Privacy Policy
for bdt19 Casino Bangladesh

1Introduction

bdt19 ("we", "us", or "our") operates the online casino and sports betting platform accessible at bdt19.io, serving players in Bangladesh and other eligible markets. We take the privacy and security of your personal data seriously, and this Privacy Policy has been written to be transparent about exactly how your information is handled.

This Policy applies to all personal data collected through the bdt19 website, mobile browser interface, customer support channels, and any other interactions you have with the bdt19 platform. By registering an account or using our services, you acknowledge that you have read and understood this Privacy Policy in full.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the bdt19 platform more broadly. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Privacy Policy shall take precedence.

2Data We Collect

bdt19 collects personal data through several channels during your use of the platform. The categories of data we collect are as follows:

2.1 Registration Data

When you create a bdt19 account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and preferred username. This information is required to open and maintain your account.

2.2 Identity Verification Data (KYC)

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of address (e.g., a utility bill or bank statement dated within the last three months) and, in some cases, proof of payment method ownership.

2.3 Financial Transaction Data

When you make a deposit or withdrawal, we collect the transaction amount, date and time, payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), and the transaction reference number issued by your payment provider. We do not store full bKash or Nagad account credentials on our servers.

2.4 Gaming Activity Data

We record your betting and gaming history on the bdt19 platform, including game sessions, wager amounts, game outcomes, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access bdt19, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited within the platform. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

If you contact bdt19 customer support via live chat or email, we retain records of that correspondence. This includes the content of your messages, the date and time of contact, and the resolution provided. These records are kept for quality assurance and dispute resolution purposes.

2.7 Marketing Preferences

Where you have opted in to receive marketing communications, we store your preferences including the types of promotions you have subscribed to and the communication channels you have selected (email, SMS, or platform notifications).

3How We Use Your Data

bdt19 uses the personal data we collect for the following specific purposes:

Purpose	Data Used
Account creation and management	Registration data, identity verification data
Processing deposits and withdrawals	Financial transaction data, identity verification data
Fraud prevention and security monitoring	Technical and device data, financial transaction data, gaming activity data
Responsible gaming monitoring	Gaming activity data, communications data
Customer support and dispute resolution	Communications data, gaming activity data, financial transaction data
Regulatory and AML compliance	Identity verification data, financial transaction data
Platform performance and improvement	Technical and device data, gaming activity data (aggregated)
Marketing communications (opt-in only)	Registration data, marketing preferences

bdt19 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, beyond the fraud detection and AML screening processes described above.

4Legal Basis for Processing

bdt19 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your bdt19 account — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and financial record-keeping duties.
• Legitimate interests: Processing carried out in the legitimate interests of bdt19, such as fraud detection, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5Data Sharing & Disclosure

bdt19 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your data with the following categories of third party only where strictly necessary:

5.1 Payment Service Providers

To process deposits and withdrawals, bdt19 shares necessary transaction data with Bangladeshi payment providers including bKash, Nagad, Rocket, Upay, and supported banking partners. Each payment provider is bound by their own privacy obligations and processes only the data required to complete your transaction.

5.2 Identity Verification Services

bdt19 may use third-party KYC and identity verification service providers to validate documents submitted during the account verification process. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.

5.3 Game Providers

Third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi operate games within the bdt19 platform. These providers may receive technical session data (such as a session token or player identifier) to deliver game content, but they do not receive your full personal profile.

5.4 Legal and Regulatory Authorities

bdt19 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal process, or to protect the rights, property, or safety of bdt19, its users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bdt19's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address registered to your account, and the acquiring entity will be bound by the commitments in this Privacy Policy.

6Payment Data

bdt19 treats financial data with the highest level of care. All deposit and withdrawal transactions are conducted over encrypted connections. bdt19 does not store your full bKash PIN, Nagad PIN, bank card number, or any other payment authentication credential on its servers.

Transaction records — including amounts, dates, payment method types, and reference numbers — are retained for a minimum of five years in accordance with financial record-keeping obligations. These records may be reviewed during fraud investigations, withdrawal processing, or regulatory audits.

If you believe that an unauthorised transaction has been made from your bdt19 account, you must notify our support team immediately at [email protected]. bdt19 will investigate the matter and work with the relevant payment provider to resolve the issue as quickly as possible.

7Data Retention

bdt19 retains personal data for as long as your account remains active and for a defined period thereafter, depending on the type of data involved:

Data Category	Retention Period
Account registration data	Duration of account + 5 years after closure
Identity verification documents (KYC)	Duration of account + 5 years after closure
Financial transaction records	Minimum 5 years from transaction date
Gaming activity history	Duration of account + 2 years after closure
Customer support correspondence	3 years from last interaction
Marketing preferences	Until consent is withdrawn or account is closed
Technical and device logs	90 days from collection (unless flagged for investigation)

After the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymised data is retained for analytical purposes, it cannot be used to identify you.

8Data Security

bdt19 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage of sensitive data fields, including hashed password storage using bcrypt or equivalent industry-standard algorithms.
• Strict internal access controls — personal data is accessible only to bdt19 staff and contractors who require it to perform their specific role.
• Regular security audits and vulnerability assessments conducted by independent third-party specialists.
• Automated fraud detection and suspicious activity monitoring systems operating in real time.
• Mandatory security training for all bdt19 staff who handle personal data.

While bdt19 takes all reasonable precautions, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your account login credentials confidential and for notifying us immediately if you suspect your account has been compromised.

In the event of a data breach that poses a risk to your rights and freedoms, bdt19 will notify affected users without undue delay via the email address registered to their account, and will take all necessary steps to contain and remediate the breach.

9Cookies & Tracking Technologies

bdt19 uses cookies and similar tracking technologies on our platform. A cookie is a small text file placed on your device by the bdt19 website when you visit. We use the following categories of cookies:

9.1 Essential Cookies

These cookies are strictly necessary for the platform to function correctly. They maintain your logged-in session, store your language and display preferences, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of essential cookies while continuing to use bdt19.

9.2 Analytical Cookies

bdt19 uses first-party analytical cookies to understand how players navigate the platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is collected in aggregated, anonymised form and is used solely to improve platform usability. bdt19 does not use Google Analytics or any other third-party analytics tool that shares data with external advertising networks.

9.3 Advertising and Third-Party Cookies

bdt19 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. No data about your bdt19 activity is shared with advertising platforms or social media companies via cookies.

9.4 Cookie Management

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from logging in and using the bdt19 platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10Your Rights

As a bdt19 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data that bdt19 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request that bdt19 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that bdt19 restrict how it processes your data — for example, while a dispute is being investigated.
• Right to Data Portability: Where technically feasible, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. bdt19 will assess whether our legitimate interests override your objection on a case-by-case basis.

bdt19 will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, and you will be notified of the extension and the reason for it.

11Children & Minors

The bdt19 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, that account will be immediately closed and all associated data will be deleted in accordance with our data retention procedures.

Parents and guardians who believe their child has registered on bdt19 should contact [email protected] immediately. We take such reports seriously and will act promptly to investigate and remediate any confirmed instance of underage access.

12Changes to This Privacy Policy

bdt19 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered users via the email address on file and display a prominent notice on the bdt19 platform for a minimum of 14 days following publication of the updated Policy.

The effective date at the top of this document will be updated whenever a new version is published. We encourage you to review this Policy periodically so that you remain informed about how your data is being handled. Your continued use of bdt19 after the effective date of any update constitutes acceptance of the revised Policy.

13Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt19 handles your personal data, please reach out through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" to ensure prompt routing to the correct team
• Response Time: All privacy-related enquiries are handled within 30 days of receipt, Bangladesh Standard Time (BST, UTC+6)
• Support Hours: Our team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays

We are committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response, you retain the right to escalate the matter through applicable legal channels in your jurisdiction.