bdt555 Privacy Policy

This Privacy Policy ("Policy") is issued by bdt555 ("bdt555", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "the User") who access or use the bdt555 online casino and sports betting platform available at https://bdt555.app and any associated applications or services (collectively, the "Platform").

bdt555 is committed to protecting the privacy and security of your personal information. This Policy explains in clear and precise terms: what categories of personal data we collect; the purposes for which that data is processed; the legal grounds on which we rely for processing; with whom data may be shared; how long data is retained; and the rights available to you as a data subject.

This Policy should be read alongside bdt555's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If there is any conflict between this Policy and another bdt555 document, this Policy shall take precedence with respect to matters of personal data protection.

bdt555 serves the Bangladesh online gaming market and processes the personal data of players located primarily in Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All communications, data notices, and support interactions conducted by bdt555 are in English.

bdt555 collects the following categories of personal data from users of the Platform. Data is collected only to the minimum extent necessary for the purposes identified in Section 4 of this Policy.

bdt555 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless you voluntarily provide such information in the context of a responsible gaming self-assessment. Any sensitive data provided in that context is treated with the highest level of protection and is used solely to provide responsible gaming support.

bdt555 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing the bdt555 Login process, submitting KYC documents, making deposits or withdrawal requests, contacting our support team, or completing any form on the Platform.
• Automated Technologies: Data collected automatically when you interact with the Platform, including through cookies, server logs, pixel tags, and session tracking tools. This includes your IP address, device identifiers, browser fingerprint, and interaction patterns.
• Payment Processors: Confirmation and transaction reference data received from third-party payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard) when you initiate a financial transaction.
• Identity Verification Partners: Data received from third-party KYC and identity verification service providers who verify the authenticity of documents and identity claims submitted during registration or account review.
• Fraud Prevention Services: Risk signals and device reputation data received from third-party fraud detection providers to protect the integrity of the Platform and all user accounts.
• Publicly Available Sources: In limited circumstances, bdt555 may verify information against publicly available sources such as government databases or public records for the purpose of identity or sanctions screening.

bdt555 processes your personal data for the following defined and documented purposes only:

• Account Registration & Management: To create, maintain, and administer your bdt555 account, including verifying your identity, processing your bdt555 Login credentials, and managing your account settings and preferences.
• Identity Verification (KYC): To verify that you meet the 18+ age requirement, to confirm your identity, and to fulfil our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks.
• Payment Processing: To process deposits to and withdrawals from your bdt555 account, to verify payment method ownership, and to maintain accurate financial records associated with your account.
• Service Delivery: To make bdt555's casino games, sports betting markets, promotional offers, and all other platform features available to you as a registered user.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, multi-accounting, and other activities that breach our Terms & Conditions or applicable law.
• Responsible Gaming: To enforce responsible gaming tools such as deposit limits, loss limits, self-exclusion, and cooling-off periods; to monitor gambling patterns for indicators of problem gambling; and to communicate with users who may need support.
• Customer Support: To respond to your support enquiries, resolve complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Legal Compliance: To fulfil bdt555's obligations under applicable laws and regulations, including data retention requirements, financial reporting obligations, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated usage data in order to improve the Platform's performance, user interface, game selection, and overall user experience. Where possible, data used for analytics is anonymised or pseudonymised.
• Direct Marketing: To send you promotional communications about bdt555 bonuses, tournaments, and offers, where you have consented to receive such communications. You may withdraw consent at any time by contacting [email protected].

bdt555 relies on the following legal grounds for processing your personal data, in accordance with applicable data protection principles:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and bdt555 (i.e., the Terms & Conditions you accepted on registration). This basis applies to account management, payment processing, and service delivery.
• Legal Obligation: Processing is necessary for bdt555 to comply with legal obligations, including KYC/AML requirements, financial record-keeping regulations, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for bdt555's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. This basis applies to fraud prevention, platform security, and anonymised analytics.
• Consent: Processing is based on your freely given, specific, informed consent. This basis applies to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bdt555 does not sell, rent, or trade your personal data to any third party. Your data may be shared only in the following defined circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum financial data necessary to process your transactions. These providers are independent data controllers subject to their own privacy policies.
• KYC & Identity Verification Partners: Third-party identity verification services receive identity and document data strictly for the purpose of verifying your identity as part of the KYC process. These partners are bound by confidentiality agreements and data processing contracts.
• Fraud Prevention Providers: Risk signals, device data, and transaction patterns may be shared with third-party fraud prevention services to protect the security of the bdt555 Platform and all user accounts.
• Game Technology Providers: Game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive limited session data necessary to deliver their games and calculate game outcomes. These providers do not receive your full identity or payment data.
• Legal & Regulatory Authorities: bdt555 will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, or where necessary to protect the legal rights of bdt555 or third parties.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bdt555's business, personal data held by bdt555 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom bdt555 shares personal data are required to process that data only for the purposes specified and in accordance with bdt555's instructions. bdt555 does not permit third-party processors to use your data for their own independent purposes.

bdt555 primarily processes user data within its own secure infrastructure. However, some of the third-party service providers referenced in Section 6 — particularly game technology providers and fraud prevention services — may operate infrastructure located outside of Bangladesh.

Where personal data is transferred to service providers located in other countries, bdt555 takes the following steps to ensure an adequate level of protection:

• Executing data processing agreements with all third-party processors that require them to apply data protection standards consistent with recognised international best practices.
• Assessing the data protection laws of the recipient country and implementing supplementary safeguards where necessary, including contractual clauses that directly protect your rights as a data subject.
• Limiting the scope of data transferred internationally to the minimum necessary for the relevant service to function.

bdt555 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

On expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an ongoing legal dispute, investigation, or regulatory requirement, bdt555 will retain only the data strictly necessary for that purpose and will delete it as soon as the requirement ceases.

bdt555 uses cookies and similar tracking technologies on the Platform to ensure its correct operation, maintain your session state, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your bdt555 Login session, preserve your security token, and remember your language and regional preferences. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: These cookies remember your in-platform preferences such as game category selections, display settings, and responsible gaming tool configurations. Disabling these cookies may affect your user experience but will not prevent access to the Platform.
• Analytical Cookies: bdt555 uses first-party analytical cookies to measure aggregate traffic patterns, page load performance, game engagement rates, and navigation paths. This data is used in anonymised form to improve the Platform. bdt555 does not use third-party analytics providers that share your data with advertising networks.
• Security Cookies: Short-lived cookies used to detect automated threats, bot traffic, and cross-site request forgery (CSRF) attempts. These cookies do not contain personal data and are essential for platform security.

bdt555 does not use third-party advertising cookies, tracking pixels from advertising networks, or any technology that profiles you for the purpose of serving targeted advertisements on external websites or applications.

As an individual whose personal data is processed by bdt555, you have the following rights. All requests should be submitted to [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of Access: You have the right to request a copy of all personal data that bdt555 holds about you, together with information about the purposes of processing, the categories of data held, the recipients of your data, and the retention periods applied.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. Some data — such as your registered name and date of birth — can only be corrected after submission of supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to bdt555's legal obligations to retain certain data for defined periods (see Section 8).
• Right to Restriction of Processing: You have the right to request that bdt555 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on bdt555's legitimate interests, and to object at any time to processing for direct marketing purposes. Where you object to marketing, bdt555 will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

bdt555 will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further two months, of which you will be notified. bdt555 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

The bdt555 Platform is strictly intended for adults aged 18 years and above. bdt555 does not knowingly collect, process, or retain personal data from any individual who is under 18 years of age.

All registration attempts are subject to age verification procedures. Where bdt555 becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, all balances will be frozen pending review, and the personal data in question will be deleted from bdt555's systems as soon as practicable, subject to any mandatory retention obligations.

Parents and guardians who are concerned about a minor accessing gambling platforms are encouraged to use parental control and content filtering software to restrict access to online gambling websites. bdt555 supports and encourages the use of such tools.

bdt555 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the bdt555 platform is encrypted using TLS 1.2 or higher, enforced by 256-bit SSL certificates. The platform enforces HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive data stored in bdt555's databases — including identity documents, financial data, and KYC records — is encrypted at rest using industry-standard symmetric encryption.
• Password Security: Account passwords are hashed using a strong one-way cryptographic algorithm with individual salting. bdt555 staff cannot view your password in plain text and will never request it from you.
• Access Controls: Access to personal data within bdt555's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): bdt555 offers 2FA for all registered accounts. We strongly encourage all users to enable 2FA from their account security settings to add an additional layer of protection against unauthorised access.
• Fraud Monitoring: bdt555's systems operate continuous automated monitoring for suspicious login patterns, unusual transaction behaviour, and potential account compromise indicators. Accounts exhibiting risk signals are flagged for manual review.
• Penetration Testing & Audits: bdt555 conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, bdt555 will notify affected individuals and relevant authorities in accordance with applicable law and without undue delay.

The bdt555 Platform does not include links to external third-party websites or applications as a matter of policy. However, in limited circumstances — such as within game provider interfaces — you may encounter references to game provider websites. bdt555 has no control over the privacy practices of third-party websites and accepts no responsibility for the privacy policies or data handling practices of any external site.

If you choose to visit any third-party website referenced in connection with the bdt555 Platform, you should review that site's own privacy policy before submitting any personal data. The privacy protections described in this Policy apply only to data processed by bdt555 directly and do not extend to third-party platforms or services.

bdt555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the services we provide. When material changes are made to this Policy, bdt555 will:

• Update the "Last Updated" date displayed at the top of this page and in the Policy header.
• Post a notice on the bdt555 Platform informing registered users that the Privacy Policy has been updated.
• Where the changes materially affect how we process your personal data, send a direct notification to your registered email address with a summary of the key changes.

Your continued use of the bdt555 Platform following the posting of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment to this Policy, you should cease using the Platform and may request account closure by contacting our support team at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdt555 handles your personal data, please contact our Data Protection team using the details below. bdt555 is committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry / Data Rights Request
• Response Time: We aim to respond to all privacy-related communications within 5 business days. Formal data rights requests will be handled within 30 days as described in Section 10.
• Operating Hours: Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

bdt555 values the trust you place in us when you share your personal data. We take our responsibilities as a data processor seriously and are committed to upholding the highest standards of data protection across all aspects of the bdt555 platform and our interactions with you.