bdk3 Privacy Policy — How We Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how bdk3 ("bdk3", "we", "us", "our") collects, uses, stores, and discloses personal information in connection with your use of the bdk3 website and platform (collectively, the "Platform"). This Policy applies to all users of the Platform, including registered account holders and visitors who have not yet created an account.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions, which also form part of the agreement between you and bdk3. This Policy governs our data handling practices for users across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur and Mymensingh.

Our Core Privacy Commitments

1. Information We Collect

bdk3 collects personal information that is necessary to provide the Platform's services. The categories of information we collect, and the primary reason we collect each category, are set out below.

bdk3 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required by applicable regulation in connection with a responsible gaming assessment or a legal obligation.

2. How We Use Your Information

bdk3 uses the personal information it collects only for legitimate, specified purposes. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent.

• To create, verify, and maintain your bdk3 account, including processing your registration details and completing KYC verification.
• To process deposits, withdrawals, and other financial transactions, including communicating with payment service providers such as bKash and Nagad.
• To provide you with customer support, respond to your queries, and resolve disputes relating to your account or any bet placed on the Platform.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) checks, responsible gaming obligations, and cooperation with law enforcement where required.
• To detect, investigate, and prevent fraud, money laundering, cheating, and other prohibited activities, including the use of automated tools to place bets.
• To send you service-related communications (transaction confirmations, security alerts) and, where you have given consent, promotional communications about bdk3 offers and events.

bdk3 uses your behavioural data to monitor for responsible gaming indicators. If our systems detect patterns that suggest a player may be experiencing harm from gambling, we may use that data to reach out proactively and offer support tools, in line with our Responsible Gaming Policy.

3. Legal Basis for Processing

bdk3 processes your personal data only where we have a legitimate legal basis to do so. The legal bases we rely on are as follows.

• Contractual necessity: processing required to create and manage your bdk3 account, process transactions, and deliver Platform services you have requested.
• Legal obligation: processing required to comply with applicable laws, including KYC and AML regulations, responsible gaming requirements, and cooperation with competent authorities.
• Legitimate interests: processing for fraud prevention, platform security, service improvement, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: processing for marketing and promotional communications, and for any purpose beyond those listed above. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Sharing Your Information

bdk3 does not sell your personal data. We may share your information with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose.

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): to process deposits and withdrawals. These providers receive only the data they require to complete the transaction.
• Game and technology providers (e.g. Pragmatic Play, Evolution Gaming): to deliver the gaming products you access on the Platform. These providers operate under data processing agreements with bdk3.
• Compliance and regulatory bodies: where required by applicable law, court order, or the request of a competent regulatory or law enforcement authority.
• Fraud prevention and security partners: to detect and prevent fraud, money laundering, and other prohibited activities on the Platform.

All third parties with whom bdk3 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection principles. bdk3 does not permit third parties to use your personal data for their own marketing purposes.

5. Cookies and Tracking Technologies

bdk3 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve the user experience. The following types of cookies are used.

• Essential cookies: required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: used to remember your preferences such as language settings and display options, so you do not need to reconfigure these on every visit.
• Analytics cookies: collect aggregated, anonymised information about how players use the Platform, which pages are most visited, and where users encounter errors. This data helps us improve the Platform.
• Security cookies: used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious betting behaviour that may indicate account compromise.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the Platform. bdk3 does not use third-party advertising cookies to serve targeted advertisements on external websites.

6. Data Retention

bdk3 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your account relationship with bdk3 and for a minimum of five (5) years after account closure to meet our legal and regulatory obligations, including AML and responsible gaming record-keeping requirements.

Transaction records are retained for a minimum of seven (7) years in line with standard financial record-keeping practice. Marketing preference data is retained until you withdraw your consent. Technical and log data is typically retained for up to twelve (12) months. Once the applicable retention period has expired, your data is securely deleted or anonymised.

7. Your Rights Over Your Personal Data

You have the following rights in respect of your personal data held by bdk3. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within five (5) business days.

• Right of access: you may request a copy of the personal data bdk3 holds about you, together with information about how and why it is being processed.
• Right to rectification: you may ask us to correct any inaccurate or incomplete personal data we hold about you. Where possible, please update your details directly via your account settings first.
• Right to erasure: you may ask us to delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations.
• Right to restrict processing: you may ask us to suspend processing of your personal data in certain circumstances, for example while the accuracy of data is being disputed or while an objection to processing is being considered.
• Right to data portability: where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: you may object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes, which we will honour immediately upon receipt of your objection.

bdk3 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive. In such cases we reserve the right to charge a reasonable administrative fee or refuse to act on the request, explaining our reasons.

8. Security of Your Personal Data

bdk3 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, restricted access controls on databases holding personal data, regular security assessments of Platform infrastructure, and staff training on data protection obligations.

While bdk3 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. If you believe your bdk3 account has been accessed without authorisation, contact our support team immediately at [email protected] so we can take immediate protective action.

9. Age Restriction — Platform Not for Minors

The bdk3 Platform is strictly for adults aged 21 and above. bdk3 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has provided personal data to bdk3, please contact us at [email protected] immediately.

10. Changes to This Privacy Policy

bdk3 reserves the right to update or amend this Privacy Policy at any time. The most current version of the Policy will always be available on the Platform. Where changes are material, bdk3 will provide reasonable advance notice by posting a prominent notice on the Platform or by contacting registered players via their registered email address or mobile number.

Your continued use of the Platform after any change to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any change, you must stop using the Platform and may contact us to close your account.

11. Contact and Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to how bdk3 handles your personal data, our support team is available to assist you. We aim to respond to all privacy-related enquiries within five (5) business days.

You can reach our privacy support team by email at: [email protected]