bdtk6 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

01 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below unless context clearly requires otherwise:

• "bdtk6", "we", "us", or "our" refers to the operator of the bdtk6 platform accessible at https://bdtk6.io and all associated services.
• "Platform" means the bdtk6 website, mobile-optimised interface, and any application or service operated under the bdtk6 brand.
• "Player", "you", or "your" means any individual who visits, registers on, or interacts with the Platform in any capacity.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, contact details, device identifiers, financial data, and behavioural records.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, erasure, or any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, bdtk6.
• "Data Processor" means any third party that processes Personal Data on behalf of bdtk6 under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — identity and age verification procedures applied to registered accounts.
• "BDT" means Bangladeshi Taka, the currency used for all financial transactions on the Platform.

02 Scope & Application

This Privacy Policy applies to all Personal Data collected by bdtk6 in connection with the operation of the Platform, including data collected from players based in Bangladesh who access the Platform through any device — desktop, mobile, or tablet — and through any network connection.

This Policy applies to all pages, features, and services available at https://bdtk6.io, including the casino games lobby, sports betting sections, account registration and login flows, responsible gaming tools, customer support interactions, and any promotional campaigns or communications issued by bdtk6.

This Policy does not govern the data practices of third-party game studios, payment providers, or any other external service whose links may appear on the Platform. bdtk6 is not responsible for the privacy practices of third parties. Where the Platform integrates third-party services — such as game content from Pragmatic Play, Evolution Gaming, Spribe, or payment processing via bKash, Nagad, or Rocket — those providers operate under their own privacy policies, which players are encouraged to review independently.

03 Data We Collect

bdtk6 collects Personal Data across several categories. The table below summarises the categories of data we collect, examples of specific data points within each category, and the primary purpose for which each category is collected.

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, National ID number, passport number	Account registration, KYC verification, age gating (21+)
Contact Data	Mobile phone number, email address, residential address in Bangladesh	Account management, support communications, regulatory notices
Financial Data	bKash / Nagad / Rocket account numbers, Visa/Mastercard partial details, transaction history in BDT	Payment processing, withdrawal verification, anti-money-laundering monitoring
Account Activity Data	Login timestamps, game session records, wager amounts, win/loss history, bonus utilisation	Account management, responsible gaming monitoring, fraud detection
Technical Data	IP address, device type, operating system, browser type and version, screen resolution	Platform security, geo-location verification, fraud prevention
Usage Data	Pages visited, features accessed, time spent per section, click patterns	Platform improvement, personalisation, analytics
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Dispute resolution, quality assurance, compliance record-keeping
Marketing Preferences	Consent records, opted-in promotional categories, communication channel preferences	Delivery of marketing communications where consent is held

04 How We Collect Your Data

bdtk6 collects Personal Data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, submitting feedback, or opting into marketing communications.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including data gathered through cookies, web beacons, pixel tags, and server-side logging. See Section 7 for full details on our cookie practices.
• Payment providers: Transaction confirmations and payment verification signals received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate deposits or withdrawals.
• Identity verification services: Identity confirmation data received from third-party KYC service providers engaged by bdtk6 to verify the documents you submit during the verification process.
• Fraud prevention partners: Risk signals and device fingerprint assessments provided by fraud detection partners to assist bdtk6 in identifying and preventing account compromise, bonus abuse, and money laundering.
• Publicly available sources: In limited circumstances connected with due diligence or fraud investigation, bdtk6 may cross-reference information against publicly available records where there is a legitimate and proportionate reason to do so.

05 Legal Basis for Processing

bdtk6 processes your Personal Data on one or more of the following legal bases, depending on the nature and purpose of the Processing activity:

• Contractual necessity: Processing required to perform the contract between you and bdtk6, including maintaining your account, processing deposits and withdrawals in BDT, and delivering access to games and betting features.
• Legal obligation: Processing required for bdtk6 to comply with applicable legal and regulatory requirements, including age verification obligations (21+), anti-money-laundering record-keeping, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing carried out where bdtk6 has a legitimate business interest that is not overridden by your rights and freedoms, including fraud prevention, platform security monitoring, responsible gaming risk assessment, and general analytics to improve the Platform experience for all players.
• Consent: Processing for which you have provided explicit, freely given consent, principally the delivery of marketing communications, promotional offers, and personalised recommendations. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences.

06 How We Use Your Personal Data

The Personal Data collected by bdtk6 is used for the following purposes, each tied to one of the legal bases described in Section 5:

• Creating, maintaining, and administering your bdtk6 account, including processing login authentication and account recovery requests.
• Processing deposits and withdrawals through Approved Payment Methods — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — and maintaining an accurate transaction history in BDT.
• Verifying your identity and age as part of the KYC process to ensure compliance with the 21+ age restriction enforced across the Platform.
• Monitoring account activity to detect and prevent fraud, collusion, bonus abuse, money laundering, and other forms of Prohibited Conduct as defined in the bdtk6 Terms & Conditions.
• Administering responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion requests, and identifying players who may exhibit indicators of problem gambling behaviour.
• Responding to support requests, resolving disputes, and maintaining records of correspondence for quality assurance and compliance purposes.
• Sending transactional communications including deposit confirmations, withdrawal status updates, account security alerts, and material changes to the Terms & Conditions or this Privacy Policy.
• Sending marketing communications — including promotional offers, bonus announcements, and seasonal promotions relevant to the Bangladesh market — to players who have provided valid consent and have not subsequently withdrawn it.
• Conducting analytics and performance monitoring to understand how players interact with the Platform, identify areas for improvement, and develop new features and content.
• Complying with legal obligations and responding to requests from law enforcement, regulatory bodies, or other competent authorities where required by applicable law.

07 Cookies & Tracking Technologies

bdtk6 uses cookies and similar tracking technologies on the Platform to ensure correct operation, improve the player experience, and gather analytical data. A cookie is a small text file placed on your device by the Platform when you visit. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing access to core Platform features.
• Functional cookies: Store your preferences such as language settings, remembered username fields (not passwords), and UI layout choices to provide a more personalised experience across sessions.
• Analytics cookies: Used by bdtk6 to measure Platform usage — including page view counts, session durations, and feature interaction rates — using aggregated, anonymised data. These cookies help bdtk6 identify which areas of the Platform perform well and which require improvement.
• Security and fraud prevention cookies: Device fingerprinting and risk-assessment tokens used by bdtk6's fraud prevention partners to identify anomalous session behaviour and flag potential account compromise or coordinated abuse.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the Platform but may reduce the quality of certain personalised features. bdtk6 does not use third-party advertising cookies or tracking pixels for programmatic advertising networks.

08 Third-Party Data Sharing

bdtk6 does not sell, rent, or trade your Personal Data. We share data with third parties only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to authenticate and process your transactions. These providers are regulated financial entities operating under their own data protection and security frameworks.
• Identity verification providers: Third-party KYC service providers receive the identification documents you submit during the verification process. These providers are contractually bound to use the data exclusively for verification purposes on behalf of bdtk6.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios may receive a session token and limited account-level data — such as account tier and currency (BDT) — necessary to initialise and operate games. These providers do not receive your identity or contact data.
• Fraud prevention and security partners: Specialist fraud detection partners receive device and behavioural data to provide risk assessments that protect bdtk6 players and the Platform from abuse.
• Legal and regulatory authorities: bdtk6 will disclose Personal Data to law enforcement agencies, courts, or regulatory bodies where required by applicable law, a valid legal order, or where disclosure is necessary to protect the rights or safety of bdtk6, its players, or the general public.
• Professional advisors: Legal, audit, and compliance advisors engaged by bdtk6 may access limited Personal Data in the course of providing professional services, subject to confidentiality obligations.

All third parties with whom bdtk6 shares Personal Data are required to implement appropriate technical and organisational security measures and to process the data only for the purposes for which it was shared.

09 International Data Transfers

bdtk6 is operated primarily for players in Bangladesh, and our primary data infrastructure is designed to serve the Bangladesh market. However, some of our third-party service providers — including certain game studios and fraud prevention partners — operate data centres outside Bangladesh. Where Personal Data is transferred to servers or processors located outside Bangladesh, bdtk6 takes the following steps to ensure your data remains protected:

• We engage only service providers that implement security standards equivalent to or exceeding those applied by bdtk6 itself, including encryption at rest and in transit.
• We enter into data processing agreements with all international service providers that include binding obligations with respect to data security, purpose limitation, and your rights as a data subject.
• Where technically feasible, data processing is performed in jurisdictions with recognised data protection frameworks.

If you have questions about the countries in which your data may be processed, please contact us at [email protected].

10 Data Retention

bdtk6 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, to satisfy applicable legal obligations, or to resolve disputes and enforce agreements. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a maximum of 7 years following account closure, in line with standard financial record-keeping practices.
• Transaction records (BDT deposits and withdrawals): Retained for a minimum of 5 years from the date of each transaction to comply with anti-money-laundering record-keeping requirements.
• Support communications: Retained for 3 years from the date of the most recent interaction, unless the communication forms part of an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Marketing consent records: Retained for the duration of your active marketing consent plus 2 years following withdrawal of consent, to document the history of your preferences.
• Marketing communication content sent to you: Deleted within 30 days of withdrawal of marketing consent.
• Technical and usage data: Aggregated and anonymised after 12 months. Individually identifiable technical data is deleted after 12 months unless retained as part of an active fraud investigation.

When the applicable retention period expires, bdtk6 will securely delete or permanently anonymise your Personal Data so that it can no longer be linked to you as an individual.

11 Your Data Rights

As a player whose Personal Data is processed by bdtk6, you hold the following rights with respect to that data. To exercise any of these rights, contact us at [email protected]. We will acknowledge your request within 48 hours and fulfil it within 30 calendar days, subject to any legal limitations that prevent immediate compliance.

• Right of access: You may request a copy of the Personal Data held about you by bdtk6, together with information about how it is being processed and the legal basis for that processing.
• Right to rectification: If any Personal Data held by bdtk6 about you is inaccurate or incomplete, you may request that it be corrected or supplemented. This right is particularly relevant for contact details and account profile information.
• Right to erasure: You may request that bdtk6 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis exists, or where the data has been unlawfully processed. This right is subject to legal retention obligations — for example, transaction records required for anti-money-laundering compliance cannot be deleted on request.
• Right to restrict processing: You may request that bdtk6 suspend the active use of your Personal Data in certain circumstances, such as while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming risk assessment. bdtk6 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

12 Children & Minors

The bdtk6 Platform is strictly intended for adults aged 21 years and above. bdtk6 does not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. All registration attempts are subject to age verification checks, and KYC procedures are designed to identify and reject applications from underage individuals.

If bdtk6 discovers, through any means, that Personal Data belonging to a person under 21 years of age has been collected — whether through misrepresentation by the individual or a technical failure in our age-gating systems — we will immediately suspend the relevant account, delete the associated Personal Data, void any transactions conducted during the period of underage access, and take appropriate steps to prevent recurrence.

If you have reason to believe that a person under 21 has registered an account on the bdtk6 Platform, please report this to us immediately at [email protected]. We take such reports seriously and will investigate promptly.

13 Security Measures

bdtk6 implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data exchanged between your device and bdtk6 servers is encrypted using TLS 1.2 or higher, with 256-bit AES encryption applied to sensitive payloads including login credentials, payment data, and identity documents.
• Encryption at rest: Personal Data stored in bdtk6 databases is encrypted at rest using industry-standard encryption protocols. Encryption keys are managed through a dedicated key management system with access controls and rotation policies.
• Access controls: Access to production systems and player data is restricted to authorised personnel only, using role-based access control (RBAC), multi-factor authentication (MFA), and the principle of least privilege. All access events are logged.
• Intrusion detection and monitoring: bdtk6's infrastructure is monitored continuously for anomalous activity using automated intrusion detection systems. Security events are triaged and investigated by a dedicated security operations function.
• Penetration testing: The Platform and its underlying infrastructure undergo regular penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bdtk6 maintains a documented data breach response procedure. In the event of a confirmed Personal Data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

While bdtk6 takes all reasonable and proportionate steps to protect your Personal Data, no security system is completely impenetrable. You are encouraged to use a strong, unique password for your bdtk6 account and to enable any available account security features. If you suspect your account has been compromised, contact support immediately.

14 Amendments to This Policy

bdtk6 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services available on the Platform. The "Effective Date" shown at the top of this Policy indicates when the current version came into force.

Where amendments are material — meaning they significantly change how your Personal Data is collected, used, or shared — bdtk6 will provide at least 14 days' advance notice to registered players via the email address associated with their account and by displaying a prominent notice on the Platform. Non-material amendments, such as typographical corrections or clarifications that do not alter the substance of your rights or our obligations, may take effect immediately upon publication.

Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the amended Policy, you should cease using the Platform and contact us to arrange account closure.

15 Contact Us & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which bdtk6 handles your Personal Data, please contact our data privacy team using the details below. We will acknowledge all privacy enquiries within 48 hours and provide a substantive response within 14 business days.

• Email (plain text — not a link): [email protected]
• Subject line for privacy requests: "Privacy Request — [Your Account Username]"
• Response time: Acknowledgement within 48 hours; full response within 14 business days; data rights fulfilment within 30 calendar days.

If you are dissatisfied with bdtk6's response to a privacy complaint, you have the right to escalate your concern through applicable dispute resolution mechanisms available in your jurisdiction.