bdt2 Privacy Policy

Table of Contents

Our Privacy Principles

The following six principles summarise how bdt2 approaches the handling of your personal data. These principles underpin every data-processing activity described in this Policy.

1. Introduction

bdt2 is an online betting and casino platform serving adult players aged 21 years and above in Bangladesh and other eligible jurisdictions. As a platform that processes financial transactions, identity documentation, and behavioural data, bdt2 takes its obligations as a data controller seriously. This Policy sets out a comprehensive account of our data-processing practices in clear, plain English so that every bdt2 player fully understands how their information is handled.

This Policy applies to all personal data collected by bdt2 through the bdt2.io website, any mobile-optimised version of the platform, and any communications exchanged between you and the bdt2 support team. It does not apply to websites or services operated by third parties that may be linked from the bdt2 platform — those entities operate their own privacy policies independently of bdt2.

If you have questions about this Policy or wish to exercise any of your data rights, please contact us at the details provided in Section 15. Our English-language data support team operates 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6).

2. Data We Collect

bdt2 collects the following categories of personal data from players and prospective players:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents (National Identity Card, passport, or equivalent) submitted during KYC verification.

2.2 Contact Data

Email address, Bangladeshi mobile phone number, and residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postal code.

2.3 Account Data

Your bdt2 username, account creation date, login history, session timestamps, device identifiers used to access your account, and your account preferences and responsible gaming settings.

2.4 Financial Data

Deposit and withdrawal transaction records including amounts (in Bangladeshi Taka, ৳), dates, payment method identifiers (e.g., registered bKash number, Nagad number, Rocket number, bank account reference), and transaction status. bdt2 does not store full payment card numbers — only the last four digits and card type for reference purposes.

2.5 Betting and Gaming Data

A complete record of all bets placed, games played, stakes wagered, outcomes, winnings, bonuses claimed, and wagering activity on the bdt2 platform. This data is retained for regulatory, anti-fraud, and responsible gaming monitoring purposes.

2.6 Technical Data

IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone, referring URL, and pages visited within the bdt2 platform. This data is collected automatically when you access the platform.

2.7 Communications Data

The content of any communications exchanged between you and the bdt2 support team, including live chat transcripts, email correspondence, and any supporting documentation you provide in connection with a support request or complaint.

3. How We Collect Your Data

bdt2 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically by our servers and analytics systems when you visit or interact with the bdt2 platform, including through cookies and similar tracking technologies (see Section 7).
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners when you initiate a deposit or withdrawal.
• Identity verification services: Data returned by third-party KYC providers used by bdt2 to verify the identity and age of players during the verification process.
• Fraud and security partners: Risk signals and device-fingerprinting data from fraud prevention services used by bdt2 to protect the platform and its players from fraudulent activity.

4. How We Use Your Personal Data

bdt2 uses your personal data for the following purposes:

bdt2 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except in circumstances where automated screening is required for immediate fraud prevention or regulatory compliance, in which case a human review is available upon request.

5. Legal Basis for Processing

bdt2 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to register your account, process transactions, settle bets, and deliver the services described in our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, age verification requirements, and record-keeping obligations under our international gaming licence.
• Legitimate interests: Processing necessary for bdt2's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and platform analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing

bdt2 does not sell your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

bdt2 engages trusted third-party service providers to support platform operations, including payment processors (bKash, Nagad, Rocket, Upay, and bank partners), KYC and identity verification providers, fraud detection services, cloud hosting providers, and customer support platform providers. These providers process your data solely on bdt2's instructions and under data processing agreements that require them to maintain appropriate security standards.

6.2 Game Technology Providers

Game studios and technology providers whose games are available on the bdt2 platform — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive technical session data (such as your account identifier and game session tokens) to the extent necessary to deliver the game experience. These providers do not receive your full identity or financial data.

6.3 Regulatory and Legal Disclosure

bdt2 may disclose personal data to regulatory bodies, law enforcement agencies, or other authorities where required to do so by applicable law, court order, or regulatory requirement. bdt2 will notify you of any such disclosure where it is legally permissible to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of bdt2's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data-processing practices that result from it.

7. Cookies & Tracking Technologies

bdt2 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit the bdt2 platform. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the bdt2 platform. Disabling analytics or marketing cookies will not affect your ability to use the platform's core betting and gaming features.

8. Data Retention

bdt2 retains your personal data for as long as your account remains active and for a defined period thereafter, as set out below:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping obligations.
• Betting and gaming records: Retained for a minimum of 3 years following account closure for responsible gaming, dispute resolution, and regulatory audit purposes.
• Communications data: Support correspondence retained for 2 years following resolution of the relevant query or complaint.
• Technical and analytics data: Retained in aggregated or anonymised form indefinitely for platform improvement purposes; identifiable technical data deleted or anonymised within 13 months of collection.
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal to demonstrate compliance.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup or archival processes, the data is isolated and protected from active processing until deletion can be completed.

9. Data Security

bdt2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and the bdt2 platform.
• AES-256 encryption for sensitive data stored at rest on bdt2 servers.
• Role-based access controls limiting data access to authorised personnel with a verified need to access specific data categories.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Multi-factor authentication (MFA) requirements for all bdt2 staff accessing production systems containing player data.
• Incident response procedures with defined timelines for detecting, containing, and notifying affected players of any data breach.

While bdt2 takes all reasonable steps to protect your data, no system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own bdt2 account credentials. If you suspect that your account credentials have been compromised, please notify bdt2 immediately at [email protected].

10. Your Data Rights

As a bdt2 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. bdt2 will respond to all verified data rights requests within 30 calendar days.

11. Children's Privacy

The bdt2 platform is strictly intended for adults aged 21 years and above. bdt2 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not use the bdt2 platform or submit any personal data to us.

If bdt2 becomes aware that personal data has been collected from an individual under the age of 21 without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that bdt2 may have inadvertently collected data from an underage individual, please contact us immediately at [email protected].

12. Third-Party Links

The bdt2 platform may contain references to third-party services, including payment providers such as bKash, Nagad, and Rocket, and game studio partners such as Evolution Gaming, Pragmatic Play, and Spribe. While bdt2 takes care to partner with reputable providers, bdt2 is not responsible for the privacy practices of any third party.

When you interact with a third-party service linked from or integrated into the bdt2 platform — such as a mobile payment app — your personal data may be processed by that third party under their own privacy policy. bdt2 encourages you to review the privacy policies of any third-party services you use in connection with your bdt2 account.

13. International Data Transfers

bdt2 operates as an international platform and, in the course of delivering its services, your personal data may be transferred to and processed in countries outside Bangladesh. Such transfers may occur when data is processed by our cloud hosting providers, KYC partners, or payment processing infrastructure located in jurisdictions other than Bangladesh.

Where such international transfers occur, bdt2 takes appropriate steps to ensure that your personal data receives a level of protection consistent with the principles set out in this Policy. These steps may include entering into standard contractual clauses with the receiving entity, relying on adequacy determinations, or implementing other appropriate transfer mechanisms recognised under applicable data protection frameworks.

If you would like further information about the safeguards bdt2 has in place for international data transfers, please contact our support team at [email protected].

14. Policy Changes

bdt2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, new legal or regulatory requirements, or improvements to our platform. When material changes are made to this Policy, bdt2 will notify registered players by email to the address on their account and by displaying a prominent notice on the bdt2 platform for a period of no less than 7 days before the revised Policy takes effect.

The "Last Updated" date shown at the top of this Policy indicates when the most recent revision was made. We recommend that you review this Policy periodically to stay informed of how bdt2 protects your personal data. Your continued use of the bdt2 platform after any amendment takes effect constitutes your acknowledgement of the revised Policy.

Where a proposed amendment materially reduces your privacy rights or introduces new processing activities that require your consent, bdt2 will seek your explicit consent before the amendment takes effect for your account. If you do not accept the amended Policy, you should cease using the platform and contact [email protected] to close your account.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt2 handles your personal data, please contact our dedicated data support team using the details below. All data rights requests and privacy enquiries are handled in English by our support team operating 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6).

For related platform policies, please visit our Terms & Conditions page for full details of your contractual relationship with bdt2, our Responsible Gaming page for information on player protection tools, and our FAQ page for answers to common account and platform questions.