Privacy Policy

This Privacy Policy explains how bdt2020 ("we", "our", "the platform") collects, uses, discloses, and protects your personal information. By using the bdt2020 website, mobile application, or any other digital service, you are deemed to have agreed to this Privacy Policy.

We take your privacy extremely seriously and are committed to protecting your personal information. This policy is prepared in accordance with Bangladesh's prevailing privacy laws and international GDPR (General Data Protection Regulation) guidelines.

If you do not agree with this Privacy Policy, please refrain from using our services. This policy is supplemented by our Terms & Conditions Serves as a supplement.

Bdt2020 collects various types of information necessary for identity verification, account management, and service delivery. Below is a detailed description of the information we collect:

Personal identification information:

• Name: Your full name (as stated on NID or passport)
• Date of Birth: To ensure age verification and responsible gaming
• Nationality and Place of Residence: Your country and current address
• National Identity Card (NID) or passport number: For KYC (Know Your Customer) verification

Contact Information:

• Email address: For account verification, notifications and communication
• Mobile number: For OTP verification, payment confirmation, and emergency contact
• Address: For billing and shipping purposes (if applicable)

Financial & payment information:

• Bank account details: To process withdrawals (account number, IFSC code, account holder name)
• Mobile Banking Information: Wallet numbers for bKash, Nagad, Rocket, etc.
• Transaction History: Records of deposits, withdrawals, and betting transactions
• Payment Card Information: (Stored only in encrypted form through payment processors; we do not store directly)

Usage & Activity Information:

• Gaming History: Your betting patterns, favorite games, win/loss records
• Login Information: Login times, session length, devices used
• Account Activity: Promotion claims, bonus usage, support tickets

Technical information:

• IP address: For security and fraud prevention
• Device information: Device type, operating system, browser version
• Location data: Geo-location (if you permit)
• Cookie data: Session and preference tracking

We collect your information through various means. Each method is transparent and conducted with your consent:

1. Direct collection (you provide):

• Registration process: When creating an account, you provide your name, email, mobile number, and date of birth
• KYC Verification: Upload identity documents (NID, passport) and address proof (utility bill)
• Add Payment Method: Provide bank account, mobile wallet or card information
• Support contact: When you share information via live chat, email, or phone
• Surveys & feedback: Voluntarily fill out feedback or survey forms

2. Automatic collection (by system):

• Cookies & Tracking: Cookies are used to track your browsing behavior, page visits and preferences
• Log files: Servers automatically log your IP address, browser type, and referring URL
• Analytics tools: Traffic and user behavior are analyzed using Google Analytics and similar tools
• Mobile App Permissions: The app collects your device information, location (if permitted) and app activity

3. Third-party sources:

• Payment Processors: We receive limited information from payment gateways for transaction verification
• Verification services: We receive identity document verification reports from KYC verification service providers
• Fraud Prevention Tools: We use third-party security services for security and fraud detection
• Social Media: If you use social login, we receive your public profile information (only with your permission)

Bdt2020 uses your collected information only for legitimate and transparent purposes. We use your data for the following reasons:

Purpose	Details
Account Management	Creating, maintaining, and providing services for your account
Identity Verification (KYC)	Verifying your age, confirming identity, and meeting regulatory requirements
Payment processing	Processing deposits, withdrawals, and transactions
Fraud Prevention	Detecting suspicious activity, preventing multiple accounts, ensuring security
Customer Support	Resolving your questions, complaints, and issues
Marketing & Promotions	Sending relevant offers, bonuses, and campaigns (on an opt-in basis)
Service improvement	Analyzing user behavior to improve the platform
Legal obligations	Meeting AML (Anti-Money Laundering) and regulatory reporting requirements
Responsible Gaming	Identify and prevent problem gambling behavior

Legitimate Interest:

In some cases we use your data based on "legitimate interests", such as:

• Protecting platform security and integrity
• Internal auditing and business analysis
• To establish, exercise or defend legal claims

Bdt2020 does not sell, rent, or share your personal information with third parties for commercial purposes. However, limited information sharing may be necessary in the following circumstances:

1. Service providers & partners:

• Payment Processors: bKash, Nagad, Rocket, and other payment gateways receive information necessary to process transactions
• KYC Verification Service: Third-party identity verification service providers verify your documents
• Cloud Hosting: Our data is stored on secure cloud servers (AWS, Google Cloud)
• Analytics Providers: Google Analytics and similar tools are used to analyze traffic and usage
• Customer Support Tools: Live chat and ticketing system service providers

2. Legal obligations:

We may disclose your information if:

• Required to comply with laws, court orders or government authority requests
• Required to enforce our Terms and Conditions
• To investigate fraud, security threats, or illegal activity
• AML (Anti-Money Laundering) and CTF (Counter-Terrorist Financing) regulatory reporting

3. Business transfer:

If bdt2020 undergoes a merger, acquisition, bankruptcy, or asset sale, your personal information may be part of the transferred assets. In such circumstances, we will notify you in advance.

4. Subject to Your Consent:

We do not share information in any circumstances other than those mentioned above without your explicit consent.

Protecting your personal information is our top priority. bdt2020 uses industry-standard technology and organizational measures to keep your data secure:

Technical Security:

• SSL/TLS Encryption: All data transmission is protected by 256-bit SSL encryption
• Data encryption: Sensitive information (passwords, payment details) stored encrypted
• Firewall & Intrusion Detection: Our servers are protected with advanced firewalls and IDS/IPS
• Regular security audits: Third-party security experts regularly audit our systems
• DDoS Protection: Our infrastructure is protected against DDoS attacks

Access Control:

• Limited access: Only authorized personnel can access data on a "need-to-know" basis
• Two-Factor Authentication (2FA): We use 2FA for our systems and admin accounts
• Log monitoring: All system access is logged and regularly reviewed
• Role-Based Access: Employees can only access data necessary for their role

Organizational Measures:

• Employee Training: All employees receive regular data protection and privacy training
• Privacy agreement: All employees and contractors sign strict confidentiality agreements
• Data minimization: We only collect and store necessary information
• Incident response plan: A prepared plan exists for data breaches or security incidents

User security tips:

To ensure your own security:

• Use strong and unique passwords
• Enable two-factor authentication for your account
• Avoid logging in from public Wi-Fi
• Beware of phishing emails and suspicious links
• Never share your password or OTP with anyone

Bdt2020 uses cookies and similar technologies to improve your browsing experience and ensure site functionality. Below are the details of our cookie usage:

Cookie types:

• Essential Cookies: These are essential for the site to function (login sessions, language preferences, security). They cannot be disabled.
• Functionality cookies: Remembers your preferences (language, theme, preferred odds format)
• Analytics Cookies: Helps understand site usage (page visits, clicks, session duration) - Google Analytics
• Marketing Cookies: Used to display relevant advertisements (subject to your consent)

Third-Party Cookies:

We use the following third-party services that may set cookies:

• Google Analytics: Traffic and user behavior analysis
• Facebook Pixel: Ad tracking and remarketing
• Google Ads: Measure advertising performance
• Hotjar/Clarity: Heatmaps and user session recordings

Cookie management:

You can control cookies in several ways:

• Browser settings: Most browsers offer options to block or delete cookies
• Cookie banner: On first visit, you can select cookie preferences
• Opt-Out Tools: Use the Google Analytics Opt-out Browser Extension
• Do Not Track: Enable DNT signal in your browser (though not all sites honor it)

Other Tracking Technologies:

• Pixel Tags: Used to track email opens and reads
• Web beacons: Tracks page views and interactions
• Local Storage: HTML5 storage is used to store data in the browser
• Device fingerprinting: Identify device characteristics to prevent fraud

Bdt2020 retains your personal information only as long as necessary. Our retention periods are determined by regulatory requirements and business purposes:

Active Accounts:

• All information is retained while your account remains active
• Transaction history and betting records are permanently stored (regulatory requirement)
• Communication logs and support tickets are retained for up to 5 years

Account closure or deactivation:

• Voluntary closure: Financial and KYC records are kept for 5 years after account closure (as per AML laws)
• Inactive accounts: After 3 years of inactivity, we will send you an email/SMS. If there's no response, the account will be permanently deleted after 6 months
• Self-excluded accounts: Data from self-excluded accounts due to responsible gaming is kept for the exclusion period + 5 years

Retention of specific data types:

Data type	Retention Period
KYC documents	5 years after account closure
Financial Transactions	7 years (tax & AML laws)
Betting History	Permanently (regulatory audit)
Communication logs	5 years
Marketing Data	Immediately after unsubscribing
Session cookies	Deleted when browser closes
Analytics data	26 months (Google Analytics)

Data deletion procedure:

When retention period expires or upon your request:

• Data is deleted securely and irreversibly
• Data is also removed from backups in subsequent cycles
• Paper documents are shredded and electronic media is overwritten

Bdt2020 is committed to giving you complete control over your personal data. Under GDPR and local privacy laws, you have the following rights:

1. Right to Access Information:

• The right to know what data we hold about you
• You can request a copy of your personal information
• We will provide data in machine-readable format (CSV, PDF) within 15 days

2. Right to Rectification:

• Right to correct inaccurate or incomplete data
• You can update much of your information directly from Account Settings
• Contact support team to change KYC data (verification required)

3. Right to Erasure ("Right to Be Forgotten"):

• Right to request deletion of your personal data
• Limitations: Some data must be retained for legal obligations (AML, tax), ongoing contracts, or legitimate interests
• Marketing data is deleted immediately upon account closure

4. Right to restrict processing:

• Right to request restriction of data use under specific circumstances
• For example: when data accuracy is disputed, processing is unlawful but you want to restrict rather than delete

5. Right to Data Portability:

• Right to receive your data in a structured, commonly used, and machine-readable format
• Right to transfer data to another service provider

6. Right to object:

• The right to object to certain types of data processing
• Specifically: marketing, profiling, processing based on "legitimate interests"
• We will stop processing immediately upon receiving an objection (except for legal obligations)

7. Right to object to automated decisions:

• Right to object to decisions made by fully automated processing (AI/algorithms)
• Can request human review

8. Right to Lodge a Complaint:

• The right to file a complaint with your country's data protection authority
• In Bangladesh: Bangladesh Telecommunication Regulatory Commission (BTRC)

To Exercise Your Rights:

Contact us through any of the following channels:

• Email: support@bdt2020.net (Subject: "Data Privacy Request")
• Live Chat: Website chat support
• Account Settings: "Privacy & Security" Section

Bdt2020 is an 18+ platform and we take the protection of children very seriously. We do not intentionally collect personal information from anyone under 18 years of age.

Our policy:

• Age verification: Providing date of birth at registration is mandatory
• KYC Verification: Age confirmed through government-issued ID (NID, passport)
• Automated detection: Our system automatically blocks registration attempts from users under 18
• Parental verification: If we learn that anyone under 18 has provided data, we will delete it immediately

For parents & guardians:

If you believe your child has provided personal information to us, please contact support@bdt2020.net immediately. We will verify and promptly close the account and delete the data.

Responsible Gaming:

• We provide responsible gaming tools (deposit limits, self-exclusion)
• "18+" warnings are clearly displayed on our website
• We collaborate with child protection agencies and responsible gaming programs

Bdt2020 operates as an international platform and your data may be stored or processed on servers located in different countries. We take the following measures to ensure your data protection:

Data Storage Location:

• Primary Server: Our primary data center is located in EU/UK (GDPR compliant)
• Backup Servers: Geo-redundant backups in Singapore and Australia
• CDN: Global content delivery network for fast loading
• Cloud services: AWS, Google Cloud (both ISO 27001 certified)

Security Measures:

• Standard Contractual Clauses (SCC): GDPR-compliant data transfer agreements
• Data Processing Agreement (DPA): Strict agreements with all third-party processors
• Encryption: Full encryption in transit and at rest
• Data minimization: Only essential data goes to international servers
• Access Control: Only authorized personnel can access cross-border data

Third-Party Transfers:

We share data with the following third parties located in various countries:

• Payment Processors: EU, UK, Singapore (PCI-DSS compliant)
• KYC provider: UK, Ireland (GDPR compliant)
• Email Service: USA (Privacy Shield Certified or SCC)
• Analytics: Google (USA), protected by Privacy Shield or SCC

Your Rights:

Regardless of where your data is transferred, all your privacy rights (access, correction, deletion) remain unchanged. You may request data localization or transfer restrictions from us at any time.

Bdt2020 regularly reviews and updates this privacy policy to reflect our practices, new technologies, legal requirements, and business needs.

Type of change:

• Minor Changes: Spelling corrections, clarifications, contact info updates - only "Last Updated" date changes
• Significant changes: Significant changes to data use, sharing, or rights - you will be notified in advance
• Material changes: New data collection, new third-party sharing - your consent will be requested

How You Will Be Notified:

• Email notifications: 30 days before significant changes take effect
• Website banner: Prominent notices on homepage and login page
• Push Notifications: For Mobile App Users
• "Last Updated" date: The date of the latest revision is always displayed at the top of this page

Your options:

• Review Period: You will have 30 days to review significant changes
• Objection: If you disagree with the changes, you may object or close your account
• Continued Use: Continuing to use our services after changes take effect implies acceptance of the new policy

Version history:

We maintain previous versions of our Privacy Policy. You can access earlier versions by requesting them at support@bdt2020.net.

Regular Reviews:

• Quarterly: Internal compliance review
• Annual: Full policy audit and legal review
• Legal Changes: Immediate updates when new privacy laws are passed