Privacy Policy

Introduction and Scope

bdtil ("we", "us", "our") operates the website at https://bdtil.org and associated services. We are committed to processing personal data responsibly and transparently. This Privacy Policy applies to all users who visit, register, or otherwise interact with the bdtil Platform, including users who access the Platform via mobile devices using bKash, Nagad, Rocket, or other local payment services in Bangladesh.

By creating a bdtil account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how bdtil processes personal data, you should not create an account or use the Platform. This Policy should be read alongside our Terms and Conditions, which govern the overall use of the bdtil Platform.

1. Information We Collect

bdtil collects personal data in two primary ways: information you provide directly when using the Platform, and information collected automatically through your use of the Platform. The categories of personal data we collect include the following.

• 1.1Identity and contact information: full name, date of birth, residential address, email address, and mobile phone number as provided during account registration. This information is used for account management, KYC verification, and communication purposes.
• 1.2Financial information: details of payment methods used to make deposits and withdrawals on the Platform, including mobile wallet identifiers (bKash number, Nagad number, Rocket number), bank account references, and transaction records. We do not store full card numbers — payment card data is processed by PCI-DSS compliant third-party payment processors.
• 1.3Identity verification documents: copies of government-issued photo identification (such as a National ID card or passport), proof of address documents, and any additional documentation submitted as part of KYC verification. These documents are securely stored and processed in accordance with applicable data protection obligations.
• 1.4Usage and behavioural data: information about how you interact with the Platform, including pages visited, games played, bets placed, session duration, device type, operating system, browser type, IP address, approximate geographic location (derived from IP), and referral source. This data is collected automatically using standard web analytics technologies.
• 1.5Communications data: records of any communications you send to bdtil, including support tickets, emails, live chat transcripts, and feedback submissions. We retain these records for quality assurance, dispute resolution, and compliance purposes.

2. How We Use Your Information

bdtil uses the personal data it collects for specific, legitimate purposes only. We do not sell your personal data to third parties. The lawful bases on which we process personal data include the performance of a contract, compliance with legal obligations, legitimate interests, and — where applicable — your consent. The specific purposes for which we use your data are set out below.

• 2.1Account management and service delivery: to create and manage your bdtil account, verify your identity and age, process your deposits and withdrawals via bKash, Nagad, Rocket, and other payment methods, and deliver the games and betting services you have requested.
• 2.2Legal and regulatory compliance: to meet our obligations under applicable law, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, fraud prevention duties, and responsible gaming requirements. We may be required to share data with regulatory authorities as part of these obligations.
• 2.3Security and fraud prevention: to monitor Platform usage for suspicious activity, detect and prevent unauthorised access to accounts, investigate potential breaches of our Terms and Conditions, and maintain the integrity of the games and betting markets offered on the Platform.
• 2.4Customer support: to respond to your queries, complaints, and requests submitted via email or our support channels. Support communications are retained for a minimum of 12 months for quality assurance and dispute resolution purposes.
• 2.5Marketing and promotions (with consent): to send you information about bdtil bonuses, promotions, and new features where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected] or updating your account communication preferences.

Six Ways bdtil Protects and Respects Your Data

bdtil applies these six data protection principles to every aspect of how player information is handled on the Platform.

3. Sharing Your Information

bdtil does not sell personal data. We may share your personal data with third parties only in the limited circumstances described below. All third parties with whom we share data are required to handle it securely and in accordance with applicable data protection obligations.

• 3.1Payment processors and mobile wallet operators: we share the minimum necessary financial data with payment service providers (including bKash, Nagad, Rocket, and Upay) to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data processing activities.
• 3.2Identity verification providers: we use third-party KYC service providers to verify the identity and age of registered players. These providers may process copies of your identification documents on our behalf. They are contractually bound to process data solely for the purposes of identity verification and to delete or return documents following verification.
• 3.3Legal and regulatory authorities: we may be required by law to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies. We will comply with any valid legal obligation to disclose data and, where legally permitted to do so, will notify affected players of such disclosures.
• 3.4Service providers and technology partners: we use third-party technology providers for hosting, analytics, customer support software, and fraud detection. These providers act as data processors on our behalf and are contractually bound to process personal data only on our documented instructions and to maintain appropriate security measures.

4. Cookies and Tracking Technologies

bdtil uses cookies and similar tracking technologies to operate the Platform, improve user experience, and analyse Platform usage. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain personally identifiable information on their own, but they may be linked to personal data we hold about you.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform — for example, session cookies are essential for maintaining your logged-in state and cannot be disabled without disrupting your ability to use the Platform.

• 4.1Essential cookies: required for the Platform to function. These include session management cookies, security tokens, and cookies that remember your language and currency preferences. These cookies cannot be disabled without breaking core Platform functionality.
• 4.2Analytics cookies: used to collect aggregated, anonymised data about how users interact with the Platform. This information helps us understand which pages are most visited, how players navigate between games, and where technical issues occur. Analytics data is used to improve the Platform experience for all players.
• 4.3Preference cookies: used to remember choices you make on the Platform, such as your preferred language, notification settings, and display preferences. These cookies improve your experience by reducing the need to re-enter preferences each time you visit.

5. How Long We Keep Your Data

bdtil retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention periods apply: account data is retained for the duration of your account and for a minimum of 5 years following account closure; financial transaction records are retained for a minimum of 7 years in accordance with applicable financial regulations; KYC documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.

Where data is no longer needed and there is no legal obligation to retain it, bdtil will securely delete or anonymise the data so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

6. How We Protect Your Data

bdtil implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL encryption for all data in transit, restricted access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments, secure data storage on hardened servers, and mandatory staff training on data protection obligations. While bdtil takes all reasonable steps to protect your data, no security system is entirely impenetrable. In the unlikely event of a data breach that poses a risk to your rights, bdtil will notify affected players promptly and take all appropriate remedial action.

7. Your Data Rights in Detail

As a bdtil user, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our Data Protection contact at [email protected]. We will respond to all valid requests within 30 days. There is no charge for exercising these rights.

• 5.1Right of access: you may request a copy of all personal data bdtil holds about you (sometimes called a Subject Access Request). We will provide this in a commonly used electronic format within 30 days of receiving your request, subject to identity verification.
• 5.2Right to rectification: if any personal data bdtil holds about you is inaccurate or incomplete, you have the right to request that it be corrected. We will action valid rectification requests within 30 days.
• 5.3Right to erasure: you may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary, where you withdraw consent, or where the data has been unlawfully processed. Certain legal obligations may require us to retain some data even following an erasure request.
• 5.4Right to restrict processing: you may request that bdtil restrict the processing of your personal data in certain situations — for example, while a rectification request is being assessed, or where you have objected to processing and that objection is under review.
• 5.5Right to object: you have the right to object to processing of your personal data based on bdtil's legitimate interests, including any direct marketing based on that ground. Where you object to direct marketing, processing for that purpose will stop immediately.

8. Protection of Minors and Under-21 Players

The bdtil Platform is strictly for adults aged 21 and above. bdtil does not knowingly collect personal data from persons under the age of 21. As part of our account registration process, all players are required to confirm that they are aged 21 or over and to submit to identity and age verification. If bdtil discovers or is notified that a player is under 21, the account will be immediately closed, all data associated with that account will be deleted promptly (subject to any mandatory legal retention obligations), and any funds held in the account will be forfeited.

9. Third-Party Websites and Services

The bdtil Platform may contain references to third-party payment services such as bKash, Nagad, and Rocket. These services operate under their own independent privacy policies and terms of use. bdtil is not responsible for the privacy practices or content of any third-party services. When you use a third-party payment provider to deposit or withdraw funds, that provider's own privacy policy governs the processing of your data by them. We recommend reviewing the privacy policy of any third-party service you use in connection with your bdtil account.

10. Changes to This Privacy Policy

bdtil may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes to this Policy, we will publish the updated version on the Platform and, where it is reasonably practicable to do so, notify registered users via email. The date at the top of this Policy indicates when it was last updated.

Your continued use of the bdtil Platform following any update to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the changes, you must stop using the Platform and may close your account by contacting [email protected].

11. Data Protection Contact

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bdtil processes your personal data, please contact our support team. All data-related requests should be submitted in writing with your registered username and a clear description of your request.