bdt66 Privacy Policy
Your Data, Your Rights

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") describes how bdt66 (referred to as "bdt66", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals who access or use the bdt66 online sports betting and casino platform at bdt66.io (the "Platform").

This Policy applies to all users of the Platform, including registered account holders, visitors who browse the Platform without registering, and any individuals who contact bdt66 via email or other support channels. By accessing the Platform or registering an account, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the bdt66 Terms & Conditions, which are available at bdt66.io/terms-conditions and are incorporated into this Policy by reference. In the event of any conflict between this Policy and the Terms & Conditions in respect of data privacy matters, this Policy shall prevail.

2. Who We Are

bdt66 is an online sports betting and casino platform serving players in the Bangladesh market. Our platform offers a comprehensive suite of gambling and entertainment products including cricket betting, live casino games, slot machines, virtual sports, and crash-style games. The bdt66 brand is built around trust, fair play, and a commitment to responsible gambling for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all regions of Bangladesh.

For all data privacy enquiries, the primary point of contact is our support team. You may reach us at [email protected]. We aim to respond to all privacy-related correspondence within five business days.

3. Data We Collect

bdt66 collects personal data in the following categories. The specific data points collected depend on the nature of your interaction with the Platform.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, National Identity Card (NID) number, passport number	Account registration, KYC verification, age verification, fraud prevention
Contact Data	Email address, mobile phone number, residential address in Bangladesh	Account communications, support, security alerts, promotional messaging (where opted in)
Financial Data	bKash/Nagad/Rocket/Upay wallet numbers, bank account details, transaction history, deposit and withdrawal records	Payment processing, anti-money laundering compliance, fraud detection
Technical Data	IP address, browser type and version, device type and operating system, session duration, login timestamps	Platform security, fraud detection, geo-restriction enforcement, performance analytics
Usage Data	Games played, bets placed, bet amounts, session history, bonus usage, page navigation patterns	Responsible gaming monitoring, product improvement, personalisation
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support, quality assurance, dispute resolution
Verification Documents	Copies of NID, passport, utility bills, bank statements submitted for KYC	Identity verification, age confirmation, address verification

4. How We Collect Your Data

bdt66 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly to bdt66 when registering an account, completing KYC verification, making a deposit or withdrawal, placing a bet, contacting customer support, responding to a survey, or subscribing to promotional communications.

4.2 Automated Collection

Data collected automatically when you access or use the Platform, including through cookies, web beacons, pixel tags, and similar tracking technologies embedded in the Platform. This includes your IP address, browser fingerprint, session data, and in-platform behaviour patterns.

4.3 Third-Party Sources

Data received from trusted third-party sources including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit.
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank) who provide transaction confirmation data.
• Fraud prevention and anti-money laundering screening databases.
• Responsible gaming databases and self-exclusion registers.

5. How We Use Your Data

bdt66 uses the personal data we collect for the following specific purposes:

• Account Administration: Creating and managing your bdt66 account, verifying your identity and age, and maintaining accurate account records.
• Service Delivery: Processing bets, settling winnings, crediting bonuses, processing deposits and withdrawals, and delivering the full range of Platform products and services.
• KYC & Compliance: Verifying your identity in accordance with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, and complying with all applicable legal and regulatory requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other harmful conduct affecting the Platform or its users.
• Responsible Gaming: Monitoring your gambling activity patterns to identify potential problem gambling behaviour, enforcing self-exclusion requests, applying deposit and session limits, and fulfilling our duty of care to vulnerable players.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance.
• Platform Improvement: Analysing usage data in aggregate and anonymised form to identify bugs, improve user experience, optimise game performance, and develop new product features.
• Marketing & Promotions: Sending you promotional offers, bonus notifications, and news about bdt66 products and seasonal events (BPL, IPL, Eid, Pohela Boishakh, Victory Day, etc.) — only where you have provided explicit opt-in consent.
• Legal Obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our contractual rights.

6. Legal Basis for Processing

bdt66 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and bdt66, including account registration, bet processing, payment handling, and KYC verification.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and responses to lawful governmental or judicial requests.
• Legitimate Interests: Processing carried out in the legitimate interests of bdt66 or third parties, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw this consent at any time by contacting support or updating your account communication preferences.

7. Sharing Your Data

bdt66 does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

7.1 Service Providers

Trusted third-party companies that provide services on behalf of bdt66, including KYC and identity verification providers, payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), cloud hosting and infrastructure providers, customer support platform providers, and fraud detection technology providers. All service providers are bound by data processing agreements that require them to protect your data and use it only for the specific purpose for which it was shared.

7.2 Game Studios & Software Providers

Third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive limited technical data — such as player session identifiers — necessary to deliver their game content through the bdt66 Platform. These providers do not receive your full personal profile and are contractually prohibited from using session data for any purpose other than delivering the game service.

7.3 Legal & Regulatory Authorities

bdt66 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bdt66, its players, or third parties.

7.4 Business Transfers

In the event that bdt66 is involved in a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account prior to your data being transferred and becoming subject to a different privacy policy.

8. International Data Transfers

As an online platform serving the Bangladesh market, bdt66 may process or store some of your personal data on servers or through service providers located outside Bangladesh. Where such international transfers occur, bdt66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Bangladesh, including the use of contractual data transfer agreements with all relevant service providers.

If you have any concerns about the international transfer of your personal data, please contact us at [email protected] and we will provide you with further information about the specific safeguards applicable to your data.

9. Data Retention

bdt66 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Contractual and legal obligations
KYC verification documents	Duration of account + 5 years post-closure	AML/CTF regulatory requirements
Financial transaction records	Duration of account + 7 years post-closure	Financial record-keeping obligations
Betting and gaming history	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming monitoring
Customer support records	3 years from last interaction	Quality assurance, dispute resolution
Marketing consent records	Until consent is withdrawn + 2 years	Evidence of lawful marketing basis
Cookie and technical data	Up to 24 months from collection	Platform analytics and security

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data (e.g., platform usage statistics) may be retained indefinitely for business analytics purposes.

10. Cookies & Tracking Technologies

bdt66 uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) on the Platform. Cookies are small text files placed on your device by your browser when you visit a website. They serve a number of purposes as described below.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and your last-used payment method, so that you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect anonymised statistical data about how visitors use the Platform, including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve Platform performance and user experience.
• Responsible Gaming Cookies: Used to track session duration and display reality-check notifications to players who have activated this feature in their account settings.

10.2 Managing Cookies

You may control cookie settings through your browser's privacy or settings menu. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear existing cookies. Please note that disabling strictly necessary cookies will affect your ability to log in to and use the Platform. Disabling analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

11. Your Privacy Rights

As a user of the bdt66 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered account username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data that bdt66 holds about you. We will provide this information within 30 days of receiving your verified request.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update certain information directly through your account settings; for other changes, please contact support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that certain data must be retained for legal or regulatory reasons even following an erasure request, in which case bdt66 will explain what data must be kept and why.
• Right to Restriction of Processing: You have the right to request that bdt66 restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bdt66's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

bdt66 will not discriminate against you for exercising your privacy rights. Exercising any of the rights listed above will not affect your ability to use the Platform or access any product or service, unless the exercise of a particular right (such as erasure of your account data) makes continued provision of the service technically impossible.

12. Data Security

bdt66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 128-bit SSL/TLS encryption for all data transmitted between your device and the bdt66 Platform.
• Encrypted storage of all personal data and financial records at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific role.
• Multi-factor authentication requirements for all staff accessing internal systems that contain personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third-party security specialists.
• Comprehensive data breach response procedures, including notification obligations where a breach is likely to result in a risk to your rights and freedoms.

While bdt66 takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the security of your own login credentials, and bdt66 strongly recommends enabling two-factor authentication on your account.

13. Protection of Minors

The bdt66 Platform is strictly intended for adults aged 21 and above. bdt66 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete all associated personal data (subject to legal retention obligations), and return any deposits made.

If you believe that bdt66 has inadvertently collected data from a minor, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

14. Marketing Communications

bdt66 may send you promotional communications about new games, bonuses, seasonal offers (such as BPL season promotions, Eid specials, Pohela Boishakh bonus events, and IPL betting campaigns), and other Platform news. Marketing communications will only be sent where you have provided explicit opt-in consent during registration or at a later point through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of any promotional email from bdt66.
• Updating your communication preferences in your account settings.
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications does not affect your receipt of service-related messages such as account security alerts, deposit confirmations, withdrawal notifications, and important policy updates — these are operational communications and are sent on the basis of contractual necessity rather than marketing consent.

15. Third-Party Links

The bdt66 Platform may contain links to third-party websites, payment portals, or game studio platforms. This Privacy Policy applies only to the bdt66.io domain. bdt66 has no control over the privacy practices or content of third-party sites and accepts no responsibility for how those sites collect, use, or protect your personal data. We encourage you to review the privacy policy of any third-party site you visit via a link from the bdt66 Platform.

16. Changes to This Privacy Policy

bdt66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email to their registered address and/or via a prominent notice on the Platform, no fewer than 14 days before the revised Policy takes effect.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision . Your continued use of the bdt66 Platform after the revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure by contacting support.

17. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bdt66 handles your personal data, please contact us using the details below:

• Support Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to all formal data rights requests within 30 calendar days.
• Operating Hours: 24/7, Bangladesh Standard Time (UTC+6).

bdt66 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 2 business days, investigate the matter thoroughly, and provide a substantive response within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.