bdt98 Privacy Policy

1 Introduction

bdt98 is an online casino and sports betting platform operating at bdt98.io, serving players across Bangladesh. As a platform that handles financial transactions, identity documents, and gameplay data, bdt98 recognises that responsible and transparent data management is fundamental to maintaining the trust of our player community.

This Privacy Policy applies to all personal data collected through the bdt98 website, mobile browser interface, customer support channels, and any other touchpoint through which you interact with the bdt98 platform. It applies to registered account holders, individuals in the process of registering, and visitors who browse the platform without registering.

By using bdt98, you confirm that you are aged 21 or above and that you consent to the data practices described in this policy. If you do not agree with any part of this policy, you should discontinue use of the bdt98 platform immediately.

This policy is incorporated by reference into the bdt98 Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to matters of account conduct, and this Privacy Policy shall prevail with respect to matters of personal data handling.

2 Data We Collect

bdt98 collects personal data in several categories depending on how you interact with the platform. The table below provides a comprehensive overview of each data category, its source, and why it is collected.

3 How We Use Your Data

bdt98 uses the personal data collected from you for the following specific purposes only. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

• Account Registration and Management: Creating, maintaining, and securing your bdt98 account; verifying your identity and age (21+); and enabling access to all platform features.
• Payment Processing: Facilitating BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank.
• KYC and Fraud Prevention: Verifying the authenticity of identity documents; detecting and investigating suspicious account activity, duplicate registrations, money laundering attempts, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify potential signs of problem gambling; enforcing deposit limits, session time limits, cooling-off periods, and self-exclusion requests set by players.
• Customer Support: Responding to queries, complaints, and disputes submitted via email at [email protected]; maintaining records of support interactions for quality assurance and dispute resolution.
• Platform Security and Performance: Detecting and mitigating technical threats including unauthorised access attempts, distributed denial-of-service attacks, and bot activity; improving platform reliability and speed.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal promotions (such as Eid, Pohela Boishakh, or BPL-related offers) exclusively to players who have opted in to marketing communications. Players can opt out at any time.
• Legal and Regulatory Obligations: Retaining transaction records and identity documents for the periods required by applicable law; responding to lawful requests from competent authorities.

bdt98 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players, except where such processing is necessary for fraud prevention and is subject to appropriate safeguards.

4 Legal Basis for Processing

bdt98 processes personal data only where a valid legal basis exists. The following legal bases apply to the processing activities described in this policy:

• Contractual Necessity: Processing is necessary to fulfil the contract between bdt98 and the player, as governed by the Terms & Conditions. This includes account creation, payment processing, and gameplay activity management.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including identity verification, financial record-keeping, and cooperation with lawful authority requests.
• Legitimate Interests: Processing is necessary for the legitimate interests of bdt98, including platform security, fraud prevention, responsible gaming monitoring, and service improvement — provided such interests are not overridden by the player's data protection rights.
• Consent: For marketing communications, bdt98 relies on the explicit consent provided by the player at registration or via account settings. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

bdt98 does not sell, rent, or disclose your personal data to unaffiliated third parties for their own commercial purposes. Data is shared only in the following limited circumstances:

• Payment Service Providers: Transaction data (including mobile wallet identifiers and bank account references) is shared with bKash, Nagad, Rocket, Upay, and affiliated banking partners solely for the purpose of processing your deposit and withdrawal requests in BDT.
• Game Content Providers: Gameplay session data may be shared with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of game delivery, RNG certification, and technical support. These providers operate under their own data processing agreements and are contractually prohibited from using player data for purposes beyond game delivery.
• Identity Verification Partners: KYC documents may be processed by specialist identity verification service providers acting as data processors on behalf of bdt98. These providers operate under strict confidentiality agreements and are not permitted to retain or use your documents independently.
• Fraud Prevention and Security Partners: Technical data (including IP addresses and device identifiers) may be shared with cybersecurity and fraud prevention partners who assist bdt98 in identifying and blocking malicious activity on the platform.
• Legal and Regulatory Authorities: bdt98 will disclose personal data to competent legal authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful authority request.

6 Cookies & Tracking Technologies

bdt98 uses cookies and similar tracking technologies on the bdt98.io website to provide a functional, secure, and personalised platform experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable user authentication, session management, and security features. They cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymous statistical data about how players interact with the bdt98 platform — including pages visited, session duration, and error occurrences. This data is used solely to improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so that they persist across sessions.
• Marketing Cookies: With your explicit consent, bdt98 may use cookies to identify returning players and deliver relevant promotional content. Marketing cookies are only activated where the player has opted in to marketing communications.

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may prevent you from accessing certain platform features, including your bdt98 account. Disabling marketing cookies will not affect your ability to play games or make transactions.

7 Data Retention

bdt98 retains personal data only for as long as is necessary for the purposes outlined in this policy, or as required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data (such as statistical gameplay summaries with no personal identifiers) may be retained indefinitely for analytical purposes.

8 Data Security

bdt98 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between players and the bdt98 platform is encrypted using SSL/TLS protocols, preventing interception of data in transit.
• Encrypted Data Storage: Personal data stored on bdt98 servers — including identity documents and financial transaction records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bdt98's internal systems is restricted on a strict need-to-know basis. Personnel with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection and Monitoring: bdt98 employs continuous network monitoring and intrusion detection systems that flag and respond to anomalous access patterns in real time.
• Secure Payment Processing: All deposit and withdrawal transactions are processed through bKash, Nagad, Rocket, Upay, and banking partners that operate their own certified security infrastructure. bdt98 does not store full payment credentials on its own servers.
• Regular Security Audits: The bdt98 platform undergoes periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited.

9 Your Data Rights

As a bdt98 account holder, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact the bdt98 support team at [email protected] with a clear description of your request. bdt98 will respond within 30 days of receipt.

• Right of Access: You may request a copy of the personal data bdt98 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by bdt98 be corrected or updated. Some corrections may require re-submission of identity documents for KYC purposes.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. This right is subject to bdt98's legal obligation to retain certain data categories (see Section 7).
• Right to Restriction: You may request that bdt98 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to bdt98 for the purpose of transferring it to another service provider, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. bdt98 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children & Minors

The bdt98 platform is strictly for adults aged 21 years and above. bdt98 does not knowingly collect personal data from individuals under the age of 21, and the platform's registration process includes mandatory age verification to enforce this restriction.

If bdt98 discovers or is notified that personal data has been collected from a person under 21 years of age, the following actions will be taken immediately:

• The associated account will be suspended pending investigation;
• Any Real Money Funds in the account will be held pending verification of the source of funds;
• Personal data associated with the account will be deleted upon confirmation that the account holder is under 21, except where retention is required for fraud investigation purposes;
• The incident will be documented and investigated in accordance with bdt98's internal compliance procedures.

11 Third-Party Links

The bdt98 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While bdt98 selects partners with care and requires data processing agreements where applicable, bdt98 is not responsible for the privacy practices of third-party organisations.

Each third-party service provider operates under its own privacy policy and data protection framework. bdt98 recommends that players review the privacy policies of payment providers they use for deposits and withdrawals, particularly with respect to how mobile money transaction data is handled by those providers.

12 Policy Amendments

bdt98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform features. Where changes are material — such as the introduction of a new data processing purpose or a change in third-party sharing arrangements — bdt98 will notify registered players via a notice displayed on the platform or by email to the address held on the player's account.

The effective date shown at the top of this document indicates when the current version of this policy came into force. Continued use of the bdt98 platform after the effective date of any amendment constitutes acceptance of the revised policy. If you do not accept the revised policy, you should cease using the platform and contact [email protected] to request account closure.

bdt98 recommends that players review this Privacy Policy periodically to stay informed of how their personal data is being handled. Previous versions of this policy are available upon request by contacting the support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bdt98 holds about you, please contact the bdt98 data support team using the details below. All communications should be in English.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 30 days for data rights requests; within 48 hours for general privacy queries (Bangladesh Standard Time, UTC+6)
• Support Hours: 24 hours a day, 7 days a week
• Platform: bdt98.io