bdt5666 Privacy Policy

1 Data We Collect

bdt5666 collects personal information from players in Bangladesh through several channels: directly when you register or interact with the Platform, automatically as you browse and play, and occasionally from third-party verification partners. The categories of personal data we collect include the following:

1.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify you are aged 18 or above).
• Email address and mobile phone number.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code.
• Username and encrypted password hash.

1.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID Card, passport, or driving licence).
• Proof of address documentation (utility bill, bank statement dated within 90 days).
• Proof of payment method ownership (screenshot or statement confirming that a bKash, Nagad, Rocket, Upay, or bank account belongs to the registered player).
• Selfie or liveness-check image where enhanced verification is required.

1.3 Financial Transaction Data

• Deposit amounts, dates, and payment method identifiers (e.g., masked bKash number, last four digits of Visa/Mastercard).
• Withdrawal requests, amounts, processing status, and destination account details.
• Bonus credits issued and wagering activity associated with promotional offers.

1.4 Gaming & Betting Activity Data

• Game sessions played, bet amounts, win/loss records, and game provider identifiers.
• Sports betting selections, stake amounts, odds accepted, and settlement outcomes.
• Session duration, login timestamps, and in-session activity logs.

1.5 Technical & Device Data

• IP address, browser type and version, operating system, and device type.
• Referring URL, pages visited within the Platform, and click-path data.
• Cookie identifiers and local storage values (see the Cookies section below).
• Approximate geolocation derived from IP address (country and city level only).

1.6 Communications Data

• Records of live chat conversations with the bdt5666 support team.
• Email correspondence sent to or received from [email protected].
• Responses to player surveys or feedback requests (participation is always voluntary).

bdt5666 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion or affordability request.

2 How We Use Your Data

We process personal data collected from bdt5666 players only where we have a lawful basis to do so. The primary purposes for which we use your data are described below, together with the legal basis for each:

Purpose	Legal Basis
Creating and managing your bdt5666 player account	Performance of a contract
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank methods	Performance of a contract
Age verification and identity checks (KYC) to comply with our gaming licence obligations	Legal obligation
Anti-money laundering (AML) monitoring and suspicious activity reporting	Legal obligation
Responsible gaming monitoring, including detecting signs of problem gambling	Legal obligation / Legitimate interests
Fraud prevention, risk management, and platform security	Legitimate interests
Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts)	Performance of a contract
Sending promotional communications about bonuses and offers (where you have opted in)	Consent
Improving Platform functionality and player experience through analytics	Legitimate interests
Responding to player support queries and resolving complaints	Performance of a contract / Legitimate interests

Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time by updating your notification preferences in your bdt5666 account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

3 Data Sharing & Third Parties

bdt5666 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may, however, share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors and financial institutions: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum transaction data required to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and age-verification partners receive identity document images and personal details solely for the purpose of completing the verification process.
• Game technology providers: Studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised or pseudonymised session identifiers required to deliver their games via the bdt5666 Platform. These providers do not receive your full personal profile.
• IT infrastructure and hosting providers: Cloud hosting and database services that store Platform data on our behalf, operating under strict data processing agreements.
• Fraud and security services: Specialist providers assisting with real-time fraud detection, device fingerprinting, and IP risk scoring.
• Legal and regulatory authorities: Where required by law, court order, or instruction from a competent regulatory authority, bdt5666 will disclose personal data as legally obligated. This includes co-operation with AML authorities and gaming regulators.
• Professional advisers: Lawyers, auditors, and accountants acting on behalf of bdt5666, subject to professional confidentiality obligations.

Where personal data is shared with any third-party processor, bdt5666 ensures that appropriate contractual safeguards are in place to govern the processing and protect the security of your information. bdt5666 remains responsible for your data and does not permit third-party processors to use your information for purposes beyond those specified.

4 Cookies & Tracking

bdt5666 uses cookies and similar tracking technologies on its Platform to ensure core functionality, maintain your logged-in session, and understand aggregate patterns of player behaviour. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the bdt5666 Platform:

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, enforce security tokens, route traffic to correct server instances. Without these cookies, the Platform cannot function.	No — essential for service
Functional	Remember your language preference, display settings, and previously selected game categories to personalise your experience.	Yes — may reduce personalisation
Analytical / Performance	Collect anonymised data on page visits, session lengths, and navigation paths to help us improve Platform performance and usability.	Yes — via browser settings
Responsible Gaming	Track session duration and betting frequency as part of our responsible gaming monitoring obligations. These cannot be disabled as they fulfil a legal function.	No — regulatory requirement

bdt5666 does not deploy third-party advertising cookies or share cookie data with ad networks or social media platforms. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your bdt5666 account and using the Platform.

We may also use web beacons (small transparent image files) in transactional emails to confirm whether a message has been opened. This is used solely to maintain communication records and is not linked to any advertising function.

5 Data Security

bdt5666 implements a comprehensive set of technical and organisational security measures designed to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to, the following measures:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bdt5666 Platform. All connections are enforced over HTTPS.
• Encrypted password storage: Player passwords are never stored in plain text. We use industry-standard hashing algorithms with salting to protect credential data.
• Access controls: Access to personal data within bdt5666 is restricted to employees and contractors who require it to perform their role. All access is logged and subject to periodic review.
• Two-factor authentication (2FA) is available for player accounts and is mandatory for all administrative access to internal systems.
• Regular security audits and penetration testing conducted by independent third-party specialists to identify and remediate vulnerabilities.
• Data minimisation: Systems are designed to collect and retain only the minimum personal data required. Data that is no longer needed is securely deleted or anonymised.
• Incident response plan: bdt5666 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights, we will notify affected players promptly and take immediate remediation steps.

While bdt5666 employs robust security practices, no system is entirely immune to risk. Players are encouraged to choose strong, unique passwords for their bdt5666 account, enable two-factor authentication where available, and contact support immediately if they suspect any unauthorised access to their account.

6 Data Retention

bdt5666 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to maintain the player account, and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Active account data (registration details, KYC documents, transaction history, gaming activity): Retained for the duration of the account and for a minimum of 5 years after account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction, in accordance with financial record-keeping obligations.
• Support and complaint correspondence: Retained for 3 years from the date of the last interaction, or longer where a dispute remains unresolved.
• Marketing consent records: Retained for the duration of the consent and for 2 years after consent is withdrawn, as evidence of lawful marketing activity.
• Technical logs (server access logs, security event logs): Retained for 12 months in a rolling basis, then securely deleted.
• Self-exclusion records: Retained indefinitely to ensure that self-excluded players are not re-admitted to the Platform in breach of responsible gaming obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data and falls outside the scope of this Privacy Policy.

7 Your Privacy Rights

As a bdt5666 player, you hold a number of rights in relation to the personal data we hold about you. These rights are subject to applicable law and our legitimate interests in operating a secure, compliant gaming platform. Your rights include:

• Right of access: You may request a copy of the personal data bdt5666 holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly via your bdt5666 account settings; for other changes, contact our support team.
• Right to erasure: In certain circumstances, you may request that bdt5666 delete your personal data. This right is not absolute — we may be required by law to retain certain data (e.g., financial records, AML files) even after account closure. Where erasure is possible, we will act on it promptly.
• Right to restriction of processing: You may ask bdt5666 to restrict how we use your data in specific situations, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on our legitimate interests, including profiling for responsible gaming purposes. We will assess each objection on its merits and respond within 30 days.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the bdt5666 support team via the 24/7 live chat facility on the Platform or by email to the address displayed in the footer. We may require you to verify your identity before processing a rights request in order to protect against unauthorised requests. We aim to acknowledge all requests within 5 business days and to provide a full response within 30 days, or notify you if an extension is required.

8 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt5666 handles your personal data, please contact our support team using the details provided in the footer of this page. All privacy-related enquiries are handled by our dedicated data protection team and will be treated with the highest level of confidentiality.

If you wish to submit a formal complaint about how bdt5666 has handled your personal data, please set out the details of your complaint in writing and send it to [email protected] with the subject line "Privacy Complaint". We will acknowledge your complaint within 24 hours and aim to provide a substantive response within 10 business days.

bdt5666 is committed to resolving all privacy complaints fairly and transparently. If you are not satisfied with our response, you may be entitled to escalate the matter to a relevant data protection authority or independent dispute resolution body, depending on the laws applicable in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026. bdt5666 reserves the right to amend this Policy at any time. Where material changes are made, we will notify registered players via email or an on-Platform notification prior to the changes taking effect. Your continued use of the bdt5666 Platform following any such notification constitutes your acceptance of the updated Policy.