bdbat Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") describes how bdbat ("we", "us", "our") collects, processes, stores, and shares personal information when you access or use the bdbat website and its associated online casino and sports betting services (the "Platform"). This Policy applies to all registered users of the bdbat Platform located in Bangladesh and any other jurisdiction where the Platform is accessible. By registering an account or using the bdbat Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

bdbat is committed to protecting your privacy and handling your personal data with care, transparency, and respect. We collect only the information that is necessary to provide you with a safe, fair, and enjoyable online gaming and betting experience. We do not sell your personal data to third parties for commercial marketing purposes. This Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy, which are available on this site.

Section 2

Information We Collect

bdbat collects personal information in the following categories. Each category is collected for specific, documented purposes as described in this Policy:

Section 3

How We Use Your Information

bdbat uses the personal data we collect for the following purposes. In each case, the purpose is necessary either to perform the contract between you and bdbat, to comply with a legal obligation, or to pursue bdbat's legitimate interests in operating a safe and compliant gaming platform:

• 01

  Account Management

  To create and maintain your bdbat account, verify your identity and age, process your registration, authenticate your logins, and manage your account settings and preferences.

• 02

  Transaction Processing

  To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, verify payment method ownership, maintain transaction records, and comply with financial regulations applicable in Bangladesh.

• 03

  Fraud and Security

  To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, bonus abuse, multi-accounting, and any other prohibited conduct. Technical data and financial transaction patterns are analysed continuously for security purposes.

• 04

  Responsible Gaming

  To monitor gaming behaviour and identify patterns that may indicate problem gambling, to deliver deposit limit reminders, session time alerts, and self-exclusion tools, and to comply with responsible gaming obligations.

• 05

  Service Communications

  To send you account notifications, transaction confirmations, security alerts, and updates about material changes to our Terms or this Privacy Policy. We do not send unsolicited marketing communications without your explicit consent.

Section 4

Legal Basis for Processing

bdbat processes your personal data on the following legal grounds: (a) Contract performance — processing that is necessary to register your account, provide gaming services, process payments, and fulfil our obligations to you as a Platform user; (b) Legal obligation — processing required to comply with applicable anti-money laundering, counter-terrorism financing, age verification, and financial record-keeping regulations; (c) Legitimate interests — processing for fraud prevention, security monitoring, platform optimisation, and responsible gaming analytics, where those interests are not overridden by your fundamental privacy rights.

Where bdbat relies on legitimate interests as the legal basis for processing, we have carried out a balancing test to confirm that our interests do not override your fundamental right to privacy. You have the right to object to processing conducted on legitimate interests grounds by contacting [email protected]. Where your objection is well-founded, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

Section 5

Cookies and Tracking Technologies

bdbat uses cookies and similar tracking technologies to operate the Platform, remember your session preferences, and analyse platform usage. By using the bdbat Platform, you consent to the use of cookies in accordance with this Policy. The following categories of cookies are used:

• 01

  Essential Cookies

  Strictly necessary cookies that enable core Platform functionality including user authentication, session management, and security features. These cookies cannot be disabled as the Platform cannot function without them.

• 02

  Functional Cookies

  Cookies that remember your preferences and settings (such as language selection and responsible gaming tool configurations) to personalise your experience on return visits. These cookies do not track your activity across other websites.

• 03

  Analytics Cookies

  Cookies that collect aggregated, anonymised data about how players use the Platform — including which pages are visited most frequently, session durations, and navigation paths. This data helps bdbat improve Platform performance, fix issues, and enhance user experience.

• 04

  Security Cookies

  Cookies used to support fraud detection, bot mitigation, and security monitoring. These cookies help bdbat identify suspicious session behaviour and protect player accounts from unauthorised access attempts.

Section 6

Sharing of Your Information

bdbat does not sell your personal data to third parties. We may share your personal information with the following categories of third-party recipients, strictly on a need-to-know basis and only to the extent necessary to fulfil the purposes described in this Policy:

All third-party recipients are contractually obligated to process your personal data only for the specified purpose, to maintain appropriate security standards, and to handle your data in accordance with applicable privacy law. bdbat remains responsible for ensuring that all third-party data processors who handle personal data on our behalf maintain appropriate protections.

• 01

  Payment Processors

  bKash, Nagad, Rocket, Upay, and card payment processors receive the minimum financial data required to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are responsible for the security of data held within their own systems.

• 02

  Identity Verification Providers

  KYC and age verification service providers who assist bdbat in verifying the identity and age of registered players. These providers process identity document data under strict confidentiality agreements and applicable data protection law.

• 03

  Regulatory Authorities

  Law enforcement agencies, financial intelligence units, and other regulatory authorities where disclosure is required by applicable law, court order, or regulatory direction. bdbat will disclose only the minimum information required to satisfy the legal obligation and will notify you where permitted by law.

• 04

  Technology Service Providers

  Cloud hosting providers, platform infrastructure partners, and security technology providers who process technical data on bdbat's behalf under strict data processing agreements. These providers do not use your personal data for their own commercial purposes.

Section 7

Data Security

bdbat implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes SSL/TLS encryption for all data transmitted between your device and the bdbat Platform, encrypted storage of sensitive personal and financial data at rest, access controls that restrict employee access to personal data on a strict need-to-know basis, regular security audits and vulnerability assessments, and automated fraud detection and anomaly monitoring systems.

While bdbat takes all reasonable steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for keeping your account login credentials confidential and for notifying bdbat immediately if you suspect that your account has been compromised. bdbat will notify affected users promptly in the event of a data breach that poses a risk to their rights and freedoms.

Section 8

Data Retention

bdbat retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our legitimate business interests. Specifically: account and identity data is retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with applicable financial record-keeping requirements; transaction and financial data is retained for a minimum of 5 years following each transaction, as required by applicable anti-money laundering regulations; communications data is retained for a minimum of 3 years from the date of each communication, for quality assurance and dispute resolution purposes.

When personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, bdbat will securely delete or anonymise it. Anonymised data (which can no longer be linked to any individual) may be retained indefinitely for statistical and platform improvement purposes. You may request information about the specific retention period applicable to your personal data by contacting [email protected].

Section 9

Your Privacy Rights

As a registered bdbat user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. bdbat will respond to all valid rights requests within a reasonable timeframe and at no charge to you:

• 01

  Right of Access

  You have the right to request a copy of the personal data that bdbat holds about you, together with information about how it is processed and the legal basis for that processing. We will provide this information in a clear, structured format.

• 02

  Right to Rectification

  You have the right to request correction of any inaccurate or incomplete personal data that bdbat holds about you. Where possible, you may update your contact details directly via your Account settings. For identity and financial data corrections, please contact our support team.

• 03

  Right to Erasure

  You have the right to request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose for which it was collected. Please note that this right is subject to legal retention obligations: bdbat is required by applicable anti-money laundering regulations to retain certain financial and identity records for a minimum of 5 years following account closure, and erasure requests cannot override these obligations.

• 04

  Right to Restriction

  You have the right to request that bdbat restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and are awaiting the outcome of that objection.

• 05

  Right to Data Portability

  Where processing is carried out by automated means and based on your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. This right applies to the personal data you provided to bdbat during registration and account use.

Section 10

Payment Data and Financial Privacy

bdbat treats financial and payment data with the highest level of protection. Payment method details — including bKash wallet numbers, Nagad wallet numbers, Rocket account details, Upay account details, and partial card numbers — are processed solely to execute your deposit and withdrawal requests, to verify that the payment method is registered in your name, and to fulfil our AML compliance obligations. bdbat does not store full card numbers or card security codes. Card transactions are processed by PCI-DSS compliant payment processors.

bdbat will never ask you to share your full payment credentials — including your bKash PIN, Nagad PIN, or full card details — via chat, email, or any other communication channel. If you are ever contacted by someone claiming to be a bdbat representative and requesting your full payment credentials, please treat this as a phishing attempt and report it to [email protected] immediately.

Section 11

Children's Privacy

The bdbat Platform is strictly intended for individuals aged 21 and above. bdbat does not knowingly collect personal data from individuals under the age of 21. If you believe that a person under the age of 21 has registered an account or provided personal data to bdbat without parental or guardian consent, please contact us immediately at [email protected]. Upon receiving a credible report of underage usage, bdbat will promptly investigate, close the relevant account, delete or anonymise any associated personal data to the extent permitted by applicable law, and return any real-money funds deposited.

Section 12

Changes to This Privacy Policy

bdbat reserves the right to update this Privacy Policy at any time. Where changes are material — for example, changes to the categories of personal data we collect, the purposes for which we use it, or the third parties we share it with — bdbat will provide at least 7 days' advance notice to registered players via account notification or a prominent notice on the Platform. The date of the most recent revision is always shown at the top of this page.

Your continued use of the bdbat Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Privacy Policy, you must cease using the Platform and contact our support team to close your account. We strongly recommend reviewing this Policy periodically to stay informed about how bdbat protects your personal data.

Key Points

Privacy at a Glance

Section 13

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how bdbat handles your personal data, please contact our support team at [email protected]. Support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6). Please include "Privacy" in the subject of your message so we can direct your query to the appropriate team.

bdbat is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may escalate the matter in writing to [email protected] with the subject line "Privacy Escalation". bdbat will conduct a senior review of all escalated privacy complaints and respond within 14 business days.