bdt90 Privacy Policy

When you interact with the bdt90 platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain personal data. The categories of data we collect, and the circumstances in which we collect them, are set out below.

We collect personal data directly from you when you complete our registration form, submit identity documents for KYC verification, make a payment, or contact our support team. We also collect certain technical and usage data automatically through cookies, server logs, and analytics tools when you access the bdt90 platform.

We do not collect data from children. The bdt90 platform is strictly for individuals aged 18 and above. If we become aware that personal data has been collected from a person under the age of 18, we will delete that data immediately and close the associated account.

bdt90 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances set out below, and only to the minimum extent necessary to fulfil the relevant purpose.

• Payment service providers: We share the financial data necessary to process your transactions with our payment partners including bKash, Nagad, Rocket, Upay, and card network operators Visa and Mastercard. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification services: We may share your identity documents with reputable third-party KYC and age verification services in order to fulfil our legal obligations. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Game software providers: Our casino games are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data such as your session ID to operate their games correctly. They do not receive your full identity or payment details.
• Analytics providers: We use anonymised, aggregated analytics data to understand platform usage patterns. No personally identifiable information is shared with analytics providers.
• Legal and regulatory authorities: We are legally required to disclose personal data to relevant authorities where we receive a valid legal request, court order, or where we have a legal obligation to report suspicious financial activity under applicable anti-money laundering laws. We will notify you of such disclosures where we are legally permitted to do so.
• Business transfers: In the event that bdt90 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

bdt90 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

• SSL/TLS Encryption: All data transmitted between your browser and bdt90.club is encrypted using TLS 1.2 or higher, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Sensitive personal data including identity documents and financial records is stored using strong encryption at rest. Access to stored data is restricted to authorised personnel on a strictly need-to-know basis.
• Access controls: Internal access to user data is controlled through role-based permissions. All staff who access personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious activity. Automated intrusion detection systems alert our security team to anomalous access patterns in real time.
• Password security: Account passwords are stored using one-way cryptographic hashing. bdt90 staff cannot retrieve your password in plain text. If you forget your password, a secure reset process is used to issue a new one.
• Regular security reviews: We conduct periodic internal security reviews and assessments of our data handling practices to identify and remediate vulnerabilities proactively.

In the unlikely event of a data breach that poses a significant risk to your rights and interests, bdt90 will notify affected users without undue delay and will take all necessary steps to contain the breach and minimise harm.

As a bdt90 account holder, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 5 business days and will aim to resolve it within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data bdt90 holds about you, together with information about how it is being used. We will provide this in a clear, structured format.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. You can update basic contact details directly within your account settings.
• Right to erasure: You have the right to request that we delete your personal data. This right is subject to our legal obligations — for example, we are required by law to retain transaction records for a minimum of five years and cannot erase them on request during that period.
• Right to restrict processing: You have the right to ask us to pause the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: You have the right to receive the personal data you have provided to us in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where we process your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for fraud prevention or responsible gaming monitoring. We will assess your objection and either cease the processing or explain why a compelling legitimate interest overrides your objection.