bdt96 Privacy Policy — How We Handle Your Personal Data

1 Introduction

bdt96 ("we", "us", "our") operates the online betting and casino platform accessible at bdt96.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who registers an account, visits the Platform, or otherwise interacts with bdt96 services. This Privacy Policy explains, in clear and accessible terms, what personal data we collect from players based in Bangladesh and elsewhere, the purposes for which that data is processed, the lawful bases upon which we rely to process it, and the rights available to individuals in respect of their personal data.

This Privacy Policy applies to all personal data collected through the bdt96 Platform, including data collected via the main website, any mobile-optimised interface, customer support communications, promotional campaigns, and any other touchpoint through which bdt96 interacts with players or prospective players.

By registering a bdt96 account or by continuing to use the bdt96 Platform after the effective date of this policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to any part of this Privacy Policy, you must discontinue use of the Platform immediately and contact us to arrange closure of your account.

2 Personal Data We Collect

bdt96 collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of personal data we collect include, but are not limited to, the following:

Identity & Registration Data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are at least 21 years of age).
• Gender (optional, used for personalisation purposes only).
• Nationality and country of residence.
• A copy of a government-issued photo identification document (National ID card, passport, or driver's licence), requested as part of our KYC verification process for withdrawals above specified thresholds.

Contact Data:

• Mobile phone number (used for account verification, two-factor authentication, and communications).
• Email address (used for account communications, security alerts, and — where consented to — marketing messages).
• Residential address, including division, district, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh).

Financial & Transaction Data:

• Mobile Financial Service (MFS) account numbers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals.
• Bank account details for players who deposit or withdraw via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported banking institutions.
• Transaction history including deposit amounts, withdrawal amounts, dates, reference numbers, and payment method used.
• Bet and wager history, including stakes placed, outcomes, and winnings or losses recorded on the bdt96 Platform.

Technical & Usage Data:

• IP address and approximate geolocation data derived from IP address lookup.
• Device type, operating system, browser type and version.
• Session data including login timestamps, session duration, and pages visited.
• Game interaction data including games played, bet frequency, and session patterns — used for responsible gaming monitoring and personalisation.

Communications Data:

• The content of messages sent to bdt96 via customer support channels (live chat, email, WhatsApp).
• Records of any responsible gaming requests, self-exclusion requests, deposit limit changes, or account closure requests.
• Survey responses and feedback submitted voluntarily by players.

3 How We Collect Your Data

bdt96 collects personal data through the following means:

• Direct Collection: Data you provide voluntarily when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access the bdt96 Platform, including data collected via cookies, web beacons, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Third-Party Sources: Identity verification data and fraud-screening information received from third-party KYC and anti-money-laundering (AML) service providers engaged by bdt96. Payment confirmation data received from MFS providers (bKash, Nagad, Rocket, Upay) and banking partners. Game outcome and session data received from certified game studio providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi).

4 Legal Basis for Processing

bdt96 processes personal data only where there is a lawful basis for doing so. The primary legal bases upon which bdt96 relies when processing player personal data are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between bdt96 and the player — including account creation, identity verification, payment processing, bet placement and settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements — including Know Your Customer (KYC) verification, anti-money-laundering (AML) checks, fraud prevention obligations, and the retention of transaction records.
• Legitimate Interests: Processing carried out on the basis of bdt96's legitimate business interests where those interests are not overridden by the player's privacy rights — including fraud detection, platform security, responsible gaming monitoring, analytics to improve the Platform, and communications about material account matters.
• Consent: Processing based on your freely given, specific, and informed consent — most notably in respect of direct marketing communications such as promotional emails and SMS messages. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Personal Data

bdt96 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your bdt96 account, including verifying your identity and eligibility (21+ age check), managing your account settings, and communicating material account information such as security alerts and policy updates.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile transactions, and to investigate and resolve payment disputes.
• Platform Services: To provide you with access to bdt96's full range of services, including sports betting (cricket, football, kabaddi), live casino games, slots, and instant games. To personalise your Platform experience based on your usage history and preferences.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, match-fixing, and other forms of prohibited conduct. To protect the integrity of the bdt96 Platform and the safety of all players.
• Responsible Gaming: To monitor betting patterns and session behaviour for indicators of problem gambling, to enforce responsible gaming tools requested by players (deposit limits, self-exclusion, session reminders), and to fulfil our obligations to protect vulnerable players.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, including retaining transaction records, responding to lawful requests from competent authorities, and fulfilling AML and KYC requirements.
• Analytics & Platform Improvement: To analyse aggregated usage data to identify trends, improve Platform performance, develop new features, and refine our responsible gaming tools. Analytics data is processed in anonymised or pseudonymised form wherever possible.
• Marketing & Promotions: Where you have provided consent, to send you personalised promotional communications about bdt96 bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season promotions), and new features via email or SMS. See Section 12 for details on managing your marketing preferences.

6 Third-Party Disclosure & Data Sharing

bdt96 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only where necessary to deliver our services or where required by law, and only with trusted parties under appropriate data protection obligations. The categories of third parties with whom bdt96 may share player data are as follows:

• Payment Processors: MFS providers (bKash, Nagad, Rocket, Upay) and banking institutions receive the minimum financial data necessary to process deposits and withdrawals on your behalf.
• Identity Verification & AML Providers: Specialist KYC and AML compliance service providers who assist bdt96 in verifying player identity and screening for money-laundering risk. These providers process identity documents and personal data strictly under data processing agreements with bdt96.
• Game Studio Providers: Licensed game content studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and game interaction data necessary to operate their games on the bdt96 Platform.
• IT & Hosting Infrastructure Providers: Cloud hosting, database management, and platform security providers who process data on bdt96's behalf under strict confidentiality and security obligations.
• Fraud Prevention & Cybersecurity Providers: Third-party tools that assist bdt96 in detecting bot activity, account takeover attempts, and other security threats.
• Regulatory & Law Enforcement Authorities: Where bdt96 is required by applicable law to disclose personal data to government bodies, financial intelligence units, or law enforcement agencies, we will comply with such requests. Where legally permissible, bdt96 will notify the affected player of such a disclosure.

All third-party service providers engaged by bdt96 are contractually required to implement appropriate technical and organisational security measures to protect any personal data processed on our behalf, and to process that data only in accordance with bdt96's instructions and applicable data protection requirements.

7 Cookies & Tracking Technologies

bdt96 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device by a website. Cookies allow the website to recognise your device on subsequent visits and to store certain preferences or session data. The following categories of cookies are used on the bdt96 Platform:

• Strictly Necessary Cookies: Essential to the basic functioning of the Platform. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery (CSRF), and cookies that store your language and currency preferences. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect anonymised statistical data about how players use the Platform — including pages visited, session duration, game categories accessed, and error occurrences. This data helps bdt96 identify areas for improvement and optimise the Platform experience.
• Functional Cookies: Used to remember your Platform preferences across sessions, such as your preferred deposit method, notification settings, and responsible gaming configuration.
• Performance Cookies: Used to monitor Platform performance, identify and diagnose technical errors, and ensure that the Platform loads efficiently on a wide range of devices and network conditions — including the mobile networks commonly used across Dhaka, Chittagong, Sylhet, and other parts of Bangladesh.

bdt96 does not use advertising or retargeting cookies that track your browsing activity across third-party websites. The cookies deployed on the bdt96 Platform are limited to those necessary for Platform operation, security, and internal analytics.

8 Data Security

bdt96 takes data security seriously and has implemented a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

• Encryption in Transit: All data transmitted between your device and the bdt96 Platform is encrypted using 256-bit SSL/TLS encryption, ensuring that your personal information and financial data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored in bdt96's databases — including identity documents and financial account references — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within bdt96's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need to access specific categories of data are granted access, and all access is logged and monitored.
• Two-Factor Authentication (2FA): bdt96 offers optional 2FA for player accounts and enforces 2FA for all internal administrative access to systems that process personal data.
• Regular Security Audits: bdt96 conducts periodic security assessments, penetration tests, and vulnerability scans to identify and remediate potential security weaknesses in the Platform and its supporting infrastructure.
• Incident Response: bdt96 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a high risk to players' rights, bdt96 will notify affected players without undue delay.

While bdt96 implements robust security measures, no method of electronic transmission or digital storage is completely infallible. Players are reminded that they are responsible for maintaining the security of their own account credentials and for accessing the Platform via secure, private networks wherever possible.

9 Data Retention

bdt96 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as may be required or permitted by applicable law. The following retention periods apply as general guidelines:

• Active Account Data: Personal data associated with an active bdt96 account is retained for the duration of the account relationship plus a minimum of 5 years after the account is closed, to meet financial record-keeping and AML compliance obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of 7 years from the date of the transaction in accordance with standard financial record-keeping requirements.
• Identity Verification Documents: KYC documents (copies of ID cards, passports, or driver's licences submitted for verification) are retained for a minimum of 5 years after account closure. After this period, documents are securely destroyed.
• Customer Support Communications: Records of support interactions, including responsible gaming requests and formal complaints, are retained for a minimum of 3 years from the date of the interaction.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for as long as necessary to demonstrate compliance with applicable requirements — typically for the duration of the account relationship plus 2 years.
• Technical & Log Data: Server logs, IP address logs, and session records are typically retained for 12 months and then deleted or anonymised, unless specific records are required to be retained for longer due to an ongoing fraud investigation or legal proceeding.

When personal data is no longer required for any legitimate purpose and the applicable retention period has expired, bdt96 will securely delete or irreversibly anonymise that data.

10 Your Privacy Rights

bdt96 recognises and respects the privacy rights of all players. The following rights are available to you in respect of your personal data held by bdt96:

• Right of Access: You have the right to request a copy of the personal data that bdt96 holds about you. We will provide this information within a reasonable timeframe and at no charge for the first request in any 12-month period.
• Right to Rectification: You have the right to request correction of any personal data held by bdt96 that is inaccurate, incomplete, or out of date. You may update most of your contact information directly through your bdt96 account settings; for changes to identity information, please contact our support team.
• Right to Erasure: You have the right to request the deletion of personal data held by bdt96 where there is no longer a legitimate or legal basis for its continued retention. Please note that bdt96 may be required by law to retain certain data (such as transaction records) even following an erasure request, in which case we will inform you of the data categories that must be retained and the reason for their retention.
• Right to Restrict Processing: You have the right to request that bdt96 restricts the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Object: You have the right to object to the processing of your personal data where bdt96 relies on legitimate interests as the lawful basis for that processing, and where you believe your privacy interests override bdt96's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where bdt96 processes your data on the basis of your consent (most notably for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to request that bdt96 provide your personal data in a structured, commonly used, and machine-readable format.

To exercise any of the rights described above, please contact bdt96 at [email protected] with the subject line "Privacy Rights Request". bdt96 will acknowledge your request within 5 business days and will respond substantively within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, with notice to you.

11 Children & Minors

bdt96 enforces a strict minimum age requirement of 21 years for all account holders. The bdt96 Platform is not intended for, and must not be accessed by, any individual under the age of 21. bdt96 does not knowingly collect personal data from individuals under 21 years of age.

Where bdt96 discovers or has reasonable grounds to believe that an account is held by an individual who is under 21 years of age, bdt96 will immediately suspend the account, conduct an age verification investigation, and — if the account holder is confirmed to be underage — permanently close the account. Any funds held in an underage account will be returned to the payment method of record after deduction of any amounts derived from wagering activity, which will be void.

Parents or guardians who are concerned that a minor may have registered an account on the bdt96 Platform should contact us immediately at [email protected]. We will investigate and act promptly on all such reports. bdt96 also recommends that households with minors install appropriate parental control and content-filtering software to prevent access to online gambling platforms.

12 Marketing Communications

bdt96 may send you direct marketing communications — including promotional offers, bonus notifications, seasonal campaign messages (Eid, Pohela Boishakh, BPL season, T20 World Cup), and platform feature announcements — via email or SMS, provided that you have given your explicit consent to receive such communications at the time of registration or at a subsequent point.

Marketing communications from bdt96 will always clearly identify bdt96 as the sender and will include a straightforward mechanism for you to opt out of future communications. You may withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link included in any marketing email from bdt96.
• Sending an opt-out request to [email protected] with the subject line "Marketing Opt-Out".
• Updating your notification and communication preferences in your bdt96 account settings.

Withdrawal of marketing consent will not affect your ability to use the bdt96 Platform or to receive essential account communications (such as deposit confirmations, withdrawal notifications, security alerts, and policy updates). Essential account communications are sent on the basis of contractual necessity and are not subject to marketing opt-out preferences.

13 Amendments to This Privacy Policy

bdt96 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform and services. The effective date of the current version is displayed at the top of this document and in the hero section of this page.

Where amendments are material — meaning they significantly affect the rights of players or the manner in which their personal data is processed — bdt96 will provide at least 14 days' prior notice by publishing the updated policy on the bdt96 Platform and, where practicable, by notifying registered players via email or in-platform notification.

Your continued use of the bdt96 Platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to any amended terms, you must cease using the Platform and contact us to arrange closure of your account and the withdrawal of any remaining balance.

Minor amendments — including typographical corrections, clarifications of existing provisions, or updated contact details — may be made without advance notice and will take effect immediately upon publication.

14 Contact & Data Requests

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which bdt96 processes your personal data, or if you wish to exercise any of the privacy rights described in Section 10, please contact our Data Privacy team using the details below. All communications must be in English to ensure accurate and timely handling.

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Privacy Rights Request")
• Responsible Gaming & Data Concerns: [email protected]
• Support Hours: 24 hours a day, 7 days a week including public holidays
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Service Region: Serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all of Bangladesh

All email addresses displayed in this Privacy Policy are plain text only and are not clickable links. Please type the address manually into your email client when contacting us.