
• Legitimate interests — processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights.
• Consent — for specific processing activities (such as optional marketing communications) where we rely on your freely given, specific, and informed consent, which you may withdraw at any time.

bdt8 does not sell, rent, or trade your personal data to any third party. We may share your data only in the limited circumstances set out below:

• Payment service providers — we share the minimum necessary data with payment processors (including bKash, Nagad, Rocket, and Upay) solely to facilitate your deposits and withdrawals.
• Game platform providers — game studios such as Pragmatic Play, Evolution Gaming, and Spribe may receive session identifiers to authenticate gameplay. These providers are contractually prohibited from using your data for any other purpose.
• Regulatory and law enforcement authorities — we may be required by applicable law to disclose certain personal data to regulatory bodies or law enforcement agencies. bdt8 will comply with any lawful request for data disclosure.
• Fraud prevention and security partners — anonymised or pseudonymised data may be shared with fraud prevention services to protect the platform and its users from financial crime and account abuse.

All third parties with whom bdt8 shares data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it beyond the specific purpose for which it was shared. bdt8 remains responsible for ensuring that any such sharing is lawful and proportionate.

Most browsers allow you to control cookie settings, including blocking or deleting cookies. Please be aware that disabling essential cookies may prevent some features of the bdt8 platform from working correctly, including staying logged in. bdt8 does not currently support a cookie preference centre, but you can manage cookies directly through your browser settings.

bdt8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your active account relationship with bdt8, and for a minimum period of five years following account closure to satisfy legal and regulatory obligations, including AML record-keeping requirements.

Transaction records are retained for a minimum of six years from the date of the transaction in accordance with standard financial record-keeping requirements. Analytics and usage data that does not identify you personally is retained in aggregated form for an indefinite period for platform improvement purposes. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

bdt8 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. All data transmissions between your device and the bdt8 platform are encrypted using SSL (Secure Sockets Layer) technology. Access to personal data within bdt8 is restricted to authorised personnel only, on a strict need-to-know basis, and all staff handling personal data are subject to confidentiality obligations.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, bdt8 will notify affected users as soon as reasonably practicable. You are responsible for maintaining the security of your own account credentials, including your login password and any OTP codes received on your registered mobile number. You should never share these with anyone, including bdt8 support staff.

As a user of the bdt8 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your full name and registered mobile number so we can verify your identity before processing your request.

• Right of access — you may request a copy of the personal data bdt8 holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held in your account.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing — you may request that bdt8 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data.
• Right to object — you may object to the processing of your personal data where bdt8 relies on legitimate interests as the legal basis, including objecting to receiving direct marketing communications.

bdt8 will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case bdt8 will notify you of the extension and the reason for it. bdt8 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

The bdt8 platform does not contain links to external third-party websites in its primary navigation or content. Where references to payment providers, game studios, or other services are made within this Policy or elsewhere on the platform, these are for informational purposes only. bdt8 is not responsible for the privacy practices of any third-party service provider, and you should review the privacy policy of any external service before providing your personal data to it.

The bdt8 platform is strictly for users aged 21 and above. bdt8 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data, close the associated account, and take appropriate action in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a person under your care has registered on bdt8 or provided personal data to the platform without your knowledge, please contact us immediately at [email protected]. We will investigate and take prompt action to address the situation.

bdt8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date shown at the top of this page. Where the changes are significant, we may also notify registered players via their registered mobile number or account notification.

Your continued use of the bdt8 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how bdt8 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bdt8 processes your personal data, please contact our support team. All privacy-related enquiries are handled with priority and in strict confidence. We aim to acknowledge all enquiries within one business day and to resolve substantive matters within 30 days.

Data protection contact email: [email protected] (plain text — not a clickable link). Available 24/7, Bangladesh Standard Time (UTC+6).