Privacy Policy for bdt7

bdt7 ("bdt7", "we", "us", "our") is committed to protecting and respecting the privacy of every player who uses our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bdt7. It applies to all users of the bdt7 website at bdt7.io and any associated mobile-optimised services.

This policy is written in plain, accessible English and is intended to give you a genuine understanding of our data practices — not simply a legal formality. We encourage you to read it carefully and to contact us at [email protected] if you have any questions about how your data is handled.

bdt7 operates as an online betting and gaming platform serving adult players in Bangladesh. All personal data processing activities described in this policy are carried out in connection with the provision of that service. Where we process your data, we do so on one or more of the following legal bases: your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interests in operating a secure and functional betting platform.

This Privacy Policy must be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference and together form the full set of agreements governing your relationship with bdt7.

bdt7 collects personal data in several categories depending on your interaction with the platform. The following table summarises what we collect and why:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data except where strictly required for responsible gaming purposes (for example, recording a self-exclusion request or a vulnerability flag at your own request).

bdt7 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, submitting feedback, or participating in promotions.
• Automated technologies: As you navigate and use the bdt7 platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. See Section 6 for full details on our use of cookies.
• Third-party payment processors: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, those providers share transaction confirmation data with us to reconcile your account balance. We do not receive or store your full payment credentials — those remain with the payment provider.
• Identity verification providers: bdt7 uses trusted third-party KYC verification services to confirm player identities and ages as required. These services process identity document images on our behalf under strict data processing agreements.
• Game providers: Game session data — including bet amounts, outcomes, and session duration — is reported to bdt7 by our third-party game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) for the purpose of account balance management and responsible gaming monitoring.

bdt7 uses your personal data only for the purposes described below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

• Account management: To create, maintain, and manage your bdt7 account, including verifying your identity, processing login requests, and applying account-level settings such as deposit limits or self-exclusion.
• Transaction processing: To process deposits and withdrawal requests, reconcile account balances, and investigate disputed transactions.
• Legal compliance: To meet our obligations under applicable anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements, including verifying the source of funds where required.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and any misuse of the bdt7 platform. This includes monitoring for patterns consistent with bonus abuse, multi-accounting, or match-fixing participation.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance. Support interactions may be recorded and retained for quality and training purposes.
• Responsible gaming: To monitor your gambling activity for signs of problem gambling, apply voluntary limits or exclusions at your request, and contact you with responsible gaming information where our monitoring tools flag a concern.
• Platform improvement: To analyse usage patterns, test new features, troubleshoot technical issues, and improve the overall quality and reliability of the bdt7 platform.
• Personalisation: To tailor your platform experience, including surfacing games and promotions that are relevant to your interests, where you have consented to personalised communications.
• Marketing communications: To send promotional offers, VIP loyalty updates, tournament notifications, and seasonal promotions (such as Eid specials or BPL cricket offers) where you have opted in to receive such communications. You may withdraw this consent at any time.

bdt7 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances, and only to the minimum extent necessary:

• Payment service providers: We share transaction-related data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard processors solely for the purpose of executing your deposit and withdrawal instructions. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: We share identity document data with accredited third-party KYC providers for the purpose of verifying your age (21+) and identity. These providers act as data processors on our behalf under contractual data protection obligations.
• Game providers: Game session data is shared with our licensed game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others) to facilitate game play, calculate results, and return winnings to your account balance. Game providers do not receive your financial payment details.
• Legal and regulatory authorities: bdt7 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity including fraud, money laundering, or match-fixing.
• Professional advisors: In limited circumstances, personal data may be shared with our legal advisors, auditors, or accountants where necessary for the provision of professional services to bdt7. Such parties are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of bdt7's business or assets, personal data held by bdt7 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer.

All third parties with whom bdt7 shares personal data are required to process that data in a manner consistent with this Privacy Policy and are prohibited from using it for any independent purpose not authorised by bdt7.

bdt7 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, maintain session security, and gather anonymised analytics data that helps us improve the platform experience for all Bangladesh players.

What are cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and remember information about your session or preferences.

bdt7 uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the bdt7 platform. These cookies maintain your login session, remember your security settings, and enable core betting and payment functions. They cannot be disabled without disrupting the platform's functionality.
• Performance and analytics cookies: Collect anonymised data about how players interact with the bdt7 platform — including which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve the platform. No personally identifiable information is transmitted in these cookies.
• Functional cookies: Remember your preferences such as language settings, preferred payment method display, and game lobby filters so that you do not need to re-enter them on each visit.
• Marketing cookies: Used only where you have provided consent, to track interactions with bdt7 promotional content. These cookies help us measure the effectiveness of marketing campaigns and personalise offers to your interests. You may opt out of marketing cookies at any time via your account settings.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will significantly impair your ability to use the bdt7 platform. Disabling performance, functional, or marketing cookies will not prevent you from accessing the platform but may result in a reduced or less personalised experience.

bdt7 does not use third-party advertising networks that place cookies for cross-site behavioural tracking. Any analytics tools used by bdt7 are configured to anonymise IP addresses and are used solely for internal platform improvement purposes.

bdt7 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by bdt7:

When data reaches the end of its retention period, bdt7 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for aggregate statistical purposes (for example, platform-level analytics) without further restriction.

bdt7 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bdt7 servers, ensuring that your credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including payment account identifiers, identity document references, and authentication credentials. Passwords are stored as salted cryptographic hashes — bdt7 staff cannot view your password in plain text.
• Access controls: Access to personal data held by bdt7 is restricted on a strict need-to-know basis. Internal staff access is role-based, logged, and subject to regular review. No single staff member has unrestricted access to the full scope of player data.
• Two-factor authentication (2FA) is available for all player accounts and is strongly recommended. All internal bdt7 administrative systems require 2FA without exception.
• Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities in the bdt7 platform before they can be exploited.
• Intrusion detection and monitoring: bdt7's infrastructure is monitored continuously for anomalous activity, including unusual login patterns, large-scale data access attempts, and network-level intrusion indicators.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected players, bdt7 will notify impacted players via their registered email address and take all reasonable steps to contain and remediate the breach as quickly as possible.

While bdt7 takes all reasonable measures to secure your personal data, no method of electronic transmission or storage is 100% secure. You also bear responsibility for keeping your own login credentials confidential and for logging out of the platform when using shared or public devices.

As a player whose personal data is processed by bdt7, you hold the following rights with respect to that data. To exercise any of these rights, please contact our support team at [email protected] with your registered username and a description of your request.

• Right of access: You have the right to request a copy of the personal data bdt7 holds about you and to receive information about how it is being used. We will provide this within a reasonable timeframe, free of charge for reasonable requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly through your account settings panel.
• Right to erasure: In certain circumstances, you may request that bdt7 delete your personal data. This right is subject to limitations where bdt7 is required to retain data to comply with legal obligations (for example, AML record-keeping requirements under applicable regulations). Where erasure is not possible in full, bdt7 will delete all data that is not subject to a legal retention requirement.
• Right to restrict processing: You may request that bdt7 restrict the processing of your personal data in circumstances where you contest its accuracy, object to its use, or where processing is unlawful but you prefer restriction over erasure.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider if you wish.
• Right to object: You may object at any time to the processing of your personal data where that processing is based on bdt7's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes, which bdt7 will action immediately upon receipt of your objection.
• Right to withdraw consent: Where bdt7 processes your data on the basis of consent (for example, marketing communications or the use of non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to your withdrawal.

bdt7 will respond to all data rights requests promptly and in good faith. In cases where a request is complex or numerous, we may extend our response time by a reasonable period, in which case we will notify you of the extension and the reason for it. bdt7 will not discriminate against players who exercise their data rights.

The bdt7 platform is strictly for adults aged 21 and above. bdt7 does not knowingly collect or process personal data from individuals under the age of 21 under any circumstances.

bdt7 employs age-verification technology and manual KYC review processes as part of account registration to prevent access by minors. Any account where the registered player is found to be under 21 will be immediately closed, any winnings will be voided, and any deposited funds will be returned to the source payment method following verification of ownership.

Any personal data inadvertently collected from an individual under the age of 21 will be deleted as soon as bdt7 becomes aware of the error. If you believe that a minor has created an account on bdt7 or that bdt7 has inadvertently collected data from a person under 21, please notify us immediately at [email protected] so that we can take prompt action.

Parents and guardians who are concerned about a minor accessing online gambling platforms are encouraged to use parental control software and to familiarise themselves with the Responsible Gaming resources available on this platform.

bdt7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal or regulatory requirements, or the features and services offered on the platform.

Where changes to this policy are material — meaning they significantly affect your rights or the way we handle your personal data — bdt7 will provide advance notice via the registered email address on your account or via an in-platform notification, with a minimum of 7 days' notice before the revised policy takes effect.

For minor, non-material changes — such as typographical corrections, clarifications that do not alter the substance of the policy, or the addition of a new payment method to the list of processors — bdt7 may update the policy without prior notice, with the updated effective date reflected at the top of this document.

The most current version of this Privacy Policy is always accessible at bdt7.io/privacy-policy. Your continued use of the bdt7 platform following any update to this policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt7 handles your personal data, please do not hesitate to get in touch. Our dedicated privacy support team is available around the clock to assist Bangladesh players with any data-related enquiry.

You may reach us through the following channels:

• Email: [email protected] — please include your registered username and a clear description of your enquiry so we can assist you as efficiently as possible.
• Live Chat: Available 24/7 directly on the bdt7 platform. Our live chat agents can handle most privacy enquiries in real time and can escalate complex requests to our dedicated privacy team.
• Response times: We aim to acknowledge all email privacy enquiries within 24 hours and to provide a substantive response within 5 business days. Complex data rights requests (for example, a full subject access request) may take up to 30 days to fulfil, in which case we will notify you of the expected timeline.

bdt7 serves players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Regardless of your location within Bangladesh, you are entitled to the same standard of data protection and the same rights described in this policy.

If you are dissatisfied with the way bdt7 has handled a privacy concern or a data rights request, you are encouraged to escalate the matter by writing formally to [email protected] with the subject line "Formal Privacy Complaint". bdt7 takes all formal complaints seriously and will investigate and respond within a reasonable timeframe.