bdtjt Privacy Policy

Introduction

bdtjt ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the bdtjt platform. This Privacy Policy sets out in clear, formal terms the categories of personal data we collect, the lawful bases on which we process that data, the purposes for which it is used, and the rights available to you as a data subject.

This policy applies to all registered players, prospective players who browse the platform without registering, and any individual who contacts bdtjt through our support channels. It covers data processed both through automated means (such as server logs and cookies) and through manual processes (such as KYC document review).

We encourage you to read this policy in full alongside our Terms & Conditions and our Responsible Gaming policy, each of which forms part of your overall agreement with bdtjt. If you have any questions about this policy, please contact us at the details set out in Section 15.

Data Controller

For the purposes of applicable data protection law, bdtjt acts as the data controller in respect of all personal data collected through the platform. As data controller, bdtjt determines the purposes and means by which your personal data is processed.

Where bdtjt engages third-party service providers to process data on its behalf (for example, KYC verification providers or payment processors), those third parties act as data processors and are contractually bound to process your data only on bdtjt's instructions and in accordance with this policy.

All data controller enquiries, subject access requests, and formal privacy complaints should be directed to our support team at [email protected]. Contact details are provided in plain text only and are not clickable links.

Personal Data We Collect

bdtjt collects the following categories of personal data:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion or support request. Such disclosures are handled with the highest degree of confidentiality.

How We Collect Personal Data

bdtjt collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated Technologies: When you visit the bdtjt platform, our servers automatically record technical data including your IP address, browser type, operating system, pages visited, and session duration. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: When you complete a financial transaction, our authorised payment processing partners (including bKash, Nagad, Rocket, Upay, and card scheme operators) transmit transaction confirmation data to bdtjt. We do not receive or store full payment credentials.
• KYC Partners: Third-party identity verification providers may return verification status data and document authenticity scores to bdtjt as part of the account verification process.
• Fraud Prevention Services: Risk-scoring data generated by third-party fraud detection tools may be associated with your account where a suspicious activity flag has been raised.

Legal Basis & Purpose of Processing

bdtjt processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process data and the corresponding legal basis for each:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your rights and freedoms. You may contact us to request further detail on this balancing assessment for any specific processing activity.

Third-Party Data Sharing

bdtjt does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is strictly limited to the following categories of recipient, each bound by contractual data protection obligations:

• KYC & Identity Verification Providers: Third-party services that verify the authenticity of identity documents and confirm that players meet the minimum age requirement of 21 years.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, solely for the purpose of processing financial transactions.
• Fraud Prevention & AML Services: Risk management platforms that help bdtjt detect fraudulent account activity and comply with anti-money-laundering obligations.
• IT Infrastructure & Hosting Providers: Cloud hosting and data centre providers that store platform data on bdtjt's behalf under strict data processing agreements.
• Customer Support Technology: Support platform providers that enable bdtjt to manage player enquiries and maintain communication records.
• Regulatory & Law Enforcement Authorities: Where bdtjt is legally required to disclose personal data in response to a valid legal order, court judgment, or regulatory instruction, we will comply with that obligation. We will notify you of such a disclosure where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of bdtjt's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

International Data Transfers

bdtjt's primary player base is located in Bangladesh, and we aim to store and process data within secure data centres serving the Asia-Pacific region wherever operationally feasible. However, some of our third-party service providers — including certain KYC verification partners and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, bdtjt ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent data transfer mechanisms incorporated into agreements with the receiving party.
• Confirmation that the receiving jurisdiction provides an adequate level of data protection as assessed by bdtjt's compliance team.
• Technical safeguards including end-to-end encryption for all data in transit across network boundaries.

You may request further information about the specific safeguards in place for any international transfer by contacting us at [email protected].

Data Security

bdtjt implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption in Transit: All communications between your device and the bdtjt platform are encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock symbol in your browser's address bar.
• Encryption at Rest: Sensitive personal data stored on bdtjt's servers is encrypted at the database level, ensuring that data cannot be read even in the event of unauthorised physical access to storage media.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role. All internal access is logged and audited.
• No Storage of Full Payment Credentials: bdtjt does not store full bKash account numbers, Nagad PINs, bank account numbers, or full card numbers. Only masked identifiers (e.g., last four digits) and transaction reference IDs are retained.
• Regular Security Audits: bdtjt engages independent security professionals to conduct periodic vulnerability assessments and penetration tests of its platform infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, bdtjt will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

While bdtjt takes every reasonable precaution to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you should also take steps to protect your own account by using a strong, unique password and keeping your login credentials confidential.

Data Retention Periods

bdtjt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active relationship with bdtjt, plus a minimum period of five (5) years following account closure. This extended period is required to satisfy anti-money-laundering record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years after account closure in accordance with financial crime prevention requirements.
• Transaction Records: Deposit and withdrawal records, including amounts in ৳ BDT and payment method references, are retained for a minimum of five (5) years.
• Support & Communications Records: Customer support correspondence is retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Technical & Log Data: Server logs and technical access records are retained for up to twelve (12) months, after which they are deleted or anonymised.
• Marketing Preferences: Records of your marketing consent and channel preferences are deleted within thirty (30) days of your withdrawal of consent.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Anonymised, aggregated data (such as statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data.

Cookies & Tracking Technologies

bdtjt uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website. The following categories of cookie are used on the bdtjt platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, time zone (Bangladesh Standard Time, UTC+6), and game display options. Disabling these cookies may affect platform functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the platform (pages visited, time on page, error encounters). This data helps bdtjt improve platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications from bdtjt. These cookies are only set following your explicit opt-in.

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to the bdtjt platform. For full details of all cookies set by bdtjt, including their names, durations, and purposes, please contact our support team.

Your Data Protection Rights

As a data subject, you hold the following rights in relation to your personal data held by bdtjt. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further two months, and we will notify you of any such extension.

• Right of Access: You have the right to request a copy of all personal data that bdtjt holds about you, together with information about how that data is processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to bdtjt's legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restriction of Processing: You may request that bdtjt restricts the processing of your data in certain circumstances, for example while we verify the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, bdtjt will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Marketing Communications

bdtjt will only send you promotional communications — including information about bonus offers, new game launches, cricket betting promotions (BPL, IPL, T20 World Cup), and seasonal campaigns — where you have provided your explicit prior consent to receive such communications.

You may opt in to marketing communications during the account registration process or at any time through your account settings. You may withdraw your consent and unsubscribe from all marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by bdtjt.
• Updating your communication preferences directly in your account settings.
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Withdrawal of marketing consent will be processed within 5 business days. Please note that even after unsubscribing from marketing communications, you will continue to receive transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are necessary for the operation of your account and cannot be disabled.

Protection of Minors

bdtjt's platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts.

If bdtjt discovers or reasonably suspects that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all data associated with the account will be reviewed, and any deposits may be refunded at bdtjt's sole discretion following a formal review process. We will then securely delete the minor's personal data except to the extent that retention is required by law.

Parents or guardians who believe that a minor in their care has registered with bdtjt are encouraged to contact our support team at [email protected] immediately so that the account can be closed and the matter handled appropriately.

Updates to This Privacy Policy

bdtjt reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. The "Effective Date" displayed at the top of this document will be updated each time a revised version is published.

Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — we will provide advance notice to registered players via the email address on file, or through a prominent notice on the bdtjt platform, no less than 14 days before the changes take effect.

For non-material changes (such as corrections to wording, formatting updates, or clarifications that do not change the substance of the policy), the revised policy will be published immediately with an updated effective date. We recommend bookmarking this page and reviewing it periodically.

Your continued use of the bdtjt platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revised terms, you should cease using the platform and may request account closure as described in our Terms & Conditions.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which bdtjt processes your personal data, please contact our Data Protection team using the details below. All correspondence will be handled in English and responded to within the timeframes specified in Section 11.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For privacy-specific enquiries, please include "Privacy Request" or "Data Subject Request" in the subject line to ensure prompt routing.
• Response Time: General privacy enquiries will receive an initial response within 2 business days. Formal Subject Access Requests and erasure requests will be acknowledged within 5 business days and fulfilled within 30 days.
• Support Hours: Our team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).