bdt4 Privacy Policy — How We Handle Your Data

bdt4 (referred to in this policy as "we", "us" or "bdt4") operates the online gaming platform accessible at bdt4.ws. We take the privacy and security of our users' personal data very seriously, and this Privacy Policy sets out how we collect, use, store, share and protect your personal information in connection with your use of the bdt4 platform. This policy should be read alongside our Terms & Conditions, which govern the overall use of the bdt4 platform.

By accessing or using bdt4, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and processing of your personal data as described herein. If you do not agree with this policy, you must discontinue your use of the bdt4 platform. This policy may be updated periodically; continued use of the platform after an update constitutes acceptance of the revised policy.

bdt4 collects personal data that you provide directly when registering an account or using our services, as well as certain technical data collected automatically when you use the platform. The categories of data we collect include the following:

bdt4 uses the personal data we collect for the following purposes. We do not use your data for any purpose that is incompatible with the purposes set out here without first obtaining your explicit consent.

• To operate and maintain your bdt4 account, including processing deposits via bKash and Nagad, processing withdrawal requests, and maintaining accurate account records.
• To verify your identity and age in compliance with our eligibility requirements and to conduct KYC checks as required.
• To personalise your gaming experience, including presenting relevant game recommendations, applicable promotions and responsible gaming prompts based on your usage patterns.
• To detect and prevent fraud, money laundering, bonus abuse, multiple-account registrations and other prohibited conduct as defined in our Terms & Conditions.
• To communicate with you regarding your account, including security alerts, transaction confirmations, and responses to support enquiries submitted via our email address.
• To support responsible gaming monitoring, including tracking deposit patterns against any limits you have set, triggering session reminders, and processing self-exclusion requests.

bdt4 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: processing required to operate your account, process payments, verify identity and deliver the gaming services you have requested under our Terms & Conditions.
• Legitimate interests: fraud detection, security monitoring, platform improvement and responsible gaming compliance activities, where these interests are not overridden by your privacy rights.
• Consent: where you have explicitly agreed to receive promotional communications or where we seek your agreement for any processing not covered by the above bases.
• Legal obligation: where processing is required for us to comply with applicable law, including anti-money-laundering obligations, age verification requirements and requests from competent authorities.

bdt4 does not sell your personal data to third parties. We may share your personal data with third parties only in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay and local banks receive the minimum data necessary to process your deposit or withdrawal transactions. These providers operate under their own privacy policies and are subject to applicable data protection obligations.
• Game technology providers: Providers such as Evolution Gaming, Pragmatic Play, Spribe and others that supply game content to bdt4 may receive session identifiers and anonymised game-activity data necessary to operate their games. They do not receive your full personal profile.
• Legal and regulatory disclosure: Where required by applicable law, court order or a request from a competent authority, bdt4 may disclose personal data to the extent strictly necessary to comply with that obligation.

Any third party with whom bdt4 shares personal data is contractually required to handle that data in accordance with applicable data protection principles and to use it solely for the purpose for which it was shared. bdt4 does not transfer personal data to parties in jurisdictions without adequate data protection standards without putting appropriate safeguards in place.

bdt4 recognises that payment data — particularly mobile wallet numbers associated with bKash and Nagad — is sensitive personal data for users in Bangladesh. We apply the following specific protections to payment data: wallet numbers are stored in masked form (for example, only the last four digits are held in a readable state in our records); full transaction credentials are never stored in plaintext; and payment records are subject to restricted access controls within the bdt4 platform, accessible only by authorised members of the payments and compliance teams on a need-to-know basis.

When you make a deposit via bKash or Nagad, the transaction is initiated through bdt4's payment interface but completed via the relevant mobile financial service provider's own system. bdt4 receives a transaction confirmation and reference number from the payment provider; we do not receive or store your bKash or Nagad PIN, or any equivalent authentication credential. If you have concerns about how bKash or Nagad handles your data in connection with transactions made on bdt4, please refer to the respective privacy policies of those services.

bdt4 retains your personal data for as long as your account is active and for a period thereafter as required to comply with applicable legal and regulatory obligations. Specifically: account registration data is retained for the duration of your active account plus a minimum of five years after account closure; transaction records are retained for a minimum of five years to comply with anti-money-laundering record-keeping requirements; gameplay and session data is retained for a period of two years from the date of the relevant session; and support and communication records are retained for two years from the date of the last relevant interaction.

When data is no longer required for the purposes for which it was collected, bdt4 will securely delete or anonymise it. If you close your bdt4 account, your personal data will be marked for deletion from active systems, but retained in secure archive storage for the minimum regulatory period before permanent deletion. You may contact bdt4 support to request information about the retention period applicable to your specific data.

bdt4 uses cookies and similar technologies to operate the platform effectively. We use only the following categories of cookies:

• Essential cookies: strictly necessary for the platform to function, including session management cookies that keep you logged into your account and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing your ability to use bdt4.
• Functional cookies: remember your platform preferences such as language settings and display options, so you do not have to reset them each time you visit.
• Analytics cookies: anonymised, aggregated usage data that helps bdt4 understand which platform features are most used, identify technical issues and improve the overall user experience. No personally identifiable data is included in analytics reports.

bdt4 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Most mobile browsers allow you to clear cookies from your device settings. Clearing essential cookies will log you out of your bdt4 account and may affect platform functionality until you log back in.

As a user of the bdt4 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the bdt4 support team using the email address displayed in the footer of this site. bdt4 will respond to all rights requests within a reasonable time and will not charge a fee for handling your request in ordinary circumstances.

• Right of access: you may request a copy of the personal data that bdt4 holds about you, along with information about how it is used.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: in certain circumstances you may request deletion of your personal data. Note that we may be unable to delete data that we are legally required to retain, such as transaction records subject to anti-money-laundering retention obligations.
• Right to object: you may object to processing of your personal data carried out on the basis of our legitimate interests, including direct marketing communications if applicable.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

bdt4 will make every reasonable effort to respond to rights requests promptly. In some cases, particularly for erasure or portability requests involving large volumes of data, we may need up to 30 days to process your request fully. We will keep you informed of our progress. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority.

bdt4 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and our platform; secure server infrastructure with access controls and monitoring; password hashing using industry-standard algorithms; and restricted internal access to personal data on a role-based, need-to-know basis.

While bdt4 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, bdt4 will notify you without undue delay and will take all available steps to contain the incident and mitigate its impact. If you believe your bdt4 account has been compromised, please contact support immediately using the email address in the footer.

bdt4 operates a strict minimum age policy of 21 years. The bdt4 platform is not directed at, and does not knowingly collect personal data from, persons under the age of 21. If bdt4 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a person under 21 has registered an account on bdt4 or has accessed the platform, please contact us immediately using the support email address displayed in the footer. We encourage parents and guardians to use device parental controls to prevent minors from accessing online gaming platforms.

bdt4 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, we will take reasonable steps to inform registered users, which may include displaying a notice on the platform. The date of the most recent update is shown at the top of this page. Your continued use of the bdt4 platform after any update to this policy constitutes your acceptance of the revised policy. We recommend reviewing this page periodically to stay informed about how we protect your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to raise a privacy-related concern, please contact the bdt4 support team using the email address displayed in the footer of every page on this site. When submitting a privacy enquiry, please include your registered mobile number and a description of your request so that we can locate your records and respond efficiently. The bdt4 support team is available around the clock and will aim to acknowledge your enquiry promptly. Please note that bdt4 support will never ask for your account password by email.