Privacy Policy
for bdtok Players

01 Data We Collect

bdtok collects personal data through several channels: when you register an account, when you use the platform's features, when you make deposits or withdrawals, when you contact our support team, and automatically as you navigate the site. The categories of data we collect are described below.

We do not intentionally collect data from individuals under 18 years of age. If we become aware that personal data has been collected from an underage person, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that a minor has registered on bdtok should contact support immediately.

You are not required to provide all categories of data at the point of registration. However, certain features — particularly withdrawals and access to full account functionality — will remain restricted until mandatory verification data has been submitted and reviewed. This is a standard regulatory requirement for online gaming platforms operating responsibly.

02 How We Use Your Data

bdtok processes your personal data only for defined, legitimate purposes. We do not use your data in ways that are inconsistent with the purposes for which it was collected. The primary purposes for which we use your personal data are as follows:

• Account management: Creating and maintaining your bdtok account, authenticating your identity at login, managing account settings and preferences, and communicating important account-related updates.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests to your verified payment method; and maintaining an accurate record of your transaction history.
• Regulatory compliance: Verifying your age and identity in accordance with responsible gaming requirements; conducting anti-money laundering checks; and responding to lawful requests from regulatory authorities or law enforcement agencies.
• Fraud prevention and security: Detecting and investigating suspicious account activity; identifying and preventing duplicate account registration; and protecting the integrity of the platform's games and betting markets.
• Responsible gaming: Monitoring usage patterns to identify signs of problem gambling behaviour; applying self-exclusion and deposit limit requests; and providing personalised responsible gaming notifications where our systems identify a potential concern.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to improve the quality, performance, and range of games and features offered.
• Customer support: Responding to your queries and complaints via live chat, email, and other support channels; resolving disputes; and maintaining records of support interactions for quality assurance purposes.
• Marketing communications: Sending promotional offers, bonus notifications, and relevant platform updates by email or in-platform notification, where you have not opted out of such communications. You may opt out at any time by contacting support.

bdtok does not use automated decision-making processes that produce legal or similarly significant effects in relation to individual players without the involvement of a human reviewer. Where automated systems flag an account for investigation, a trained compliance team member reviews the flagged activity before any account-level decision is made.

03 Data Sharing & Third Parties

bdtok does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data is shared with third parties only in the following limited and controlled circumstances:

• Payment service providers: We share transaction data — including your registered name and payment method identifier — with bKash, Nagad, Rocket, Upay, and our banking partners (BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank, Visa, Mastercard) solely for the purpose of processing your deposits and withdrawals. These partners operate under their own privacy frameworks and are required to handle your data with equivalent care.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level technical data (such as your session token and game event data) necessary for game delivery and fairness certification. They do not receive your personally identifiable registration data unless it is necessary for the resolution of a specific game dispute.
• Identity verification services: We may use third-party KYC and identity verification services to assist in validating your submitted identity documents. These services process your data strictly for the verification purpose and are contractually prohibited from using it for any other purpose.
• Analytics providers: We use anonymised, aggregated analytics to understand platform performance. No personally identifiable information is shared with analytics providers.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are lawfully required to do so, or where disclosure is necessary to protect the safety of users or to investigate financial crime.

Where third-party service providers process personal data on behalf of bdtok, they do so under written data processing agreements that bind them to confidentiality obligations and restrict use of the data to the specific purpose for which it was shared. bdtok remains responsible for ensuring that such providers handle your data in a manner consistent with this Privacy Policy.

04 Cookies & Tracking Technologies

bdtok uses cookies and similar technologies to operate the platform, maintain your session, remember your preferences, and gather anonymised analytics data. A cookie is a small text file placed on your device when you visit the platform. Cookies do not contain executable code and cannot be used to access other data on your device.

bdtok does not use third-party advertising cookies, tracking pixels, or cross-site tracking technologies. We do not participate in advertising networks that track your behaviour across external websites.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will affect your ability to remain logged in and may impact core platform functionality. Analytics and functional cookies can be disabled without affecting your ability to play games or make transactions.

05 Data Retention

bdtok retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five years following account closure, in line with standard financial record-keeping requirements applicable to online gaming and payment platforms.
• Identity verification documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later. This retention period reflects anti-money laundering compliance obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction. This includes deposit records, withdrawal records, bonus credits, and wager history.
• Support communications: Retained for up to three years from the date of the interaction, unless the communication relates to an unresolved dispute or is referenced in an ongoing compliance investigation, in which case it is retained until the matter is fully resolved.
• Analytics data: Anonymised analytics data has no fixed maximum retention period, as it contains no personally identifiable information and is used only in aggregate form for platform improvement purposes.
• Marketing preferences: Retained as long as your account is active, or until you withdraw consent for marketing communications. A record of withdrawal of consent is itself retained to confirm that bdtok complies with your preference.

When a retention period expires and no outstanding legal obligation requires further retention, personal data is securely deleted or anonymised in a manner that makes re-identification permanently impossible. bdtok conducts periodic data audits to identify and action data that has reached the end of its applicable retention period.

06 Data Security

bdtok implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include the following:

• SSL/TLS encryption: All data transmitted between your device and the bdtok platform is encrypted using Transport Layer Security (TLS). The padlock visible in your browser address bar confirms that your session is encrypted.
• Encrypted data storage: Personal data and financial records stored in bdtok's systems are encrypted at rest. Encryption keys are managed separately from the encrypted data stores.
• Access controls: Access to systems that store personal data is restricted to authorised personnel with a documented operational need. Access is granted on a role-based minimum-privilege basis and is reviewed periodically.
• Two-factor authentication: Administrative access to bdtok's internal systems requires multi-factor authentication. We also offer players the ability to enable additional login security on their accounts.
• Fraud monitoring: Automated systems monitor login attempts, transaction patterns, and account activity in real time to detect and respond to potential security threats.
• Vulnerability management: bdtok's technical infrastructure is subject to periodic security reviews. Identified vulnerabilities are triaged and remediated according to their assessed risk level.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data security incident that affects your personal data, bdtok will take prompt action to contain the incident, assess its impact, and notify affected users in accordance with applicable legal obligations. If you become aware of any security vulnerability or suspect that your account has been compromised, contact our support team immediately via live chat.

07 Your Privacy Rights

As a bdtok player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or by emailing [email protected]. We will respond to your request within a reasonable timeframe, and in all cases within 30 days.

• Right of access: You may request a copy of the personal data bdtok holds about you, together with information about how that data is used and with whom it is shared. This is sometimes called a Subject Access Request.
• Right to rectification: If you believe that personal data bdtok holds about you is inaccurate or incomplete, you may request that it be corrected. In many cases, you can update basic registration details yourself through your account settings.
• Right to erasure: You may request that bdtok delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements. Where erasure is not possible in full, we will explain why and will delete or anonymise all data that can lawfully be removed.
• Right to restrict processing: You may request that bdtok restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed, or where you contest the lawfulness of processing.
• Right to data portability: You may request a copy of the personal data you provided to bdtok in a structured, commonly used, machine-readable format, so that it can be transferred to another service provider if you wish.
• Right to withdraw marketing consent: You may withdraw your consent to receiving marketing communications from bdtok at any time, without affecting the lawfulness of any processing that took place before your withdrawal. Contact support or use the unsubscribe link in any marketing email to opt out.
• Right to object: You may object to bdtok processing your personal data for purposes that rely on our legitimate interests, where you believe those interests are overridden by your rights. Each objection will be considered on its specific merits.

bdtok does not charge a fee for handling privacy rights requests made in good faith. If a request is manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with a written explanation provided in either case.

08 Updates to This Policy

bdtok may update this Privacy Policy from time to time to reflect changes in the platform's data practices, changes in applicable law, or improvements in how we communicate our privacy commitments to players. The effective date at the top of this page will be updated whenever a material change is made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — bdtok will notify registered players by email to their registered address and by an in-platform notification at their next login, at least 14 days before the change takes effect. This gives you time to review the update and, if you disagree with it, to contact us with any concerns or to request account closure under the voluntary closure process described in our Terms & Conditions.

Non-material changes — such as corrections to typographical errors, clarifications that do not change the substance of the policy, or updates to contact details — will be made without advance notice, with the effective date updated to reflect the change.

The most current version of this Privacy Policy is always available at bdtok.net/privacy-policy. We recommend reviewing this page periodically to stay informed of how bdtok handles your personal data. If you have any questions about this Privacy Policy or about how your data is processed, please contact our support team — available 24 hours a day, 7 days a week — via live chat or at [email protected].

For matters relating to Responsible Gaming, including self-exclusion and deposit limits, please visit our dedicated Responsible Gaming page. For a full understanding of your account rights and obligations, please review our Terms & Conditions.