Your Privacy Matters at bdt17

1. Information We Collect

bdt17 collects personal information from you in three ways: information you provide directly during registration and use of the platform, information generated automatically by your interaction with our services, and information received from trusted third-party partners involved in payment processing and identity verification.

Information You Provide Directly

When you create a bdt17 account, deposit funds, request a withdrawal, or contact our support team, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, and nationality as recorded on your National Identity Card (NID) or passport.
• Contact data: Email address, Bangladeshi mobile number, and residential address (district, division, and full postal address where required for verification).
• Account credentials: Username and encrypted password. bdt17 stores passwords using one-way hashing and never holds them in plain text.
• Financial data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and transaction reference numbers for deposit and withdrawal reconciliation.
• Verification documents: Copies of government-issued identity documents submitted for Know Your Customer (KYC) and age verification purposes.
• Communications data: The content of messages you send to our support team via email or WhatsApp, including any attachments or screenshots shared in the course of resolving a support query.

Information Collected Automatically

When you access the bdt17 platform, our servers and analytics systems automatically record certain technical information about your session:

• Device and browser data: Device type, operating system version, browser name and version, screen resolution, and preferred language settings.
• Network data: IP address, approximate geographic location derived from IP, and mobile network operator where applicable.
• Usage data: Pages and game categories visited, session duration, bet history, game outcomes, bonus interactions, and navigation patterns within the platform.
• Cookie and session data: Session tokens, authentication cookies, and analytics identifiers. See the Cookies section below for full details.

Information From Third Parties

bdt17 may receive limited personal data from third-party payment processors (such as the bKash and Nagad APIs) in the form of transaction confirmation data, sender mobile numbers, and transaction timestamps. This data is used solely to match incoming payments to member accounts and to satisfy anti-money laundering (AML) record-keeping requirements. bdt17 does not receive full financial account details from these providers beyond what is necessary for transaction reconciliation.

2. How We Use Your Data

bdt17 processes your personal data only where we have a lawful basis for doing so. The purposes for which we use your data, and the corresponding lawful basis for each, are set out in the table below:

Marketing Communications

bdt17 will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your marketing consent at any time by updating your communication preferences in your account profile or by contacting [email protected]. Withdrawing marketing consent does not affect your ability to use the bdt17 platform or receive transactional communications relating to your account (e.g., deposit confirmations, withdrawal notifications, or security alerts).

Automated Decision-Making

bdt17 uses automated systems to detect unusual account activity, flag potential fraud, and identify patterns consistent with problem gambling. Where these systems generate an action that materially affects your account (such as a temporary withdrawal hold), you have the right to request human review of that decision by contacting our support team. bdt17 does not make fully automated decisions that produce legal effects for members without human oversight.

3. Data Sharing and Disclosure

bdt17 does not sell, rent, or trade your personal data to any third party for commercial gain. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Payment Service Providers

To process your deposits and withdrawals, bdt17 shares transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. The data shared is limited to your registered mobile number or card details, the transaction amount in BDT, and a platform-generated reference number. Each payment provider processes this data under their own privacy terms and data security standards.

Identity Verification Partners

Where bdt17 engages a third-party KYC verification service to assist with identity document checks, your submitted identity documents and personal details may be shared with that provider solely for the purpose of completing verification. These partners are contractually bound to process your data only for the stated purpose and to maintain appropriate security standards.

Game Software Providers

The games available on bdt17 are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive a pseudonymous player identifier and bet/session data necessary to operate the game. They do not receive your full name, contact details, or payment information. Each provider operates under their own certified privacy and data security frameworks.

Legal and Regulatory Disclosure

bdt17 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by law, court order, or formal regulatory request. In such cases, bdt17 will disclose only the minimum information legally required and will, where legally permitted, notify you of the disclosure.

Business Transfers

In the event that bdt17 undergoes a merger, acquisition, or sale of substantially all of its assets, member personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address on your account before your data is transferred and becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

The bdt17 platform uses cookies and similar tracking technologies to keep your session active, protect your account from session hijacking, and collect anonymised analytics data that helps us improve platform performance and the overall user experience for members across Bangladesh.

Types of Cookies We Use

What We Do Not Use

bdt17 does not use third-party advertising cookies, cross-site tracking pixels, social media share buttons that set cookies, or any cookie-based retargeting technology. You will not be followed around the web by bdt17-related advertisements as a result of visiting our platform.

Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your bdt17 account, as these cookies are required for session management and security. Disabling analytics or functional cookies will not affect your ability to play games or make transactions but may reduce the quality of your experience (for example, your preferred settings may not be remembered between sessions).

5. Data Retention and Storage

bdt17 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial): Retained for the lifetime of your account and for a minimum of 5 years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records (deposit/withdrawal history, bet history): Retained for a minimum of 5 years following the date of each transaction.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for 3 years following the resolution of the relevant support query, unless the matter relates to an ongoing dispute or regulatory investigation.
• Marketing consent records: Retained for 3 years from the date of opt-in or until consent is withdrawn, to demonstrate compliance with our marketing obligations.
• Anonymised analytics data: May be retained indefinitely, as anonymised data cannot be linked back to any individual member.

Data Storage Location

bdt17 stores member data on secure servers. All data storage infrastructure used by bdt17 is protected by physical access controls, network firewalls, intrusion detection systems, and regular independent security audits. Data at rest is encrypted using AES-256. All data in transit is protected by TLS 1.2 or higher.

Secure Deletion

When a retention period expires, personal data is either securely deleted using recognised data destruction standards or anonymised in such a way that re-identification is not reasonably possible. Backups containing personal data are subject to the same retention schedule and are purged accordingly.

6. Your Rights and Choices

As a bdt17 member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your registered email address and a clear description of your request. bdt17 will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of the personal data bdt17 holds about you. We will provide this in a commonly used electronic format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date-of-birth corrections, we may require documentary evidence before making the change.
• Right to erasure: You may request that bdt17 delete your personal data. Please note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping). Where erasure is not possible in full, we will explain which data must be retained and why.
• Right to restrict processing: In certain circumstances, you may request that bdt17 restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to data portability: You may request that bdt17 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where bdt17 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to bdt17 processing your data for legitimate interests purposes, including profiling for responsible gaming monitoring. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7. Security of Your Personal Data

bdt17 takes the security of your personal data seriously. We maintain a comprehensive information security programme designed to protect against unauthorised access, disclosure, alteration, or destruction of the personal data we hold. Our security measures include, but are not limited to:

• TLS encryption in transit: All communications between your browser or device and the bdt17 servers are encrypted using TLS 1.2 or higher, preventing interception of data in transit.
• AES-256 encryption at rest: Sensitive data fields — including financial information and identity document references — are encrypted at the database level using AES-256.
• Password hashing: Member passwords are never stored in plain text. bdt17 uses a strong one-way cryptographic hashing algorithm with per-user salting so that even internal staff cannot view your password.
• Access controls: Access to member personal data is restricted on a strict need-to-know basis. Staff members who do not require access to personal data in the course of their duties are not granted it. All staff with data access undergo regular privacy and security training.
• Fraud detection: bdt17 uses automated systems to monitor for unusual login activity, multiple account registration attempts, and suspicious transaction patterns, allowing us to identify and respond to security incidents quickly.
• Regular security reviews: bdt17 conducts periodic reviews of its data security practices and infrastructure to identify and remediate vulnerabilities.

Data Breach Response

In the event of a personal data breach that poses a risk to members, bdt17 will notify affected members without undue delay via the email address registered on their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures bdt17 has taken or intends to take to address the breach and reduce its impact.

Your Role in Security

While bdt17 takes all reasonable technical and organisational measures to protect your data, you also play an important role. We strongly encourage you to use a unique, strong password for your bdt17 account, to enable two-factor authentication where available, and to log out of your account after each session — particularly when accessing the platform from a shared or public device.

8. Changes to This Policy

bdt17 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered members by email at the address on their account and display a prominent notice on the bdt17 platform for a minimum of 14 days prior to the updated policy taking effect.

The date at the top of this page will always reflect when the policy was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how bdt17 handles your personal data. Your continued use of the bdt17 platform following notification of a policy change constitutes your acknowledgement of the updated policy.

Governing Language

This Privacy Policy is written in English. In the event of any inconsistency between a translated version and this English version, the English version shall be the controlling document.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt17 handles your personal data, please contact our support team:

• Email: [email protected]
• WhatsApp (message only): +880 1700-000000

Our team is available 24 hours a day, 7 days a week, including on public holidays observed in Bangladesh, such as Eid, Victory Day (16 December), and Independence Day (26 March). We aim to respond to all privacy-related queries within 5 business days and all formal data rights requests within 30 calendar days.