playbdt Privacy Policy

1 Information We Collect

playbdt collects personal data through a number of channels — directly from you when you register and use the Platform, automatically through technical systems when you access the Platform, and from trusted third parties who assist us in delivering our services. We collect only the data that is necessary for the stated purposes described in this Policy. Below is a detailed breakdown of the categories of data we collect.

1.1 Registration and Account Data

When you create a playbdt account, we ask you to provide certain mandatory information to set up and verify your identity. This includes:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the 18+ age requirement for using the Platform.
• Residential address — including your district, division, and full postal address in Bangladesh (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or elsewhere).
• Email address — used for account communications, security alerts, and promotional messages (where you have opted in).
• Mobile phone number — used for two-factor authentication (2FA) and, where applicable, to link your bKash, Nagad, or Rocket mobile banking account.
• Username and password — your chosen login credentials. We store passwords in hashed, salted form and never in plain text.

1.2 Identity Verification (KYC) Documents

To comply with anti-money-laundering (AML) obligations and to confirm your eligibility to use the Platform, we collect and process the following documents as part of the Know Your Customer (KYC) process:

• A copy of your National Identity Card (NID), passport, or driving licence issued in Bangladesh.
• A proof-of-address document such as a utility bill, bank statement, or official government correspondence dated within the last three months.
• Confirmation of your payment method ownership — for example, a screenshot of your bKash or Nagad account showing your name and registered mobile number.

KYC documents are handled with the highest level of care and are stored in an encrypted, access-controlled environment. Document data is retained only for as long as required by applicable legal and regulatory obligations, and is never used for any purpose other than identity verification and fraud prevention.

1.3 Financial Transaction Data

When you make deposits or withdrawals on the Platform, we collect and process transactional data including:

• The payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).
• The mobile number or card number (partially masked) associated with the payment method.
• Transaction amounts in Bangladeshi Taka (BDT), transaction reference numbers, and timestamps.
• Deposit and withdrawal history associated with your account.

We do not store full card numbers on our servers. Card payments are processed via PCI-DSS compliant third-party payment processors. bKash, Nagad, Rocket, and Upay transactions are handled through the respective providers' APIs, and we retain only the confirmation data necessary for reconciliation and dispute resolution.

1.4 Gameplay and Betting Data

We record detailed logs of your activity on the Platform, including:

• All bets placed, game rounds played, and sports markets accessed — including cricket (BPL, IPL, T20), slots, live casino, and crash games.
• Bet amounts, odds accepted, game outcomes, and resulting account balance changes.
• Session duration and active gameplay periods.
• Responsible Gaming tool activations (deposit limits, session reminders, self-exclusion requests) and their timestamps.

This data is used to operate the Platform, settle bets, detect fraud and match-fixing, enforce Responsible Gaming limits, and comply with our audit obligations. It also enables us to personalise your experience — for example, surfacing BPL cricket markets or Pragmatic Play slots you have enjoyed previously.

1.5 Technical and Device Data

Each time you access the Platform, our servers automatically collect certain technical information from your device and browser:

• IP address and approximate geographic location (at the city or division level — e.g., Dhaka, Chittagong).
• Device type, operating system version, and browser name and version.
• Referring URL (the page you visited before arriving at playbdt.ws).
• Pages viewed, links clicked, and on-Platform navigation path.
• Session timestamps, login and logout times, and error logs.

1.6 Communications Data

If you contact our support team via email ([email protected]) or live chat, we retain a record of that correspondence including your name, email address, and the full content of the communication. This allows us to provide coherent, continuous support across multiple interactions and to maintain a record for dispute resolution purposes.

2 How We Use Your Data

playbdt processes your personal data only where we have a lawful basis for doing so. The principal bases we rely on are: (a) the performance of the contract between you and playbdt (i.e., operating your account and delivering the services you signed up for); (b) compliance with legal obligations (including KYC, AML, and record-keeping requirements); (c) our legitimate interests in preventing fraud, securing the Platform, and improving our services; and (d) your consent, where you have explicitly opted in to a specific processing activity such as receiving promotional communications.

2.1 Service Delivery

The primary use of your data is to provide and operate the playbdt Platform. This includes processing your registration, verifying your identity, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, calculating and crediting winnings, applying Bonus Funds and Wagering Requirements to your account, and enforcing Responsible Gaming limits that you have set.

2.2 Security and Fraud Prevention

We use technical and account data to detect and prevent fraudulent activity, money laundering, underage gambling, and abuse of promotional offers. This includes automated systems that flag unusual login patterns, multiple account creation from the same device or IP address, and betting patterns consistent with match-fixing or bonus abuse. Where our systems identify a risk, a manual review is triggered. We may share relevant data with payment providers (bKash, Nagad) and relevant authorities where we are legally required to do so.

2.3 Legal and Regulatory Compliance

playbdt is obligated to retain certain records for compliance purposes. This includes transaction records, KYC documentation, and account activity logs. We retain this data for the minimum period required and process it solely for the purposes of satisfying those obligations. We do not use compliance records for marketing or personalisation.

2.4 Platform Improvement and Analytics

Aggregated, anonymised technical and gameplay data is used to analyse Platform performance, identify popular games (such as Pragmatic Play's Gates of Olympus or Spribe's Aviator), assess the effectiveness of promotions, and improve the overall user experience. This analytics processing does not involve identifying individual players and is conducted on an aggregated basis.

2.5 Promotional Communications

If you have opted in to receiving marketing communications from playbdt, we may use your email address and mobile number to send you information about promotions, bonuses, BPL season offers, Eid and Pohela Boishakh specials, and new game launches. You may withdraw your consent to receive marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

3 Data Sharing and Disclosure

playbdt does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the specific, limited circumstances described below, and always with appropriate contractual and technical safeguards in place.

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. The data shared is limited to the transaction amount, your account reference, and confirmation data required to complete the transaction. Each payment provider operates under their own privacy policy, which we encourage you to review independently.

3.2 Game Content Providers

Games on the Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. To facilitate gameplay, a session token and anonymised player identifier are passed to the game server. Your full name, email, phone number, and financial data are not shared with game providers. Game providers retain aggregated round-level data for their own audit and certification purposes.

3.3 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in Bangladesh where we are legally compelled to do so by court order, regulatory direction, or other mandatory legal process. We will notify you of such disclosure where we are legally permitted to do so.

3.4 Service Providers and Sub-Processors

playbdt engages a limited number of trusted third-party service providers who process data on our behalf under strict data processing agreements. These include cloud infrastructure providers, email delivery services, and anti-fraud analytics platforms. All sub-processors are contractually required to handle your data only in accordance with our instructions and in compliance with applicable data protection standards.

3.5 Business Transfers

In the event that playbdt undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is processed as a result, with reasonable advance notice provided by email.

4 Cookies and Tracking Technologies

The playbdt Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep you logged in during your session, and to help us understand how Players interact with the site so we can improve it over time. Below is a plain-English explanation of each cookie category we use.

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off without breaking core features. They include your session token (which keeps you logged in while you navigate between pages), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies (which route your requests to the correct server). No personal data beyond a session identifier is stored in these cookies, and they expire at the end of your browser session or within 24 hours.

4.2 Functional Cookies

Functional cookies remember your preferences to improve your experience — for example, your preferred language (English), your last-viewed game category (Cricket, Slots, Live Casino), and whether you have acknowledged the 18+ responsible gaming notice. These cookies persist for up to 30 days. They do not track activity across other websites.

4.3 Analytics Cookies

We use anonymised, first-party analytics to understand aggregate Platform usage — which pages are most visited, how long Players spend on each section, and where users exit the Platform. This data is collected in aggregated, non-identifiable form and is used solely to improve Platform performance and content. We do not use third-party advertising networks or cross-site tracking pixels.

4.4 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies stored by individual sites. Please note that disabling strictly necessary cookies will prevent you from logging into your playbdt account and using the Platform. Disabling functional and analytics cookies will not affect your ability to access the Platform but may reduce the quality of your experience. For guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

5 Data Security and Storage

5.1 Technical Security Measures

playbdt implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS/SSL Encryption: All data transmitted between your device and playbdt.ws is encrypted in transit using TLS 1.2 or higher. Our site is served exclusively over HTTPS.
• Encryption at Rest: Sensitive data fields — including KYC document scans and partial payment method identifiers — are encrypted at rest using AES-256 encryption in our database layer.
• Password Hashing: User passwords are never stored in plain text. We use a modern, salted hashing algorithm (bcrypt) to store password credentials so that even in the event of a data breach, passwords cannot be recovered in their original form.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. playbdt staff members are granted access only to the data required to perform their specific job functions. All internal access is logged and audited.
• Two-Factor Authentication (2FA): 2FA is available on all playbdt accounts and is strongly encouraged for all Players. Internal administrative systems require mandatory 2FA for all staff.

5.2 Data Retention Periods

We retain your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. The general retention schedule is as follows:

• Account data and KYC documents: Retained for the duration of your account plus 5 years following account closure, to meet AML record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history): Retained for 7 years from the date of each transaction, consistent with standard financial record-keeping practice.
• Support communications: Retained for 2 years from the date of the last communication in a thread, or longer if the communication is relevant to an open dispute.
• Technical logs (IP addresses, session logs): Retained for 90 days for security and fraud analysis, after which they are anonymised or deleted.

5.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, playbdt will take immediate steps to contain and assess the breach. We will notify affected Players by email to their registered address without undue delay, describing the nature of the breach, the categories of data affected, and the steps we are taking to mitigate the impact. We will also report the breach to any applicable regulatory authorities as required.

6 Your Privacy Rights

As a user of the playbdt Platform, you have a number of rights with respect to your personal data. playbdt is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 14 calendar days of receiving your request.

6.1 Right of Access

You have the right to request a copy of the personal data that playbdt holds about you, along with information about how that data is being processed. We will provide this data in a structured, commonly used format. Your first data access request per calendar year is provided free of charge. For repeat requests within the same year, a reasonable administrative fee may apply.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information (such as your email address or phone number) directly through your account settings. For changes to core identity data — such as your registered name or date of birth — you will need to submit supporting documentation for verification before the change is applied.

6.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, if you close your account and the data is no longer needed for the purposes for which it was collected. However, this right is not absolute. playbdt is required by law to retain certain categories of data (including KYC documents and financial transaction records) for specified periods even after account closure. We will clearly communicate what data can be deleted immediately and what must be retained for legal compliance.

6.4 Right to Restrict Processing

You have the right to request that playbdt restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is under review. During a restriction period, we will continue to store your data but will not process it for any other purpose without your consent, except where required by law.

6.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your data in a portable, machine-readable format (such as JSON or CSV) and to request that it be transmitted to another service provider where technically feasible.

6.6 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications from playbdt, simply email [email protected] with the subject line "Unsubscribe from Marketing". We will action your request within 5 business days and you will not receive further promotional communications after that point.

7 Children and Underage Users

The playbdt Platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18, and we do not permit persons under 18 to create an account or use any feature of the Platform. Age verification is a mandatory step in our KYC process, and all accounts are subject to verification checks at any point during their lifetime.

If playbdt discovers or is informed that a person under the age of 18 has created an account on the Platform, we will immediately close that account, return any deposited funds to the payment source used for the original deposit, void all bets placed and winnings generated during the period of underage use, and delete the personal data associated with the account as soon as legally permissible. No winnings or bonuses will be paid out where the account holder is found to be under 18.

If you are a parent or guardian and you believe that a minor in your care has registered on the playbdt Platform, please contact us immediately at [email protected] so that we can take prompt action. We take our responsibility to prevent underage gambling extremely seriously and cooperate fully with families and relevant authorities in these cases.

8 Changes to This Privacy Policy

playbdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes — meaning changes that significantly affect how we use your data or your rights over it — we will notify all registered Players by email to their registered address at least 14 days before the changes come into effect.

For minor or non-material changes (such as clarifications of wording, correction of typographical errors, or updates to contact details), we will update the "Last Updated" date at the top of this Policy without direct notification. You are encouraged to review this Policy periodically to stay informed of how we protect your information.

Your continued use of the Platform after any updated Policy comes into effect constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must stop using the Platform and contact [email protected] to request account closure and data handling in accordance with your rights under Section 6 above.

All previous versions of this Privacy Policy are archived internally and are available upon request. If you wish to review a prior version of this Policy, please contact [email protected] with the date range you are interested in and we will provide the relevant archived version.